$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/d7eafdb6-cd3e-3ad3-87f5-4b6ee6bdc91e.roa File: d7eafdb6-cd3e-3ad3-87f5-4b6ee6bdc91e.roa (raw, json) Hash identifier: O5uP3/Y8QEbuRHd6ocFNIiTsJwmKeDz5GaAmxNVELtg= Subject key identifier: E4:DF:0C:8B:4B:24:A7:30:0A:68:4E:7A:2A:4E:D0:F3:F8:22:05:86 Certificate issuer: /CN=00bdc54c-4822-4df3-99e6-85920125a480 Certificate serial: 010D0C9F4328584F4DA28CCBBD50CCEF59EF6980 Authority key identifier: 20:2A:BB:48:A9:FF:D2:35:2A:49:42:73:FE:3B:E1:13:4E:BC:BD:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/d7eafdb6-cd3e-3ad3-87f5-4b6ee6bdc91e.roa Signing time: Sat 26 Sep 2026 13:00:12 +0000 ROA not before: Sat 26 Sep 2026 13:00:12 +0000 ROA not after: Fri 25 Dec 2026 14:00:12 +0000 asID: 14618 IP address blocks: 2602:f3d4:a01::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/00bdc54c-4822-4df3-99e6-85920125a480.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/00bdc54c-4822-4df3-99e6-85920125a480.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4d:a2:8c:cb:bd:50:cc:ef:59:ef:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00bdc54c-4822-4df3-99e6-85920125a480 Validity Not Before: Sep 26 13:00:12 2026 GMT Not After : Dec 25 14:00:12 2026 GMT Subject: CN=9c65e4f0-8f8c-47f6-bdf7-88c9838feb72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:22:71:24:12:d5:64:5a:0d:c9:44:5a:ae:0e: 05:18:d6:c5:95:8d:66:75:15:d0:6d:19:84:ad:49: d8:2f:6c:04:7d:69:9a:a7:f3:eb:62:59:c0:16:00: ce:12:3f:fd:00:ab:16:18:6d:86:45:8c:48:20:c7: 5a:ab:82:ff:86:c0:1c:17:0e:e6:5e:7c:b3:1b:5a: 43:f2:e9:65:e9:7a:64:bb:6f:fb:34:bd:71:86:75: 14:cc:5e:f3:82:c5:d4:a6:8e:b7:12:2f:e3:bd:37: da:eb:16:24:99:6f:89:11:cc:84:fb:a3:26:ae:8e: b2:f2:ea:90:9a:f7:55:0a:36:ed:d2:dc:73:1c:64: 80:f3:35:94:1e:eb:9e:a6:80:08:12:3c:9c:86:03: 8b:69:53:a7:76:ab:ef:b7:33:b5:88:64:a0:e8:3b: 33:25:45:f5:ca:bb:a6:60:3e:06:41:28:32:5c:7e: 13:b3:b5:23:5d:94:98:26:59:f2:19:81:16:97:ad: f7:5a:b3:d0:26:83:cd:1b:59:87:81:30:33:06:c1: 2d:28:ee:33:7c:22:9f:1a:3c:9f:76:6e:8b:c9:14: 12:a5:46:3b:52:d0:7b:6e:ef:1b:d8:86:d8:e8:77: 36:09:77:b4:aa:40:4d:ff:30:2a:6a:08:63:ff:2e: f7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:DF:0C:8B:4B:24:A7:30:0A:68:4E:7A:2A:4E:D0:F3:F8:22:05:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/d7eafdb6-cd3e-3ad3-87f5-4b6ee6bdc91e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/00bdc54c-4822-4df3-99e6-85920125a480.crl X509v3 Authority Key Identifier: keyid:20:2A:BB:48:A9:FF:D2:35:2A:49:42:73:FE:3B:E1:13:4E:BC:BD:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480.cer sbgp-ipAddrBlock: critical IPv6: 