$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/aa6eff33-96af-372a-b751-bf677d5949f9.roa File: aa6eff33-96af-372a-b751-bf677d5949f9.roa (raw, json) Hash identifier: rZbQK30UNXLm25iwo6mQHcKu8hjQRay4+nLKxQyInK4= Subject key identifier: 52:6E:2B:BA:5C:3F:23:B4:FB:09:B3:B5:1A:93:8B:32:96:90:0C:46 Certificate issuer: /CN=a4530197-8968-425f-b6ab-d075941dc95c Certificate serial: 010D0C9F4328584F1467B0F924ADB24F333DDC40 Authority key identifier: AC:75:9D:E1:98:8D:FE:FD:4A:14:1E:D2:AC:30:33:C3:B1:75:E2:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/aa6eff33-96af-372a-b751-bf677d5949f9.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 401085 IP address blocks: 2602:f802::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/a4530197-8968-425f-b6ab-d075941dc95c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/a4530197-8968-425f-b6ab-d075941dc95c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:b0:f9:24:ad:b2:4f:33:3d:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4530197-8968-425f-b6ab-d075941dc95c Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=b71d677b-d665-4ab2-9b11-31e4491e5cdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bc:93:9f:cb:e2:ee:cb:44:99:aa:46:d1:a8: 9c:2f:ac:91:c9:97:db:12:9d:11:0d:14:6f:75:04: 30:eb:4f:c2:41:94:3c:e0:e0:f4:bc:61:17:b5:f0: a3:53:62:fe:05:60:a9:69:b5:43:98:ce:9e:0b:9a: 25:70:23:13:83:5f:5f:f3:48:f5:a1:49:e7:57:51: da:ae:94:53:56:5c:08:6e:41:7a:9c:20:2e:b9:ce: 32:4c:97:b7:6d:f1:4e:e5:a6:fa:9b:a3:2b:e0:1c: 81:4b:2b:86:aa:13:20:9a:04:b5:b8:19:83:3b:c3: 71:27:f3:d9:08:bc:34:42:eb:de:ca:91:35:49:ce: a7:ea:ec:9c:c4:9d:ef:a4:66:cf:0c:89:a8:ca:88: 49:8a:63:2b:be:8d:6f:02:02:2e:cf:51:e9:0d:17: 96:c0:0d:de:dc:ad:94:58:c2:a1:89:f7:3b:61:8f: af:02:8c:06:57:8f:d8:67:26:ac:5c:b9:3c:fc:0b: f2:11:5b:03:9f:92:b0:1b:50:51:3c:2a:48:98:08: e9:64:0b:e6:4a:0a:44:fe:51:e9:de:65:c1:f9:46: 26:99:b5:5a:d3:d6:3c:5b:df:69:fe:3e:58:9b:f0: 13:68:92:74:83:44:df:97:3f:1b:6f:e4:2a:9e:c9: 3d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:6E:2B:BA:5C:3F:23:B4:FB:09:B3:B5:1A:93:8B:32:96:90:0C:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/aa6eff33-96af-372a-b751-bf677d5949f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/a4530197-8968-425f-b6ab-d075941dc95c.crl X509v3 Authority Key Identifier: keyid:AC:75:9D:E1:98:8D:FE:FD:4A:14:1E:D2:AC:30:33:C3:B1:75:E2:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c.cer sbgp-ipAddrBlock: critical IPv6: 2602:f802::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:f3:0b:13:a8:45:93:f3:7b:73:90:ac:2c:8a:18:7d:d1:ab: 