$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/208166f4-ac19-4a7b-b285-04c22bdca094/0a09e563-5712-398a-acf2-c3b47238b882.roa File: 0a09e563-5712-398a-acf2-c3b47238b882.roa (raw, json) Hash identifier: z5eny6YHuJXXXWqexaWCW93Hr4G39WCZmDH2R5yZnMY= Subject key identifier: AE:E8:97:6D:D0:2C:71:6A:C0:E1:45:D9:D2:C9:2B:EC:16:30:B3:69 Certificate issuer: /CN=208166f4-ac19-4a7b-b285-04c22bdca094 Certificate serial: 010D0C9F4328584F49735C5E08817B8886180300 Authority key identifier: A7:D0:54:15:3F:94:EC:36:D1:BD:74:2D:73:C4:E6:57:E4:7A:0C:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/208166f4-ac19-4a7b-b285-04c22bdca094.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/208166f4-ac19-4a7b-b285-04c22bdca094/0a09e563-5712-398a-acf2-c3b47238b882.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 401711 IP address blocks: 2602:f64e::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/208166f4-ac19-4a7b-b285-04c22bdca094/208166f4-ac19-4a7b-b285-04c22bdca094.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/208166f4-ac19-4a7b-b285-04c22bdca094/208166f4-ac19-4a7b-b285-04c22bdca094.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/208166f4-ac19-4a7b-b285-04c22bdca094.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:5c:5e:08:81:7b:88:86:18:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208166f4-ac19-4a7b-b285-04c22bdca094 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bf761655-b4e6-4646-9514-aa77c485d337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c4:51:fb:c6:c5:79:99:de:a8:9e:96:69:bb: 3e:d4:f9:77:c6:bd:ec:88:b7:5c:a6:68:7b:79:fd: a9:f6:16:e5:c4:56:b2:be:0c:27:fa:fb:b8:fc:f9: 87:9e:d9:0f:4c:d4:20:da:0c:74:be:44:0d:f1:f2: bd:a2:9c:38:30:eb:5c:29:ba:47:2b:bd:eb:39:a6: 00:4b:80:cc:35:bb:5c:33:4e:08:b7:fd:0b:1f:e1: fc:69:67:33:fc:15:c6:09:17:84:0d:b9:9a:cc:4d: 15:79:99:7a:ec:37:da:fb:ef:9e:fa:0e:96:d5:cb: f1:e5:fd:a1:81:b4:0f:89:d0:e5:b2:5a:5d:b9:a9: 8b:34:cd:68:f8:61:27:7b:bf:6d:35:1f:cc:01:f1: 5e:80:0d:3b:44:fa:71:6d:47:7f:76:66:0b:37:84: f2:7f:d7:05:4b:53:f2:33:63:a4:1d:37:6a:13:a5: f6:e7:74:4c:1f:47:cc:5c:b6:46:fd:6e:39:c9:eb: 4d:0f:f8:f3:09:c7:3f:4b:9e:d2:28:0b:fa:04:06: c5:04:5f:0d:9c:2e:e2:f8:ab:47:79:d1:fd:fc:10: 66:de:00:f7:25:cc:1c:df:1a:e3:14:40:ad:33:c8: c0:c9:9c:78:92:12:d5:f5:92:67:96:51:17:a6:5a: 95:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E8:97:6D:D0:2C:71:6A:C0:E1:45:D9:D2:C9:2B:EC:16:30:B3:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/208166f4-ac19-4a7b-b285-04c22bdca094/0a09e563-5712-398a-acf2-c3b47238b882.