$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9691c2ec-c989-4c60-86a3-076164949aee/38953d48-ac6d-3edd-8025-75ec295bec64.roa File: 38953d48-ac6d-3edd-8025-75ec295bec64.roa (raw, json) Hash identifier: j23rCKLFzfB6zhcjuf6kA1z3kMUu/04XIGIXFAcvYPk= Subject key identifier: 5A:6F:00:88:D5:72:1E:AF:44:5C:01:EE:3D:19:90:AE:74:83:42:E8 Certificate issuer: /CN=9691c2ec-c989-4c60-86a3-076164949aee Certificate serial: 010D0C9F4328584F8D4891CC6B4957DBC31DDE60 Authority key identifier: BA:2F:F1:99:2C:2B:E2:12:2F:16:38:CA:74:6E:77:0C:5F:ED:A0:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9691c2ec-c989-4c60-86a3-076164949aee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9691c2ec-c989-4c60-86a3-076164949aee/38953d48-ac6d-3edd-8025-75ec295bec64.roa Signing time: Mon 19 Oct 2026 08:10:39 +0000 ROA not before: Mon 19 Oct 2026 08:10:39 +0000 ROA not after: Sun 17 Jan 2027 09:10:39 +0000 asID: 9304 IP address blocks: 2602:f2b9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9691c2ec-c989-4c60-86a3-076164949aee/9691c2ec-c989-4c60-86a3-076164949aee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9691c2ec-c989-4c60-86a3-076164949aee/9691c2ec-c989-4c60-86a3-076164949aee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9691c2ec-c989-4c60-86a3-076164949aee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:48:91:cc:6b:49:57:db:c3:1d:de:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9691c2ec-c989-4c60-86a3-076164949aee Validity Not Before: Oct 19 08:10:39 2026 GMT Not After : Jan 17 09:10:39 2027 GMT Subject: CN=0e869e2f-5b33-407d-b99a-0d003b0a75cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4f:ed:03:a9:b9:f3:4b:6b:7d:4c:b3:6f:9d: 9f:16:b0:dc:16:06:b5:84:44:5f:e1:c4:7d:b7:59: 4a:17:9b:12:31:6c:90:51:05:2c:c3:91:c5:5a:d2: ff:b6:fb:77:26:49:c1:35:9f:2b:a7:50:3f:d1:ec: 71:a4:7b:42:d1:32:1d:40:cc:5e:1f:99:21:6d:6b: 16:64:86:15:33:cb:f0:59:9e:58:f3:90:ca:58:ab: 49:1d:4f:8d:a9:59:e5:ba:d4:da:4d:8c:52:66:42: a0:67:fb:60:7a:3a:9e:d1:33:3b:1a:96:49:ba:b9: ef:23:41:38:f9:4c:f4:80:22:72:96:6e:2f:36:95: fc:d6:ea:27:6a:85:5c:a0:1c:e3:d1:4b:8e:23:15: e2:8a:00:0f:59:fc:da:56:44:aa:80:80:f8:ea:32: 82:99:d1:a7:81:86:71:03:c3:cc:d6:0d:e3:8a:50: cf:0e:1a:23:d0:d6:73:fa:b7:09:f7:87:ce:74:5c: 4f:c7:30:3f:ce:15:ea:e8:28:33:52:d7:55:34:6b: 18:6a:35:bb:2b:29:45:71:ea:da:0d:b5:bd:bb:5a: 54:d7:e3:8e:2a:d9:64:54:6d:18:b6:e5:88:e4:a0: d3:78:d2:f4:9a:7e:7a:a7:a8:30:e3:c7:b3:2f:23: 75:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:6F:00:88:D5:72:1E:AF:44:5C:01:EE:3D:19:90:AE:74:83:42:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9691c2ec-c989-4c60-86a3-076164949aee/38953d48-ac6d-3edd-8025-75ec295bec64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9691c2ec-c989-4c60-86a3-076164949aee/9691c2ec-c989-4c60-86a3-076164949aee.crl X509v3 Authority