$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/2389484e-a55b-3c7c-9b93-8a6a6af896c0.roa File: 2389484e-a55b-3c7c-9b93-8a6a6af896c0.roa (raw, json) Hash identifier: clrpji8z3RswqoFYxK//XjK0XBofxXYbg88XFCakSYA= Subject key identifier: 32:7F:D3:5F:42:B8:C0:C1:C4:60:FD:A4:01:1C:3B:BB:F3:AC:64:97 Certificate issuer: /CN=8cfc4370-50a0-4da6-9b19-eea3a1988688 Certificate serial: 010D0C9F4328584F682818CC3E86DD82C846C180 Authority key identifier: D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/2389484e-a55b-3c7c-9b93-8a6a6af896c0.roa Signing time: Tue 06 Oct 2026 01:00:13 +0000 ROA not before: Tue 06 Oct 2026 01:00:13 +0000 ROA not after: Mon 04 Jan 2027 02:00:13 +0000 asID: 401100 IP address blocks: 2602:f972:fd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:68:28:18:cc:3e:86:dd:82:c8:46:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cfc4370-50a0-4da6-9b19-eea3a1988688 Validity Not Before: Oct 6 01:00:13 2026 GMT Not After : Jan 4 02:00:13 2027 GMT Subject: CN=bf056d62-c03f-4684-9f16-4c05417f474c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c1:1c:4d:e9:a5:e6:2c:a7:56:8e:d8:eb:a4: 39:fa:c8:23:2d:10:68:d3:f4:c4:29:25:67:fb:f2: 34:54:39:ab:f6:7a:f2:83:e0:4b:a2:84:e4:c9:cc: 52:ee:77:7f:d3:33:dd:0c:6d:91:e7:9b:a3:e9:0a: 60:47:77:0f:b0:2c:d5:d5:d4:ab:d9:77:d3:27:c9: e5:8b:38:e4:71:0e:21:83:48:1f:07:b3:d9:0f:80: 49:88:80:cd:b0:68:35:3a:96:6e:9d:bb:77:20:1b: 8d:32:2c:2f:6a:1a:95:cf:3b:d7:23:11:14:06:19: 0d:d7:84:9b:11:f1:f1:2a:51:04:14:e2:95:2b:15: a1:3f:b0:82:f7:de:91:25:b7:10:ed:65:c0:08:33: 84:25:5e:ba:78:e3:5f:34:4d:e3:4f:b8:bb:8b:b1: 2a:ca:75:ec:53:f7:36:ed:e8:9d:33:fd:b1:96:e5: ce:f5:d2:84:e4:d1:c4:0d:7c:61:9f:f7:e1:53:7a: 1a:e2:03:1b:69:5b:74:67:41:3b:44:2b:5b:ef:e8: ea:1b:db:ed:2d:67:b5:cd:04:4f:5e:74:ad:64:a2: 15:22:09:3c:88:19:9f:33:5f:cf:27:fb:eb:46:8c: 00:7e:41:24:63:1d:ff:bb:1e:59:b7:f2:8d:6b:74: 8a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7F:D3:5F:42:B8:C0:C1:C4:60:FD:A4:01:1C:3B:BB:F3:AC:64:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/2389484e-a55b-3c7c-9b93-8a6a6af896c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl X509v3 Authority Key Identifier: keyid:D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer sbgp-ipAddrBlock: critical IPv6: 2602:f972:fd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:bf:d1:ba:c9:26:69:40:81:3d:b8:f4:82:0c:b4:0b:c4:d5: 58:38:69:61:e1:f8:11:89:f4:72:52:e9:e0:24:0b:4b:7e:d5: 