$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/802afb7f-3fde-318e-99b4-b1f707ca1b2b.roa File: 802afb7f-3fde-318e-99b4-b1f707ca1b2b.roa (raw, json) Hash identifier: 9nl4BpTkawYg9Nfw9hP8z7rieWfDVwiX2krZojEez3k= Subject key identifier: 5B:99:27:AA:B8:48:20:0C:4B:24:83:39:FE:D9:4E:53:6E:8F:27:57 Certificate issuer: /CN=ba639547-69d9-4284-b9b1-ef6cd6542aa6 Certificate serial: 010D0C9F4328584F4974A271714DA9567BDCA280 Authority key identifier: 9D:AA:D8:AB:28:D7:C6:59:C5:AA:58:E4:D7:88:95:96:3F:B5:59:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/802afb7f-3fde-318e-99b4-b1f707ca1b2b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15329 IP address blocks: 2602:f70f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/ba639547-69d9-4284-b9b1-ef6cd6542aa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/ba639547-69d9-4284-b9b1-ef6cd6542aa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:a2:71:71:4d:a9:56:7b:dc:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba639547-69d9-4284-b9b1-ef6cd6542aa6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=00ee68d7-440e-459a-a7b3-c0a0dda1ca33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8c:41:27:8f:86:e7:8a:90:b2:4e:4a:b2:1b: bd:32:18:3f:3c:01:6f:59:72:2f:19:fd:c0:30:23: 96:71:f1:08:26:55:84:48:94:47:79:e8:c4:36:c9: 77:94:e2:ee:ad:f3:b9:4a:12:a5:a4:ab:19:39:9d: 89:da:d7:1f:44:db:7f:a7:ec:46:3b:1c:8e:c8:fa: f5:16:00:d8:10:b4:00:23:07:42:f2:62:ce:bf:37: 7a:c2:cc:c0:2f:c8:b4:5a:95:ce:54:85:ef:89:59: 60:f3:2a:d8:4b:6c:9e:03:ce:82:c3:f5:3c:b3:de: b0:33:2b:04:33:04:ab:d2:92:47:bc:0a:ff:45:36: 01:83:bb:6b:10:e8:25:b4:49:ae:2a:9c:81:dc:d0: de:b7:da:fc:f1:8c:4c:ca:07:53:73:1e:f9:69:db: 42:a3:13:3a:33:fd:0f:88:a4:1c:d6:63:27:42:cf: ac:36:05:88:99:30:aa:a2:cb:e5:87:29:63:2b:95: f8:d3:12:57:eb:63:d8:37:c4:8d:1f:bd:a5:69:dc: b6:d6:c6:72:53:83:a3:20:42:99:d7:7a:7c:aa:20: 75:50:e6:55:e8:c1:4e:2f:1a:a2:94:d7:7c:39:78: bb:c7:3b:42:a3:bf:9c:77:e4:10:7a:3e:5e:65:eb: 90:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:99:27:AA:B8:48:20:0C:4B:24:83:39:FE:D9:4E:53:6E:8F:27:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/802afb7f-3fde-318e-99b4-b1f707ca1b2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/ba639547-69d9-4284-b9b1-ef6cd6542aa6.crl X509v3 Authority Key Identifier: keyid:9D:AA:D8:AB:28:D7:C6:59:C5:AA:58:E4:D7:88:95:96:3F:B5:59:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6.cer sbgp-ipAddrBlock: critical IPv6: 2602:f70f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:91:fd:4f:98:b6:85:c6:ae:61:a1:d7:ec:22:e9:12:ae:b3: