$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8562c475-5fb7-3830-a498-3704eeaa19f1.roa File: 8562c475-5fb7-3830-a498-3704eeaa19f1.roa (raw, json) Hash identifier: 3DNHC5vMosmXqxi+BwiI7BbDK+QxORmvq4HVd8YKoV8= Subject key identifier: DC:A8:FC:6A:3A:85:82:E4:30:76:D9:02:6F:AC:1C:BA:E1:7D:05:96 Certificate issuer: /CN=8b0c570a-5446-44a6-b51f-a75c2f3aa621 Certificate serial: 010D0C9F4328584F4972B2CA966CE6229F58B500 Authority key identifier: 40:AB:E0:A2:5E:B2:A8:F1:0C:E2:50:F3:92:C8:53:19:7B:67:12:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8562c475-5fb7-3830-a498-3704eeaa19f1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 401297 IP address blocks: 2602:fafb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:b2:ca:96:6c:e6:22:9f:58:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b0c570a-5446-44a6-b51f-a75c2f3aa621 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=230bbc48-2c1d-488d-b41f-0ec500b6af9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9a:2e:8a:a8:11:36:d9:43:f8:c2:2c:54:d4: 91:f4:86:06:c4:1e:88:e7:67:25:c8:d8:a1:ad:7d: 40:a8:73:42:8e:5d:33:35:fc:b7:2c:25:ea:d8:77: 76:5f:dc:26:11:67:91:28:de:16:e6:4a:a5:95:31: 55:05:5b:1f:f9:c6:b2:a8:26:4c:bb:b6:ba:79:43: 22:2e:d0:e7:eb:89:88:51:2a:e3:b8:91:95:52:2c: 60:52:65:7e:8e:1e:1a:fb:cd:d9:5e:fe:59:17:0f: 42:36:ee:c6:ef:e6:bf:ff:48:11:80:1d:73:25:c9: ac:65:9f:ba:c5:83:8a:a0:0d:d3:77:eb:19:94:ff: 0e:78:0a:7b:97:71:f3:2a:8e:f8:39:16:83:68:ea: 32:67:c0:bd:3f:f1:f9:50:ad:9b:dc:2e:21:98:d0: 65:59:b6:19:68:43:9b:f4:8a:01:21:c4:53:b7:87: 7f:51:5b:5e:4b:8f:55:5c:7d:d1:4c:a4:3d:05:95: 5b:ee:f2:1d:10:95:da:99:32:33:0f:2b:f1:d0:74: 9e:62:e9:f0:e2:7f:99:80:be:ee:f9:87:4c:0f:94: 8e:bb:95:a2:66:17:e6:06:a1:aa:84:43:1d:3e:92: 08:01:a1:bd:ce:f5:b4:a3:ab:32:f9:1e:c3:3a:9b: 9a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A8:FC:6A:3A:85:82:E4:30:76:D9:02:6F:AC:1C:BA:E1:7D:05:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8562c475-5fb7-3830-a498-3704eeaa19f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.crl X509v3 Authority Key Identifier: keyid:40:AB:E0:A2:5E:B2:A8:F1:0C:E2:50:F3:92:C8:53:19:7B:67:12:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer sbgp-ipAddrBlock: critical IPv6: 2602:fafb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:42:ac:93:2d:be:d2:8b:e9:19:8d:6b:93:1a:15:5e:2c:51: 88:ef:ee:8a:a7:94:33:10:2b:32:e8:83:3c:83:14:6e:44:55: 