$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/aef7e15b-22db-303f-9943-b23451fa024d.roa File: aef7e15b-22db-303f-9943-b23451fa024d.roa (raw, json) Hash identifier: 0nHehnsjAfEiK7soIdK15uMckCuMC+l6vUn1kFQksoA= Subject key identifier: CD:71:61:1B:37:42:8A:EA:BF:E0:47:02:F0:39:DA:22:40:50:5F:58 Certificate issuer: /CN=8f0c28c0-bbce-4871-aef3-c112abc2be5d Certificate serial: 010D0C9F4328584F549D52B3BB7E1F4D27DBBDC0 Authority key identifier: FA:5F:A6:60:9D:B9:61:A1:23:A2:6F:BA:92:D1:68:1D:39:8F:6E:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/aef7e15b-22db-303f-9943-b23451fa024d.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 21665 IP address blocks: 2602:f706::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/8f0c28c0-bbce-4871-aef3-c112abc2be5d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/8f0c28c0-bbce-4871-aef3-c112abc2be5d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:52:b3:bb:7e:1f:4d:27:db:bd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0c28c0-bbce-4871-aef3-c112abc2be5d Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=97951fa2-6f58-4c5d-8bf4-aea02883a567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d8:5e:50:d3:62:03:0f:27:5b:bc:7b:1c:e4: 79:b7:db:04:25:fd:51:9b:e9:bf:38:65:39:51:e6: 15:f7:cf:9e:2e:91:ab:63:c4:db:8f:0d:ca:2a:74: 62:cc:f8:9b:1a:69:ef:d3:52:ee:7f:3d:28:9e:50: 74:82:2e:ac:1f:ea:77:44:f1:7e:af:dc:23:f2:a2: 29:8d:84:3c:e5:86:5e:0e:03:65:0f:82:b5:0b:10: d4:36:23:43:ae:4c:a3:66:a8:fa:2d:16:d9:af:9c: cf:b6:fb:46:fe:7f:8c:04:67:00:48:d4:e0:ab:9c: 9f:4e:d2:67:e8:bb:06:8b:84:3a:ea:d9:75:93:68: 38:fd:15:bc:63:41:46:09:b1:67:6e:9c:b6:12:a3: aa:66:69:2a:e6:36:10:ea:63:14:85:bf:02:61:e7: 20:a0:ad:09:37:87:7f:6a:cf:9b:4b:04:17:d4:02: 1a:6a:3e:e8:3f:cf:1e:ac:26:7d:8f:86:fc:9e:43: f0:1b:18:54:45:31:3b:61:d5:0a:69:b5:44:3f:46: 03:a0:9f:d0:44:e6:71:2c:92:32:0b:3d:11:44:47: 71:64:b8:b8:4c:4b:42:ab:ad:cd:13:e4:4d:99:33: 9c:31:1a:d2:9d:f9:a2:8f:57:61:b5:5c:a7:4e:5e: de:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:71:61:1B:37:42:8A:EA:BF:E0:47:02:F0:39:DA:22:40:50:5F:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/aef7e15b-22db-303f-9943-b23451fa024d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d/8f0c28c0-bbce-4871-aef3-c112abc2be5d.crl X509v3 Authority Key Identifier: keyid:FA:5F:A6:60:9D:B9:61:A1:23:A2:6F:BA:92:D1:68:1D:39:8F:6E:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f0c28c0-bbce-4871-aef3-c112abc2be5d.cer sbgp-ipAddrBlock: critical IPv6: 