$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/aa7f7366-ce96-3420-b01e-2598209b268b.roa File: aa7f7366-ce96-3420-b01e-2598209b268b.roa (raw, json) Hash identifier: aJG4uNEhW17/uhq6CcWAIzf9eL8ZGm3kkVQaycZBd9w= Subject key identifier: 56:EC:B1:2D:E5:81:DC:BA:0D:19:B2:97:79:95:EB:D0:0E:8C:89:0C Certificate issuer: /CN=6d2e159b-7f9d-4fde-83eb-ff2852b127f7 Certificate serial: 010D0C9F4328584EC7A1EA158BBE4C99436F5480 Authority key identifier: 4A:82:75:D7:A7:7C:40:CB:AA:EE:BD:86:14:01:53:AC:A1:C7:5D:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/aa7f7366-ce96-3420-b01e-2598209b268b.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 401449 IP address blocks: 2602:f7c3::/40 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:ea:15:8b:be:4c:99:43:6f:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d2e159b-7f9d-4fde-83eb-ff2852b127f7 Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=c3503b09-8eb2-4f72-b0ab-5ca87d5d8ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:78:34:99:bc:4d:c1:1f:7f:c3:bf:a3:5f:55: dd:81:63:d3:83:b2:6b:de:d3:ef:b8:86:0a:96:f2: 73:bd:23:ed:c6:12:dc:83:5e:07:ab:bd:c2:b0:14: 1f:a7:08:7c:62:cc:49:f6:de:ae:cf:26:e3:e6:b0: e0:09:b8:5b:de:6b:5d:06:fc:67:eb:d6:3c:e4:39: 64:47:d6:87:40:c4:36:73:2e:68:a1:73:2e:ec:0b: b4:ce:d4:64:63:67:6f:d0:7c:a6:af:8f:39:20:86: 1b:59:92:0a:88:e5:b5:96:2c:ca:05:0b:d8:0f:9c: 97:aa:d8:20:b3:74:5d:59:4f:9d:73:27:8f:89:cb: b8:73:d9:aa:ab:20:56:79:d1:a4:08:b4:cf:08:e5: bd:cb:23:42:2b:65:68:65:3b:46:c8:6a:c4:59:23: f0:78:68:1e:d0:46:14:b8:10:ac:3b:ca:19:67:ea: c9:4a:d0:08:77:2d:98:12:be:0a:05:dd:05:cd:a4: 40:e9:a5:f6:9c:91:51:5f:93:7e:60:55:89:2b:4e: 3c:c6:aa:b0:85:a5:f2:c6:52:42:8c:13:b6:bc:c7: 4f:e1:3d:b6:7b:3b:a7:b4:a4:56:0d:af:b8:78:d0: 4a:f4:ac:78:ac:8d:93:91:39:f8:b0:90:ae:c2:6e: d8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:EC:B1:2D:E5:81:DC:BA:0D:19:B2:97:79:95:EB:D0:0E:8C:89:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/aa7f7366-ce96-3420-b01e-2598209b268b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.crl X509v3 Authority Key Identifier: keyid:4A:82:75:D7:A7:7C:40:CB:AA:EE:BD:86:14:01:53:AC:A1:C7:5D:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.cer sbgp-ipAddrBlock: critical IPv6: 2602:f7c3::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:ba:0a:4c:ae:9e:4f:74:d4:e2:1b:8a:d9:1c:98:e8:1c:fc: 18:39:ad:f9:5a:f0:7c:85:56:1a:7e:59:3b:f7:12:88:9a:70: