$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/aa3eb4ef-8503-3f22-b9e9-67118de122fc.roa File: aa3eb4ef-8503-3f22-b9e9-67118de122fc.roa (raw, json) Hash identifier: rjocIlaXr0NdMdPZgJMPrri5mfadbD1sptW+op3Q39c= Subject key identifier: CF:AD:51:C6:5B:D8:67:E6:C1:CB:78:AF:6C:7E:DC:CA:35:0C:D6:DE Certificate issuer: /CN=11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf Certificate serial: 010D0C9F4328584F20F7CF80D6D7EFCBE4997280 Authority key identifier: 08:EC:40:00:FC:71:C9:4B:F2:7C:CB:EA:1A:E5:AE:C4:5A:4B:6D:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/aa3eb4ef-8503-3f22-b9e9-67118de122fc.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 401450 IP address blocks: 2602:fa1c:127::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:cf:80:d6:d7:ef:cb:e4:99:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=4c2e0036-3de3-46d2-b38a-335a768702d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7a:95:8b:da:87:7c:90:36:e5:af:6a:f0:d9: 08:10:f3:d9:17:3d:db:f6:af:c5:44:45:18:7f:f6: 4b:02:d4:59:8d:41:af:3e:20:7b:88:78:bd:8f:c4: 63:50:b4:b0:71:59:b6:00:72:07:17:55:db:98:64: 88:13:0e:34:7f:1d:7c:fc:34:5f:25:9a:5a:ff:b2: 0d:0c:91:91:18:a8:90:99:e9:52:6f:63:f3:e7:18: c6:85:63:7e:a2:64:08:5d:c7:fd:73:ed:31:22:91: 16:ae:8e:a6:d0:39:cf:6f:c2:69:0b:a2:27:d3:b6: b5:25:b1:56:08:c0:54:9a:34:a6:4c:ea:7a:b6:39: 2d:0e:ac:7b:f7:ad:e6:8c:d2:9e:9a:3d:ed:38:93: 5f:3e:b7:2f:a0:86:48:56:41:64:8c:4a:39:19:b7: 67:d4:39:5b:f3:0a:21:da:14:7d:f7:0e:b3:83:15: d3:d6:20:a4:29:b1:c7:cf:69:30:be:af:7c:b4:a6: 9d:ad:6d:b5:22:cc:8b:f4:43:72:d5:c4:cb:d7:18: 24:1a:ef:d3:bc:31:b7:ee:7f:6b:fa:2c:22:2e:61: 6c:ea:5c:e1:3a:b5:2b:1a:e3:a1:8c:f3:08:f4:0c: d9:fe:0e:02:c8:b1:0d:a2:9a:0c:2b:c8:55:f5:ca: d6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:AD:51:C6:5B:D8:67:E6:C1:CB:78:AF:6C:7E:DC:CA:35:0C:D6:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/aa3eb4ef-8503-3f22-b9e9-67118de122fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.crl X509v3 Authority Key Identifier: keyid:08:EC:40:00:FC:71:C9:4B:F2:7C:CB:EA:1A:E5:AE:C4:5A:4B:6D:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa1c:127::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:96:30:29:32:ac:4c:a5:b8:8e:a2:c6:8f:76:3a:70:d3:ed: fb:61:25:d1:82:f3:a4:c7:c7:20:32:d9:f3:4c:5a:82:c8:5a: 5d:5a:38:69:f6:12:18:8d:a0:69:21:06:5c:02:87:99:cb:60: 47:2a:52:ed:a4:8d:a6:3e:0b:05:41:17:3d:85:6d:c0:79:68: 8a:1d:f0:c9:d5:a7:b8:ae:58:0a:5b:e7:07:11:eb:d5:d6:eb: cb:45:b8:74:ad:21:b8:50:67:ae:ee:f2:c3:91:e4:43:ce:ef: af:63:8b:4c:4f:15:18:3b:c6:8d:7b:ff:5b:c6:05:a7:ab:76: 99:d3:36:ab:43:16:bc:63:64:91:26:25:c2:64:2f:88:62:77: cd:04:c5:50:dd:65:ac:10:f0:f6:1d:ab:f5:dd:10:51:0a:99: af:b9:06:9d:2a:d9:ec:5a:14:72:f2:07:83:d5:98:7f:3f:a8: 28:e7:5f:30:c5:9a:d8:dc:53:c0:57:23:12:65:2e:9f:13:dd: c2:a9:b6:20:22:b5:c7:95:01:22:dc:74:b2:7f:e0:52:2b:f3: 71:a6:5d:d9:4a:4b:e6:38:03:ad:dd:00:3e:da:e8:85:18:9c: 92:29:6d:97:01:bf:d0:e8:79:6f:b1:62:24:60:15:29:23:8b: 05:db:8c:73 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8g98+A1tfvy+SZcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFiZDFhYTAtMmI0ZS00MzQ4LThmNTgtOGE5NGU0YmYx OGJmMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NGMyZTAwMzYtM2RlMy00NmQyLWIzOGEtMzM1YTc2ODcwMmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3qVi9qHfJA25a9q8NkIEPPZFz3b9q/FREUY f/ZLAtRZjUGvPiB7iHi9j8RjULSwcVm2AHIHF1XbmGSIEw40fx18/DRfJZpa/7IN DJGRGKiQmelSb2Pz5xjGhWN+omQIXcf9c+0xIpEWro6m0DnPb8JpC6In07a1JbFW CMBUmjSmTOp6tjktDqx7963mjNKemj3tOJNfPrcvoIZIVkFkjEo5Gbdn1Dlb8woh 2hR99w6zgxXT1iCkKbHHz2kwvq98tKadrW21IsyL9ENy1cTL1xgkGu/TvDG37n9r +iwiLmFs6lzhOrUrGuOhjPMI9AzZ/g4CyLENopoMK8hV9crWoQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM+tUcZb2Gfmwct4r2x+3Mo1DNbeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMWJk MWFhMC0yYjRlLTQzNDgtOGY1OC04YTk0ZTRiZjE4YmYvYWEzZWI0ZWYtODUwMy0z ZjIyLWI5ZTktNjcxMThkZTEyMmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTFiZDFhYTAtMmI0ZS00MzQ4LThm NTgtOGE5NGU0YmYxOGJmLzExYmQxYWEwLTJiNGUtNDM0OC04ZjU4LThhOTRlNGJm MThiZi5jcmwwHwYDVR0jBBgwFoAUCOxAAPxxyUvyfMvqGuWuxFpLbQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMWJkMWFhMC0yYjRlLTQzNDgtOGY1OC04YTk0 ZTRiZjE4YmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6HAEn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKSWMCkyrEyluI6ixo92OnDT7fthJdGC86THxyAy2fNMWoLIWl1a OGn2EhiNoGkhBlwCh5nLYEcqUu2kjaY+CwVBFz2FbcB5aIod8MnVp7iuWApb5wcR 69XW68tFuHStIbhQZ67u8sOR5EPO769ji0xPFRg7xo17/1vGBaerdpnTNqtDFrxj ZJEmJcJkL4hid80ExVDdZawQ8PYdq/XdEFEKma+5Bp0q2exaFHLyB4PVmH8/qCjn XzDFmtjcU8BXIxJlLp8T3cKptiAitceVASLcdLJ/4FIr83GmXdlKS+Y4A63dAD7a 6IUYnJIpbZcBv9DoeW+xYiRgFSkjiwXbjHM= -----END CERTIFICATE-----Generated at Tue Sep 22 23:24:47 2026 by rpki-client