c3:a9:79:ed:b3:23:40:75:9a:7c:f7:14:c7:79:a5:da:52:f6: dc:e5:c8:c0:93:0c:d4:06:bb:78:51:b7:3e:de:05:3b:05:cc: f4:04:a5:99:45:06:c2:3c:0d:96:13:f9:0f:d7:38:ae:31:e0: 55:a1:56:1b:a2:76:f4:5f:f9:77:f4:b4:88:a1:ba:88:b9:64: d8:7b:b0:8a:43:36:1d:1f:c0:45:63:a2:a4:da:6a:7e:82:64: c4:f9:04:72:22:fa:57:bc:26:5a:c3:8e:38:c1:f4:41:6d:ba: 91:8f:eb:08:87:59:ed:0c:13:12:ba:ff:b4:b0:ef:d6:fb:4a: fa:d0:62:d7:6b:b0:e2:9f:81:92:43:db:4d:5a:7b:41:9f:3a: 93:fc:07:2a:a2:be:f1:be:7b:7b:97:76:7f:fe:4f:b1:95:43: 6c:60:0b:bf:68:78:f0:56:d6:2f:ee:f6:0e:c7:4d:55:9e:8f: bc:f9:ca:a3:86:50:a4:1f:6c:be:72:36:14:13:6a:a5:e2:0f: 51:e5:0f:88:6c:a9:7c:1c:95:c5:fc:1f:0f:7e:b8:4c:1e:01: da:a9:2c:46:7f:c5:04:34:cb:96:74:6e:4a:8f:28:e0:fa:06: 6f:4c:9e:22 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdKJxcU2pVnvcooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE2Mzk1NDctNjlkOS00Mjg0LWI5YjEtZWY2Y2Q2NTQy YWE2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDBlZTY4ZDctNDQwZS00NTlhLWE3YjMtYzBhMGRkYTFjYTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIxBJ4+G54qQsk5Kshu9Mhg/PAFvWXIvGf3A MCOWcfEIJlWESJRHeejENsl3lOLurfO5ShKlpKsZOZ2J2tcfRNt/p+xGOxyOyPr1 FgDYELQAIwdC8mLOvzd6wszAL8i0WpXOVIXviVlg8yrYS2yeA86Cw/U8s96wMysE MwSr0pJHvAr/RTYBg7trEOgltEmuKpyB3NDet9r88YxMygdTcx75adtCoxM6M/0P iKQc1mMnQs+sNgWImTCqosvlhyljK5X40xJX62PYN8SNH72lady21sZyU4OjIEKZ 13p8qiB1UOZV6MFOLxqilNd8OXi7xztCo7+cd+QQej5eZeuQCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFuZJ6q4SCAMSySDOf7ZTlNujydXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iYTYz OTU0Ny02OWQ5LTQyODQtYjliMS1lZjZjZDY1NDJhYTYvODAyYWZiN2YtM2ZkZS0z MThlLTk5YjQtYjFmNzA3Y2ExYjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYmE2Mzk1NDctNjlkOS00Mjg0LWI5 YjEtZWY2Y2Q2NTQyYWE2L2JhNjM5NTQ3LTY5ZDktNDI4NC1iOWIxLWVmNmNkNjU0 MmFhNi5jcmwwHwYDVR0jBBgwFoAUnarYqyjXxlnFqljk14iVlj+1WYkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iYTYzOTU0Ny02OWQ5LTQyODQtYjliMS1lZjZj ZDY1NDJhYTYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3DwAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAyR/U+YtoXGrmGh1+wi6RKus8Opee2zI0B1mnz3FMd5pdpS9tzl yMCTDNQGu3hRtz7eBTsFzPQEpZlFBsI8DZYT+Q/XOK4x4FWhVhuidvRf+Xf0tIih uoi5ZNh7sIpDNh0fwEVjoqTaan6CZMT5BHIi+le8JlrDjjjB9EFtupGP6wiHWe0M ExK6/7Sw79b7SvrQYtdrsOKfgZJD201ae0GfOpP8ByqivvG+e3uXdn/+T7GVQ2xg C79oePBW1i/u9g7HTVWej7z5yqOGUKQfbL5yNhQTaqXiD1HlD4hsqXwclcX8Hw9+ uEweAdqpLEZ/xQQ0y5Z0bkqPKOD6Bm9MniI= -----END CERTIFICATE-----Generated at Mon Sep 28 21:29:51 2026 by rpki-client