2602:f3d4:a01::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:44:1b:08:ad:58:40:eb:c8:88:dd:ce:b6:3e:53:71:b4:bc: 56:db:e0:95:cd:d5:f7:c9:dc:a2:82:cb:45:04:3c:f6:24:03: e4:95:a6:fe:ab:a2:c7:b3:2f:47:89:3f:e1:8d:e4:39:4c:d9: 02:4f:ef:2e:bc:7a:42:c9:f9:56:34:8b:47:07:f4:03:54:66: 2a:f3:f7:52:65:07:ba:ef:16:63:31:f3:f7:31:51:0d:92:5b: e5:fe:40:fe:02:ff:91:be:01:82:3f:25:5d:d4:49:bd:c1:5a: eb:d8:34:a6:99:53:f8:39:e1:26:26:0a:f7:ac:cc:35:4e:83: 2e:2c:71:33:e9:35:9f:09:09:b3:84:d1:e1:07:25:3b:f1:30: 59:32:4f:b5:9e:ef:09:ac:9b:fa:ad:19:5a:54:ee:d2:2c:cd: 10:c4:de:7b:52:05:49:a6:d4:f3:f7:9c:c0:7c:c3:79:d0:a3: 1f:ef:4a:fa:5d:67:10:46:12:6a:e7:0a:b1:39:2c:29:b4:fe: 87:42:bd:dd:df:dd:47:b6:38:3f:4d:19:8c:be:02:7b:68:c3: 82:96:e9:26:58:8e:be:6f:37:ff:20:e5:22:6c:d5:16:43:15: f8:43:27:5d:0a:78:59:11:cd:1e:3b:92:27:b3:85:d3:62:18: 34:07:d4:c6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9NoozLvVDM71nvaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDBiZGM1NGMtNDgyMi00ZGYzLTk5ZTYtODU5MjAxMjVh NDgwMB4XDTI2MDkyNjEzMDAxMloXDTI2MTIyNTE0MDAxMlowLzEtMCsGA1UEAxMk OWM2NWU0ZjAtOGY4Yy00N2Y2LWJkZjctODhjOTgzOGZlYjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCJxJBLVZFoNyURarg4FGNbFlY1mdRXQbRmE rUnYL2wEfWmap/PrYlnAFgDOEj/9AKsWGG2GRYxIIMdaq4L/hsAcFw7mXnyzG1pD 8ull6Xpku2/7NL1xhnUUzF7zgsXUpo63Ei/jvTfa6xYkmW+JEcyE+6Mmro6y8uqQ mvdVCjbt0txzHGSA8zWUHuuepoAIEjychgOLaVOndqvvtzO1iGSg6DszJUX1yrum YD4GQSgyXH4Ts7UjXZSYJlnyGYEWl633WrPQJoPNG1mHgTAzBsEtKO4zfCKfGjyf dm6LyRQSpUY7UtB7bu8b2IbY6Hc2CXe0qkBN/zAqaghj/y73GwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOTfDItLJKcwCmhOeipO0PP4IgWGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8wMGJk YzU0Yy00ODIyLTRkZjMtOTllNi04NTkyMDEyNWE0ODAvZDdlYWZkYjYtY2QzZS0z YWQzLTg3ZjUtNGI2ZWU2YmRjOTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMDBiZGM1NGMtNDgyMi00ZGYzLTk5 ZTYtODU5MjAxMjVhNDgwLzAwYmRjNTRjLTQ4MjItNGRmMy05OWU2LTg1OTIwMTI1 YTQ4MC5jcmwwHwYDVR0jBBgwFoAUICq7SKn/0jUqSUJz/jvhE068vWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8wMGJkYzU0Yy00ODIyLTRkZjMtOTllNi04NTky MDEyNWE0ODAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgLz1AoB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACZEGwitWEDryIjdzrY+U3G0vFbb4JXN1ffJ3KKCy0UEPPYkA+SV pv6rosezL0eJP+GN5DlM2QJP7y68ekLJ+VY0i0cH9ANUZirz91JlB7rvFmMx8/cx UQ2SW+X+QP4C/5G+AYI/JV3USb3BWuvYNKaZU/g54SYmCveszDVOgy4scTPpNZ8J CbOE0eEHJTvxMFkyT7We7wmsm/qtGVpU7tIszRDE3ntSBUmm1PP3nMB8w3nQox/v SvpdZxBGEmrnCrE5LCm0/odCvd3f3Ue2OD9NGYy+Antow4KW6SZYjr5vN/8g5SJs 1RZDFfhDJ10KeFkRzR47kiezhdNiGDQH1MY= -----END CERTIFICATE-----Generated at Tue Oct 6 18:11:17 2026 by rpki-client