$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/be063289-2e69-3acf-ad62-b42a1aa1d80d.roa File: be063289-2e69-3acf-ad62-b42a1aa1d80d.roa (raw, json) Hash identifier: z1PThTmFKL36iW1xYRmxN+rLaBPk4lXIzluoGPsGLVE= Subject key identifier: 10:E2:BE:27:BB:2A:C5:59:B2:96:21:13:93:30:B3:63:FB:18:D0:8F Certificate issuer: /CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd Certificate serial: 010D0C9F4328584F506D64B15329FB3939CAFE84 Authority key identifier: 67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/be063289-2e69-3acf-ad62-b42a1aa1d80d.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 140666 IP address blocks: 2602:fa80:30::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:64:b1:53:29:fb:39:39:ca:fe:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=3fcb863e-d3de-42a5-9e40-c4e7ef0e08e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:bf:e8:40:c4:04:b7:33:b6:f4:f7:60:97:fb: 4e:f7:58:90:d7:67:7b:fd:12:c1:e3:4d:31:ca:c6: 64:d9:04:80:70:cb:12:02:ac:54:8d:2b:40:2c:ee: 37:ca:21:10:69:59:69:a6:0a:12:33:fa:25:aa:09: e2:e8:dc:94:d9:fc:24:e0:14:ac:44:69:04:3a:09: f7:08:ac:72:75:06:03:18:0c:46:37:0d:f1:82:53: 6e:d1:a7:39:f1:39:cd:88:99:61:db:f6:b3:ee:41: 6d:85:62:9d:2c:40:c5:b5:f7:90:ac:44:4f:2a:35: 55:ef:19:a3:61:62:10:ea:5b:a2:ac:9f:e5:52:b1: 48:75:b0:e1:eb:a4:07:91:1a:99:01:9e:44:76:42: 40:93:cb:73:31:93:f0:b2:10:3c:b2:fb:9f:b5:78: dc:b5:c2:44:e2:22:42:36:ab:82:f0:84:21:ac:92: 47:0d:5f:3a:ed:80:ee:a4:18:aa:4a:42:04:be:fa: 0e:bd:3c:e2:63:60:3f:13:d7:15:bb:47:22:07:69: 64:e0:7c:87:c8:5f:f4:f0:58:6a:2e:fd:bd:64:54: e6:d7:4b:12:55:dc:df:6d:e1:f2:0c:0a:e7:88:0f: 23:e3:94:84:ac:8c:44:db:28:14:8d:21:dc:89:e2: 6f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E2:BE:27:BB:2A:C5:59:B2:96:21:13:93:30:B3:63:FB:18:D0:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/be063289-2e69-3acf-ad62-b42a1aa1d80d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl X509v3 Authority Key Identifier: keyid:67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa80:30::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:a5:73:a0:9f:36:42:97:5a:d9:fe:6d:f2:d4:a9:bc:39:0e: db:d8:f0:5c:1e:61:6f:f0:08:f8:7e:c2:ab:2a:a8:97:8d:9a: f6:ef:a4:62:c9:e3:86:2f:fe:c2:63:60:f6:49:ee:7c:b6:ff: 24:32:40:f0:72:fa:75:a9:d2:3c:06:73:29:56:66:b7:5c:a7: 66:3a:65:ae:52:e5:4c:70:73:f0:82:6e:3d:3b:52:33:6c:c1: fb:7b:b4:ae:1e:e6:99:56:2c:7f:90:ca:11:8f:42:d1:46:da: b4:0e:44:a3:86:cf:56:12:75:0d:1a:bc:5d:1e:bb:2d:ea:ac: b5:0e:f0:98:ec:51:38:bc:5d:76:ee:f8:b0:26:72:e5:fa:5f: 94:ca:1a:9f:2f:e0:62:5e:b3:46:fd:8e:00:11:6f:5a:e3:8e: 0b:4a:93:38:6d:33:4a:3d:1c:da:cf:83:00:ae:71:85:3d:a5: 1b:06:2d:56:55:a6:38:2e:e6:ec:71:f0:44:69:39:80:ec:f4: a3:fa:69:78:19:29:b6:c6:98:98:10:95:e5:d7:70:45:64:2d: c3:6c:82:f8:22:32:af:cf:86:d8:f8:15:fb:c8:dc:78:3c:a4: 86:65:a1:bb:15:a3:d0:b7:02:2d:b6:36:e0:cd:3f:30:56:d5: 18:8f:9d:b8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9QbWSxUyn7OTnK/oQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM1ZmVmZDctZjJlNS00MTZjLTkzMmEtMGQ1MmQ0MzBj M2NkMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk M2ZjYjg2M2UtZDNkZS00MmE1LTllNDAtYzRlN2VmMGUwOGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhb/oQMQEtzO29Pdgl/tO91iQ12d7/RLB400x ysZk2QSAcMsSAqxUjStALO43yiEQaVlppgoSM/olqgni6NyU2fwk4BSsRGkEOgn3 CKxydQYDGAxGNw3xglNu0ac58TnNiJlh2/az7kFthWKdLEDFtfeQrERPKjVV7xmj YWIQ6luirJ/lUrFIdbDh66QHkRqZAZ5EdkJAk8tzMZPwshA8svuftXjctcJE4iJC NquC8IQhrJJHDV867YDupBiqSkIEvvoOvTziY2A/E9cVu0ciB2lk4HyHyF/08Fhq Lv29ZFTm10sSVdzfbeHyDArniA8j45SErIxE2ygUjSHcieJvxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBDivie7KsVZspYhE5Mws2P7GNCPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMzVm ZWZkNy1mMmU1LTQxNmMtOTMyYS0wZDUyZDQzMGMzY2QvYmUwNjMyODktMmU2OS0z YWNmLWFkNjItYjQyYTFhYTFkODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjM1ZmVmZDctZjJlNS00MTZjLTkz MmEtMGQ1MmQ0MzBjM2NkL2IzNWZlZmQ3LWYyZTUtNDE2Yy05MzJhLTBkNTJkNDMw YzNjZC5jcmwwHwYDVR0jBBgwFoAUZ091vhrEcuxX36Z5sp6D+bELf9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMzVmZWZkNy1mMmU1LTQxNmMtOTMyYS0wZDUy ZDQzMGMzY2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6gAAw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAISlc6CfNkKXWtn+bfLUqbw5DtvY8FweYW/wCPh+wqsqqJeNmvbv pGLJ44Yv/sJjYPZJ7ny2/yQyQPBy+nWp0jwGcylWZrdcp2Y6Za5S5Uxwc/CCbj07 UjNswft7tK4e5plWLH+QyhGPQtFG2rQORKOGz1YSdQ0avF0euy3qrLUO8JjsUTi8 XXbu+LAmcuX6X5TKGp8v4GJes0b9jgARb1rjjgtKkzhtM0o9HNrPgwCucYU9pRsG LVZVpjgu5uxx8ERpOYDs9KP6aXgZKbbGmJgQleXXcEVkLcNsgvgiMq/Phtj4FfvI 3Hg8pIZlobsVo9C3Ai22NuDNPzBW1RiPnbg= -----END CERTIFICATE-----Generated at Wed Oct 7 17:26:25 2026 by rpki-client