85:54:9e:ca:b6:40:18:e3:5f:c0:8c:8b:e9:7c:57:42:88:17: ef:0b:b4:98:05:1c:d4:a6:b9:1c:1b:6d:76:91:bd:65:cc:8a: e9:8f:b2:f8:01:09:1f:c7:64:61:81:eb:c6:bb:b5:17:fc:df: 4b:61:19:83:88:c6:bd:8f:89:1e:3c:d3:5e:b0:44:df:e1:ea: b5:92:a8:2f:a4:07:3c:96:56:36:9a:07:35:aa:87:0d:0b:94: bc:35:8c:51:ed:b3:15:0c:62:c0:f0:38:1b:b4:9e:7b:46:62: 9e:28:41:31:77:47:c3:dd:7b:5c:0c:ef:f7:97:ac:58:d6:32: d0:88:74:5a:b6:d0:e7:80:ec:a6:e5:54:82:e3:a4:da:f9:d7: af:2c:f5:a0:8e:0e:e1:17:d2:09:c4:b3:2c:e7:c0:4a:37:4e: df:78:6c:44:b8:08:13:a1:57:47:2b:4b:dd:4f:7d:f7:e9:6d: c6:90:eb:3b:5c:3c:08:84:65:73:43:33:3a:5b:90:28:9b:82: 19:fc:3d:aa:5a:d0:bd:cd:7f:a1:d6:41:31:a1:cc:41:ca:f4: 97:bf:bf:e0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JcrLKlmzmIp9YtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGIwYzU3MGEtNTQ0Ni00NGE2LWI1MWYtYTc1YzJmM2Fh NjIxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjMwYmJjNDgtMmMxZC00ODhkLWI0MWYtMGVjNTAwYjZhZjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpouiqgRNtlD+MIsVNSR9IYGxB6I52clyNih rX1AqHNCjl0zNfy3LCXq2Hd2X9wmEWeRKN4W5kqllTFVBVsf+cayqCZMu7a6eUMi LtDn64mIUSrjuJGVUixgUmV+jh4a+83ZXv5ZFw9CNu7G7+a//0gRgB1zJcmsZZ+6 xYOKoA3Td+sZlP8OeAp7l3HzKo74ORaDaOoyZ8C9P/H5UK2b3C4hmNBlWbYZaEOb 9IoBIcRTt4d/UVteS49VXH3RTKQ9BZVb7vIdEJXamTIzDyvx0HSeYunw4n+ZgL7u +YdMD5SOu5WiZhfmBqGqhEMdPpIIAaG9zvW0o6sy+R7DOpuaZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNyo/Go6hYLkMHbZAm+sHLrhfQWWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84YjBj NTcwYS01NDQ2LTQ0YTYtYjUxZi1hNzVjMmYzYWE2MjEvODU2MmM0NzUtNWZiNy0z ODMwLWE0OTgtMzcwNGVlYWExOWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGIwYzU3MGEtNTQ0Ni00NGE2LWI1 MWYtYTc1YzJmM2FhNjIxLzhiMGM1NzBhLTU0NDYtNDRhNi1iNTFmLWE3NWMyZjNh YTYyMS5jcmwwHwYDVR0jBBgwFoAUQKvgol6yqPEM4lDzkshTGXtnEoswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84YjBjNTcwYS01NDQ2LTQ0YTYtYjUxZi1hNzVj MmYzYWE2MjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6+wAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJRCrJMtvtKL6RmNa5MaFV4sUYjv7oqnlDMQKzLogzyDFG5EVYVU nsq2QBjjX8CMi+l8V0KIF+8LtJgFHNSmuRwbbXaRvWXMiumPsvgBCR/HZGGB68a7 tRf830thGYOIxr2PiR48016wRN/h6rWSqC+kBzyWVjaaBzWqhw0LlLw1jFHtsxUM YsDwOBu0nntGYp4oQTF3R8Pde1wM7/eXrFjWMtCIdFq20OeA7KblVILjpNr5168s 9aCODuEX0gnEsyznwEo3Tt94bES4CBOhV0crS91PfffpbcaQ6ztcPAiEZXNDMzpb kCibghn8Papa0L3Nf6HWQTGhzEHK9Je/v+A= -----END CERTIFICATE-----Generated at Tue Sep 29 03:14:03 2026 by rpki-client