$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/aafbb7b0-db7e-3df9-9b3d-e653cd2622b7.roa File: aafbb7b0-db7e-3df9-9b3d-e653cd2622b7.roa (raw, json) Hash identifier: nRwl3YyqyMYTi3PmIJg1fz4prvYRAgQP+GsK4OWMS/0= Subject key identifier: 7F:36:3F:32:B2:36:01:13:07:FF:5F:09:FE:78:76:46:9F:50:6E:E7 Certificate issuer: /CN=8683f4e1-51b1-4cb2-9a51-b0f0c4933100 Certificate serial: 010D0C9F4328584F0B39B846A54B4023CDFDF380 Authority key identifier: 1E:7B:58:D8:8E:29:62:1C:13:31:C2:7F:2B:92:B0:9D:87:F2:C2:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/aafbb7b0-db7e-3df9-9b3d-e653cd2622b7.roa Signing time: Wed 02 Sep 2026 18:05:38 +0000 ROA not before: Wed 02 Sep 2026 18:05:38 +0000 ROA not after: Tue 01 Dec 2026 19:05:38 +0000 asID: 16509 IP address blocks: 2604:1160::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0b:39:b8:46:a5:4b:40:23:cd:fd:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8683f4e1-51b1-4cb2-9a51-b0f0c4933100 Validity Not Before: Sep 2 18:05:38 2026 GMT Not After : Dec 1 19:05:38 2026 GMT Subject: CN=36491b17-e38e-47cd-b5b0-899914c9d7a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:27:9d:ca:de:54:5e:00:12:68:56:a7:82:45: 15:8d:5a:a2:f7:f2:46:11:c9:db:a5:8f:fb:02:cb: ac:7c:eb:83:7a:10:09:0f:7e:2c:de:89:5a:d9:a9: e2:c0:6e:c2:2a:b4:6d:42:10:7f:cd:7f:cf:87:85: 97:36:3a:fd:5e:43:e3:86:82:69:c6:e7:7a:28:6b: 28:f3:2b:ff:9f:d7:2d:af:af:45:4e:c0:e2:da:50: 5f:05:b0:2a:fb:32:3f:ad:f0:70:b3:31:9c:80:a6: 08:f6:2d:c3:ce:6c:cb:20:a8:cf:ec:d6:a3:6f:89: 30:17:b9:1e:70:13:bc:5f:c1:83:cd:4f:02:34:ad: e8:f1:6e:27:5e:78:6e:f7:96:4a:56:77:ae:e6:47: 7b:b7:49:97:d7:82:5c:63:5c:cf:c0:b7:86:2e:e4: 82:2d:5d:31:cf:5d:55:15:4e:c1:9a:48:db:ea:ad: 60:ea:e1:a4:c3:f5:08:f4:22:20:58:3a:55:54:02: 27:d9:47:82:ab:09:52:12:81:25:6c:70:48:31:9a: 29:a6:42:8b:4f:9f:93:9e:fa:0b:37:d9:c9:b6:63: b5:8d:d2:0d:5b:00:a1:90:15:3a:71:90:cf:59:5a: 70:98:8f:ab:ff:e6:e5:ee:0b:db:66:a9:62:8e:98: ec:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:36:3F:32:B2:36:01:13:07:FF:5F:09:FE:78:76:46:9F:50:6E:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/aafbb7b0-db7e-3df9-9b3d-e653cd2622b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.crl X509v3 Authority Key Identifier: keyid:1E:7B:58:D8:8E:29:62:1C:13:31:C2:7F:2B:92:B0:9D:87:F2:C2:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8683f4e1-51b1-4cb2-9a51-b0f0c4933100.cer sbgp-ipAddrBlock: critical IPv6: 2604:1160::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:90:68:89:04:4b:cf:5a:a2:9e:26:e3:1f:b5:ac:2d:e1:6e: 