$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/d9f9acc9-c324-373e-a2c4-e4604f56d42e.roa File: d9f9acc9-c324-373e-a2c4-e4604f56d42e.roa (raw, json) Hash identifier: aYQefnISCXu1d1bgMRYp2c/FsGrQqC3iQOXYkYi7w1c= Subject key identifier: 6A:B3:8D:98:DB:72:3B:33:63:13:F1:50:EF:0D:AF:44:B5:7A:D4:1D Certificate issuer: /CN=cf31296f-8f2f-4268-8599-4c47d25cfcf0 Certificate serial: 010D0C9F4328584F49754084BF4CAB5397052F80 Authority key identifier: FA:BA:17:48:6C:35:CD:8A:8B:3C:16:60:C4:6F:9F:58:0E:2F:5E:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/d9f9acc9-c324-373e-a2c4-e4604f56d42e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11913 IP address blocks: 2602:816:3000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:40:84:bf:4c:ab:53:97:05:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf31296f-8f2f-4268-8599-4c47d25cfcf0 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b89030ac-46c5-45ba-b895-c43a6e78b5c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ee:70:7f:77:2e:06:71:d1:53:88:c4:70:0a: 02:db:1a:96:b4:ac:00:14:0a:a4:6b:81:14:72:b4: ff:34:86:a3:f7:9c:f8:64:be:d3:13:42:fd:e5:c5: 9d:51:f2:c1:91:6b:a3:f1:a0:e8:23:f9:59:28:b8: b1:9f:bd:3a:8c:7b:35:75:a8:e2:db:c1:7c:74:fb: 7c:94:fc:e9:5c:76:e8:89:9e:4a:bb:a5:27:e0:48: 6f:d5:1d:62:f8:1c:ec:71:71:26:cf:1c:63:92:47: 41:f6:ab:7c:d5:ed:64:6f:e2:32:d9:9d:67:bc:2f: c2:85:8d:9b:2b:bf:a1:14:6e:26:64:9a:7b:51:22: 18:f3:d1:44:27:be:66:29:26:14:ba:51:c0:47:d3: cb:04:e8:b9:7b:50:ce:04:12:57:17:a4:29:cb:a7: 05:36:18:bc:39:d5:02:d8:52:73:4c:c0:c0:01:46: 39:14:e8:08:d1:49:35:95:2c:90:a4:38:e6:71:02: ec:ba:34:7a:25:a3:43:51:0b:51:33:d0:7a:37:72: 97:11:8e:fe:ae:f1:4f:b0:b0:9d:ec:4c:da:63:0c: ed:bf:48:0b:db:03:b7:ae:17:0b:5f:a6:0c:24:fd: 51:56:4c:79:b0:2f:62:39:33:99:12:64:47:4b:36: f8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B3:8D:98:DB:72:3B:33:63:13:F1:50:EF:0D:AF:44:B5:7A:D4:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/d9f9acc9-c324-373e-a2c4-e4604f56d42e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.crl X509v3 Authority Key Identifier: keyid:FA:BA:17:48:6C:35:CD:8A:8B:3C:16:60:C4:6F:9F:58:0E:2F:5E:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer sbgp-ipAddrBlock: critical IPv6: 2602:816:3000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:8b:92:d7:21:c7:0a:d3:86:94:12:bb:3b:99:b4:6d:5f:9a: 39:3b:d1:aa:46:bd:cf:f3:c5:01:6f:dc:db:db:60:5d:76:35: 