$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/89fa7171-bce0-3688-ab6e-27f3cac68965.roa File: 89fa7171-bce0-3688-ab6e-27f3cac68965.roa (raw, json) Hash identifier: 90UlshzRZ42qmQB1E2CD+5cLie9sX6NmQ9JmB4q8Nn0= Subject key identifier: CA:16:10:B4:F4:D1:9D:94:95:1D:0F:BB:24:DF:BC:24:A0:58:01:8D Certificate issuer: /CN=aa363d52-209b-47ac-aa24-f8c86d11fcb9 Certificate serial: 010D0C9F4328584E8C8A3E53E6DCEDC551293240 Authority key identifier: F2:BC:8C:E9:CC:0C:09:4F:50:2B:F4:AA:DE:CF:CE:3D:BA:40:58:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/89fa7171-bce0-3688-ab6e-27f3cac68965.roa Signing time: Sun 19 Jul 2026 09:00:11 +0000 ROA not before: Sun 19 Jul 2026 09:00:11 +0000 ROA not after: Sat 17 Oct 2026 09:00:11 +0000 asID: 12243 IP address blocks: 2606:1040::/32 maxlen: 32 2620:11f:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/aa363d52-209b-47ac-aa24-f8c86d11fcb9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/aa363d52-209b-47ac-aa24-f8c86d11fcb9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8c:8a:3e:53:e6:dc:ed:c5:51:29:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa363d52-209b-47ac-aa24-f8c86d11fcb9 Validity Not Before: Jul 19 09:00:11 2026 GMT Not After : Oct 17 09:00:11 2026 GMT Subject: CN=7663ca51-da18-4bf0-8983-e169d0d127ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:26:f9:a6:50:52:fa:54:2d:88:b4:f8:4d:e4: 1e:0b:77:cf:1d:39:1e:30:e2:30:f2:5a:56:6b:c1: 7b:f3:34:62:44:d8:75:ee:aa:3e:bb:fa:ec:ca:66: 29:d2:75:4c:21:83:33:83:a2:73:20:c3:aa:e2:4a: 14:07:f1:a9:d6:26:49:29:1a:2f:ec:51:e1:8c:13: db:c4:7b:29:60:4d:ad:7b:91:e4:54:e5:5d:30:fc: 68:0c:9f:d3:ad:13:1b:f7:55:f3:24:c7:ab:ea:13: 5b:b0:60:3c:02:7f:be:54:ae:1e:5a:92:d4:06:80: 7f:d0:1a:33:b7:5c:ba:9f:f1:4c:4a:83:69:e6:84: 0c:b7:15:41:67:39:e2:e0:9d:11:be:cc:79:ea:54: b0:42:d3:7d:ff:fe:90:0b:c8:2f:ca:ba:4a:ab:de: 83:8d:8d:0d:e4:12:5a:24:1c:32:f1:dc:84:44:34: 15:a9:7b:d1:d9:f7:36:a5:a0:e4:e9:04:95:05:8a: aa:d0:a6:68:11:b2:79:6b:f8:8d:c9:32:56:c9:ab: b7:10:b3:96:7b:64:4d:5b:5e:22:34:c5:0b:14:10: 41:62:d6:9b:d2:6a:00:b4:65:87:4d:c6:d7:e1:ce: 3f:32:c9:c7:be:4d:66:bf:d4:68:a4:3d:d1:57:79: f2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:16:10:B4:F4:D1:9D:94:95:1D:0F:BB:24:DF:BC:24:A0:58:01:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/89fa7171-bce0-3688-ab6e-27f3cac68965.