$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152/aa3b1f4e-5a24-31b6-be94-ef7f63731abb.roa File: aa3b1f4e-5a24-31b6-be94-ef7f63731abb.roa (raw, json) Hash identifier: fkxkz7tM/hZ/RaIMCD5G4h5+OHhEGljx71DhRHZiDYs= Subject key identifier: 7B:07:D0:66:03:BB:89:F5:D7:D7:89:BC:F0:73:A3:46:D4:0C:C1:63 Certificate issuer: /CN=4e424533-541a-4c27-93d7-8d76453fe152 Certificate serial: 010D0C9F4328584F53D3B83E550B9493D248C480 Authority key identifier: CB:F0:85:73:F9:51:8E:80:A5:B6:D5:EC:C0:F6:5F:D2:39:0F:41:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152/aa3b1f4e-5a24-31b6-be94-ef7f63731abb.roa Signing time: Mon 28 Sep 2026 18:14:08 +0000 ROA not before: Mon 28 Sep 2026 18:14:08 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 401036 IP address blocks: 2602:f90e::/40 maxlen: 40 2602:f90e:c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152/4e424533-541a-4c27-93d7-8d76453fe152.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152/4e424533-541a-4c27-93d7-8d76453fe152.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:d3:b8:3e:55:0b:94:93:d2:48:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e424533-541a-4c27-93d7-8d76453fe152 Validity Not Before: Sep 28 18:14:08 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=9b61188b-26b4-4bb6-8cc5-4710efee5187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:05:2a:ae:06:23:88:7f:64:cd:73:0c:f7:93: 0a:92:68:ca:7d:83:a2:46:8d:ae:90:6c:43:50:c5: 63:99:66:0b:1a:00:2d:ca:df:4d:11:29:51:32:00: be:6a:7d:a0:3d:15:47:b5:a4:be:d4:59:26:05:d5: e4:02:e0:7c:92:67:9d:db:c4:d6:8f:05:87:4b:ac: 0c:98:f3:5a:5a:ff:59:a5:d3:ea:70:9e:28:d1:14: 0f:74:99:f6:ef:c5:f8:c4:6c:b9:ed:65:0f:74:d6: db:5e:3c:f7:75:d1:b4:9d:9b:22:65:b0:46:5c:b7: 3e:bd:37:28:e3:4b:b3:9e:79:c2:44:bd:da:69:55: a4:32:af:4d:3a:d9:ac:c3:3a:97:cf:0d:70:5e:5d: cd:49:03:15:fb:3c:1c:a3:49:76:2d:b0:0d:bd:bd: d2:8f:63:35:d6:de:4f:6d:f0:a0:4d:fe:cb:0d:b1: 7d:94:57:f7:f6:8d:de:d6:bd:83:38:a6:67:42:db: 39:d8:e6:93:ef:16:bc:a0:6c:ad:6e:93:b5:c1:45: 8d:0a:a4:73:74:49:fe:1e:52:ef:2b:de:cc:0b:85: fe:92:d9:24:44:d4:77:1a:35:be:e6:6d:36:d8:2c: be:21:f1:2b:fc:98:5e:61:b4:e2:70:57:e3:23:30: 7c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:07:D0:66:03:BB:89:F5:D7:D7:89:BC:F0:73:A3:46:D4:0C:C1:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152/aa3b1f4e-5a24-31b6-be94-ef7f63731abb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152/4e424533-541a-4c27-93d7-8d76453fe152.crl X509v3 Authority Key Identifier: keyid:CB:F0:85:73:F9:51:8E:80:A5:B6:D5:EC:C0:F6:5F:D2:39:0F:41:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152.cer sbgp-ipAddrBlock: critical