ca:fb:4e:49:6b:55:d5:74:7b:99:cf:09:dd:10:1c:00:93:bf: 49:04:9f:07:aa:da:69:25:7a:97:d0:09:c7:7e:c7:35:e2:72: 56:a6:e2:31:34:ed:06:6a:5d:9d:1b:12:78:fc:0b:e1:0c:1b: 5b:40:9e:61:bd:fe:f0:7f:b5:60:0c:32:3f:87:10:6e:11:0f: 5a:22:1c:a8:32:7f:ed:fe:ed:ca:02:87:0e:d3:c1:b4:7b:52: 33:a0:49:9d:77:f8:d5:fd:4e:da:7f:7c:cf:d0:c9:56:d7:85: 1c:cc:5c:e2:21:03:c1:f5:7b:2a:ff:10:0e:57:20:ee:c0:e6: cc:76:3d:bf:6f:d6:b6:47:03:50:c0:a9:7f:ef:ba:65:8d:e6: c4:99:f1:e1:cf:47:39:17:c9:b4:87:99:89:ac:55:ef:c8:7f: 1f:ab:ad:00:5a:f8:a0:fb:59:75:3a:dc:ec:29:dc:a2:3b:f2: 30:58:aa:ee:1a:bf:39:8f:79:ec:00:0e:98:73:1d:45:53:f3: cb:a3:42:8f:ea:42:ff:35:cc:50:5a:35:dd:ad:50:f9:35:53: 5d:04:0a:72 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7HoeoVi75MmUNvVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQyZTE1OWItN2Y5ZC00ZmRlLTgzZWItZmYyODUyYjEy N2Y3MB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk YzM1MDNiMDktOGViMi00ZjcyLWIwYWItNWNhODdkNWQ4YWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXg0mbxNwR9/w7+jX1XdgWPTg7Jr3tPvuIYK lvJzvSPtxhLcg14Hq73CsBQfpwh8YsxJ9t6uzybj5rDgCbhb3mtdBvxn69Y85Dlk R9aHQMQ2cy5ooXMu7Au0ztRkY2dv0Hymr485IIYbWZIKiOW1lizKBQvYD5yXqtgg s3RdWU+dcyePicu4c9mqqyBWedGkCLTPCOW9yyNCK2VoZTtGyGrEWSPweGge0EYU uBCsO8oZZ+rJStAIdy2YEr4KBd0FzaRA6aX2nJFRX5N+YFWJK048xqqwhaXyxlJC jBO2vMdP4T22ezuntKRWDa+4eNBK9Kx4rI2TkTn4sJCuwm7YwwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFbssS3lgdy6DRmyl3mV69AOjIkMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82ZDJl MTU5Yi03ZjlkLTRmZGUtODNlYi1mZjI4NTJiMTI3ZjcvYWE3ZjczNjYtY2U5Ni0z NDIwLWIwMWUtMjU5ODIwOWIyNjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNmQyZTE1OWItN2Y5ZC00ZmRlLTgz ZWItZmYyODUyYjEyN2Y3LzZkMmUxNTliLTdmOWQtNGZkZS04M2ViLWZmMjg1MmIx MjdmNy5jcmwwHwYDVR0jBBgwFoAUSoJ116d8QMuq7r2GFAFTrKHHXcAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi82ZDJlMTU5Yi03ZjlkLTRmZGUtODNlYi1mZjI4 NTJiMTI3ZjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3wwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEASLoKTK6eT3TU4huK2RyY6Bz8GDmt+VrwfIVWGn5ZO/cSiJpwyvtO SWtV1XR7mc8J3RAcAJO/SQSfB6raaSV6l9AJx37HNeJyVqbiMTTtBmpdnRsSePwL 4QwbW0CeYb3+8H+1YAwyP4cQbhEPWiIcqDJ/7f7tygKHDtPBtHtSM6BJnXf41f1O 2n98z9DJVteFHMxc4iEDwfV7Kv8QDlcg7sDmzHY9v2/WtkcDUMCpf++6ZY3mxJnx 4c9HORfJtIeZiaxV78h/H6utAFr4oPtZdTrc7CncojvyMFiq7hq/OY957AAOmHMd RVPzy6NCj+pC/zXMUFo13a1Q+TVTXQQKcg== -----END CERTIFICATE-----Generated at Mon Sep 21 17:43:49 2026 by rpki-client