$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/8ca3a1b2-d0e6-3602-8666-58a0f4e3a51f.roa File: 8ca3a1b2-d0e6-3602-8666-58a0f4e3a51f.roa (raw, json) Hash identifier: emgFmS5gmp7CeSScD1YRb10AoWJIS8UIdGXD0j1iPMw= Subject key identifier: 12:9E:16:D6:17:27:DB:2A:E4:13:23:73:DF:58:9C:33:35:AC:B8:81 Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F4328584ECD3720120DC62B1BC652D2C0 Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/8ca3a1b2-d0e6-3602-8666-58a0f4e3a51f.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 7782 IP address blocks: 2602:233::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:20:12:0d:c6:2b:1b:c6:52:d2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=f28b80b4-fa73-4adb-8bab-7d9fedce38c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:4a:83:29:cb:b3:95:e4:f5:36:29:f0:8e:7c: 1b:05:8b:fa:f2:c0:9c:21:cb:70:78:5f:cd:b0:df: a6:ff:da:00:44:11:d1:dc:ce:52:d8:a0:1f:39:23: 6f:b1:9f:8c:da:4a:62:b1:00:8a:b3:10:41:b6:03: 50:c3:9e:66:cb:54:7a:f5:c1:5a:99:84:cf:ca:de: 5b:ee:4e:53:e5:e6:98:3b:93:ee:07:0a:08:e6:a4: 48:f7:2a:92:8f:8b:2d:e3:11:eb:7c:62:d7:d9:a3: 6e:4a:f9:5f:c0:7d:72:7c:ae:48:c4:da:43:db:1a: 0e:a6:3a:68:95:3e:78:e0:f7:c7:08:0a:cd:69:27: df:91:47:b8:12:0a:a3:35:f7:23:2b:4e:21:9c:31: 38:c8:9a:b1:b3:76:06:76:2f:a4:68:bf:b6:b3:3c: cd:fd:4a:d9:e2:da:31:70:d8:14:24:4a:d0:dc:72: fe:65:d4:09:ff:96:a6:06:5f:6d:31:fb:a5:44:48: 9e:2e:b2:c6:c7:4a:4a:8a:7e:f3:41:ac:2d:2d:72: 11:30:d4:11:c4:ae:14:0e:cf:ca:78:49:e2:99:e8: dc:ef:68:54:36:3f:ba:0c:1e:c3:1e:be:0d:04:10: 0c:05:d8:fb:71:f2:7f:e2:9c:09:da:9e:54:ea:74: 97:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:9E:16:D6:17:27:DB:2A:E4:13:23:73:DF:58:9C:33:35:AC:B8:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/8ca3a1b2-d0e6-3602-8666-58a0f4e3a51f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv6: 2602:233::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:f6:6e:bc:a0:35:17:fa:2b:9f:ff:16:df:58:2f:b6:2f:c5: d4:c2:be:41:a8:45:33:9a:5e:4e:ea:9f:22:4e:f9:74:8c:c9: ac:06:7f:32:b5:61:2c:8f:f8:b8:f6:6a:7c:fc:06:63:e7:29: 1d:7c:a1:71:56:c3:70:8d:3f:03:54:ad:64:17:22:f2:eb:8e: 3b:22:a4:b8:b8:3a:50:7b:aa:b1:fe:8c:0f:08:8f:24:80:19: 8f:e3:08:34:c4:36:12:ca:0e:43:61:d8:22:28:3a:9c:3b:dc: 7c:9e:9e:64:8e:d6:1a:ad:a5:2f:5c:74:00:95:ad:0f:3b:4f: 19:19:36:e3:8c:55:88:1b:13:f0:f2:a6:b5:cb:13:2d:f6:18: 7d:ee:fe:5e:e4:7b:da:00:bb:e1:f4:cd:a4:9c:2f:a6:d7:6c: d2:b2:9a:b6:b4:69:87:ff:43:c7:8d:6d:5f:e7:4b:49:2c:ad: 95:a8:65:ef:d6:11:d3:41:59:ff:d4:a1:e5:a7:ec:55:9b:c4: cb:ec:79:e9:91:56:7d:46:78:05:05:79:9f:9d:2a:65:8a:bc: 1f:9f:33:6e:bd:cc:a6:bd:da:c6:76:a4:f2:0b:47:02:5e:94: fd:57:e5:f5:5f:ce:31:17:46:2a:b6:59:c8:c9:79:43:dd:9d: 31:fe:b5:e4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7NNyASDcYrG8ZS0sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk ZjI4YjgwYjQtZmE3My00YWRiLThiYWItN2Q5ZmVkY2UzOGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikqDKcuzleT1NinwjnwbBYv68sCcIctweF/N sN+m/9oARBHR3M5S2KAfOSNvsZ+M2kpisQCKsxBBtgNQw55my1R69cFamYTPyt5b 7k5T5eaYO5PuBwoI5qRI9yqSj4st4xHrfGLX2aNuSvlfwH1yfK5IxNpD2xoOpjpo lT544PfHCArNaSffkUe4EgqjNfcjK04hnDE4yJqxs3YGdi+kaL+2szzN/UrZ4tox cNgUJErQ3HL+ZdQJ/5amBl9tMfulREieLrLGx0pKin7zQawtLXIRMNQRxK4UDs/K eEnimejc72hUNj+6DB7DHr4NBBAMBdj7cfJ/4pwJ2p5U6nSXHwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBKeFtYXJ9sq5BMjc99YnDM1rLiBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvOGNhM2ExYjItZDBlNi0z NjAyLTg2NjYtNThhMGY0ZTNhNTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgICMzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAP9m68oDUX+iuf/xbfWC+2L8XUwr5BqEUzml5O6p8iTvl0jMmsBn8y tWEsj/i49mp8/AZj5ykdfKFxVsNwjT8DVK1kFyLy6447IqS4uDpQe6qx/owPCI8k gBmP4wg0xDYSyg5DYdgiKDqcO9x8np5kjtYaraUvXHQAla0PO08ZGTbjjFWIGxPw 8qa1yxMt9hh97v5e5HvaALvh9M2knC+m12zSspq2tGmH/0PHjW1f50tJLK2VqGXv 1hHTQVn/1KHlp+xVm8TL7HnpkVZ9RngFBXmfnSplirwfnzNuvcymvdrGdqTyC0cC XpT9V+X1X84xF0YqtlnIyXlD3Z0x/rXk -----END CERTIFICATE-----Generated at Sat Sep 19 11:48:12 2026 by rpki-client