67:00:93:a6:02:21:6a:eb:ec:45:d5:40:ca:df:55:43:a0:a7: 4d:4b:7d:3a:f2:6d:e9:34:62:51:37:61:16:2c:d9:29:16:d4: 69:9b:9d:6f:c4:77:de:aa:e9:b4:da:a8:ee:88:60:30:36:01: dd:1c:af:a2:b6:fa:56:e0:93:f8:29:04:2a:41:11:09:63:9d: 76:1a:cd:f5:0b:23:62:8b:79:b7:eb:bc:65:e9:f6:89:9a:1c: 3e:38:ee:a8:00:62:e6:6b:0b:5e:ec:c8:52:87:41:84:55:2c: 74:b6:d7:4c:19:f0:07:a2:d1:4c:2b:65:3c:b3:73:ef:98:7c: 59:34:54:70:e4:4f:8f:a8:a7:fe:45:ff:04:1f:09:a1:94:42: 2f:e7:05:8a:a3:96:c1:ac:fc:66:26:24:4c:ca:a6:29:3d:86: 4a:a1:0f:24:67:37:09:93:98:0f:b2:ae:da:77:5c:fa:a7:2a: 3b:cb:45:e3:d9:d0:f2:4b:9c:1a:0f:52:b2:36:b6:61:e2:29: f3:c5:57:e7:81:3c:45:f5:47:56:52:e1:63:41:50:67:1f:8e: 06:ed:1d:f6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdUCEv0yrU5cFL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YzMTI5NmYtOGYyZi00MjY4LTg1OTktNGM0N2QyNWNm Y2YwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Yjg5MDMwYWMtNDZjNS00NWJhLWI4OTUtYzQzYTZlNzhiNWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse5wf3cuBnHRU4jEcAoC2xqWtKwAFAqka4EU crT/NIaj95z4ZL7TE0L95cWdUfLBkWuj8aDoI/lZKLixn706jHs1daji28F8dPt8 lPzpXHboiZ5Ku6Un4Ehv1R1i+BzscXEmzxxjkkdB9qt81e1kb+Iy2Z1nvC/ChY2b K7+hFG4mZJp7USIY89FEJ75mKSYUulHAR9PLBOi5e1DOBBJXF6Qpy6cFNhi8OdUC 2FJzTMDAAUY5FOgI0Uk1lSyQpDjmcQLsujR6JaNDUQtRM9B6N3KXEY7+rvFPsLCd 7EzaYwztv0gL2wO3rhcLX6YMJP1RVkx5sC9iOTOZEmRHSzb4xwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGqzjZjbcjszYxPxUO8Nr0S1etQdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jZjMx Mjk2Zi04ZjJmLTQyNjgtODU5OS00YzQ3ZDI1Y2ZjZjAvZDlmOWFjYzktYzMyNC0z NzNlLWEyYzQtZTQ2MDRmNTZkNDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2YzMTI5NmYtOGYyZi00MjY4LTg1 OTktNGM0N2QyNWNmY2YwL2NmMzEyOTZmLThmMmYtNDI2OC04NTk5LTRjNDdkMjVj ZmNmMC5jcmwwHwYDVR0jBBgwFoAU+roXSGw1zYqLPBZgxG+fWA4vXmQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jZjMxMjk2Zi04ZjJmLTQyNjgtODU5OS00YzQ3 ZDI1Y2ZjZjAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIFjAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGCLktchxwrThpQSuzuZtG1fmjk70apGvc/zxQFv3NvbYF12NWcA k6YCIWrr7EXVQMrfVUOgp01LfTrybek0YlE3YRYs2SkW1GmbnW/Ed96q6bTaqO6I YDA2Ad0cr6K2+lbgk/gpBCpBEQljnXYazfULI2KLebfrvGXp9omaHD447qgAYuZr C17syFKHQYRVLHS210wZ8Aei0UwrZTyzc++YfFk0VHDkT4+op/5F/wQfCaGUQi/n BYqjlsGs/GYmJEzKpik9hkqhDyRnNwmTmA+yrtp3XPqnKjvLRePZ0PJLnBoPUrI2 tmHiKfPFV+eBPEX1R1ZS4WNBUGcfjgbtHfY= -----END CERTIFICATE-----Generated at Wed Oct 14 01:58:49 2026 by rpki-client