$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/907a2032-3d7d-36e2-bc36-8924c1c162b7.roa File: 907a2032-3d7d-36e2-bc36-8924c1c162b7.roa (raw, json) Hash identifier: d9QHrzdFDvWuRc7Fyq9kIzccKoxUfzmO+qX8WmEwMn0= Subject key identifier: 28:FA:9D:74:B8:C1:A4:8B:61:C3:83:EB:2B:59:DB:6D:10:43:97:90 Certificate issuer: /CN=9f8abfb1-5f91-4570-a775-7435d3e52012 Certificate serial: 010D0C9F4328584E640F704BC43C20667634C710 Authority key identifier: 40:25:3A:F9:1F:A1:03:19:E2:97:8A:59:30:22:60:98:D8:BB:2D:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/907a2032-3d7d-36e2-bc36-8924c1c162b7.roa Signing time: Sat 04 Jul 2026 21:00:12 +0000 ROA not before: Sat 04 Jul 2026 21:00:12 +0000 ROA not after: Fri 02 Oct 2026 21:00:12 +0000 asID: 53405 IP address blocks: 2602:2e7::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:64:0f:70:4b:c4:3c:20:66:76:34:c7:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f8abfb1-5f91-4570-a775-7435d3e52012 Validity Not Before: Jul 4 21:00:12 2026 GMT Not After : Oct 2 21:00:12 2026 GMT Subject: CN=f7f099d6-80b3-4ec7-b3a2-4c7bdacf8b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d3:c7:3b:c7:69:34:cc:b3:b6:5c:76:b1:4a: 14:d7:55:92:5d:1b:ff:42:dd:82:be:c8:ce:d5:0b: 27:49:37:4f:20:dc:c6:ff:6a:e7:37:0c:f1:41:90: 5b:d4:2c:ea:08:ae:e9:a8:3f:ce:c5:71:fb:ef:46: 53:e7:b7:00:6a:a5:d7:95:9a:da:8e:6f:5e:db:36: e7:cf:03:b2:84:02:a6:3d:e9:9c:1d:3d:c7:77:0c: 51:1e:59:73:9b:a4:2d:80:8a:f8:82:34:56:24:21: 6e:da:0a:40:c7:2b:bb:6b:46:98:bd:b8:2a:6c:6f: 87:65:76:a7:cc:ed:fe:bb:55:26:72:cd:0c:5f:28: 6e:1b:57:50:0e:21:a3:67:2c:d0:7e:20:bd:75:bf: e1:db:d0:0f:5f:b9:1a:a5:7b:2d:c5:9d:f8:08:18: fa:06:47:92:d2:9c:1b:b8:83:98:00:9f:37:69:72: b2:24:08:77:c5:66:03:04:81:e8:c3:d0:d5:22:20: 76:dd:e7:2f:6e:ba:ae:ad:0e:fa:6a:f8:fe:c7:14: 25:fe:0c:5d:bd:70:59:a5:d4:50:28:7f:73:11:f8: 10:d8:22:25:53:8d:6e:24:36:14:3a:29:4e:68:d4: e2:67:19:99:7a:ff:56:c5:71:54:4e:58:2e:c6:64: 83:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FA:9D:74:B8:C1:A4:8B:61:C3:83:EB:2B:59:DB:6D:10:43:97:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/907a2032-3d7d-36e2-bc36-8924c1c162b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.crl X509v3 Authority Key Identifier: keyid:40:25:3A:F9:1F:A1:03:19:E2:97:8A:59:30:22:60:98:D8:BB:2D:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012.cer sbgp-ipAddrBlock: critical IPv6: 2602:2e7::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:fa:10:7f:e5:19:70:17:54:b2:a1:4f:da:cf:aa:7c:34:72: 