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/aa363d52-209b-47ac-aa24-f8c86d11fcb9.crl X509v3 Authority Key Identifier: keyid:F2:BC:8C:E9:CC:0C:09:4F:50:2B:F4:AA:DE:CF:CE:3D:BA:40:58:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9.cer sbgp-ipAddrBlock: critical IPv6: 2606:1040::/32 2620:11f:e000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:44:98:3a:47:a4:62:b6:12:b3:e5:39:38:0b:4f:c6:d9:0f: 09:60:b5:36:71:35:e7:56:b1:1f:20:c9:8a:ef:f8:fe:dc:67: bd:56:9f:ef:3c:f3:a7:0d:8d:da:d0:a9:dc:09:da:2c:c1:7e: d5:ff:63:a1:65:d2:4b:a8:fd:55:18:57:b9:b8:22:66:c3:61: c1:74:e5:ab:7a:15:fe:41:01:b8:75:0b:2e:d7:4b:ff:79:89: ee:cb:f1:27:7b:da:5f:a9:1d:e3:22:03:dc:eb:f1:dc:1f:b7: 69:f5:75:1e:f0:5d:35:89:33:70:d1:82:14:c6:4a:ed:50:fb: 14:44:4e:06:06:72:6c:a8:73:00:cb:da:8f:ef:3c:bd:a8:f4: 8e:63:16:f2:dd:41:15:c5:f9:c2:81:21:b8:3c:de:1e:80:10: 87:bf:98:d4:11:60:43:b8:6d:25:3a:f4:98:28:a8:3d:33:4f: c8:91:04:40:e8:23:cb:f6:2c:50:d3:67:91:bf:40:f0:60:85: 3d:60:e4:b8:7e:e7:dc:d1:81:11:42:15:ce:b4:dc:d7:bf:68: 51:de:b1:a1:18:40:d8:62:86:b1:8c:4c:c2:5a:db:d6:82:6f: f6:6e:d9:50:ce:5b:10:8b:48:dc:0f:8f:2f:73:02:6e:0f:5a: 50:4f:cb:6f -----BEGIN CERTIFICATE----- MIIGTDCCBTSgAwIBAgIUAQ0Mn0MoWE6Mij5T5tztxVEpMkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzNjNkNTItMjA5Yi00N2FjLWFhMjQtZjhjODZkMTFm Y2I5MB4XDTI2MDcxOTA5MDAxMVoXDTI2MTAxNzA5MDAxMVowLzEtMCsGA1UEAxMk NzY2M2NhNTEtZGExOC00YmYwLTg5ODMtZTE2OWQwZDEyN2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Cb5plBS+lQtiLT4TeQeC3fPHTkeMOIw8lpW a8F78zRiRNh17qo+u/rsymYp0nVMIYMzg6JzIMOq4koUB/Gp1iZJKRov7FHhjBPb xHspYE2te5HkVOVdMPxoDJ/TrRMb91XzJMer6hNbsGA8An++VK4eWpLUBoB/0Boz t1y6n/FMSoNp5oQMtxVBZzni4J0Rvsx56lSwQtN9//6QC8gvyrpKq96DjY0N5BJa JBwy8dyERDQVqXvR2fc2paDk6QSVBYqq0KZoEbJ5a/iNyTJWyau3ELOWe2RNW14i NMULFBBBYtab0moAtGWHTcbX4c4/MsnHvk1mv9RopD3RV3ny9wIDAQABo4IDXjCC A1owHQYDVR0OBBYEFMoWELT00Z2UlR0PuyTfvCSgWAGNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hYTM2 M2Q1Mi0yMDliLTQ3YWMtYWEyNC1mOGM4NmQxMWZjYjkvODlmYTcxNzEtYmNlMC0z Njg4LWFiNmUtMjdmM2NhYzY4OTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWEzNjNkNTItMjA5Yi00N2FjLWFh MjQtZjhjODZkMTFmY2I5L2FhMzYzZDUyLTIwOWItNDdhYy1hYTI0LWY4Yzg2ZDEx ZmNiOS5jcmwwHwYDVR0jBBgwFoAU8ryM6cwMCU9QK/Sq3s/OPbpAWDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hYTM2M2Q1Mi0yMDliLTQ3YWMtYWEyNC1mOGM4 NmQxMWZjYjkuY2VyMCgGCCsGAQUFBwEHAQH/BBkwFzAVBAIAAjAPAwUAJgYQQAMG ACYgAR/gMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBADVEmDpHpGK2ErPlOTgLT8bZDwlgtTZxNedWsR8gyYrv +P7cZ71Wn+8886cNjdrQqdwJ2izBftX/Y6Fl0kuo/VUYV7m4ImbDYcF05at6Ff5B Abh1Cy7XS/95ie7L8Sd72l+pHeMiA9zr8dwft2n1dR7wXTWJM3DRghTGSu1Q+xRE TgYGcmyocwDL2o/vPL2o9I5jFvLdQRXF+cKBIbg83h6AEIe/mNQRYEO4bSU69Jgo qD0zT8iRBEDoI8v2LFDTZ5G/QPBghT1g5Lh+59zRgRFCFc603Ne/aFHesaEYQNhi hrGMTMJa29aCb/Zu2VDOWxCLSNwPjy9zAm4PWlBPy28= -----END CERTIFICATE-----Generated at Fri Jul 24 16:34:13 2026 by rpki-client