IPv6: 2602:f90e::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:44:31:ba:35:76:78:90:b3:97:1d:3f:f0:08:a1:a7:db:0e: 88:b9:25:d2:b4:19:b8:d4:28:a3:be:5d:08:4a:d7:a9:44:0d: 68:c5:b9:c5:a6:db:8f:40:33:ee:fa:bc:7d:c9:ad:8c:41:5e: 35:1d:c8:2a:26:1a:81:75:0c:a4:a1:ad:6c:4d:b2:94:1a:52: 81:cf:89:d8:8e:d4:f8:8d:ca:d6:ae:90:20:27:53:7b:13:e0: ab:80:7d:e5:10:2f:61:98:f3:f0:ca:3b:6d:fd:50:da:ab:70: 89:65:72:d0:96:f9:a0:ae:7b:22:95:b5:25:bc:5e:89:e3:5f: 25:f0:5d:7c:35:3f:46:ac:1c:1b:de:f3:dc:d4:12:5a:1e:15: 71:9f:12:dc:31:c6:2b:62:31:40:45:4f:a7:c7:8f:d7:46:85: a4:30:d2:a9:36:30:f9:3c:7b:93:dd:11:35:cf:ca:d1:d5:e9: 75:67:84:44:ca:0b:21:d4:43:b5:bf:bb:06:27:db:6d:c9:48: d0:0c:1b:87:df:5f:6f:d2:fd:2e:b1:77:13:fd:31:52:8d:be: f0:5b:6c:d2:1f:5a:a3:18:a5:d3:f0:c7:9c:03:f1:f4:d2:cd: 44:7a:23:5b:7b:08:10:79:5b:8d:e6:16:36:02:40:6f:b4:98: 54:92:b8:44 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9T07g+VQuUk9JIxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU0MjQ1MzMtNTQxYS00YzI3LTkzZDctOGQ3NjQ1M2Zl MTUyMB4XDTI2MDkyODE4MTQwOFoXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk OWI2MTE4OGItMjZiNC00YmI2LThjYzUtNDcxMGVmZWU1MTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAUqrgYjiH9kzXMM95MKkmjKfYOiRo2ukGxD UMVjmWYLGgAtyt9NESlRMgC+an2gPRVHtaS+1FkmBdXkAuB8kmed28TWjwWHS6wM mPNaWv9ZpdPqcJ4o0RQPdJn278X4xGy57WUPdNbbXjz3ddG0nZsiZbBGXLc+vTco 40uznnnCRL3aaVWkMq9NOtmswzqXzw1wXl3NSQMV+zwco0l2LbANvb3Sj2M11t5P bfCgTf7LDbF9lFf39o3e1r2DOKZnQts52OaT7xa8oGytbpO1wUWNCqRzdEn+HlLv K97MC4X+ktkkRNR3GjW+5m022Cy+IfEr/JheYbTicFfjIzB8hwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHsH0GYDu4n119eJvPBzo0bUDMFjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80ZTQy NDUzMy01NDFhLTRjMjctOTNkNy04ZDc2NDUzZmUxNTIvYWEzYjFmNGUtNWEyNC0z MWI2LWJlOTQtZWY3ZjYzNzMxYWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGU0MjQ1MzMtNTQxYS00YzI3LTkz ZDctOGQ3NjQ1M2ZlMTUyLzRlNDI0NTMzLTU0MWEtNGMyNy05M2Q3LThkNzY0NTNm ZTE1Mi5jcmwwHwYDVR0jBBgwFoAUy/CFc/lRjoClttXswPZf0jkPQWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80ZTQyNDUzMy01NDFhLTRjMjctOTNkNy04ZDc2 NDUzZmUxNTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5DgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAYEQxujV2eJCzlx0/8Aihp9sOiLkl0rQZuNQoo75dCErXqUQNaMW5 xabbj0Az7vq8fcmtjEFeNR3IKiYagXUMpKGtbE2ylBpSgc+J2I7U+I3K1q6QICdT exPgq4B95RAvYZjz8Mo7bf1Q2qtwiWVy0Jb5oK57IpW1JbxeieNfJfBdfDU/Rqwc G97z3NQSWh4VcZ8S3DHGK2IxQEVPp8eP10aFpDDSqTYw+Tx7k90RNc/K0dXpdWeE RMoLIdRDtb+7BifbbclI0Awbh99fb9L9LrF3E/0xUo2+8Fts0h9aoxil0/DHnAPx 9NLNRHojW3sIEHlbjeYWNgJAb7SYVJK4RA== -----END CERTIFICATE-----Generated at Sun Nov 1 13:04:44 2026 by rpki-client