$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/cb8dfe46-45a8-3613-b90e-91142e177fbf.roa File: cb8dfe46-45a8-3613-b90e-91142e177fbf.roa (raw, json) Hash identifier: NbVDx388d4o91O9i19Gx5NTOvzKxRDgqZ/Y2nRm3kug= Subject key identifier: D3:03:E7:A2:C6:6B:D2:F6:48:88:32:CF:82:6E:F5:ED:F4:12:3E:B6 Certificate issuer: /CN=9caf1aed-80da-474d-8e77-0000ca0d6025 Certificate serial: 010D0C9F4328584E5A49FBD1C0D900C81E960FF8 Authority key identifier: 10:EB:39:3F:86:C8:66:53:C6:41:1E:D4:8D:97:EB:71:99:4C:E6:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/cb8dfe46-45a8-3613-b90e-91142e177fbf.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 401911 IP address blocks: 2602:f5a7::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/9caf1aed-80da-474d-8e77-0000ca0d6025.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/9caf1aed-80da-474d-8e77-0000ca0d6025.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:49:fb:d1:c0:d9:00:c8:1e:96:0f:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9caf1aed-80da-474d-8e77-0000ca0d6025 Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=8cb4694f-3ff3-4135-9c29-5ea81056942b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c7:70:9b:55:c8:5c:48:1c:0c:c7:5b:df:82: b9:38:21:f1:b1:86:47:c3:a3:ae:4b:91:d5:6d:ae: 8c:b9:cf:da:d0:16:ec:55:cc:38:8f:2a:0d:5f:63: 51:e0:56:f8:72:18:fa:33:10:7c:6a:4f:27:da:10: 93:81:e2:57:94:7a:74:57:b3:26:32:5d:42:9f:22: a4:b0:f9:c0:96:d0:5a:cd:a3:4a:54:f3:6a:a2:4c: e4:d7:74:e2:f1:d3:5a:c4:ae:6a:e2:99:bf:f1:1c: 3a:bb:af:4d:ae:dc:df:56:f5:ce:2e:75:42:96:9f: c8:63:67:63:98:2c:1f:ce:88:3b:06:42:e0:a6:1e: 47:7d:f6:e9:b2:d2:f3:28:2b:30:b8:fd:a3:1d:20: 52:03:2c:9e:36:0d:aa:77:a0:27:95:17:b9:99:48: 27:81:b9:e0:fe:ab:25:bd:4c:5d:a1:9a:ab:df:50: 2d:de:d5:bd:2b:4e:91:7d:19:9a:3a:b2:a7:0e:a0: e9:25:94:42:92:d5:5c:09:3d:63:96:86:e7:86:cb: b1:3f:28:35:0d:98:f5:b0:70:5f:93:e8:a9:f9:be: 9e:00:26:0a:64:ef:5d:6c:53:dc:32:ec:63:7c:63: 36:b2:e9:3d:bb:0b:82:47:42:fe:61:e0:72:00:82: e7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:03:E7:A2:C6:6B:D2:F6:48:88:32:CF:82:6E:F5:ED:F4:12:3E:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/cb8dfe46-45a8-3613-b90e-91142e177fbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/9caf1aed-80da-474d-8e77-0000ca0d6025.crl X509v3 Authority Key Identifier: keyid:10:EB:39:3F:86:C8:66:53:C6:41:1E:D4:8D:97:EB:71:99:4C:E6:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025.cer sbgp-ipAddrBlock: critical IPv6: 2602:f5a7::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:11:18:7e:c5:2f:fe:70:76:12:e7:24:f6:f5:c3:f7:4d:a9: 