$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/4db9529a-f1c2-3000-a17a-ee4910ce4131.roa File: 4db9529a-f1c2-3000-a17a-ee4910ce4131.roa (raw, json) Hash identifier: zNzwDI8lgkqUE7Xq0J8GeoU6d10BLNXHrVrD8Wc2/kk= Subject key identifier: D7:34:78:1B:65:30:2B:9A:6A:A9:74:B7:60:AD:35:89:56:5A:C7:D2 Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Certificate serial: 010D0C9F4328584F4987E2035140582AFF571580 Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/4db9529a-f1c2-3000-a17a-ee4910ce4131.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16740 IP address blocks: 2602:f5c1:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:e2:03:51:40:58:2a:ff:57:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a05ee66b-bbc5-47de-855d-f2f88de9a4bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c6:68:42:8e:53:62:e6:cd:6a:04:02:7b:20: 3e:e4:d4:dc:88:a1:93:3b:cd:f0:ae:b0:3e:ca:94: 92:16:86:58:9a:54:de:0b:29:08:2b:6a:c3:37:bf: 0d:11:34:af:d2:b1:86:02:47:f4:e6:fe:40:49:8d: ae:62:a0:06:4a:dc:e4:41:08:9a:99:32:de:7e:6e: c8:1c:f6:92:1e:1d:6a:23:f8:38:6a:17:fb:f7:ca: 7a:3e:84:5d:41:bd:70:d4:52:58:c8:cd:2b:98:28: 68:06:61:8e:fa:86:d1:ff:c7:db:0e:65:71:f4:ea: 8c:33:45:9b:e1:d5:9a:c1:35:ac:79:43:89:58:f7: e7:03:80:39:95:ba:ad:61:28:19:27:51:9f:f5:ba: c6:3e:e1:3a:01:20:0a:35:77:97:f0:ec:47:58:75: 76:a4:76:fa:ac:15:9a:f7:b4:54:a9:e0:eb:7d:33: c8:57:0d:12:fa:a7:8d:5b:f2:db:9f:63:a7:1d:4f: 28:cd:af:fb:28:6a:17:19:48:86:84:4c:b3:e5:6f: ce:bb:e0:3e:47:4f:61:6c:2f:ed:a2:18:60:64:28: 4e:5f:e0:09:dd:38:88:8f:05:cf:92:b8:a6:9e:a6: 46:ba:44:6d:eb:c7:a8:e4:48:ba:93:9e:c8:31:f6: 7c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:34:78:1B:65:30:2B:9A:6A:A9:74:B7:60:AD:35:89:56:5A:C7:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/4db9529a-f1c2-3000-a17a-ee4910ce4131.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl X509v3 Authority Key Identifier: keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer sbgp-ipAddrBlock: critical IPv6: 2602:f5c1:5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:cf:df:93:47:20:8a:71:d9:64:a3:8a:74:f6:73:71:d6:4a: b7:f8:a7:8c:7a:7a:b3:9a:da:dc:ed:03:71:94:bd:16:18:64: cc:a2:1a:0b:39:43:ec:2c:44:0b:60:e9:d7:4d:fa:93:d8:e0: ae:9f:06:fb:51:f6:b6:77:1d:69:42:ae:31:62:a8:fe:55:e1: 27:11:c2:1f:0c:19:7c:b8:21:ec:d4:c0:b1:e1:a3:8c:fd:a8: e5:6b:2a:89:8f:e1:cc:49:be:b6:e7:49:1e:b3:e4:b2:41:7d: b3:54:07:52:b4:ff:f0:b8:66:c7:d5:0c:5d:0c:6a:be:85:24: d2:03:d9:2a:dc:34:83:cd:98:f5:bb:47:7f:05:96:e9:37:41: 45:0a:71:20:7b:6a:4a:98:16:2c:e0:df:c5:65:70:06:5e:be: ef:66:1f:92:48:c9:0e:e3:cf:42:d6:41:53:e1:51:af:39:df: 2f:28:51:14:fa:e4:2e:12:ab:2d:c4:47:d4:1c:ee:b3:15:bc: e5:f7:ba:22:9a:39:39:89:83:ff:09:d7:bf:9d:7e:66:e7:63: 3b:7f:e3:3e:26:ef:fc:72:2a:43:f3:db:0c:dd:7e:f6:dc:a6: ea:89:1d:ff:b4:39:59:26:ba:0c:87:9c:d8:fc:b4:76:6c:e4: 5a:38:20:a6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jh+IDUUBYKv9XFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0 MjZmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTA1ZWU2NmItYmJjNS00N2RlLTg1NWQtZjJmODhkZTlhNGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsZoQo5TYubNagQCeyA+5NTciKGTO83wrrA+ ypSSFoZYmlTeCykIK2rDN78NETSv0rGGAkf05v5ASY2uYqAGStzkQQiamTLefm7I HPaSHh1qI/g4ahf798p6PoRdQb1w1FJYyM0rmChoBmGO+obR/8fbDmVx9OqMM0Wb 4dWawTWseUOJWPfnA4A5lbqtYSgZJ1Gf9brGPuE6ASAKNXeX8OxHWHV2pHb6rBWa 97RUqeDrfTPIVw0S+qeNW/Lbn2OnHU8oza/7KGoXGUiGhEyz5W/Ou+A+R09hbC/t ohhgZChOX+AJ3TiIjwXPkrimnqZGukRt68eo5Ei6k57IMfZ8mwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNc0eBtlMCuaaql0t2CtNYlWWsfSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvNGRiOTUyOWEtZjFjMi0z MDAwLWExN2EtZWU0OTEwY2U0MTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw N2Q3YTQyNmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL1wQAF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMbP35NHIIpx2WSjinT2c3HWSrf4p4x6erOa2tztA3GUvRYYZMyi Ggs5Q+wsRAtg6ddN+pPY4K6fBvtR9rZ3HWlCrjFiqP5V4ScRwh8MGXy4IezUwLHh o4z9qOVrKomP4cxJvrbnSR6z5LJBfbNUB1K0//C4ZsfVDF0Mar6FJNID2SrcNIPN mPW7R38Fluk3QUUKcSB7akqYFizg38VlcAZevu9mH5JIyQ7jz0LWQVPhUa853y8o URT65C4Sqy3ER9Qc7rMVvOX3uiKaOTmJg/8J17+dfmbnYzt/4z4m7/xyKkPz2wzd fvbcpuqJHf+0OVkmugyHnNj8tHZs5Fo4IKY= -----END CERTIFICATE-----Generated at Sat Sep 26 05:22:13 2026 by rpki-client