$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/89c1790d-3fd0-3a5f-abf1-510911db2495.roa File: 89c1790d-3fd0-3a5f-abf1-510911db2495.roa (raw, json) Hash identifier: sZxvv52CiNsc8Mp31C15jK7zsb26kCBABRmGhcqy23A= Subject key identifier: 8C:9A:48:94:76:28:7D:C0:8D:02:FC:23:89:B5:43:64:F4:4F:8B:9C Certificate issuer: /CN=eea0cb92-050e-479f-bff4-dddd68eb4e04 Certificate serial: 010D0C9F4328584F73E19CB0B875999447041400 Authority key identifier: F8:B6:CA:B8:C6:2D:14:6D:0B:16:82:3C:35:57:84:26:9C:01:0E:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/89c1790d-3fd0-3a5f-abf1-510911db2495.roa Signing time: Sat 10 Oct 2026 05:47:59 +0000 ROA not before: Sat 10 Oct 2026 05:47:59 +0000 ROA not after: Fri 08 Jan 2027 05:11:57 +0000 asID: 40806 IP address blocks: 2602:f4d9:d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:73:e1:9c:b0:b8:75:99:94:47:04:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eea0cb92-050e-479f-bff4-dddd68eb4e04 Validity Not Before: Oct 10 05:47:59 2026 GMT Not After : Jan 8 05:11:57 2027 GMT Subject: CN=9634ba8b-e9d2-4b5a-b880-093c3c52657c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:62:ed:0d:67:2b:39:00:e5:4d:cc:3f:37:a7: f4:67:d0:70:cf:28:36:bd:4f:0b:d0:c5:4a:46:1f: 2a:46:cc:9f:85:94:ec:27:6d:0c:af:5f:7e:38:a1: 04:b4:6a:d7:f3:16:ea:98:31:4a:c9:fa:43:26:ab: f7:9e:38:73:1a:de:b2:ae:ee:07:e9:8f:20:d9:49: 20:f3:5d:3a:d7:81:f2:6f:02:61:94:88:d0:0a:bc: 82:d7:cb:81:b5:07:39:eb:8e:1b:b4:58:be:98:9d: a4:03:ad:30:07:b7:ae:7f:6a:9f:55:04:0a:c7:58: a6:75:86:4a:56:1d:80:9d:1d:da:ae:29:be:6e:9b: 3e:e0:08:29:98:a4:94:d8:e6:da:a0:0a:b7:7b:32: e6:b2:be:09:1e:e3:1c:f1:85:44:7f:ed:32:79:62: 38:10:55:b0:32:bc:c1:d4:0b:31:57:6b:12:a0:d1: b5:6d:dc:4d:16:dd:ae:1f:4f:50:e2:e8:62:bd:e7: 26:79:93:ca:9c:11:5e:6d:c1:1f:21:b6:42:a7:00: 9c:1b:87:fa:44:28:3a:5c:f5:de:9a:cc:73:8b:a1: 52:5e:64:24:6d:a9:21:ae:9e:2d:c4:27:e3:9b:71: 7b:20:59:6b:a2:20:11:3e:3c:76:f4:18:83:9a:26: 91:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:9A:48:94:76:28:7D:C0:8D:02:FC:23:89:B5:43:64:F4:4F:8B:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/89c1790d-3fd0-3a5f-abf1-510911db2495.