Key Identifier: keyid:BA:2F:F1:99:2C:2B:E2:12:2F:16:38:CA:74:6E:77:0C:5F:ED:A0:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9691c2ec-c989-4c60-86a3-076164949aee.cer sbgp-ipAddrBlock: critical IPv6: 2602:f2b9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:75:40:77:8c:ec:1d:84:62:44:5e:cf:93:58:d5:c4:33:c7: ba:39:b8:8e:80:d5:ab:e1:ed:1f:0b:ab:29:69:c0:09:0a:6f: 31:01:e3:cc:ed:db:d9:e7:a5:74:ca:94:f2:98:35:0f:06:ba: e4:06:85:80:10:03:4b:c8:cb:e1:c3:6c:b4:49:21:e2:f9:51: be:a3:ee:ef:3d:22:3e:ef:c3:12:22:bf:a1:54:5c:d5:fd:ab: ee:52:f0:13:9a:e7:06:ba:9b:bf:67:40:bd:66:7d:32:5f:75: c9:b0:b7:ad:a0:db:62:40:e4:63:a4:6b:81:42:0a:ec:d2:b1: eb:42:d4:97:24:46:fe:d1:96:20:0e:bb:48:79:cc:bf:00:fd: 4d:d9:48:2d:47:8a:25:4d:72:03:52:d7:eb:ce:e3:c0:f1:86: 36:a6:dc:63:d4:8f:eb:3b:4a:3a:d6:31:fd:d2:d2:ff:d2:20: bc:b3:9e:6d:f1:c6:d0:d4:29:c4:91:ec:05:e6:99:90:54:dc: 93:9c:90:78:7d:61:e5:3d:2d:cf:43:4e:8b:0e:b7:62:12:96: 15:18:e8:40:26:bf:ca:a2:fe:f7:44:7d:a1:f9:b3:42:85:85: bf:eb:14:b4:0c:75:5d:b6:30:7d:e7:1c:cd:ab:89:39:fa:27: 3d:6f:a8:a2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+NSJHMa0lX28Md3mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY5MWMyZWMtYzk4OS00YzYwLTg2YTMtMDc2MTY0OTQ5 YWVlMB4XDTI2MTAxOTA4MTAzOVoXDTI3MDExNzA5MTAzOVowLzEtMCsGA1UEAxMk MGU4NjllMmYtNWIzMy00MDdkLWI5OWEtMGQwMDNiMGE3NWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3k/tA6m580trfUyzb52fFrDcFga1hERf4cR9 t1lKF5sSMWyQUQUsw5HFWtL/tvt3JknBNZ8rp1A/0exxpHtC0TIdQMxeH5khbWsW ZIYVM8vwWZ5Y85DKWKtJHU+NqVnlutTaTYxSZkKgZ/tgejqe0TM7GpZJurnvI0E4 +Uz0gCJylm4vNpX81uonaoVcoBzj0UuOIxXiigAPWfzaVkSqgID46jKCmdGngYZx A8PM1g3jilDPDhoj0NZz+rcJ94fOdFxPxzA/zhXq6CgzUtdVNGsYajW7KylFcera DbW9u1pU1+OOKtlkVG0YtuWI5KDTeNL0mn56p6gw48ezLyN1xQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFpvAIjVch6vRFwB7j0ZkK50g0LoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS85Njkx YzJlYy1jOTg5LTRjNjAtODZhMy0wNzYxNjQ5NDlhZWUvMzg5NTNkNDgtYWM2ZC0z ZWRkLTgwMjUtNzVlYzI5NWJlYzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvOTY5MWMyZWMtYzk4OS00YzYwLTg2 YTMtMDc2MTY0OTQ5YWVlLzk2OTFjMmVjLWM5ODktNGM2MC04NmEzLTA3NjE2NDk0 OWFlZS5jcmwwHwYDVR0jBBgwFoAUui/xmSwr4hIvFjjKdG53DF/toD0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS85NjkxYzJlYy1jOTg5LTRjNjAtODZhMy0wNzYx NjQ5NDlhZWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgLyuQAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFB1QHeM7B2EYkRez5NY1cQzx7o5uI6A1avh7R8LqylpwAkKbzEB 48zt29nnpXTKlPKYNQ8GuuQGhYAQA0vIy+HDbLRJIeL5Ub6j7u89Ij7vwxIiv6FU XNX9q+5S8BOa5wa6m79nQL1mfTJfdcmwt62g22JA5GOka4FCCuzSsetC1JckRv7R liAOu0h5zL8A/U3ZSC1HiiVNcgNS1+vO48Dxhjam3GPUj+s7SjrWMf3S0v/SILyz nm3xxtDUKcSR7AXmmZBU3JOckHh9YeU9Lc9DTosOt2ISlhUY6EAmv8qi/vdEfaH5 s0KFhb/rFLQMdV22MH3nHM2riTn6Jz1vqKI= -----END CERTIFICATE-----Generated at Sun Oct 25 14:21:14 2026 by rpki-client