$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/421215f4-435b-3ca7-982a-9ccd1454d7e6.roa File: 421215f4-435b-3ca7-982a-9ccd1454d7e6.roa (raw, json) Hash identifier: 2XYbs/gKRcckRpoITHYgCczdTwf3SupXa5Z3cxbJv1U= Subject key identifier: F0:78:45:17:61:55:D7:56:AC:CF:B8:21:A5:1D:DB:7D:A5:14:14:3A Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Certificate serial: 010D0C9F4328584F17058EDD8EE4FB5C53D20EC0 Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/421215f4-435b-3ca7-982a-9ccd1454d7e6.roa Signing time: Sun 06 Sep 2026 23:30:14 +0000 ROA not before: Sun 06 Sep 2026 23:30:14 +0000 ROA not after: Sun 06 Dec 2026 00:30:14 +0000 asID: 16740 IP address blocks: 2602:f5c1:4f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:05:8e:dd:8e:e4:fb:5c:53:d2:0e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Validity Not Before: Sep 6 23:30:14 2026 GMT Not After : Dec 6 00:30:14 2026 GMT Subject: CN=99828a84-b413-42c0-81f0-e420363446cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:98:b0:2a:62:42:ce:83:54:36:21:de:49:bb: c3:1a:b8:63:06:7b:a8:6e:22:d5:bf:bf:b9:0f:ee: 76:0d:03:5f:1c:f3:f2:62:81:07:de:67:6d:cc:e0: f9:e0:ce:c8:b5:32:d5:c3:ec:f1:44:05:01:a2:ae: 05:d3:3b:e7:75:f0:91:35:dc:91:76:5e:6d:21:9f: cf:ac:18:fd:f7:d4:df:63:c4:b0:4b:78:5c:76:70: 54:12:53:ec:79:09:64:a3:83:8e:f5:a5:92:c6:ac: 48:79:b7:fd:9a:f1:e5:c4:bc:85:2f:5b:17:b0:54: b8:23:33:af:82:1e:ec:a9:01:23:12:e4:95:13:3b: 55:60:41:54:8f:93:b9:02:24:50:25:6c:45:c9:e6: 64:f9:d0:3d:00:c7:3b:5f:55:9d:45:c5:97:a6:de: df:66:dc:24:7a:4c:5a:eb:2f:78:cf:2c:00:73:57: d9:d1:1d:b1:fa:74:2c:74:c9:28:22:2c:91:63:24: 52:a4:25:be:5c:27:7c:10:0c:30:08:6e:7c:4c:37: 26:f8:62:fe:43:49:64:ab:e0:c6:4e:36:ac:dd:9f: 86:e7:dd:f5:13:42:d4:27:7b:92:5e:b2:53:95:b4: 8b:44:6d:4c:e2:ce:62:d0:86:f1:a4:26:11:ab:22: 47:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:78:45:17:61:55:D7:56:AC:CF:B8:21:A5:1D:DB:7D:A5:14:14:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/421215f4-435b-3ca7-982a-9ccd1454d7e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl X509v3 Authority Key Identifier: keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer sbgp-ipAddrBlock: critical IPv6: 2602:f5c1:4f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:f2:c8:67:51:4c:61:a6:6c:1f:a7:36:09:32:db:23:98:8d: 91:b2:02:de:65:9a:d8:ec:3b:3a:80:8c:f9:dc:ab:10:fe:06: 23:8b:2b:3b:3d:65:bb:7c:67:4f:dd:1d:4d:4a:c3:1c:42:ba: be:bf:ab:16:98:60:4a:5a:10:f1:75:92:35:7d:d8:1f:19:03: 49:1a:7c:f6:b0:01:59:43:87:ac:3a:ce:dc:d0:a7:0e:d8:bf: 59:8f:61:04:ef:6b:d5:e0:6c:69:9d:69:ed:fc:8e:6b:35:f1: 6c:c5:ce:0b:d2:12:5b:df:4d:d0:18:08:0c:97:b6:6d:57:81: a5:da:69:28:13:43:91:e4:f3:a5:4f:85:bd:b0:c2:e1:4e:67: ae:2c:23:3a:30:08:ab:32:f5:e0:03:17:6b:df:73:fe:9f:9f: ab:57:e4:1d:fe:c7:f2:f9:d3:53:38:8e:8a:e2:3a:61:9a:9a: c3:69:18:7c:50:e1:6a:36:07:90:b2:0b:4a:b9:18:36:c6:e7: f6:e5:37:7b:fa:e7:34:33:ee:21:9f:be:c3:8e:c2:13:60:de: 81:cb:61:97:71:99:92:bb:9e:9c:f2:71:3b:d9:df:a8:81:1a: fe:34:42:83:fe:5c:f9:1e:07:e5:b3:68:50:86:eb:3c:bd:be: d3:60:4b:17 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8XBY7djuT7XFPSDsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0 MjZmMB4XDTI2MDkwNjIzMzAxNFoXDTI2MTIwNjAwMzAxNFowLzEtMCsGA1UEAxMk OTk4MjhhODQtYjQxMy00MmMwLTgxZjAtZTQyMDM2MzQ0NmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpiwKmJCzoNUNiHeSbvDGrhjBnuobiLVv7+5 D+52DQNfHPPyYoEH3mdtzOD54M7ItTLVw+zxRAUBoq4F0zvndfCRNdyRdl5tIZ/P rBj999TfY8SwS3hcdnBUElPseQlko4OO9aWSxqxIebf9mvHlxLyFL1sXsFS4IzOv gh7sqQEjEuSVEztVYEFUj5O5AiRQJWxFyeZk+dA9AMc7X1WdRcWXpt7fZtwkekxa 6y94zywAc1fZ0R2x+nQsdMkoIiyRYyRSpCW+XCd8EAwwCG58TDcm+GL+Q0lkq+DG Tjas3Z+G5931E0LUJ3uSXrJTlbSLRG1M4s5i0IbxpCYRqyJH3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPB4RRdhVddWrM+4IaUd232lFBQ6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvNDIxMjE1ZjQtNDM1Yi0z Y2E3LTk4MmEtOWNjZDE0NTRkN2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw N2Q3YTQyNmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL1wQBP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAILyyGdRTGGmbB+nNgky2yOYjZGyAt5lmtjsOzqAjPncqxD+BiOL Kzs9Zbt8Z0/dHU1KwxxCur6/qxaYYEpaEPF1kjV92B8ZA0kafPawAVlDh6w6ztzQ pw7Yv1mPYQTva9XgbGmdae38jms18WzFzgvSElvfTdAYCAyXtm1XgaXaaSgTQ5Hk 86VPhb2wwuFOZ64sIzowCKsy9eADF2vfc/6fn6tX5B3+x/L501M4joriOmGamsNp GHxQ4Wo2B5CyC0q5GDbG5/blN3v65zQz7iGfvsOOwhNg3oHLYZdxmZK7npzycTvZ 36iBGv40QoP+XPkeB+WzaFCG6zy9vtNgSxc= -----END CERTIFICATE-----Generated at Fri Sep 11 17:52:57 2026 by rpki-client