$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/cd3cb7de-2625-3893-a323-d1bec7d259a0.roa File: cd3cb7de-2625-3893-a323-d1bec7d259a0.roa (raw, json) Hash identifier: jSH8ViIr1GW66/O7AZDi+iHwS1ghM5PuO3pe21KVyXU= Subject key identifier: A1:7F:DD:75:D1:0E:87:DC:18:8C:70:37:ED:81:B0:58:63:34:85:B9 Certificate issuer: /CN=2a1e9734-0a7f-48e6-87d3-ca7d837f4e50 Certificate serial: 010D0C9F4328584F4973B7B35D78593C831A3280 Authority key identifier: D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/cd3cb7de-2625-3893-a323-d1bec7d259a0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 400245 IP address blocks: 2602:fb7d::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:b7:b3:5d:78:59:3c:83:1a:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a1e9734-0a7f-48e6-87d3-ca7d837f4e50 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3412d1f4-22ce-478e-a7cb-7670c9377949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bb:27:de:c5:cb:44:eb:a0:65:8e:7a:85:08: cc:be:59:44:83:29:16:5c:00:50:6e:e4:df:b1:8c: 2e:d0:bd:f6:56:ad:4d:9b:66:28:80:6b:6d:33:6a: ee:3d:58:47:8b:3d:be:d2:5d:14:b9:58:5b:de:06: db:7f:1c:14:59:40:d1:18:ab:b8:30:e6:b0:d6:0a: 6a:6d:e8:fb:3d:96:fa:78:03:38:88:11:14:34:b7: d8:4c:94:4f:fe:73:1b:f6:fb:23:3c:9e:72:28:92: cb:a8:05:55:e2:b0:1d:1d:42:7d:1a:2a:f2:4c:8e: 95:0f:f6:e3:f2:a7:90:d9:28:4f:12:4b:64:f5:80: 45:b6:57:e4:a5:28:85:b8:20:86:c8:0e:6d:39:19: 0a:6e:d2:bc:0b:60:bb:8d:4a:22:6b:a1:cc:2c:dd: 99:a6:03:96:c5:12:0b:32:de:f2:de:15:ee:f9:02: 59:e1:cd:a4:d4:bf:1b:f0:98:a0:e2:ff:55:09:a0: b5:0d:cf:60:24:13:ac:6c:5f:03:58:96:3e:54:d6: 5b:25:a3:27:5c:83:50:fd:aa:ae:0f:bf:d5:07:46: c6:3f:1b:4d:31:3f:92:e7:b3:1e:c8:f4:68:31:ac: cc:bd:2a:90:13:79:e0:ef:f6:15:d5:cb:81:5a:69: 79:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:7F:DD:75:D1:0E:87:DC:18:8C:70:37:ED:81:B0:58:63:34:85:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/cd3cb7de-2625-3893-a323-d1bec7d259a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl X509v3 Authority Key Identifier: keyid:D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb7d::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:4f:3a:4e:31:46:63:4b:0a:a7:21:b0:9d:64:82:00:02:40: a2:99:40:6e:2b:0c:81:30:ec:80:6d:bf:5f:fe:4f:be:0c:29: ef:ca:01:30:a5:96:0a:42:52:c0:c6:ba:85:8e:4f:d4:51:d6: 3e:34:a6:27:8c:7b:f4:b3:69:15:14:2a:a7:79:ac:6b:56:9c: 84:29:b2:07:da:a4:c2:51:a3:98:54:c2:75:5e:5d:d5:91:e5: 9c:11:2a:ad:bc:1f:f7:bb:9c:15:ac:a1:a7:21:c3:37:38:33: 5d:ea:3d:22:73:12:8a:1e:71:ca:c3:80:4e:00:50:bf:ec:fe: 96:10:6f:1f:8f:ce:cf:c9:a0:c6:dc:aa:f1:75:ce:d5:0e:74: bf:92:20:bd:f3:29:66:52:62:3b:06:48:e6:9f:36:5c:a9:50: 91:94:2c:b0:5f:50:bb:d4:2d:3c:2f:3d:40:2b:44:bd:c1:9c: e2:c7:fb:7b:73:d3:69:ee:6a:6c:ab:ad:45:7e:e5:52:ab:aa: 39:ca:b2:79:73:45:02:5d:7f:4d:e1:4d:0d:38:28:08:c6:0f: d3:63:dc:46:85:d9:ac:f8:70:66:ed:83:4a:e5:6d:7f:b7:2e: 2a:8b:27:00:9d:78:56:dd:f0:f0:06:c5:53:9d:c7:59:de:be: a0:34:79:83 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9Jc7ezXXhZPIMaMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmExZTk3MzQtMGE3Zi00OGU2LTg3ZDMtY2E3ZDgzN2Y0 ZTUwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzQxMmQxZjQtMjJjZS00NzhlLWE3Y2ItNzY3MGM5Mzc3OTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbsn3sXLROugZY56hQjMvllEgykWXABQbuTf sYwu0L32Vq1Nm2YogGttM2ruPVhHiz2+0l0UuVhb3gbbfxwUWUDRGKu4MOaw1gpq bej7PZb6eAM4iBEUNLfYTJRP/nMb9vsjPJ5yKJLLqAVV4rAdHUJ9GiryTI6VD/bj 8qeQ2ShPEktk9YBFtlfkpSiFuCCGyA5tORkKbtK8C2C7jUoia6HMLN2ZpgOWxRIL Mt7y3hXu+QJZ4c2k1L8b8Jig4v9VCaC1Dc9gJBOsbF8DWJY+VNZbJaMnXINQ/aqu D7/VB0bGPxtNMT+S57MeyPRoMazMvSqQE3ng7/YV1cuBWml5PQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKF/3XXRDofcGIxwN+2BsFhjNIW5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yYTFl OTczNC0wYTdmLTQ4ZTYtODdkMy1jYTdkODM3ZjRlNTAvY2QzY2I3ZGUtMjYyNS0z ODkzLWEzMjMtZDFiZWM3ZDI1OWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmExZTk3MzQtMGE3Zi00OGU2LTg3 ZDMtY2E3ZDgzN2Y0ZTUwLzJhMWU5NzM0LTBhN2YtNDhlNi04N2QzLWNhN2Q4Mzdm NGU1MC5jcmwwHwYDVR0jBBgwFoAU2ZfG3YFV+RX1BGNFOdNqUSwXdMcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yYTFlOTczNC0wYTdmLTQ4ZTYtODdkMy1jYTdk ODM3ZjRlNTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL7fQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAIE86TjFGY0sKpyGwnWSCAAJAoplAbisMgTDsgG2/X/5Pvgwp78oB MKWWCkJSwMa6hY5P1FHWPjSmJ4x79LNpFRQqp3msa1achCmyB9qkwlGjmFTCdV5d 1ZHlnBEqrbwf97ucFayhpyHDNzgzXeo9InMSih5xysOATgBQv+z+lhBvH4/Oz8mg xtyq8XXO1Q50v5IgvfMpZlJiOwZI5p82XKlQkZQssF9Qu9QtPC89QCtEvcGc4sf7 e3PTae5qbKutRX7lUquqOcqyeXNFAl1/TeFNDTgoCMYP02PcRoXZrPhwZu2DSuVt f7cuKosnAJ14Vt3w8AbFU53HWd6+oDR5gw== -----END CERTIFICATE-----Generated at Sat Sep 26 10:18:59 2026 by rpki-client