0e:e0:ba:c1:5a:0a:72:e1:51:18:8d:56:0d:db:85:b8:87:f1: 03:29:cf:9c:06:7f:73:26:fb:d5:e5:d6:ca:61:b4:d8:c9:b3: af:44:e5:b0:d8:09:f7:e7:86:03:1c:c4:64:79:1e:b0:a9:75: d7:da:aa:4e:b0:84:78:ee:d2:5a:1d:24:a2:e0:0a:a7:95:bd: a9:94:3c:66:ea:11:87:e9:e3:ca:19:c4:79:36:56:d0:3f:18: 45:2d:4a:63:21:b9:6f:44:1e:e9:e4:e4:db:00:4a:9f:09:10: 6f:73:ec:8a:b0:dc:03:c6:f3:90:7d:52:fb:bc:a4:5e:5f:ae: d2:45:ba:70:3c:df:2e:49:f2:39:78:f6:87:b3:d1:90:ba:34: c1:ba:17:ed:ab:e0:4b:f0:31:9d:59:aa:60:4d:cc:78:f7:6a: 5a:0f:de:ca:d0:8f:fc:f0:88:2a:bd:8e:28:2e:51:e3:9d:47: cc:4c:f6:ac:b6:ad:fc:76:23:55:5b:ca:37:ad:de:3d:8a:50: 23:39:94:f8:e9:0b:a7:2c:d3:e2:cc:5b:75:33:c7:ba:12:1f: cf:f8:29:84:4e:c9:e5:a3:20:d5:63:0a:93:af:cf:5b:da:a6: ff:67:43:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8LObhGpUtAI83984AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODY4M2Y0ZTEtNTFiMS00Y2IyLTlhNTEtYjBmMGM0OTMz MTAwMB4XDTI2MDkwMjE4MDUzOFoXDTI2MTIwMTE5MDUzOFowLzEtMCsGA1UEAxMk MzY0OTFiMTctZTM4ZS00N2NkLWI1YjAtODk5OTE0YzlkN2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCedyt5UXgASaFangkUVjVqi9/JGEcnbpY/7 AsusfOuDehAJD34s3ola2aniwG7CKrRtQhB/zX/Ph4WXNjr9XkPjhoJpxud6KGso 8yv/n9ctr69FTsDi2lBfBbAq+zI/rfBwszGcgKYI9i3DzmzLIKjP7Najb4kwF7ke cBO8X8GDzU8CNK3o8W4nXnhu95ZKVneu5kd7t0mX14JcY1zPwLeGLuSCLV0xz11V FU7Bmkjb6q1g6uGkw/UI9CIgWDpVVAIn2UeCqwlSEoElbHBIMZoppkKLT5+TnvoL N9nJtmO1jdINWwChkBU6cZDPWVpwmI+r/+bl7gvbZqlijpjsEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH82PzKyNgETB/9fCf54dkafUG7nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Njgz ZjRlMS01MWIxLTRjYjItOWE1MS1iMGYwYzQ5MzMxMDAvYWFmYmI3YjAtZGI3ZS0z ZGY5LTliM2QtZTY1M2NkMjYyMmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODY4M2Y0ZTEtNTFiMS00Y2IyLTlh NTEtYjBmMGM0OTMzMTAwLzg2ODNmNGUxLTUxYjEtNGNiMi05YTUxLWIwZjBjNDkz MzEwMC5jcmwwHwYDVR0jBBgwFoAUHntY2I4pYhwTMcJ/K5KwnYfywmMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84NjgzZjRlMS01MWIxLTRjYjItOWE1MS1iMGYw YzQ5MzMxMDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQRYAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHmQaIkES89aop4m4x+1rC3hbg7gusFaCnLhURiNVg3bhbiH8QMp z5wGf3Mm+9Xl1sphtNjJs69E5bDYCffnhgMcxGR5HrCpddfaqk6whHju0lodJKLg CqeVvamUPGbqEYfp48oZxHk2VtA/GEUtSmMhuW9EHunk5NsASp8JEG9z7Iqw3APG 85B9Uvu8pF5frtJFunA83y5J8jl49oez0ZC6NMG6F+2r4EvwMZ1ZqmBNzHj3aloP 3srQj/zwiCq9jiguUeOdR8xM9qy2rfx2I1Vbyjet3j2KUCM5lPjpC6cs0+LMW3Uz x7oSH8/4KYROyeWjINVjCpOvz1vapv9nQ3c= -----END CERTIFICATE-----Generated at Tue Sep 22 18:08:14 2026 by rpki-client