$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/577cd51e-6e83-3a50-8679-c14536fe0c2d.roa File: 577cd51e-6e83-3a50-8679-c14536fe0c2d.roa (raw, json) Hash identifier: izneqjSKTq7mVRsoP35/ZHh9t4DZbA9NEGkE0EnqEoM= Subject key identifier: 47:FB:6B:A9:78:68:77:AD:6F:E1:25:A7:E1:7B:B5:FB:B8:80:8B:2A Certificate issuer: /CN=ff223998-3819-4b72-ade1-eec292b0a8d0 Certificate serial: 010D0C9F4328584F4975050CEF5AB1DD0D12CDC0 Authority key identifier: 34:64:24:77:DE:D9:26:8C:BB:AE:95:D5:64:47:F4:A8:33:DD:92:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/577cd51e-6e83-3a50-8679-c14536fe0c2d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11703 IP address blocks: 2602:f609::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:05:0c:ef:5a:b1:dd:0d:12:cd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff223998-3819-4b72-ade1-eec292b0a8d0 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a29395f2-27c8-4ee3-b996-f473714c4d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:53:06:e4:34:f0:ff:87:7f:d3:4d:da:f8:90: 16:5a:af:fa:2f:77:93:dc:b7:de:0d:c8:4f:ab:5a: 48:ca:de:99:79:2c:29:a5:36:57:0d:9d:fe:68:0f: 57:2a:a7:3a:5c:cd:6c:57:42:42:68:69:d4:c4:83: 23:f3:8a:0f:26:d6:4b:2c:ae:e8:dc:9d:45:9f:4e: 7e:9d:11:f3:98:f1:cd:99:3e:98:c1:b0:48:6a:dc: a0:8c:dc:db:2b:53:49:e5:89:2c:6e:f1:2c:3d:03: 79:e3:7e:66:c4:88:b4:fa:f4:2f:86:48:88:4c:bb: 8a:e1:bb:6f:1f:49:83:0d:c0:eb:a6:dc:11:6d:73: 4c:e4:dc:51:03:f6:44:b6:3e:aa:63:bf:59:fb:90: 79:17:f6:eb:e8:cb:57:8c:1a:60:89:19:0d:c8:45: c1:6a:1e:be:f3:28:a0:a2:3e:3e:07:1b:11:ef:1f: 85:89:ca:3b:83:1f:4f:35:37:3c:9c:a1:08:80:a9: c1:87:62:ed:6e:51:5c:fc:3f:49:70:3c:de:35:15: e8:d2:ac:44:26:46:59:9b:c9:44:30:95:46:75:33: 2f:69:38:d6:8d:2c:5f:d0:81:d7:ac:cd:23:f2:8f: 1c:6e:5f:f7:49:24:96:24:d9:d8:4c:cc:e1:55:2b: 72:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:FB:6B:A9:78:68:77:AD:6F:E1:25:A7:E1:7B:B5:FB:B8:80:8B:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/577cd51e-6e83-3a50-8679-c14536fe0c2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.crl X509v3 Authority Key Identifier: keyid:34:64:24:77:DE:D9:26:8C:BB:AE:95:D5:64:47:F4:A8:33:DD:92:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0.cer sbgp-ipAddrBlock: critical IPv6: 2602:f609::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:6a:82:66:1d:b2:dc:27:8d:17:03:64:6f:70:55:93:dd:74: 70:0c:d8:4a:74:bb:e0:aa:ab:31:08:fe:f2:4d:7d:d5:5a:35: