$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5/43008717-2d7e-32a3-82fc-5c9de8c0d7fa.roa File: 43008717-2d7e-32a3-82fc-5c9de8c0d7fa.roa (raw, json) Hash identifier: +dS8whjZKpZ/PEHFs0emS15Bo65JZt2hEhyfdy8UPfw= Subject key identifier: B9:30:D1:B5:77:8C:B0:63:11:3D:A8:71:23:0C:9C:76:15:D0:BD:29 Certificate issuer: /CN=cc8111d1-6337-43b1-8cfc-37ec42f7e5f5 Certificate serial: 010D0C9F4328584EF0DB54516C85792ADE94CA00 Authority key identifier: 8A:C6:69:3E:80:4F:6F:81:3C:29:72:30:25:85:20:73:DE:3A:7E:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5/43008717-2d7e-32a3-82fc-5c9de8c0d7fa.roa Signing time: Mon 24 Aug 2026 07:24:26 +0000 ROA not before: Mon 24 Aug 2026 07:24:26 +0000 ROA not after: Sun 22 Nov 2026 08:24:26 +0000 asID: 402799 IP address blocks: 2602:f32a:20::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:db:54:51:6c:85:79:2a:de:94:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc8111d1-6337-43b1-8cfc-37ec42f7e5f5 Validity Not Before: Aug 24 07:24:26 2026 GMT Not After : Nov 22 08:24:26 2026 GMT Subject: CN=1f28e168-6a84-4c62-bfbc-915fd20327a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:10:53:e0:86:8e:f6:77:bd:81:46:d7:48:e1: 39:b5:79:81:1c:1d:86:e1:af:ad:f7:48:5e:06:6c: 13:be:2b:ab:1d:3a:bf:4f:d4:e9:64:aa:30:0c:26: a9:c2:4d:73:ac:41:43:ad:7f:54:af:cf:ca:00:1e: 51:5d:c1:16:b6:67:02:93:7f:52:80:04:ac:89:d2: 05:54:e5:86:7d:26:cd:11:dd:89:aa:1c:31:82:38: 3f:20:d2:29:67:19:81:6d:b0:95:cb:8d:87:06:59: 33:bd:46:11:35:d3:36:b7:ab:06:43:91:ac:de:95: 7a:c1:84:cc:b1:46:d5:20:30:1d:87:af:4d:51:d7: c0:14:fc:8f:0b:42:6d:99:e0:17:cc:31:2c:43:ea: af:5e:9a:90:68:3d:95:a1:d7:22:e3:c4:01:c6:b9: 3d:87:09:10:f1:2f:f7:96:02:01:af:31:5e:0d:75: 08:f4:6a:6a:2b:17:83:40:d7:ca:90:f5:09:24:25: 29:77:69:f4:13:b3:bc:0a:d6:8e:9f:11:0e:bc:80: d5:de:fd:68:99:bd:7b:8c:eb:f2:09:ce:74:18:fe: 9d:2f:e5:03:cd:25:24:ac:73:20:85:9b:31:70:5f: b9:d1:c1:fa:70:02:76:00:5b:59:ad:26:fe:de:89: 77:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:30:D1:B5:77:8C:B0:63:11:3D:A8:71:23:0C:9C:76:15:D0:BD:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5/43008717-2d7e-32a3-82fc-5c9de8c0d7fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5.crl X509v3 Authority Key Identifier: keyid:8A:C6:69:3E:80:4F:6F:81:3C:29:72:30:25:85:20:73:DE:3A:7E:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5.cer sbgp-ipAddrBlock: critical IPv6: 2602:f32a:20::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:41:22:8d:f4:26:34:d8:2b:18:2a:14:35:80:23:62:7a:f8: 