$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/ca778a16-4f4c-3d8e-9d79-9485a1c7ecd6.roa File: ca778a16-4f4c-3d8e-9d79-9485a1c7ecd6.roa (raw, json) Hash identifier: ac+rNRi78W2Rp1hgYucOlQUNTUK3Z+ltOvpXysbRVoA= Subject key identifier: 20:93:A7:BF:FE:93:65:A3:B1:BD:31:5B:C2:33:E4:34:FA:74:51:37 Certificate issuer: /CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857 Certificate serial: 010D0C9F4328584F119CF9B76EC2BE1F80761BB0 Authority key identifier: A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/ca778a16-4f4c-3d8e-9d79-9485a1c7ecd6.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 7721 IP address blocks: 2602:fbda:600::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:f9:b7:6e:c2:be:1f:80:76:1b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=bf117588-69d3-48da-ad32-d160d141f3e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1b:d8:b8:8e:1f:7a:ed:1b:32:65:6a:b5:9d: 28:93:d4:b8:6c:af:57:8b:90:01:15:1d:7e:56:0c: 99:83:09:11:75:46:a3:4a:fb:96:fe:d2:85:01:a3: 6d:19:66:42:8b:ae:4a:ed:83:33:8d:73:91:8d:2a: 53:2a:e7:23:8c:bf:f5:9d:23:ae:76:7a:77:91:ee: e0:6e:b7:d0:02:8d:4f:1f:79:65:53:6b:2f:7c:f0: 8e:8e:bb:56:ca:32:36:df:51:16:79:a3:d9:fc:1f: 1c:7c:a2:00:b8:43:c4:66:01:00:11:c5:9d:89:97: 0f:38:cc:67:36:59:ac:8a:7a:9d:6c:01:27:84:a2: 35:9a:42:b1:9e:d7:4a:4b:4e:1b:4c:d3:3f:ef:06: 51:4a:59:5b:33:8e:6d:1b:33:7e:34:39:b0:d3:13: f9:b6:8d:53:83:1c:5d:1b:5c:58:05:78:7b:b5:1d: 5e:fe:c7:0c:b7:73:d3:60:d5:29:5e:a8:a4:0d:3d: b5:46:56:95:3a:77:30:2d:e0:b2:2f:35:cf:18:0f: 65:17:77:78:ae:06:09:ea:96:2a:79:80:af:de:df: 82:db:6d:2d:df:11:ba:fa:ac:5f:79:83:ec:4b:b5: 36:4f:b4:b6:11:2e:68:0f:7a:5c:0b:45:e9:06:59: 61:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:93:A7:BF:FE:93:65:A3:B1:BD:31:5B:C2:33:E4:34:FA:74:51:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/ca778a16-4f4c-3d8e-9d79-9485a1c7ecd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl X509v3 Authority Key Identifier: keyid:A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer sbgp-ipAddrBlock: critical IPv6: 2602:fbda:600::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:b8:45:fd:0c:1f:18:c0:3b:6b:1e:e7:20:c2:7c:bf:5d:a3: 78:ab:14:90:bb:da:9b:d9:76:d1:c0:75:40:58:6a:9c:61:9b: 81:dd:2c:12:a7:9e:89:46:96:db:7f:bf:fb:2b:d9:0b:7b:df: 62:c6:22:a6:71:0a:15:49:bc:ee:56:00:94:28:13:a7:8f:97: 08:44:a8:8e:9d:0f:5d:64:63:02:6c:0a:85:94:7e:7b:c5:6e: ac:24:a9:33:d9:58:9c:4c:3c:75:6c:e1:c8:1c:0e:97:ca:a2: da:dc:97:65:b4:0a:6c:c6:8c:d1:6c:1e:18:c7:47:16:81:c8: 8e:fa:60:79:01:51:cd:0c:6b:40:70:1e:00:d1:b4:2b:b5:8e: 85:3c:93:e0:93:38:d2:e8:53:bf:06:12:91:ca:c9:14:20:8b: 0b:08:25:d2:75:49:c2:0f:8e:78:ec:df:c2:7f:a7:45:d5:f1: 68:65:b3:51:1f:d1:d7:bf:16:6f:ac:59:bc:b7:89:1e:31:e1: 27:fe:54:ed:2d:22:c4:fd:e2:06:d8:c7:67:61:93:8a:ed:18: 35:fe:88:53:00:9a:24:cd:b6:db:4c:f6:1b:d4:8e:4b:c2:9a: 55:09:78:d1:f4:b1:de:5a:c8:e1:fb:19:fc:0b:1b:de:67:35: bd:7e:3e:38 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8RnPm3bsK+H4B2G7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGYxOTM3M2ItMmNjNS00MGY0LWE2ZDAtN2NjYWNjNjM0 ODU3MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YmYxMTc1ODgtNjlkMy00OGRhLWFkMzItZDE2MGQxNDFmM2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxvYuI4feu0bMmVqtZ0ok9S4bK9Xi5ABFR1+ VgyZgwkRdUajSvuW/tKFAaNtGWZCi65K7YMzjXORjSpTKucjjL/1nSOudnp3ke7g brfQAo1PH3llU2svfPCOjrtWyjI231EWeaPZ/B8cfKIAuEPEZgEAEcWdiZcPOMxn NlmsinqdbAEnhKI1mkKxntdKS04bTNM/7wZRSllbM45tGzN+NDmw0xP5to1Tgxxd G1xYBXh7tR1e/scMt3PTYNUpXqikDT21RlaVOncwLeCyLzXPGA9lF3d4rgYJ6pYq eYCv3t+C220t3xG6+qxfeYPsS7U2T7S2ES5oD3pcC0XpBllhJQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCCTp7/+k2Wjsb0xW8Iz5DT6dFE3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZjE5 MzczYi0yY2M1LTQwZjQtYTZkMC03Y2NhY2M2MzQ4NTcvY2E3NzhhMTYtNGY0Yy0z ZDhlLTlkNzktOTQ4NWExYzdlY2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGYxOTM3M2ItMmNjNS00MGY0LWE2 ZDAtN2NjYWNjNjM0ODU3LzBmMTkzNzNiLTJjYzUtNDBmNC1hNmQwLTdjY2FjYzYz NDg1Ny5jcmwwHwYDVR0jBBgwFoAUp46RWPy5WfebiT1L1fsMf5AC/TMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZjE5MzczYi0yY2M1LTQwZjQtYTZkMC03Y2Nh Y2M2MzQ4NTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL72gYw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAILhF/QwfGMA7ax7nIMJ8v12jeKsUkLvam9l20cB1QFhqnGGbgd0s EqeeiUaW23+/+yvZC3vfYsYipnEKFUm87lYAlCgTp4+XCESojp0PXWRjAmwKhZR+ e8VurCSpM9lYnEw8dWzhyBwOl8qi2tyXZbQKbMaM0WweGMdHFoHIjvpgeQFRzQxr QHAeANG0K7WOhTyT4JM40uhTvwYSkcrJFCCLCwgl0nVJwg+OeOzfwn+nRdXxaGWz UR/R178Wb6xZvLeJHjHhJ/5U7S0ixP3iBtjHZ2GTiu0YNf6IUwCaJM2220z2G9SO S8KaVQl40fSx3lrI4fsZ/Asb3mc1vX4+OA== -----END CERTIFICATE-----Generated at Thu Sep 10 11:00:51 2026 by rpki-client