$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/8ca3a1b2-d0e6-3602-8666-58a0f4e3a51f.roa File: 8ca3a1b2-d0e6-3602-8666-58a0f4e3a51f.roa (raw, json) Hash identifier: q3iPjWcx/iCO24U9jUWmfTRIwTJ/tJ7FwkiZCgy5nI4= Subject key identifier: 9B:9F:1D:43:C3:5F:3B:5D:16:06:96:A6:87:42:73:12:03:56:DF:46 Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F4328584B8BE2172685DBAA68A008AC00 Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/8ca3a1b2-d0e6-3602-8666-58a0f4e3a51f.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 7782 IP address blocks: 2602:233::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:17:26:85:db:aa:68:a0:08:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=ad00da31-bcfb-4a09-a69f-31997b122a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:bd:e4:d4:24:14:2a:8f:0a:dd:84:72:a8:1c: 07:53:a1:7f:c0:6a:a2:4d:e1:20:dc:94:c0:b0:8f: e0:c7:51:99:74:3c:67:8c:b0:dc:e3:23:b5:b3:80: dc:a6:8f:b2:43:1e:e3:4c:d2:33:b8:70:94:84:f7: e7:9d:54:4c:36:b7:08:11:32:b7:ac:fe:d4:f2:f2: 93:0b:b6:0d:37:02:2d:9d:1e:e1:12:4f:1f:11:80: 85:f1:f7:78:c0:85:c6:9a:c6:7b:44:1d:ae:d1:d0: 25:3b:77:e0:37:82:83:75:fb:86:e3:65:6d:83:d1: e8:69:ef:0c:b8:27:1c:89:09:b0:d2:79:16:96:21: 24:80:8f:1e:97:18:e0:d2:ff:8b:96:e0:33:15:b3: 26:ab:26:2b:75:a9:76:3b:50:ee:ad:e6:29:bc:95: 0d:4a:f8:5a:c3:85:e9:66:63:a1:ee:8f:31:5c:5f: 65:08:9a:21:15:13:fa:f6:38:4b:8b:81:3a:13:f3: 40:f3:ff:26:55:2d:23:d6:4f:fd:1d:fb:2b:bc:ba: 05:36:ef:f5:2f:37:f4:c3:9c:50:62:f1:16:cd:41: 24:54:e1:f2:37:33:ec:0b:8e:3f:2f:68:99:45:a1: f1:55:f0:c1:be:6c:4d:8e:5a:73:96:69:fa:a8:37: a2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:9F:1D:43:C3:5F:3B:5D:16:06:96:A6:87:42:73:12:03:56:DF:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/8ca3a1b2-d0e6-3602-8666-58a0f4e3a51f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv6: 2602:233::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:08:23:5c:8a:cd:2d:65:2b:5b:a0:7b:46:1a:59:8e:2c:6f: 07:a1:da:58:d6:17:a1:73:2b:07:fa:38:e5:35:55:09:25:14: c7:d1:b0:b3:95:c0:26:ea:d9:8f:9f:fe:25:30:68:73:5e:4a: 06:a9:0e:c9:e9:a3:21:e3:68:ac:ee:6d:76:e3:99:a2:18:14: c1:84:bd:bd:73:8b:ec:af:ed:08:64:3f:50:70:3a:4c:93:ef: e0:63:f7:75:ec:bf:d7:99:bb:e8:c6:5b:70:43:34:a6:81:e1: 86:b5:7b:9f:76:9e:74:d4:85:91:22:f1:eb:2e:4f:90:fb:cf: cc:03:6a:fe:dc:97:b5:b1:b0:25:b1:44:93:66:a3:5c:41:a3: db:2c:1b:b7:58:fb:0b:2d:42:bc:d9:8f:ce:13:a2:07:53:8b: d8:4d:98:2f:08:ab:77:98:b9:eb:b2:b6:74:2a:3f:db:11:20: 58:65:f6:e3:2e:b8:36:4b:70:37:bc:c1:a8:1f:eb:11:ac:98: 06:3d:74:19:96:4e:6e:d0:aa:f4:e8:a4:5a:ef:85:b9:72:3c: 62:50:86:94:a3:72:c4:f4:43:ee:5b:be:e6:33:96:e4:c8:b9: 3d:6b:b3:49:22:8e:7d:96:14:e1:f9:e5:77:30:79:8b:22:c9: bd:b2:76:56 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuL4hcmhduqaKAIrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk YWQwMGRhMzEtYmNmYi00YTA5LWE2OWYtMzE5OTdiMTIyYTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr3k1CQUKo8K3YRyqBwHU6F/wGqiTeEg3JTA sI/gx1GZdDxnjLDc4yO1s4Dcpo+yQx7jTNIzuHCUhPfnnVRMNrcIETK3rP7U8vKT C7YNNwItnR7hEk8fEYCF8fd4wIXGmsZ7RB2u0dAlO3fgN4KDdfuG42Vtg9Hoae8M uCcciQmw0nkWliEkgI8elxjg0v+LluAzFbMmqyYrdal2O1DureYpvJUNSvhaw4Xp ZmOh7o8xXF9lCJohFRP69jhLi4E6E/NA8/8mVS0j1k/9HfsrvLoFNu/1Lzf0w5xQ YvEWzUEkVOHyNzPsC44/L2iZRaHxVfDBvmxNjlpzlmn6qDei+QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJufHUPDXztdFgaWpodCcxIDVt9GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvOGNhM2ExYjItZDBlNi0z NjAyLTg2NjYtNThhMGY0ZTNhNTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgICMzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAVCCNcis0tZStboHtGGlmOLG8HodpY1hehcysH+jjlNVUJJRTH0bCz lcAm6tmPn/4lMGhzXkoGqQ7J6aMh42is7m1245miGBTBhL29c4vsr+0IZD9QcDpM k+/gY/d17L/XmbvoxltwQzSmgeGGtXufdp501IWRIvHrLk+Q+8/MA2r+3Je1sbAl sUSTZqNcQaPbLBu3WPsLLUK82Y/OE6IHU4vYTZgvCKt3mLnrsrZ0Kj/bESBYZfbj Lrg2S3A3vMGoH+sRrJgGPXQZlk5u0Kr06KRa74W5cjxiUIaUo3LE9EPuW77mM5bk yLk9a7NJIo59lhTh+eV3MHmLIsm9snZW -----END CERTIFICATE-----Generated at Fri Oct 17 12:23:26 2025 by rpki-client