$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/89fa7171-bce0-3688-ab6e-27f3cac68965.roa File: 89fa7171-bce0-3688-ab6e-27f3cac68965.roa (raw, json) Hash identifier: QG5RkT4Yj5sv9AccJK1SobBgVN8fLyP83XLFtKCYrME= Subject key identifier: B1:30:10:3F:5F:1D:EE:5C:37:48:04:1F:C6:55:F0:8B:D1:40:01:6B Certificate issuer: /CN=aa363d52-209b-47ac-aa24-f8c86d11fcb9 Certificate serial: 010D0C9F4328584F2EED0B51EFE12C03FA931880 Authority key identifier: F2:BC:8C:E9:CC:0C:09:4F:50:2B:F4:AA:DE:CF:CE:3D:BA:40:58:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/89fa7171-bce0-3688-ab6e-27f3cac68965.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 12243 IP address blocks: 2606:1040::/32 maxlen: 32 2620:11f:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/aa363d52-209b-47ac-aa24-f8c86d11fcb9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/aa363d52-209b-47ac-aa24-f8c86d11fcb9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:0b:51:ef:e1:2c:03:fa:93:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa363d52-209b-47ac-aa24-f8c86d11fcb9 Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=3628e1a4-bdde-47be-aa78-8e5cd3caea69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:64:c4:21:82:10:05:6d:8d:53:fd:07:91:c5: 78:77:be:d1:c0:2c:94:59:48:ae:f4:1e:3f:66:ef: 60:3e:1e:3c:04:25:67:2a:d7:5d:45:f4:49:d3:84: fc:46:b3:88:c2:05:3e:56:34:a5:d1:40:b0:86:3b: cf:c9:bb:bb:57:7f:97:2b:5d:9a:64:5f:49:95:9f: f9:19:4d:d7:2b:e2:f4:62:78:21:60:3b:a7:9b:11: e5:aa:85:9a:bf:e6:e0:4c:af:be:7f:b2:a3:13:d3: 80:e0:27:3f:22:a5:bf:ae:f3:e7:7c:b1:46:1f:78: ee:9c:83:ad:c9:87:43:7c:9d:72:55:65:d5:ef:eb: de:7b:74:cc:47:77:63:07:c4:ff:11:fc:b6:09:93: 4b:20:b5:d1:14:9e:b2:b3:b6:2b:1b:15:d6:21:aa: 38:ad:59:b2:8a:ae:59:d4:2d:11:05:af:09:72:5e: 0d:0e:97:82:6c:d8:d4:af:41:b0:30:4c:d6:35:7d: 3a:56:89:0c:a1:fd:80:f1:b1:6b:1b:33:d8:64:66: 3c:b8:a0:c5:cd:9d:cc:eb:e4:b4:30:dd:17:de:9b: 59:11:48:6b:14:40:1d:c7:fc:1f:da:81:e1:1a:1b: 64:6c:7c:35:e9:4b:d1:5d:fb:e6:b6:02:c3:c6:8d: a9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:30:10:3F:5F:1D:EE:5C:37:48:04:1F:C6:55:F0:8B:D1:40:01:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/89fa7171-bce0-3688-ab6e-27f3cac68965.