$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/aff59bdc-f068-3ecb-a235-3ed47409a9d8.roa File: aff59bdc-f068-3ecb-a235-3ed47409a9d8.roa (raw, json) Hash identifier: br0gRTOrgIizrzKuy8J/wnT1dSPMTwapCBfFeQpP6Ro= Subject key identifier: 27:21:EE:48:53:C4:5A:4B:0D:93:4D:CC:D5:04:06:30:42:07:B1:FD Certificate issuer: /CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7 Certificate serial: 010D0C9F4328584F655D7F06BCAFE2F926563340 Authority key identifier: B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/aff59bdc-f068-3ecb-a235-3ed47409a9d8.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 61112 IP address blocks: 2602:fa4f:200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:7f:06:bc:af:e2:f9:26:56:33:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=8088397f-a238-4095-a570-cc4d4ea586fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:12:09:bd:8d:64:a1:82:6b:1e:97:03:98:72: 48:5d:70:ab:82:54:02:93:6a:81:5b:fe:45:4a:ef: 37:41:75:1c:66:8e:04:5a:ac:53:83:ff:ef:46:af: 1b:2d:af:7b:ef:f2:e5:98:49:89:c8:bb:3c:d2:8b: 22:54:91:71:9f:d8:5c:a5:e4:fe:54:da:27:d7:d4: 2d:43:30:b3:e9:86:3c:3b:60:95:21:c2:1a:23:71: b6:7d:04:29:05:2d:b5:b3:d6:6e:ed:62:ff:b2:61: f9:e3:34:21:05:0b:98:73:23:d4:e1:a6:24:a2:14: 3d:d6:9f:46:a9:19:dc:e2:71:74:05:ac:f3:e9:f1: 3c:c2:96:11:ca:db:2f:65:d3:6b:b8:f9:14:e2:5a: d6:17:e8:f0:e6:bb:1f:b7:e3:c6:a9:0b:5b:77:39: 7c:75:3f:5f:97:69:9a:21:67:44:d1:d9:37:d8:d9: da:87:98:d8:92:f4:2e:21:24:30:a0:41:2e:19:f8: 40:ca:4e:2b:41:cc:b4:f9:9e:d9:5a:a2:ea:0c:cb: 90:23:df:63:02:2f:3d:4b:13:65:8b:37:ab:03:93: f3:8a:91:3f:b0:f6:1d:23:53:0b:78:84:d0:31:a0: 57:4c:f4:ec:18:ae:e1:45:a4:26:71:c0:1e:45:7f: 91:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:21:EE:48:53:C4:5A:4B:0D:93:4D:CC:D5:04:06:30:42:07:B1:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/aff59bdc-f068-3ecb-a235-3ed47409a9d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl X509v3 Authority Key Identifier: keyid:B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa4f:200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:12:b7:58:fa:06:ba:a6:ea:ec:eb:08:af:73:ee:50:7c:22: 46:70:d4:a4:e8:df:6a:5b:43:a3:2b:67:9c:da:00:fb:ec:23: a6:67:25:f8:fb:e3:e4:f6:fc:84:b4:be:61:aa:9d:43:78:4b: 7d:7a:da:11:64:1c:3f:3f:b7:ac:18:76:87:73:6c:24:8b:e8: ec:9c:58:d8:5a:d8:56:92:ae:eb:3b:df:b2:c8:fe:f0:ea:b3: 04:2a:ac:67:14:43:c5:fa:86:0e:44:f9:94:be:a8:18:e8:db: 87:67:ec:4e:f6:ec:7a:57:40:7d:5a:0e:92:2a:f8:5b:6d:f1: c7:d4:36:5a:d1:05:f9:00:e5:51:69:38:f9:57:7c:29:e1:c4: eb:2b:8e:d6:7e:39:b1:d5:c0:bb:c7:b2:b9:f9:f5:51:18:68: e1:3d:7d:53:7b:a4:e8:b9:cd:1a:f6:0a:97:eb:49:f8:f5:f9: ea:c5:06:12:22:e0:01:b0:fa:5f:56:73:49:8b:0d:9c:71:1e: c3:79:4a:fc:53:fd:d1:8c:b5:00:42:d7:97:cf:80:a8:77:4b: 9c:a2:12:bb:02:d0:2b:67:72:b4:84:20:b8:63:45:29:f6:cc: d7:1a:87:03:4a:c0:da:9f:08:ef:22:57:a8:20:22:8f:b0:2b: 54:9c:1b:d6 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9lXX8GvK/i+SZWM0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTllOGUxYmYtOGRhNy00ZmJjLTk1ODgtNTc0OGU1NjY2 YmY3MB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk ODA4ODM5N2YtYTIzOC00MDk1LWE1NzAtY2M0ZDRlYTU4NmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxIJvY1koYJrHpcDmHJIXXCrglQCk2qBW/5F Su83QXUcZo4EWqxTg//vRq8bLa977/LlmEmJyLs80osiVJFxn9hcpeT+VNon19Qt QzCz6YY8O2CVIcIaI3G2fQQpBS21s9Zu7WL/smH54zQhBQuYcyPU4aYkohQ91p9G qRnc4nF0Bazz6fE8wpYRytsvZdNruPkU4lrWF+jw5rsft+PGqQtbdzl8dT9fl2ma IWdE0dk32Nnah5jYkvQuISQwoEEuGfhAyk4rQcy0+Z7ZWqLqDMuQI99jAi89SxNl izerA5PzipE/sPYdI1MLeITQMaBXTPTsGK7hRaQmccAeRX+RbwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCch7khTxFpLDZNNzNUEBjBCB7H9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81OWU4 ZTFiZi04ZGE3LTRmYmMtOTU4OC01NzQ4ZTU2NjZiZjcvYWZmNTliZGMtZjA2OC0z ZWNiLWEyMzUtM2VkNDc0MDlhOWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTllOGUxYmYtOGRhNy00ZmJjLTk1 ODgtNTc0OGU1NjY2YmY3LzU5ZThlMWJmLThkYTctNGZiYy05NTg4LTU3NDhlNTY2 NmJmNy5jcmwwHwYDVR0jBBgwFoAUtNZDsQeUm4ue2sZQQJEbH4XciIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81OWU4ZTFiZi04ZGE3LTRmYmMtOTU4OC01NzQ4 ZTU2NjZiZjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6TwIw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAPBK3WPoGuqbq7OsIr3PuUHwiRnDUpOjfaltDoytnnNoA++wjpmcl +Pvj5Pb8hLS+YaqdQ3hLfXraEWQcPz+3rBh2h3NsJIvo7JxY2FrYVpKu6zvfssj+ 8OqzBCqsZxRDxfqGDkT5lL6oGOjbh2fsTvbseldAfVoOkir4W23xx9Q2WtEF+QDl UWk4+Vd8KeHE6yuO1n45sdXAu8eyufn1URho4T19U3uk6LnNGvYKl+tJ+PX56sUG EiLgAbD6X1ZzSYsNnHEew3lK/FP90Yy1AELXl8+AqHdLnKISuwLQK2dytIQguGNF KfbM1xqHA0rA2p8I7yJXqCAij7ArVJwb1g== -----END CERTIFICATE-----Generated at Fri Oct 9 17:42:57 2026 by rpki-client