$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/b6d01a71-1404-3909-bbb8-6b3acc6cf542.roa File: b6d01a71-1404-3909-bbb8-6b3acc6cf542.roa (raw, json) Hash identifier: KeeOVWBsAva15uhnnfmzH0CoRkyCHStwr7rOmXKtRss= Subject key identifier: AE:AC:B4:36:E5:0E:C5:84:C8:89:E6:45:6A:D0:0A:08:85:30:63:F2 Certificate issuer: /CN=afd44b9c-2312-4acb-b23e-40aaaafe2dfe Certificate serial: 010D0C9F4328584F4976A98255C6EC35EA3C9120 Authority key identifier: DD:53:C2:D4:4C:6F:01:C2:36:0A:95:11:80:42:93:50:03:58:D3:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/b6d01a71-1404-3909-bbb8-6b3acc6cf542.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 32526 IP address blocks: 2602:fa48::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:a9:82:55:c6:ec:35:ea:3c:91:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afd44b9c-2312-4acb-b23e-40aaaafe2dfe Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3b8ecc1e-5037-40a1-9540-5c2d9e7c06cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:19:5d:a0:db:9d:3c:79:44:52:6e:17:bb:3a: 84:1b:24:20:1f:dc:f1:62:40:58:d7:c1:2c:9f:82: 91:64:9e:7d:f2:90:15:3b:50:1e:46:d1:6d:0e:fe: 3c:1c:ab:4a:aa:0c:92:c9:56:8a:8e:c2:c5:8a:be: f0:fd:7e:b5:de:59:a6:b8:87:57:57:51:eb:c3:0f: 67:4d:be:7c:e1:12:1a:fb:66:fc:73:3b:d8:fe:b3: 1f:8b:bd:1c:f4:0d:d6:cc:5f:e8:23:f2:13:ae:47: 47:e9:19:ce:74:69:3a:da:d7:f0:22:f6:29:34:d8: 5d:80:ae:99:25:c9:c0:69:d3:49:4c:6a:30:db:52: fa:49:cf:61:6c:fa:83:a2:01:8b:2d:22:39:d4:fa: 45:9a:05:b9:9d:f2:92:9d:a8:a6:d6:23:13:70:d9: 51:28:53:d5:69:b3:8f:4a:2f:5d:ab:57:54:0b:45: b5:b8:b9:42:86:e1:fe:a8:61:e5:ec:1a:85:a2:69: 22:8c:2a:77:71:1d:b5:36:98:c8:1b:90:97:80:68: 43:b9:b3:26:ac:d2:a9:f7:6f:9b:95:1b:37:85:99: 1f:fc:e4:b2:89:4d:16:99:f5:7d:4c:a8:aa:7e:0d: 65:b8:cc:00:af:df:2e:f0:f8:74:a1:c8:64:b7:dc: 35:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:AC:B4:36:E5:0E:C5:84:C8:89:E6:45:6A:D0:0A:08:85:30:63:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/b6d01a71-1404-3909-bbb8-6b3acc6cf542.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.crl X509v3 Authority Key Identifier: keyid:DD:53:C2:D4:4C:6F:01:C2:36:0A:95:11:80:42:93:50:03:58:D3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa48::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:44:12:ab:0b:53:42:b0:6c:41:83:8a:ee:92:2b:50:60:93: f7:d0:06:55:f7:9c:11:7b:0a:78:b0:6d:45:ba:43:e9:43:da: 30:29:c2:55:dc:fb:26:20:79:bc:6a:2e:cd:08:76:94:6a:c0: 78:73:5a:3a:91:3e:c9:0f:1c:b0:c9:2a:e0:bd:33:d6:40:18: 40:2b:19:74:06:7d:5f:30:63:05:c6:31:9c:27:ce:82:04:53: 82:04:6e:b7:d8:da:cd:f5:f7:d7:31:37:df:25:c7:fa:fe:ed: 72:c5:ea:d0:b2:c3:22:4d:62:fa:68:eb:19:06:12:5f:09:52: 36:b8:6f:d3:cd:ae:59:ed:c7:f0:22:8d:dd:47:cb:81:47:18: fd:c5:d3:e3:2f:f8:3f:36:51:3f:5d:fc:b2:7b:39:1a:14:46: d3:4d:7c:06:19:78:27:46:13:b8:27:51:d5:b4:3b:ac:53:8a: 55:14:ab:65:9d:72:d3:e4:b7:72:17:01:0c:42:b6:62:a7:8c: 01:aa:05:6f:b6:12:90:92:92:11:b0:76:c0:3b:39:1f:2b:fb: 73:ee:fe:02:97:5d:96:68:3a:1a:9b:b4:92:ed:27:78:e6:50: c2:9c:e0:96:e7:e1:6a:79:d1:83:09:61:c8:4f:c1:ff:ed:fa: 4f:43:6f:36 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JdqmCVcbsNeo8kSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZkNDRiOWMtMjMxMi00YWNiLWIyM2UtNDBhYWFhZmUy ZGZlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2I4ZWNjMWUtNTAzNy00MGExLTk1NDAtNWMyZDllN2MwNmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBldoNudPHlEUm4XuzqEGyQgH9zxYkBY18Es n4KRZJ598pAVO1AeRtFtDv48HKtKqgySyVaKjsLFir7w/X613lmmuIdXV1Hrww9n Tb584RIa+2b8czvY/rMfi70c9A3WzF/oI/ITrkdH6RnOdGk62tfwIvYpNNhdgK6Z JcnAadNJTGow21L6Sc9hbPqDogGLLSI51PpFmgW5nfKSnaim1iMTcNlRKFPVabOP Si9dq1dUC0W1uLlChuH+qGHl7BqFomkijCp3cR21NpjIG5CXgGhDubMmrNKp92+b lRs3hZkf/OSyiU0WmfV9TKiqfg1luMwAr98u8Ph0ochkt9w10QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFK6stDblDsWEyInmRWrQCgiFMGPyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hZmQ0 NGI5Yy0yMzEyLTRhY2ItYjIzZS00MGFhYWFmZTJkZmUvYjZkMDFhNzEtMTQwNC0z OTA5LWJiYjgtNmIzYWNjNmNmNTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWZkNDRiOWMtMjMxMi00YWNiLWIy M2UtNDBhYWFhZmUyZGZlL2FmZDQ0YjljLTIzMTItNGFjYi1iMjNlLTQwYWFhYWZl MmRmZS5jcmwwHwYDVR0jBBgwFoAU3VPC1ExvAcI2CpURgEKTUANY04QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hZmQ0NGI5Yy0yMzEyLTRhY2ItYjIzZS00MGFh YWFmZTJkZmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6SAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAmUQSqwtTQrBsQYOK7pIrUGCT99AGVfecEXsKeLBtRbpD6UPaMCnC Vdz7JiB5vGouzQh2lGrAeHNaOpE+yQ8csMkq4L0z1kAYQCsZdAZ9XzBjBcYxnCfO ggRTggRut9jazfX31zE33yXH+v7tcsXq0LLDIk1i+mjrGQYSXwlSNrhv082uWe3H 8CKN3UfLgUcY/cXT4y/4PzZRP138sns5GhRG0018Bhl4J0YTuCdR1bQ7rFOKVRSr ZZ1y0+S3chcBDEK2YqeMAaoFb7YSkJKSEbB2wDs5Hyv7c+7+Apddlmg6Gpu0ku0n eOZQwpzglufhannRgwlhyE/B/+36T0NvNg== -----END CERTIFICATE-----Generated at Sun Oct 11 17:11:49 2026 by rpki-client