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/aa363d52-209b-47ac-aa24-f8c86d11fcb9.crl X509v3 Authority Key Identifier: keyid:F2:BC:8C:E9:CC:0C:09:4F:50:2B:F4:AA:DE:CF:CE:3D:BA:40:58:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9.cer sbgp-ipAddrBlock: critical IPv6: 2606:1040::/32 2620:11f:e000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:ca:f4:4d:b5:48:c8:fe:fb:21:ef:1c:e2:47:0b:e7:1f:a6: 38:d3:cc:2c:ce:57:5c:ea:77:3d:9f:ba:a8:87:c8:0d:e0:fd: 2f:8b:a3:9e:1f:59:ea:67:86:72:45:02:d4:93:83:4d:9e:02: 98:95:67:03:07:d9:9c:d1:12:74:39:d5:d4:43:88:05:af:47: 11:4f:e5:bd:13:03:31:24:af:c3:90:91:a7:b8:9e:f2:9b:43: 38:b3:2f:8f:3e:60:bd:b0:83:4d:5d:a8:c1:2b:f2:e7:f6:c5: 4e:87:08:0a:52:5d:3b:36:a9:12:9c:5d:62:63:69:bf:0c:1c: ae:2c:d8:4a:1c:09:11:68:4b:f8:fc:d2:a7:de:b6:f5:14:7a: 08:68:2f:99:a7:f1:b2:05:15:08:b7:44:85:b7:8b:2e:ea:fb: 3a:7e:74:bb:b1:16:63:a5:22:e7:83:4d:61:4b:00:09:c5:15: 31:0e:84:1d:ec:e0:c3:4d:5e:ca:ba:90:73:4a:fb:23:35:11: 5c:ce:ca:39:de:87:0c:e6:b7:37:a8:2f:d0:af:95:c1:1b:4e: 89:e3:70:f9:e2:fa:87:56:ce:ef:dc:ce:93:76:42:84:f2:73: 55:3d:89:e2:40:d6:bc:f9:e9:b2:c5:9c:a0:0f:32:6b:e9:f2: 88:d0:79:f6 -----BEGIN CERTIFICATE----- MIIGTDCCBTSgAwIBAgIUAQ0Mn0MoWE8u7QtR7+EsA/qTGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzNjNkNTItMjA5Yi00N2FjLWFhMjQtZjhjODZkMTFm Y2I5MB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk MzYyOGUxYTQtYmRkZS00N2JlLWFhNzgtOGU1Y2QzY2FlYTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWTEIYIQBW2NU/0HkcV4d77RwCyUWUiu9B4/ Zu9gPh48BCVnKtddRfRJ04T8RrOIwgU+VjSl0UCwhjvPybu7V3+XK12aZF9JlZ/5 GU3XK+L0YnghYDunmxHlqoWav+bgTK++f7KjE9OA4Cc/IqW/rvPnfLFGH3junIOt yYdDfJ1yVWXV7+vee3TMR3djB8T/Efy2CZNLILXRFJ6ys7YrGxXWIao4rVmyiq5Z 1C0RBa8Jcl4NDpeCbNjUr0GwMEzWNX06VokMof2A8bFrGzPYZGY8uKDFzZ3M6+S0 MN0X3ptZEUhrFEAdx/wf2oHhGhtkbHw16UvRXfvmtgLDxo2p+wIDAQABo4IDXjCC A1owHQYDVR0OBBYEFLEwED9fHe5cN0gEH8ZV8IvRQAFrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hYTM2 M2Q1Mi0yMDliLTQ3YWMtYWEyNC1mOGM4NmQxMWZjYjkvODlmYTcxNzEtYmNlMC0z Njg4LWFiNmUtMjdmM2NhYzY4OTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWEzNjNkNTItMjA5Yi00N2FjLWFh MjQtZjhjODZkMTFmY2I5L2FhMzYzZDUyLTIwOWItNDdhYy1hYTI0LWY4Yzg2ZDEx ZmNiOS5jcmwwHwYDVR0jBBgwFoAU8ryM6cwMCU9QK/Sq3s/OPbpAWDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hYTM2M2Q1Mi0yMDliLTQ3YWMtYWEyNC1mOGM4 NmQxMWZjYjkuY2VyMCgGCCsGAQUFBwEHAQH/BBkwFzAVBAIAAjAPAwUAJgYQQAMG ACYgAR/gMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAG7K9E21SMj++yHvHOJHC+cfpjjTzCzOV1zqdz2fuqiH yA3g/S+Lo54fWepnhnJFAtSTg02eApiVZwMH2ZzREnQ51dRDiAWvRxFP5b0TAzEk r8OQkae4nvKbQzizL48+YL2wg01dqMEr8uf2xU6HCApSXTs2qRKcXWJjab8MHK4s 2EocCRFoS/j80qfetvUUeghoL5mn8bIFFQi3RIW3iy7q+zp+dLuxFmOlIueDTWFL AAnFFTEOhB3s4MNNXsq6kHNK+yM1EVzOyjnehwzmtzeoL9CvlcEbTonjcPni+odW zu/czpN2QoTyc1U9ieJA1rz56bLFnKAPMmvp8ojQefY= -----END CERTIFICATE-----Generated at Mon Sep 28 22:44:34 2026 by rpki-client