6e:52:d7:45:54:e8:9a:00:fd:99:73:92:b5:87:53:e9:cf:e7: 15:be:b1:cf:bf:25:0d:87:14:3a:ae:f5:ae:e6:ef:58:65:c4: 23:8f:31:f1:0f:ff:d4:2a:51:7e:27:97:68:f0:db:4b:12:f2: ab:44:af:9a:fe:88:a8:7b:64:5d:8b:f6:18:c2:dc:2f:aa:02: 55:1a:3c:d0:ca:77:1d:2a:29:ae:b2:0a:6e:8b:95:37:13:a8: 3d:1f:ee:8d:ab:f0:e5:5a:e1:d1:db:81:60:a6:2a:f5:9e:36: 63:0d:84:19:c8:e1:dc:2d:cd:ea:1b:72:fa:62:7d:95:22:42: e7:5e:2c:e0:65:55:7a:11:1a:11:44:c7:01:00:06:fe:a1:12: 7f:92:f7:d9:ac:e0:bd:26:92:ae:56:65:79:47:2a:ae:7d:bf: 60:ad:4f:54:80:21:4c:b3:61:52:f4:df:0d:89:4f:5f:28:ce: 3e:43:cf:68:5e:1d:b9:9d:dc:4d:d6:86:72:d4:45:6a:6f:0f: 40:4a:f5:19:50:44:df:ae:a4:78:8b:73:b1:76:7a:8f:26:d4: f9:4a:55:a4:c9:0e:b1:9b:17:14:a0:34:50:66:30:31:47:cf: 2f:22:67:15 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5aSfvRwNkAyB6WD/gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNhZjFhZWQtODBkYS00NzRkLThlNzctMDAwMGNhMGQ2 MDI1MB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk OGNiNDY5NGYtM2ZmMy00MTM1LTljMjktNWVhODEwNTY5NDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcdwm1XIXEgcDMdb34K5OCHxsYZHw6OuS5HV ba6Muc/a0BbsVcw4jyoNX2NR4Fb4chj6MxB8ak8n2hCTgeJXlHp0V7MmMl1CnyKk sPnAltBazaNKVPNqokzk13Ti8dNaxK5q4pm/8Rw6u69NrtzfVvXOLnVClp/IY2dj mCwfzog7BkLgph5HffbpstLzKCswuP2jHSBSAyyeNg2qd6AnlRe5mUgngbng/qsl vUxdoZqr31At3tW9K06RfRmaOrKnDqDpJZRCktVcCT1jlobnhsuxPyg1DZj1sHBf k+ip+b6eACYKZO9dbFPcMuxjfGM2suk9uwuCR0L+YeByAILnmQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNMD56LGa9L2SIgyz4Ju9e30Ej62MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85Y2Fm MWFlZC04MGRhLTQ3NGQtOGU3Ny0wMDAwY2EwZDYwMjUvY2I4ZGZlNDYtNDVhOC0z NjEzLWI5MGUtOTExNDJlMTc3ZmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWNhZjFhZWQtODBkYS00NzRkLThl NzctMDAwMGNhMGQ2MDI1LzljYWYxYWVkLTgwZGEtNDc0ZC04ZTc3LTAwMDBjYTBk NjAyNS5jcmwwHwYDVR0jBBgwFoAUEOs5P4bIZlPGQR7UjZfrcZlM5iswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85Y2FmMWFlZC04MGRhLTQ3NGQtOGU3Ny0wMDAw Y2EwZDYwMjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL1pwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAOhEYfsUv/nB2Euck9vXD902pblLXRVTomgD9mXOStYdT6c/nFb6x z78lDYcUOq71rubvWGXEI48x8Q//1CpRfieXaPDbSxLyq0Svmv6IqHtkXYv2GMLc L6oCVRo80Mp3HSoprrIKbouVNxOoPR/ujavw5Vrh0duBYKYq9Z42Yw2EGcjh3C3N 6hty+mJ9lSJC514s4GVVehEaEUTHAQAG/qESf5L32azgvSaSrlZleUcqrn2/YK1P VIAhTLNhUvTfDYlPXyjOPkPPaF4duZ3cTdaGctRFam8PQEr1GVBE366keItzsXZ6 jybU+UpVpMkOsZsXFKA0UGYwMUfPLyJnFQ== -----END CERTIFICATE-----Generated at Mon Jul 6 20:09:42 2026 by rpki-client