40:68:59:45:5e:ea:e9:50:67:4e:be:fe:95:9c:e1:46:f3:aa: 0d:a6:a2:17:b7:57:49:68:7c:63:75:90:77:aa:9a:30:f0:f5: 9e:64:a5:32:34:65:5d:07:b7:cf:5a:a7:58:1b:f5:b7:04:99: de:db:55:13:29:c5:5d:e0:fe:a8:38:c6:35:f3:7a:6e:85:7a: 94:72:23:30:cb:34:0a:3e:63:23:57:0e:96:40:e8:9a:78:93: 67:5f:e5:69:69:01:66:90:45:23:72:ad:d8:e5:1a:4d:a3:4c: e4:a5:f3:39:9c:2b:7e:2d:00:26:75:57:2f:7f:4d:54:69:e9: 30:15:52:82:23:5a:0e:61:be:5b:24:17:b3:41:04:b6:7a:e8: 81:47:40:1f:8c:f6:a0:2c:f8:ae:b4:0c:3f:13:70:da:ab:77: 0c:c9:af:4b:78:a0:06:ab:b5:d6:d5:8d:f0:61:05:8e:ba:86: 68:4b:cf:7a:a0:15:2d:d4:1d:28:56:07:75:2e:20:c0:88:56: bd:8d:40:6e:2c:dc:ef:28:8d:3e:7a:1d:c2:05:52:cd:07:b4: 5d:20:b5:32:e5:61:e3:86:6d:4b:51:e7:c0:80:eb:84:58:35: 55:ef:99:9c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5kD3BLxDwgZnY0xxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWY4YWJmYjEtNWY5MS00NTcwLWE3NzUtNzQzNWQzZTUy MDEyMB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk ZjdmMDk5ZDYtODBiMy00ZWM3LWIzYTItNGM3YmRhY2Y4YjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdPHO8dpNMyztlx2sUoU11WSXRv/Qt2CvsjO 1QsnSTdPINzG/2rnNwzxQZBb1CzqCK7pqD/OxXH770ZT57cAaqXXlZrajm9e2zbn zwOyhAKmPemcHT3HdwxRHllzm6QtgIr4gjRWJCFu2gpAxyu7a0aYvbgqbG+HZXan zO3+u1Umcs0MXyhuG1dQDiGjZyzQfiC9db/h29APX7kapXstxZ34CBj6BkeS0pwb uIOYAJ83aXKyJAh3xWYDBIHow9DVIiB23ecvbrqurQ76avj+xxQl/gxdvXBZpdRQ KH9zEfgQ2CIlU41uJDYUOilOaNTiZxmZev9WxXFUTlguxmSDuQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCj6nXS4waSLYcOD6ytZ220QQ5eQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Zjhh YmZiMS01ZjkxLTQ1NzAtYTc3NS03NDM1ZDNlNTIwMTIvOTA3YTIwMzItM2Q3ZC0z NmUyLWJjMzYtODkyNGMxYzE2MmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWY4YWJmYjEtNWY5MS00NTcwLWE3 NzUtNzQzNWQzZTUyMDEyLzlmOGFiZmIxLTVmOTEtNDU3MC1hNzc1LTc0MzVkM2U1 MjAxMi5jcmwwHwYDVR0jBBgwFoAUQCU6+R+hAxnil4pZMCJgmNi7LRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZjhhYmZiMS01ZjkxLTQ1NzAtYTc3NS03NDM1 ZDNlNTIwMTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgIC5wAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAAPoQf+UZcBdUsqFP2s+qfDRyQGhZRV7q6VBnTr7+lZzhRvOqDaai F7dXSWh8Y3WQd6qaMPD1nmSlMjRlXQe3z1qnWBv1twSZ3ttVEynFXeD+qDjGNfN6 boV6lHIjMMs0Cj5jI1cOlkDomniTZ1/laWkBZpBFI3Kt2OUaTaNM5KXzOZwrfi0A JnVXL39NVGnpMBVSgiNaDmG+WyQXs0EEtnrogUdAH4z2oCz4rrQMPxNw2qt3DMmv S3igBqu11tWN8GEFjrqGaEvPeqAVLdQdKFYHdS4gwIhWvY1Abizc7yiNPnodwgVS zQe0XSC1MuVh44ZtS1HnwIDrhFg1Ve+ZnA== -----END CERTIFICATE-----Generated at Tue Jul 7 20:05:56 2026 by rpki-client