$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/09db9a4d-0e69-304d-b5da-1b70837caac5.roa File: 09db9a4d-0e69-304d-b5da-1b70837caac5.roa (raw, json) Hash identifier: UVXje6ShcuC6aMqMp4Bi8y6joUiZJxeUO03VQjwdMI8= Subject key identifier: 9C:E2:2A:03:37:3B:E5:0A:70:A0:3A:F5:40:DD:9B:17:50:03:4F:0B Certificate issuer: /CN=425f73bb-63fc-4aec-8f78-14a58f92bf2e Certificate serial: 010D0C9F4328584F4986E563B72B21E5A456F900 Authority key identifier: CF:26:08:8C:5E:FC:FA:48:C6:45:88:C6:E6:0D:D6:29:F7:93:5B:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/09db9a4d-0e69-304d-b5da-1b70837caac5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397700 IP address blocks: 2602:f826::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/425f73bb-63fc-4aec-8f78-14a58f92bf2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/425f73bb-63fc-4aec-8f78-14a58f92bf2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:e5:63:b7:2b:21:e5:a4:56:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=425f73bb-63fc-4aec-8f78-14a58f92bf2e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a87b16b2-22a1-4fac-97b4-5f961ad7e2fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:14:83:47:47:f7:b4:c1:63:5d:46:67:22:a1: ae:af:f1:a3:71:a3:ad:3b:06:dd:c2:29:57:ae:be: e0:4a:e9:1e:cc:b2:2b:cb:9f:09:c6:ff:a3:56:9f: 8b:ac:d7:20:fb:59:86:7a:49:e0:8a:a7:ab:ee:d1: cf:54:28:19:c2:e5:18:2a:c0:48:2c:7e:0f:96:2c: f7:bd:5d:0e:1f:c7:8e:f0:90:e1:0b:58:78:06:1d: 9b:e5:32:94:79:39:0b:e8:27:91:83:96:a4:26:c5: 30:b9:66:64:7f:86:5e:20:74:29:c2:9d:d1:46:7e: 57:ec:02:65:10:32:39:30:88:62:69:63:5b:16:a5: 37:fc:7d:2d:ab:a5:de:08:ee:b0:7d:e4:c7:6b:5c: 59:25:cf:52:03:75:52:0c:da:7a:5a:78:3f:c9:49: 28:e3:36:a5:fb:3d:c1:c0:63:9c:c9:5c:1a:a0:3b: 90:6f:d2:38:58:3b:56:2a:e9:83:73:53:55:d6:1f: 99:c2:5f:ba:a1:f0:cc:c4:c0:e0:68:d1:af:e7:a1: 05:5f:10:8e:d6:a9:d1:42:77:ed:35:8b:18:78:08: d6:b7:f0:ac:b5:41:71:37:82:c2:fa:3d:ba:84:5b: f4:70:cb:e8:81:bc:d6:3b:2c:f6:5e:47:52:8f:e6: d8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E2:2A:03:37:3B:E5:0A:70:A0:3A:F5:40:DD:9B:17:50:03:4F:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/09db9a4d-0e69-304d-b5da-1b70837caac5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/425f73bb-63fc-4aec-8f78-14a58f92bf2e.crl X509v3 Authority Key Identifier: keyid:CF:26:08:8C:5E:FC:FA:48:C6:45:88:C6:E6:0D:D6:29:F7:93:5B:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e.cer sbgp-ipAddrBlock: critical IPv6: 2602:f826::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:af:4b:cc:dd:c0:82:58:f1:f9:1d:32:63:48:c0:05:c0:24: cd:69:97:65:2b:fe:cf:5e:37:4d:b7:fc:36:fa:20:7d:e9:cc: 57:97:e6:a7:31:ad:7b:51:79:b7:5c:66:52:36:c4:33:8d:84: 80:c3:f0:e3:a6:93:91:f8:d2:42:40:da:e1:46:6f:af:fe:9b: aa:cc:5b:96:b0:e5:1b:6b:27:af:be:4c:9e:f8:6e:04:e5:72: 2a:1f:04:2e:35:0b:65:ca:18:63:7a:ad:5f:fe:fc:8d:3f:11: 8f:7e:0b:9a:1b:82:2b:0b:22:dd:a3:3c:11:11:7c:aa:f0:42: 8c:1d:24:95:cf:ee:76:48:d3:78:06:62:7c:24:79:b3:16:4a: 3a:73:71:2c:26:68:fa:8f:ba:27:98:3d:c3:ab:4c:c8:79:dc: 5c:d4:f8:a0:67:c2:9c:ef:97:ed:9e:55:02:31:ef:12:34:b4: d2:aa:c7:78:9a:92:c5:37:d6:52:e7:b8:38:ad:4d:17:3a:e6: 67:96:1c:22:4e:1a:80:03:14:63:d3:7d:d7:67:bc:e2:1e:71: fc:c9:f8:7e:03:8b:dc:76:54:12:74:4d:ec:e5:e2:8d:a3:cd: e2:81:fe:c6:a5:d5:b6:22:8f:d8:06:87:a0:60:d7:57:46:6f: 6b:7e:c6:30 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JhuVjtysh5aRW+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDI1ZjczYmItNjNmYy00YWVjLThmNzgtMTRhNThmOTJi ZjJlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTg3YjE2YjItMjJhMS00ZmFjLTk3YjQtNWY5NjFhZDdlMmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxSDR0f3tMFjXUZnIqGur/GjcaOtOwbdwilX rr7gSukezLIry58Jxv+jVp+LrNcg+1mGekngiqer7tHPVCgZwuUYKsBILH4Pliz3 vV0OH8eO8JDhC1h4Bh2b5TKUeTkL6CeRg5akJsUwuWZkf4ZeIHQpwp3RRn5X7AJl EDI5MIhiaWNbFqU3/H0tq6XeCO6wfeTHa1xZJc9SA3VSDNp6Wng/yUko4zal+z3B wGOcyVwaoDuQb9I4WDtWKumDc1NV1h+Zwl+6ofDMxMDgaNGv56EFXxCO1qnRQnft NYsYeAjWt/CstUFxN4LC+j26hFv0cMvogbzWOyz2XkdSj+bYewIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJziKgM3O+UKcKA69UDdmxdQA08LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80MjVm NzNiYi02M2ZjLTRhZWMtOGY3OC0xNGE1OGY5MmJmMmUvMDlkYjlhNGQtMGU2OS0z MDRkLWI1ZGEtMWI3MDgzN2NhYWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDI1ZjczYmItNjNmYy00YWVjLThm NzgtMTRhNThmOTJiZjJlLzQyNWY3M2JiLTYzZmMtNGFlYy04Zjc4LTE0YTU4Zjky YmYyZS5jcmwwHwYDVR0jBBgwFoAUzyYIjF78+kjGRYjG5g3WKfeTW6gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80MjVmNzNiYi02M2ZjLTRhZWMtOGY3OC0xNGE1 OGY5MmJmMmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL4JgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAe69LzN3Agljx+R0yY0jABcAkzWmXZSv+z143Tbf8NvogfenMV5fm pzGte1F5t1xmUjbEM42EgMPw46aTkfjSQkDa4UZvr/6bqsxblrDlG2snr75Mnvhu BOVyKh8ELjULZcoYY3qtX/78jT8Rj34LmhuCKwsi3aM8ERF8qvBCjB0klc/udkjT eAZifCR5sxZKOnNxLCZo+o+6J5g9w6tMyHncXNT4oGfCnO+X7Z5VAjHvEjS00qrH eJqSxTfWUue4OK1NFzrmZ5YcIk4agAMUY9N912e84h5x/Mn4fgOL3HZUEnRN7OXi jaPN4oH+xqXVtiKP2AaHoGDXV0Zva37GMA== -----END CERTIFICATE-----Generated at Sat Sep 26 11:07:48 2026 by rpki-client