$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/aa7ca5fc-2ca8-3b1f-89be-923c5a72206e.roa File: aa7ca5fc-2ca8-3b1f-89be-923c5a72206e.roa (raw, json) Hash identifier: SzgZPxdaX3suWmN3thAPn0vJF1rA+2SjXXwZHpFeW9s= Subject key identifier: 1C:D0:09:5D:C8:67:3A:4F:E7:11:2E:29:B7:E9:07:90:C4:C4:56:ED Certificate issuer: /CN=7ea21a7b-596c-45f8-899e-6879815f26b1 Certificate serial: 010D0C9F4328584EFF776EA0BE498A41F2DB7240 Authority key identifier: 58:D5:D5:32:EB:10:00:C4:BF:8A:19:33:CE:EA:A3:86:2D:77:F4:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/aa7ca5fc-2ca8-3b1f-89be-923c5a72206e.roa Signing time: Sat 29 Aug 2026 13:00:12 +0000 ROA not before: Sat 29 Aug 2026 13:00:12 +0000 ROA not after: Fri 27 Nov 2026 14:00:12 +0000 asID: 16509 IP address blocks: 2620:85:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ff:77:6e:a0:be:49:8a:41:f2:db:72:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ea21a7b-596c-45f8-899e-6879815f26b1 Validity Not Before: Aug 29 13:00:12 2026 GMT Not After : Nov 27 14:00:12 2026 GMT Subject: CN=271f4151-226f-4e86-8f1f-b7ab64b24f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:80:9a:c0:5a:50:e3:66:20:04:a7:90:23:0b: 4f:97:ce:6e:87:3d:a9:fe:6c:e0:d8:6e:c2:92:f0: 64:29:64:ae:88:db:53:43:ea:6f:cf:a2:77:bc:ac: ec:49:93:e2:cb:8f:4e:73:9f:f1:2d:6a:2b:81:dc: 02:51:d3:76:a9:b9:15:45:49:eb:fc:c0:ca:7c:8f: 61:c1:9b:e8:30:60:1a:e4:0d:cf:db:c6:9e:79:74: 9e:32:b8:65:fe:19:5a:a6:ac:b7:7c:a1:12:28:b6: 2e:71:a1:de:0b:b3:fb:ee:ce:86:03:a0:9f:84:fd: 9c:4e:02:3f:21:c8:4e:48:63:26:b4:50:51:1b:2c: b9:ae:52:49:3d:85:cc:87:ee:94:8d:20:67:d3:a0: 70:ae:c4:a4:1b:9a:6b:6d:14:33:26:b0:0d:42:c1: 0a:6f:be:c3:89:ee:1d:7a:2e:9f:a2:1f:7c:c2:a0: d8:ed:43:8f:be:b1:3c:10:d7:ec:05:a1:dd:f6:72: ab:1d:d7:9d:98:f9:18:09:94:30:69:dc:8d:c0:3d: 7d:06:cd:d3:e8:43:8e:d1:5a:9a:b7:61:42:ec:eb: 8a:28:97:29:cd:d3:25:ac:34:56:83:cd:bf:54:c0: cb:f5:e6:6e:f5:8e:25:61:6c:49:33:71:21:03:b4: 45:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D0:09:5D:C8:67:3A:4F:E7:11:2E:29:B7:E9:07:90:C4:C4:56:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/aa7ca5fc-2ca8-3b1f-89be-923c5a72206e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.crl X509v3 Authority Key Identifier: keyid:58:D5:D5:32:EB:10:00:C4:BF:8A:19:33:CE:EA:A3:86:2D:77:F4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1.cer sbgp-ipAddrBlock: critical IPv6: 2620:85:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:c3:61:9a:43:73:45:4e:4a:0b:04:6a:45:99:c3:03:30:4f: 