19:64:72:98:2c:b7:01:05:6b:0d:6b:05:48:7e:b4:71:3e:dd: aa:8d:a5:96:7c:27:d2:a5:1e:ba:65:b1:05:b6:b4:83:a9:fa: 3d:72:61:96:b8:55:26:da:77:a0:bb:b3:7b:67:4b:7b:a2:15: ea:33:68:b0:60:c3:ee:a6:b2:14:e5:dd:7c:bb:18:a2:77:5c: 9d:4c:55:b2:b0:31:8f:33:18:20:d0:67:34:61:a5:f2:56:aa: e2:bd:24:54:77:73:ae:4f:ee:c3:83:d9:63:7e:a5:ed:41:27: 9f:9c:b4:90:71:46:3e:b3:5d:94:f8:d9:08:73:ac:69:a9:6b: c9:04:5e:0b:74:6e:0d:42:d2:be:2d:6b:61:f0:08:64:44:fa: f0:dc:ac:7a:8a:f2:a8:79:46:26:d1:e4:ab:9c:f6:c8:e7:cd: 49:9e:39:8e:fc:ba:0e:17:a2:96:1f:c2:8a:83:b3:e8:c0:17: e4:1b:a4:1f:c0:a1:2a:e4:06:80:12:d3:1a:0e:68:04:f3:f8: 44:97:27:de:95:28:9f:18:2b:d1:7f:37:1f:17:43:ef:9e:ce: 13:f8:8b:51:de:0d:94:cf:46:74:e2:b0:b5:ab:4f:d2:88:a5: 10:dc:99:29 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7w21RRbIV5Kt6UygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M4MTExZDEtNjMzNy00M2IxLThjZmMtMzdlYzQyZjdl NWY1MB4XDTI2MDgyNDA3MjQyNloXDTI2MTEyMjA4MjQyNlowLzEtMCsGA1UEAxMk MWYyOGUxNjgtNmE4NC00YzYyLWJmYmMtOTE1ZmQyMDMyN2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhBT4IaO9ne9gUbXSOE5tXmBHB2G4a+t90he BmwTviurHTq/T9TpZKowDCapwk1zrEFDrX9Ur8/KAB5RXcEWtmcCk39SgASsidIF VOWGfSbNEd2Jqhwxgjg/INIpZxmBbbCVy42HBlkzvUYRNdM2t6sGQ5Gs3pV6wYTM sUbVIDAdh69NUdfAFPyPC0JtmeAXzDEsQ+qvXpqQaD2Vodci48QBxrk9hwkQ8S/3 lgIBrzFeDXUI9GpqKxeDQNfKkPUJJCUpd2n0E7O8CtaOnxEOvIDV3v1omb17jOvy Cc50GP6dL+UDzSUkrHMghZsxcF+50cH6cAJ2AFtZrSb+3ol33wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLkw0bV3jLBjET2ocSMMnHYV0L0pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9jYzgx MTFkMS02MzM3LTQzYjEtOGNmYy0zN2VjNDJmN2U1ZjUvNDMwMDg3MTctMmQ3ZS0z MmEzLTgyZmMtNWM5ZGU4YzBkN2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvY2M4MTExZDEtNjMzNy00M2IxLThj ZmMtMzdlYzQyZjdlNWY1L2NjODExMWQxLTYzMzctNDNiMS04Y2ZjLTM3ZWM0MmY3 ZTVmNS5jcmwwHwYDVR0jBBgwFoAUisZpPoBPb4E8KXIwJYUgc946fngwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9jYzgxMTFkMS02MzM3LTQzYjEtOGNmYy0zN2Vj NDJmN2U1ZjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgLzKgAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAZBIo30JjTYKxgqFDWAI2J6+BlkcpgstwEFaw1rBUh+tHE+3aqN pZZ8J9KlHrplsQW2tIOp+j1yYZa4VSbad6C7s3tnS3uiFeozaLBgw+6mshTl3Xy7 GKJ3XJ1MVbKwMY8zGCDQZzRhpfJWquK9JFR3c65P7sOD2WN+pe1BJ5+ctJBxRj6z XZT42QhzrGmpa8kEXgt0bg1C0r4ta2HwCGRE+vDcrHqK8qh5RibR5Kuc9sjnzUme OY78ug4XopYfwoqDs+jAF+QbpB/AoSrkBoAS0xoOaATz+ESXJ96VKJ8YK9F/Nx8X Q++ezhP4i1HeDZTPRnTisLWrT9KIpRDcmSk= -----END CERTIFICATE-----Generated at Wed Aug 26 17:25:30 2026 by rpki-client