92:7a:09:d4:5f:92:32:98:07:aa:e6:b9:d7:26:a6:45:fe:93: fd:1c:70:5f:a2:5a:43:df:21:47:a5:06:d3:7d:f9:a0:2b:7a: f0:e3:58:e1:e4:1e:e7:67:86:39:36:a3:4a:8f:38:a0:82:6e: 69:3a:1e:11:77:ea:ab:0a:1a:05:12:94:c0:17:42:4d:36:57: 68:12:03:18:1a:9a:41:95:a6:77:0e:1c:21:f6:e0:e9:44:8e: 1e:43:6d:7c:46:70:f2:65:44:f5:21:2a:e3:91:49:ac:59:d6: 2c:fa:70:c6:d4:9b:8e:1c:40:5b:da:d8:e6:5d:21:69:bc:41: 6b:c8:71:c9:4b:15:5f:40:30:6a:86:07:80:29:4f:23:12:10: eb:da:2a:a6:aa:a0:fa:b5:49:86:07:ff:00:32:e5:f7:d3:45: c1:0f:2f:69:ae:93:1b:18:f1:f5:45:c4:ce:f4:10:cc:58:a5: bc:f1:b5:8a:0c:fe:6b:d2:91:de:48:6d:56:62:56:82:2a:6a: 6d:1e:c7:87:c4:9a:1b:2f:aa:0d:c5:9e:9b:25:fa:fb:8e:3f: b8:01:fd:e8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9oKBjMPobdgshGwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNmYzQzNzAtNTBhMC00ZGE2LTliMTktZWVhM2ExOTg4 Njg4MB4XDTI2MTAwNjAxMDAxM1oXDTI3MDEwNDAyMDAxM1owLzEtMCsGA1UEAxMk YmYwNTZkNjItYzAzZi00Njg0LTlmMTYtNGMwNTQxN2Y0NzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcEcTeml5iynVo7Y66Q5+sgjLRBo0/TEKSVn +/I0VDmr9nryg+BLooTkycxS7nd/0zPdDG2R55uj6QpgR3cPsCzV1dSr2XfTJ8nl izjkcQ4hg0gfB7PZD4BJiIDNsGg1OpZunbt3IBuNMiwvahqVzzvXIxEUBhkN14Sb EfHxKlEEFOKVKxWhP7CC996RJbcQ7WXACDOEJV66eONfNE3jT7i7i7EqynXsU/c2 7eidM/2xluXO9dKE5NHEDXxhn/fhU3oa4gMbaVt0Z0E7RCtb7+jqG9vtLWe1zQRP XnStZKIVIgk8iBmfM1/PJ/vrRowAfkEkYx3/ux5Zt/KNa3SKhwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDJ/019CuMDBxGD9pAEcO7vzrGSXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84Y2Zj NDM3MC01MGEwLTRkYTYtOWIxOS1lZWEzYTE5ODg2ODgvMjM4OTQ4NGUtYTU1Yi0z YzdjLTliOTMtOGE2YTZhZjg5NmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGNmYzQzNzAtNTBhMC00ZGE2LTli MTktZWVhM2ExOTg4Njg4LzhjZmM0MzcwLTUwYTAtNGRhNi05YjE5LWVlYTNhMTk4 ODY4OC5jcmwwHwYDVR0jBBgwFoAU0wDD/F4XeXXk80J9t9Naj5SRmzwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84Y2ZjNDM3MC01MGEwLTRkYTYtOWIxOS1lZWEz YTE5ODg2ODguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5cgD9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKW/0brJJmlAgT249IIMtAvE1Vg4aWHh+BGJ9HJS6eAkC0t+1ZJ6 CdRfkjKYB6rmudcmpkX+k/0ccF+iWkPfIUelBtN9+aArevDjWOHkHudnhjk2o0qP OKCCbmk6HhF36qsKGgUSlMAXQk02V2gSAxgamkGVpncOHCH24OlEjh5DbXxGcPJl RPUhKuORSaxZ1iz6cMbUm44cQFva2OZdIWm8QWvIcclLFV9AMGqGB4ApTyMSEOva KqaqoPq1SYYH/wAy5ffTRcEPL2mukxsY8fVFxM70EMxYpbzxtYoM/mvSkd5IbVZi VoIqam0ex4fEmhsvqg3Fnpsl+vuOP7gB/eg= -----END CERTIFICATE-----Generated at Thu Oct 29 13:59:55 2026 by rpki-client