$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/ddf8e00d-05ad-34ea-8108-ca71e74d4fd3.roa File: ddf8e00d-05ad-34ea-8108-ca71e74d4fd3.roa (raw, json) Hash identifier: CS3sPJaHecjiNbPKa04WGS31PewtDsgpdkUqSiZ9yWc= Subject key identifier: 9D:5E:4F:59:1E:19:4A:FA:64:41:A6:E6:A0:E6:3D:BC:EF:94:08:A6 Certificate issuer: /CN=aae465c0-2a10-495a-b7d2-2aa048b286a0 Certificate serial: 010D0C9F4328584F348274EE507E70DE4F9C9D80 Authority key identifier: AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/ddf8e00d-05ad-34ea-8108-ca71e74d4fd3.roa Signing time: Thu 17 Sep 2026 13:00:12 +0000 ROA not before: Thu 17 Sep 2026 13:00:12 +0000 ROA not after: Wed 16 Dec 2026 14:00:12 +0000 asID: 10911 IP address blocks: 2600:c00:2:3::/64 maxlen: 64 2600:c00:1002::/64 maxlen: 64 2600:c00:1002:3::/64 maxlen: 64 2600:c00:1002:4::/64 maxlen: 64 2600:c02:b002:12::/64 maxlen: 64 2600:c02:b002:13::/64 maxlen: 64 2600:c04:e002:2::/64 maxlen: 64 2600:c05:3002:5::/64 maxlen: 64 2600:c05:3002:6::/64 maxlen: 64 2600:c0e:1002::/64 maxlen: 64 2600:c0e:7002:b::/64 maxlen: 64 2600:c12:6002:e::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:34:82:74:ee:50:7e:70:de:4f:9c:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aae465c0-2a10-495a-b7d2-2aa048b286a0 Validity Not Before: Sep 17 13:00:12 2026 GMT Not After : Dec 16 14:00:12 2026 GMT Subject: CN=3bc145fe-956b-461e-bcab-1a7e73925b0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:aa:f3:4e:b9:0c:95:b0:ce:ab:04:31:85:f9: 76:81:b2:9e:5f:7c:2b:72:72:49:e0:60:74:d9:12: 5c:26:b0:63:fe:25:6a:6c:c7:0f:79:f7:24:c7:8e: d5:ad:b5:70:b2:08:76:06:1f:4c:ae:90:77:71:93: 45:3f:d2:d6:07:2e:85:f1:2e:a2:56:e1:e8:f5:a3: 44:b3:0e:7e:c7:4e:6f:69:9e:fb:13:a1:80:c9:a7: eb:55:3c:db:6e:2b:50:28:59:85:ca:0b:21:52:35: 33:b0:c8:f3:5f:d7:3f:41:ed:89:c2:57:07:96:5f: 35:3e:d3:66:0c:6d:d3:e9:75:1f:d7:9d:d0:57:d7: ac:78:28:c0:bf:f2:40:53:e5:74:67:82:b9:7a:8e: 61:e5:7a:89:69:72:5c:d3:82:1d:49:56:0d:f0:a7: d3:6b:5e:92:51:4d:98:cd:bb:d6:80:da:e7:81:ef: 58:97:42:ca:5d:a4:80:36:7a:e8:e3:e1:a1:46:92: cd:89:fe:65:70:ad:44:10:f4:4b:a9:21:36:9e:53: f6:cd:33:91:9e:2e:f5:77:5e:a0:81:44:25:45:a2: 9c:06:00:9e:56:e5:d2:98:bb:db:4b:cf:98:c1:ae: 73:9c:d4:5b:92:65:1a:89:a2:28:1c:2e:e8:f7:5d: bb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:5E:4F:59:1E:19:4A:FA:64:41:A6:E6:A0:E6:3D:BC:EF:94:08:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/ddf8e00d-05ad-34ea-8108-ca71e74d4fd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl X509v3 Authority Key Identifier: keyid:AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer sbgp-ipAddrBlock: critical IPv6: 2600:c00:2:3::/64 2600:c00:1002::/64 2600:c00:1002:3::-2600:c00:1002:4:ffff:ffff:ffff:ffff 2600:c02:b002:12::/63 2600:c04:e002:2::/64 2600:c05:3002:5::-2600:c05:3002:6:ffff:ffff:ffff:ffff 