17:e7:44:05:97:2a:1c:10:57:fb:c3:a0:5e:20:98:56:df:98: e4:c8:1a:75:ea:cd:44:31:6c:34:d8:db:ea:ed:37:e0:a7:c0: 1b:49:5a:1e:c0:9f:c5:cd:ac:15:8e:85:a0:99:c0:e4:87:36: c0:db:a7:58:7b:6d:db:9b:3f:a5:59:82:00:b7:cf:e9:d4:ed: 21:22:e8:d3:ed:5f:3b:4c:f4:93:2b:f1:50:d3:55:64:66:7c: 79:42:d9:71:f6:9b:ec:16:2c:bf:78:ec:91:70:3e:72:1a:db: a7:ff:42:e4:0d:6d:56:1c:87:1c:70:f7:89:e9:06:30:46:4b: 8a:fc:50:bf:45:06:43:9d:ea:a9:f1:02:f1:7e:e6:14:22:c2: 49:19:4f:12:5c:ac:9f:a2:14:58:d8:4f:9c:24:13:c3:40:b5: 09:ce:1d:27:12:ea:7e:51:ed:53:5b:b8:dc:7b:ea:aa:fb:fb: 3f:f5:0c:cf:1e:bd:c8:f0:4f:7c:5c:98:92:7c:43:13:dc:3f: d2:47:c6:b6:e8:ae:9c:d7:b8:9c:b1:cb:57:f8:78:3f:80:22: 71:c9:a4:e8:9c:cc:8a:ec:76:c0:a7:0f:61:da:8c:64:11:21: 3e:19:94:c2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7/d26gvkmKQfLbckAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2VhMjFhN2ItNTk2Yy00NWY4LTg5OWUtNjg3OTgxNWYy NmIxMB4XDTI2MDgyOTEzMDAxMloXDTI2MTEyNzE0MDAxMlowLzEtMCsGA1UEAxMk MjcxZjQxNTEtMjI2Zi00ZTg2LThmMWYtYjdhYjY0YjI0ZjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4CawFpQ42YgBKeQIwtPl85uhz2p/mzg2G7C kvBkKWSuiNtTQ+pvz6J3vKzsSZPiy49Oc5/xLWorgdwCUdN2qbkVRUnr/MDKfI9h wZvoMGAa5A3P28aeeXSeMrhl/hlapqy3fKESKLYucaHeC7P77s6GA6CfhP2cTgI/ IchOSGMmtFBRGyy5rlJJPYXMh+6UjSBn06BwrsSkG5prbRQzJrANQsEKb77Die4d ei6foh98wqDY7UOPvrE8ENfsBaHd9nKrHdedmPkYCZQwadyNwD19Bs3T6EOO0Vqa t2FC7OuKKJcpzdMlrDRWg82/VMDL9eZu9Y4lYWxJM3EhA7RFawIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBzQCV3IZzpP5xEuKbfpB5DExFbtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWEy MWE3Yi01OTZjLTQ1ZjgtODk5ZS02ODc5ODE1ZjI2YjEvYWE3Y2E1ZmMtMmNhOC0z YjFmLTg5YmUtOTIzYzVhNzIyMDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2VhMjFhN2ItNTk2Yy00NWY4LTg5 OWUtNjg3OTgxNWYyNmIxLzdlYTIxYTdiLTU5NmMtNDVmOC04OTllLTY4Nzk4MTVm MjZiMS5jcmwwHwYDVR0jBBgwFoAUWNXVMusQAMS/ihkzzuqjhi139KkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWEyMWE3Yi01OTZjLTQ1ZjgtODk5ZS02ODc5 ODE1ZjI2YjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAhaAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF3DYZpDc0VOSgsEakWZwwMwTxfnRAWXKhwQV/vDoF4gmFbfmOTI GnXqzUQxbDTY2+rtN+CnwBtJWh7An8XNrBWOhaCZwOSHNsDbp1h7bdubP6VZggC3 z+nU7SEi6NPtXztM9JMr8VDTVWRmfHlC2XH2m+wWLL947JFwPnIa26f/QuQNbVYc hxxw94npBjBGS4r8UL9FBkOd6qnxAvF+5hQiwkkZTxJcrJ+iFFjYT5wkE8NAtQnO HScS6n5R7VNbuNx76qr7+z/1DM8evcjwT3xcmJJ8QxPcP9JHxrborpzXuJyxy1f4 eD+AInHJpOiczIrsdsCnD2HajGQRIT4ZlMI= -----END CERTIFICATE-----Generated at Thu Sep 24 15:25:26 2026 by rpki-client