$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/8ca3a1b2-d0e6-3602-8666-58a0f4e3a51f.roa File: 8ca3a1b2-d0e6-3602-8666-58a0f4e3a51f.roa (raw, json) Hash identifier: af4+mHRaxaaxKj4oWsSjCgngsCBZ2IMpw4Ty8D2sWtE= Subject key identifier: 7E:A3:F0:3B:4A:B9:B7:8C:74:9E:4A:B5:D8:09:7B:01:4D:E9:F2:14 Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F4328584AAB265185C238E99421A1A800 Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/8ca3a1b2-d0e6-3602-8666-58a0f4e3a51f.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 7782 IP address blocks: 2602:233::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:51:85:c2:38:e9:94:21:a1:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=8fcfcb29-bc7d-402f-9681-44352bccd4f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8b:10:a6:5a:13:a1:1a:0b:e9:06:db:83:46: 58:84:cb:67:68:2b:90:d1:1f:f5:26:9e:51:f9:cd: 4a:be:95:f0:e0:92:c5:95:9f:5c:2b:7a:2a:2c:10: 5a:40:f3:2d:23:4f:a3:e9:ee:45:94:4e:5e:1b:5b: 21:6f:bf:3e:89:e4:f1:63:f7:46:ec:5c:9f:79:c4: 93:fa:0d:88:5a:b8:36:3d:de:4e:62:4e:df:a9:a0: 44:7d:c9:9f:33:7a:bd:d7:0f:0e:c7:3b:42:fa:ef: 32:85:48:50:39:40:08:06:97:13:0e:cc:ad:e6:a5: 40:df:28:af:cc:5a:b3:f5:e2:50:f7:2c:eb:d3:be: f2:6e:97:72:e1:24:df:75:bd:1e:8b:97:bd:08:7d: 06:0d:af:64:93:91:9d:d0:8b:a5:f6:bb:6c:3e:6c: d5:3c:be:aa:20:61:ae:b8:9f:e6:56:a4:04:dc:b0: 65:6b:d7:7a:b2:e5:f5:ff:f8:09:3c:19:74:74:c9: df:bb:68:44:be:8f:4f:91:d9:73:92:9f:81:c8:86: 8d:b1:24:c6:0b:e5:1b:e2:4a:65:56:ef:57:1b:49: ba:5e:9c:49:5d:48:2b:5a:4d:69:9e:64:36:7b:73: 53:2b:c8:bd:6a:24:fd:ad:c5:bd:d6:48:e7:99:79: 11:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:A3:F0:3B:4A:B9:B7:8C:74:9E:4A:B5:D8:09:7B:01:4D:E9:F2:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/8ca3a1b2-d0e6-3602-8666-58a0f4e3a51f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv6: 2602:233::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:cd:e2:18:8d:5f:5b:29:53:1d:53:38:3d:0e:4d:05:73:b0: d5:2c:e8:fd:2b:82:70:c1:45:43:da:c9:a0:a7:1c:d1:ed:a6: b9:5e:46:da:65:cd:1f:16:f7:ea:48:81:30:7c:a0:c8:e1:09: ec:68:13:90:1c:dc:1b:88:bb:3e:33:1f:2e:16:49:10:aa:f1: 4d:2f:c3:b2:d8:97:83:17:1d:97:50:de:07:e7:e3:96:db:7e: 86:98:2a:0d:a0:0d:29:92:11:7b:31:f6:95:05:c3:6e:d6:36: 65:0d:e5:62:82:57:3e:6a:88:8b:d5:09:72:c8:a4:64:e5:1e: 7a:4f:ec:69:d4:e5:7a:fd:e0:35:55:4a:0b:78:ec:f4:58:26: e7:2b:59:63:5f:fd:cd:e0:fa:5f:6e:72:af:f6:dd:3d:a1:f4: c6:61:46:70:e7:31:5d:3b:79:cc:94:23:b0:70:bc:cf:14:dc: 7f:b5:e3:fc:61:03:6a:e9:0f:91:92:26:d5:bb:62:b4:2d:12: 00:c9:46:33:db:0a:d0:2c:37:ce:36:e5:78:12:bc:2f:6b:34: 86:32:8e:25:9c:65:9c:eb:6f:5a:fa:2e:d4:e6:f7:a1:80:78: 55:e6:d5:ea:48:99:0b:e3:19:55:20:ef:23:3e:b6:54:a1:e5: b5:7b:78:fa -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqrJlGFwjjplCGhqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk OGZjZmNiMjktYmM3ZC00MDJmLTk2ODEtNDQzNTJiY2NkNGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIsQploToRoL6Qbbg0ZYhMtnaCuQ0R/1Jp5R +c1KvpXw4JLFlZ9cK3oqLBBaQPMtI0+j6e5FlE5eG1shb78+ieTxY/dG7FyfecST +g2IWrg2Pd5OYk7fqaBEfcmfM3q91w8OxztC+u8yhUhQOUAIBpcTDsyt5qVA3yiv zFqz9eJQ9yzr077ybpdy4STfdb0ei5e9CH0GDa9kk5Gd0Iul9rtsPmzVPL6qIGGu uJ/mVqQE3LBla9d6suX1//gJPBl0dMnfu2hEvo9Pkdlzkp+ByIaNsSTGC+Ub4kpl Vu9XG0m6XpxJXUgrWk1pnmQ2e3NTK8i9aiT9rcW91kjnmXkRjwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFH6j8DtKubeMdJ5KtdgJewFN6fIUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvOGNhM2ExYjItZDBlNi0z NjAyLTg2NjYtNThhMGY0ZTNhNTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgICMzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA6zeIYjV9bKVMdUzg9Dk0Fc7DVLOj9K4JwwUVD2smgpxzR7aa5Xkba Zc0fFvfqSIEwfKDI4QnsaBOQHNwbiLs+Mx8uFkkQqvFNL8Oy2JeDFx2XUN4H5+OW 236GmCoNoA0pkhF7MfaVBcNu1jZlDeViglc+aoiL1QlyyKRk5R56T+xp1OV6/eA1 VUoLeOz0WCbnK1ljX/3N4PpfbnKv9t09ofTGYUZw5zFdO3nMlCOwcLzPFNx/teP8 YQNq6Q+RkibVu2K0LRIAyUYz2wrQLDfONuV4ErwvazSGMo4lnGWc629a+i7U5veh gHhV5tXqSJkL4xlVIO8jPrZUoeW1e3j6 -----END CERTIFICATE-----Generated at Mon Aug 4 15:41:57 2025 by rpki-client