2600:c0e:1002::/64 2600:c0e:7002:b::/64 2600:c12:6002:e::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:52:ae:97:f2:ab:57:af:4e:c9:81:e1:88:06:6d:43:47:50: 78:74:31:d7:6b:c3:98:8f:d3:57:05:fd:4a:de:80:7c:48:e1: bb:bf:ee:49:71:97:55:ff:48:09:ce:73:12:1c:70:54:c4:31: 0d:f0:25:55:99:cc:0c:ae:df:80:b7:37:e4:d8:02:0b:0a:42: 55:a1:33:a2:7d:e7:c7:3b:e8:37:25:fa:f2:5d:f4:a5:de:0a: 1b:11:00:43:5a:66:c9:86:bc:cf:53:41:7f:ab:11:4e:09:6b: a8:8c:28:c7:45:19:52:1e:66:c0:a4:d9:84:a7:0e:d8:11:a7: f4:6f:44:ab:d5:a6:25:b3:34:18:c6:66:54:86:34:2f:2d:f1: 92:c6:3c:22:ec:cc:10:86:e8:0b:9c:d2:21:88:dc:f4:57:af: 23:05:4f:4f:84:a9:34:49:97:6b:10:bd:00:ef:80:a0:91:78: 20:c6:c9:64:38:5b:be:ca:a9:f0:8e:88:fb:19:3d:4e:10:10: af:5b:b2:fc:3f:f9:f8:b9:eb:01:17:73:f2:84:82:e4:08:0f: e3:67:2f:97:bc:41:55:8b:aa:16:8e:2c:0a:d9:53:19:bc:78: 0a:40:a0:20:f0:0e:9a:03:45:7c:5a:19:f6:c4:74:92:23:90: d9:d1:39:fc -----BEGIN CERTIFICATE----- MIIGvjCCBaagAwIBAgIUAQ0Mn0MoWE80gnTuUH5w3k+cnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFlNDY1YzAtMmExMC00OTVhLWI3ZDItMmFhMDQ4YjI4 NmEwMB4XDTI2MDkxNzEzMDAxMloXDTI2MTIxNjE0MDAxMlowLzEtMCsGA1UEAxMk M2JjMTQ1ZmUtOTU2Yi00NjFlLWJjYWItMWE3ZTczOTI1YjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8KrzTrkMlbDOqwQxhfl2gbKeX3wrcnJJ4GB0 2RJcJrBj/iVqbMcPefckx47VrbVwsgh2Bh9MrpB3cZNFP9LWBy6F8S6iVuHo9aNE sw5+x05vaZ77E6GAyafrVTzbbitQKFmFygshUjUzsMjzX9c/Qe2JwlcHll81PtNm DG3T6XUf153QV9eseCjAv/JAU+V0Z4K5eo5h5XqJaXJc04IdSVYN8KfTa16SUU2Y zbvWgNrnge9Yl0LKXaSANnro4+GhRpLNif5lcK1EEPRLqSE2nlP2zTORni71d16g gUQlRaKcBgCeVuXSmLvbS8+Ywa5znNRbkmUaiaIoHC7o9127sQIDAQABo4ID0DCC A8wwHQYDVR0OBBYEFJ1eT1keGUr6ZEGm5qDmPbzvlAimMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYWU0 NjVjMC0yYTEwLTQ5NWEtYjdkMi0yYWEwNDhiMjg2YTAvZGRmOGUwMGQtMDVhZC0z NGVhLTgxMDgtY2E3MWU3NGQ0ZmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWFlNDY1YzAtMmExMC00OTVhLWI3 ZDItMmFhMDQ4YjI4NmEwL2FhZTQ2NWMwLTJhMTAtNDk1YS1iN2QyLTJhYTA0OGIy ODZhMC5jcmwwHwYDVR0jBBgwFoAUqvGlGuuoqNwlLVt4tOGaGNmKjyQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYWU0NjVjMC0yYTEwLTQ5NWEtYjdkMi0yYWEw NDhiMjg2YTAuY2VyMIGZBggrBgEFBQcBBwEB/wSBiTCBhjCBgwQCAAIwfQMJACYA DAAAAgADAwkAJgAMABACAAAwFgMJACYADAAQAgADAwkAJgAMABACAAQDCQEmAAwC sAIAEgMJACYADATgAgACMBYDCQAmAAwFMAIABQMJACYADAUwAgAGAwkAJgAMDhAC AAADCQAmAAwOcAIACwMJACYADBJgAgAOMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAChSrpfyq1evTsmB4YgG bUNHUHh0Mddrw5iP01cF/UregHxI4bu/7klxl1X/SAnOcxIccFTEMQ3wJVWZzAyu 34C3N+TYAgsKQlWhM6J958c76Dcl+vJd9KXeChsRAENaZsmGvM9TQX+rEU4Ja6iM KMdFGVIeZsCk2YSnDtgRp/RvRKvVpiWzNBjGZlSGNC8t8ZLGPCLszBCG6Auc0iGI 3PRXryMFT0+EqTRJl2sQvQDvgKCReCDGyWQ4W77KqfCOiPsZPU4QEK9bsvw/+fi5 6wEXc/KEguQID+NnL5e8QVWLqhaOLArZUxm8eApAoCDwDpoDRXxaGfbEdJIjkNnR Ofw= -----END CERTIFICATE-----Generated at Tue Sep 22 16:38:31 2026 by rpki-client