2602:f706::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:32:38:7d:07:2b:18:40:de:7e:2a:94:bc:2c:1b:0f:7e:57: 2b:e0:f8:73:74:ec:78:c8:7b:c6:49:72:5b:29:c1:d7:9a:4e: de:eb:3c:b1:08:e1:63:46:7b:8f:51:cc:83:0b:fc:27:4b:8b: 66:01:f8:15:3c:67:ed:ee:24:ab:0b:dd:b3:06:9e:c2:f0:ae: 88:9d:a9:0b:33:97:00:c4:15:e4:f1:86:32:20:33:6b:6d:74: 5d:82:4e:72:e4:3e:c2:91:1f:00:86:25:c3:d6:25:17:0a:f2: d3:59:0b:40:14:b0:80:2c:5e:59:d7:54:a0:c3:9d:16:59:6d: 95:11:40:eb:13:68:e4:cf:5c:a6:a1:78:ac:cd:e8:7b:cd:16: fb:fc:13:82:5d:84:b5:ea:8e:af:e1:31:75:1c:3d:1d:24:bc: f2:5f:54:5a:f9:91:99:dd:47:5d:c0:af:a8:c4:7e:98:97:ad: 6b:7c:63:46:59:02:53:9c:e3:da:70:f1:3b:8c:2e:4e:8a:08: 97:66:33:85:40:6e:c0:1b:3c:c6:89:4b:16:a8:99:f0:f1:63: 61:67:df:a8:0b:22:92:e6:af:9c:87:18:b7:63:81:32:7c:6e: 52:51:c7:a3:e3:34:a4:56:87:7f:24:bd:cd:3f:44:f1:4f:a8: 29:b6:b8:07 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9UnVKzu34fTSfbvcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYzI4YzAtYmJjZS00ODcxLWFlZjMtYzExMmFiYzJi ZTVkMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk OTc5NTFmYTItNmY1OC00YzVkLThiZjQtYWVhMDI4ODNhNTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdheUNNiAw8nW7x7HOR5t9sEJf1Rm+m/OGU5 UeYV98+eLpGrY8Tbjw3KKnRizPibGmnv01Lufz0onlB0gi6sH+p3RPF+r9wj8qIp jYQ85YZeDgNlD4K1CxDUNiNDrkyjZqj6LRbZr5zPtvtG/n+MBGcASNTgq5yfTtJn 6LsGi4Q66tl1k2g4/RW8Y0FGCbFnbpy2EqOqZmkq5jYQ6mMUhb8CYecgoK0JN4d/ as+bSwQX1AIaaj7oP88erCZ9j4b8nkPwGxhURTE7YdUKabVEP0YDoJ/QROZxLJIy Cz0RREdxZLi4TEtCq63NE+RNmTOcMRrSnfmij1dhtVynTl7eUwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFM1xYRs3Qorqv+BHAvA52iJAUF9YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZjBj MjhjMC1iYmNlLTQ4NzEtYWVmMy1jMTEyYWJjMmJlNWQvYWVmN2UxNWItMjJkYi0z MDNmLTk5NDMtYjIzNDUxZmEwMjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGYwYzI4YzAtYmJjZS00ODcxLWFl ZjMtYzExMmFiYzJiZTVkLzhmMGMyOGMwLWJiY2UtNDg3MS1hZWYzLWMxMTJhYmMy YmU1ZC5jcmwwHwYDVR0jBBgwFoAU+l+mYJ25YaEjom+6ktFoHTmPbhQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZjBjMjhjMC1iYmNlLTQ4NzEtYWVmMy1jMTEy YWJjMmJlNWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3BgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAhzI4fQcrGEDefiqUvCwbD35XK+D4c3TseMh7xklyWynB15pO3us8 sQjhY0Z7j1HMgwv8J0uLZgH4FTxn7e4kqwvdswaewvCuiJ2pCzOXAMQV5PGGMiAz a210XYJOcuQ+wpEfAIYlw9YlFwry01kLQBSwgCxeWddUoMOdFlltlRFA6xNo5M9c pqF4rM3oe80W+/wTgl2EteqOr+ExdRw9HSS88l9UWvmRmd1HXcCvqMR+mJeta3xj RlkCU5zj2nDxO4wuTooIl2YzhUBuwBs8xolLFqiZ8PFjYWffqAsikuavnIcYt2OB MnxuUlHHo+M0pFaHfyS9zT9E8U+oKba4Bw== -----END CERTIFICATE-----Generated at Sun Oct 11 10:23:15 2026 by rpki-client