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/208166f4-ac19-4a7b-b285-04c22bdca094/208166f4-ac19-4a7b-b285-04c22bdca094.crl X509v3 Authority Key Identifier: keyid:A7:D0:54:15:3F:94:EC:36:D1:BD:74:2D:73:C4:E6:57:E4:7A:0C:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/208166f4-ac19-4a7b-b285-04c22bdca094.cer sbgp-ipAddrBlock: critical IPv6: 2602:f64e::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:b8:8c:6f:53:0a:fb:8a:c9:20:22:b0:90:6d:19:e2:b4:fe: a9:25:39:12:b3:8d:90:22:c8:73:21:4b:f5:aa:61:8a:b0:68: 26:5e:a5:96:c6:e2:ae:71:d1:23:f4:4d:6f:8d:05:dc:50:18: 44:49:4a:f4:c5:05:eb:9d:46:f1:52:e7:5f:e1:0a:e0:6b:9b: d0:bf:85:39:04:fd:a9:dd:91:2d:99:96:05:31:9a:a4:4e:28: 32:73:41:c4:73:67:0e:bd:5f:62:6a:80:bf:24:4e:9b:55:8e: 77:5a:c5:73:3a:0e:ef:1a:af:69:6a:58:fb:40:30:9f:90:0d: ac:30:b9:98:11:6e:47:4e:4e:7a:ff:0e:a1:00:ac:01:60:15: a1:b0:dc:84:1f:38:3b:2f:d4:2b:f4:65:87:6b:dc:5d:e9:2f: e5:7e:37:8e:d8:a9:d2:79:b0:50:3f:9c:1a:49:4c:42:08:18: 3a:5d:9e:90:28:21:ad:bc:88:65:5a:26:79:c7:70:e4:31:e2: 2d:14:d9:0a:bc:80:d6:50:e5:9d:67:3e:d2:aa:b8:52:33:41: d6:96:4c:5d:1e:e3:36:f7:31:74:96:0d:b7:2b:5a:9d:c1:82: 31:6c:a0:40:ad:24:cf:47:42:34:cb:1a:6a:f8:18:1d:9c:79: 3f:1a:56:32 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9Jc1xeCIF7iIYYAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA4MTY2ZjQtYWMxOS00YTdiLWIyODUtMDRjMjJiZGNh MDk0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmY3NjE2NTUtYjRlNi00NjQ2LTk1MTQtYWE3N2M0ODVkMzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicRR+8bFeZneqJ6Wabs+1Pl3xr3siLdcpmh7 ef2p9hblxFayvgwn+vu4/PmHntkPTNQg2gx0vkQN8fK9opw4MOtcKbpHK73rOaYA S4DMNbtcM04It/0LH+H8aWcz/BXGCReEDbmazE0VeZl67Dfa+++e+g6W1cvx5f2h gbQPidDlslpduamLNM1o+GEne79tNR/MAfFegA07RPpxbUd/dmYLN4Tyf9cFS1Py M2OkHTdqE6X253RMH0fMXLZG/W45yetND/jzCcc/S57SKAv6BAbFBF8NnC7i+KtH edH9/BBm3gD3Jcwc3xrjFECtM8jAyZx4khLV9ZJnllEXplqVRQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFK7ol23QLHFqwOFF2dLJK+wWMLNpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8yMDgx NjZmNC1hYzE5LTRhN2ItYjI4NS0wNGMyMmJkY2EwOTQvMGEwOWU1NjMtNTcxMi0z OThhLWFjZjItYzNiNDcyMzhiODgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMjA4MTY2ZjQtYWMxOS00YTdiLWIy ODUtMDRjMjJiZGNhMDk0LzIwODE2NmY0LWFjMTktNGE3Yi1iMjg1LTA0YzIyYmRj YTA5NC5jcmwwHwYDVR0jBBgwFoAUp9BUFT+U7DbRvXQtc8TmV+R6DC8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8yMDgxNjZmNC1hYzE5LTRhN2ItYjI4NS0wNGMy MmJkY2EwOTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL2TgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAYriMb1MK+4rJICKwkG0Z4rT+qSU5ErONkCLIcyFL9aphirBoJl6l lsbirnHRI/RNb40F3FAYRElK9MUF651G8VLnX+EK4Gub0L+FOQT9qd2RLZmWBTGa pE4oMnNBxHNnDr1fYmqAvyROm1WOd1rFczoO7xqvaWpY+0Awn5ANrDC5mBFuR05O ev8OoQCsAWAVobDchB84Oy/UK/Rlh2vcXekv5X43jtip0nmwUD+cGklMQggYOl2e kCghrbyIZVomecdw5DHiLRTZCryA1lDlnWc+0qq4UjNB1pZMXR7jNvcxdJYNtyta ncGCMWygQK0kz0dCNMsaavgYHZx5PxpWMg== -----END CERTIFICATE-----Generated at Sun Sep 27 06:21:24 2026 by rpki-client