32:52:62:91:01:13:cd:f9:20:0c:02:22:7d:56:66:c9:5c:29: aa:40:38:5f:7f:b5:ea:61:50:b8:f7:fe:59:93:78:f4:11:df: 56:ff:e5:3d:a2:f4:c7:c7:a6:c9:f1:b5:7c:59:58:74:b6:7f: ea:cd:22:ce:39:d1:5a:bb:4c:6d:05:22:3b:31:1c:31:9f:29: dd:93:28:d8:aa:94:d0:a6:2d:a3:94:d1:41:60:81:07:1d:40: ce:d4:a2:47:56:e3:e6:1e:c0:76:26:3b:95:1b:43:a5:37:3b: f2:78:fd:bd:25:c1:89:45:4d:88:ac:aa:e8:3a:0d:35:fc:16: 6b:06:94:e1:c8:ee:a3:c3:66:90:a1:25:03:6f:08:b6:d5:b4: d9:e4:f4:8a:ec:fe:df:67:ea:7d:73:d4:20:a8:5a:cc:75:43: ba:f6:f0:39:fb:91:5a:b4:5f:02:05:fd:56:c8:e1:15:b8:3a: 12:d1:ac:1d:b9:71:52:85:88:a9:11:b2:2b:1f:85:d9:da:cc: 69:b8:06:48:54:8e:a1:ad:27:01:ec:11:85:88:7d:7d:70:bb: 56:1c:3c:b5:5b:00:c0:71:7e:a5:81:2f:21:9a:23:59:0f:05: 5a:86:5a:c1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ7D5JK2yTzM93EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTQ1MzAxOTctODk2OC00MjVmLWI2YWItZDA3NTk0MWRj OTVjMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk YjcxZDY3N2ItZDY2NS00YWIyLTliMTEtMzFlNDQ5MWU1Y2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07yTn8vi7stEmapG0aicL6yRyZfbEp0RDRRv dQQw60/CQZQ84OD0vGEXtfCjU2L+BWCpabVDmM6eC5olcCMTg19f80j1oUnnV1Ha rpRTVlwIbkF6nCAuuc4yTJe3bfFO5ab6m6Mr4ByBSyuGqhMgmgS1uBmDO8NxJ/PZ CLw0QuveypE1Sc6n6uycxJ3vpGbPDImoyohJimMrvo1vAgIuz1HpDReWwA3e3K2U WMKhifc7YY+vAowGV4/YZyasXLk8/AvyEVsDn5KwG1BRPCpImAjpZAvmSgpE/lHp 3mXB+UYmmbVa09Y8W99p/j5Ym/ATaJJ0g0Tflz8bb+Qqnsk9OQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFJuK7pcPyO0+wmztRqTizKWkAxGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hNDUz MDE5Ny04OTY4LTQyNWYtYjZhYi1kMDc1OTQxZGM5NWMvYWE2ZWZmMzMtOTZhZi0z NzJhLWI3NTEtYmY2NzdkNTk0OWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTQ1MzAxOTctODk2OC00MjVmLWI2 YWItZDA3NTk0MWRjOTVjL2E0NTMwMTk3LTg5NjgtNDI1Zi1iNmFiLWQwNzU5NDFk Yzk1Yy5jcmwwHwYDVR0jBBgwFoAUrHWd4ZiN/v1KFB7SrDAzw7F14vkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hNDUzMDE5Ny04OTY4LTQyNWYtYjZhYi1kMDc1 OTQxZGM5NWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgL4AgAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAADzCxOoRZPze3OQrCyKGH3RqzJSYpEBE835IAwCIn1WZslcKapA OF9/tephULj3/lmTePQR31b/5T2i9MfHpsnxtXxZWHS2f+rNIs450Vq7TG0FIjsx HDGfKd2TKNiqlNCmLaOU0UFggQcdQM7UokdW4+YewHYmO5UbQ6U3O/J4/b0lwYlF TYisqug6DTX8FmsGlOHI7qPDZpChJQNvCLbVtNnk9Irs/t9n6n1z1CCoWsx1Q7r2 8Dn7kVq0XwIF/VbI4RW4OhLRrB25cVKFiKkRsisfhdnazGm4BkhUjqGtJwHsEYWI fX1wu1YcPLVbAMBxfqWBLyGaI1kPBVqGWsE= -----END CERTIFICATE-----Generated at Sat Oct 10 07:20:27 2026 by rpki-client