bb:53:84:8b:b9:82:56:08:85:3d:30:08:e4:46:6a:82:62:af: 1c:07:d4:4f:e2:97:8d:ed:78:39:ec:9a:9b:58:8a:dc:e0:d4: 25:71:2a:d4:00:02:ed:fc:11:92:28:b7:72:84:67:ca:05:97: 9b:5c:79:a8:fc:4a:92:26:31:c8:ea:07:04:f6:a9:ca:b3:0f: c6:3d:22:eb:76:e3:b4:9e:40:69:1a:5d:55:e3:13:13:6b:f9: b2:a2:67:64:e9:88:fe:06:1a:a4:89:0c:c9:aa:6f:ea:95:5c: 14:11:36:30:f5:99:22:b7:13:06:2e:69:9d:b4:f6:f6:49:45: ef:94:a0:4d:d7:a1:e8:68:a3:e8:03:2e:2a:4f:0e:d4:89:4d: 41:bc:d9:40:40:cd:5f:c9:26:b0:49:9a:8f:58:05:35:dd:50: ab:4d:f3:fb:86:5f:d4:2c:01:a6:b6:65:a7:25:5f:d6:8a:5b: be:15:3a:29:60:f1:a5:e9:ae:9a:ac:90:32:41:fe:4a:00:b4: 8c:67:5f:8c:ca:27:1a:5f:70:ce:43:71:a7:e2:4f:f9:7b:9d: 82:e9:32:52 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JdQUM71qx3Q0SzcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmYyMjM5OTgtMzgxOS00YjcyLWFkZTEtZWVjMjkyYjBh OGQwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTI5Mzk1ZjItMjdjOC00ZWUzLWI5OTYtZjQ3MzcxNGM0ZDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1MG5DTw/4d/003a+JAWWq/6L3eT3LfeDchP q1pIyt6ZeSwppTZXDZ3+aA9XKqc6XM1sV0JCaGnUxIMj84oPJtZLLK7o3J1Fn05+ nRHzmPHNmT6YwbBIatygjNzbK1NJ5YksbvEsPQN5435mxIi0+vQvhkiITLuK4btv H0mDDcDrptwRbXNM5NxRA/ZEtj6qY79Z+5B5F/br6MtXjBpgiRkNyEXBah6+8yig oj4+BxsR7x+Fico7gx9PNTc8nKEIgKnBh2LtblFc/D9JcDzeNRXo0qxEJkZZm8lE MJVGdTMvaTjWjSxf0IHXrM0j8o8cbl/3SSSWJNnYTMzhVStypQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEf7a6l4aHetb+Elp+F7tfu4gIsqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZjIy Mzk5OC0zODE5LTRiNzItYWRlMS1lZWMyOTJiMGE4ZDAvNTc3Y2Q1MWUtNmU4My0z YTUwLTg2NzktYzE0NTM2ZmUwYzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmYyMjM5OTgtMzgxOS00YjcyLWFk ZTEtZWVjMjkyYjBhOGQwL2ZmMjIzOTk4LTM4MTktNGI3Mi1hZGUxLWVlYzI5MmIw YThkMC5jcmwwHwYDVR0jBBgwFoAUNGQkd97ZJoy7rpXVZEf0qDPdknkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZjIyMzk5OC0zODE5LTRiNzItYWRlMS1lZWMy OTJiMGE4ZDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL2CQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAlGqCZh2y3CeNFwNkb3BVk910cAzYSnS74KqrMQj+8k191Vo1u1OE i7mCVgiFPTAI5EZqgmKvHAfUT+KXje14Oeyam1iK3ODUJXEq1AAC7fwRkii3coRn ygWXm1x5qPxKkiYxyOoHBPapyrMPxj0i63bjtJ5AaRpdVeMTE2v5sqJnZOmI/gYa pIkMyapv6pVcFBE2MPWZIrcTBi5pnbT29klF75SgTdeh6Gij6AMuKk8O1IlNQbzZ QEDNX8kmsEmaj1gFNd1Qq03z+4Zf1CwBprZlpyVf1opbvhU6KWDxpemumqyQMkH+ SgC0jGdfjMonGl9wzkNxp+JP+XudgukyUg== -----END CERTIFICATE-----Generated at Wed Oct 28 00:44:25 2026 by rpki-client