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.crl X509v3 Authority Key Identifier: keyid:F8:B6:CA:B8:C6:2D:14:6D:0B:16:82:3C:35:57:84:26:9C:01:0E:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04.cer sbgp-ipAddrBlock: critical IPv6: 2602:f4d9:d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:99:b3:85:d9:0a:cb:18:d8:1d:53:c0:ff:5f:23:d1:7a:d1: 7b:77:83:d0:8e:96:c6:56:c9:03:6f:e7:89:d4:4f:40:41:fb: ee:f1:83:cf:79:58:34:39:59:82:dc:02:d2:e7:af:b4:08:d1: 17:af:3b:6c:fa:1e:73:7b:0e:cb:b2:02:15:bc:fa:1a:fa:ae: 30:0a:8d:ca:42:7e:f1:03:c7:d7:fc:b7:07:aa:18:c7:eb:c3: 19:31:1c:2e:a7:21:e1:f2:5e:56:1d:a2:04:c6:ce:55:fd:61: 3f:bc:16:95:07:9e:a2:d3:1f:25:76:fd:a5:e3:12:43:87:2c: 19:5f:43:d0:2a:9a:a8:8d:ad:64:66:bd:73:3a:33:34:54:96: a6:b1:b1:04:be:30:03:fc:10:02:ba:75:13:1c:b7:0c:26:ad: be:ab:6d:cc:b8:6e:91:e0:3e:17:73:cf:9c:11:78:1f:37:a6: b2:13:74:22:84:86:7f:87:07:b0:c6:84:88:b2:c8:0e:15:4f: 5c:4c:89:80:c8:b5:6a:94:d6:8c:54:b1:b5:59:38:aa:ec:69: 52:f6:93:c4:2a:dd:25:d3:a2:af:11:b7:6a:83:68:5c:cc:84: 4e:bd:d6:7f:43:49:e3:ac:63:84:d8:d9:92:31:6f:bd:fe:53: fe:41:b1:65 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9z4ZywuHWZlEcEFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWVhMGNiOTItMDUwZS00NzlmLWJmZjQtZGRkZDY4ZWI0 ZTA0MB4XDTI2MTAxMDA1NDc1OVoXDTI3MDEwODA1MTE1N1owLzEtMCsGA1UEAxMk OTYzNGJhOGItZTlkMi00YjVhLWI4ODAtMDkzYzNjNTI2NTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WLtDWcrOQDlTcw/N6f0Z9Bwzyg2vU8L0MVK Rh8qRsyfhZTsJ20Mr19+OKEEtGrX8xbqmDFKyfpDJqv3njhzGt6yru4H6Y8g2Ukg 810614HybwJhlIjQCryC18uBtQc5644btFi+mJ2kA60wB7euf2qfVQQKx1imdYZK Vh2AnR3arim+bps+4AgpmKSU2ObaoAq3ezLmsr4JHuMc8YVEf+0yeWI4EFWwMrzB 1AsxV2sSoNG1bdxNFt2uH09Q4uhivecmeZPKnBFebcEfIbZCpwCcG4f6RCg6XPXe msxzi6FSXmQkbakhrp4txCfjm3F7IFlroiARPjx29BiDmiaRewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIyaSJR2KH3AjQL8I4m1Q2T0T4ucMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9lZWEw Y2I5Mi0wNTBlLTQ3OWYtYmZmNC1kZGRkNjhlYjRlMDQvODljMTc5MGQtM2ZkMC0z YTVmLWFiZjEtNTEwOTExZGIyNDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZWVhMGNiOTItMDUwZS00NzlmLWJm ZjQtZGRkZDY4ZWI0ZTA0L2VlYTBjYjkyLTA1MGUtNDc5Zi1iZmY0LWRkZGQ2OGVi NGUwNC5jcmwwHwYDVR0jBBgwFoAU+LbKuMYtFG0LFoI8NVeEJpwBDkEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9lZWEwY2I5Mi0wNTBlLTQ3OWYtYmZmNC1kZGRk NjhlYjRlMDQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL02QAN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACGZs4XZCssY2B1TwP9fI9F60Xt3g9COlsZWyQNv54nUT0BB++7x g895WDQ5WYLcAtLnr7QI0RevO2z6HnN7DsuyAhW8+hr6rjAKjcpCfvEDx9f8tweq GMfrwxkxHC6nIeHyXlYdogTGzlX9YT+8FpUHnqLTHyV2/aXjEkOHLBlfQ9AqmqiN rWRmvXM6MzRUlqaxsQS+MAP8EAK6dRMctwwmrb6rbcy4bpHgPhdzz5wReB83prIT dCKEhn+HB7DGhIiyyA4VT1xMiYDItWqU1oxUsbVZOKrsaVL2k8Qq3SXToq8Rt2qD aFzMhE691n9DSeOsY4TY2ZIxb73+U/5BsWU= -----END CERTIFICATE-----Generated at Mon Oct 12 03:58:26 2026 by rpki-client