$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/aaa241b2-0e20-3965-af75-6d9f126290e3.roa File: aaa241b2-0e20-3965-af75-6d9f126290e3.roa (raw, json) Hash identifier: z4PIk+mSa3cC0NhfE+GvOPms6gWMOWkUxP2PW8L9Pbk= Subject key identifier: 58:06:33:35:E3:E2:51:EB:DC:FD:B7:DF:8B:9E:41:92:61:FB:B1:4A Certificate issuer: /CN=01586a37-c709-480e-ac0d-b07d855c615b Certificate serial: 010D0C9F4328584E35FF1ED825457689A71F6C80 Authority key identifier: 40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/aaa241b2-0e20-3965-af75-6d9f126290e3.roa Signing time: Thu 18 Jun 2026 09:00:12 +0000 ROA not before: Thu 18 Jun 2026 09:00:12 +0000 ROA not after: Wed 16 Sep 2026 09:00:12 +0000 asID: 207990 IP address blocks: 2600:2900::/30 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:35:ff:1e:d8:25:45:76:89:a7:1f:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01586a37-c709-480e-ac0d-b07d855c615b Validity Not Before: Jun 18 09:00:12 2026 GMT Not After : Sep 16 09:00:12 2026 GMT Subject: CN=e697a8f8-c4e5-4b39-a1f2-033b82e396b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b1:a1:fa:ea:39:f6:50:f1:a3:24:13:1a:48: db:3c:81:8f:a2:90:56:7e:f0:4a:cd:a6:43:dd:09: 15:11:e9:a5:ca:92:30:3b:f5:ed:be:a7:80:76:44: 31:39:46:50:5e:82:81:ca:91:fe:04:9f:3e:fa:92: 82:41:1b:e5:51:8a:79:46:0d:bc:98:e5:2a:7e:b3: 13:ab:46:7c:2a:5b:2b:0b:62:8f:68:fc:7a:61:d2: 60:e8:4f:01:af:77:3b:b6:9c:c7:c4:dc:90:de:4f: d7:65:b2:d2:45:3d:ba:30:79:2f:ba:e8:17:3f:8f: 84:5b:15:6f:f5:37:8c:79:bb:af:d5:e4:79:16:a8: 26:39:9f:75:0b:89:ba:16:1f:d9:e3:cf:3e:16:98: 88:03:2b:4a:d9:07:98:11:af:8f:77:92:bc:9a:82: f1:34:e5:30:18:21:25:26:02:4f:e2:7e:d6:96:74: c6:dc:85:a5:5e:aa:59:23:2c:01:95:bf:43:c1:a4: 83:5d:d3:c2:83:98:f7:d3:7b:ad:cd:e0:36:3d:c8: f6:02:e0:36:f1:c7:bc:e8:2f:e5:93:92:40:e2:8e: b6:4e:c2:3b:ab:69:a6:62:05:46:4b:55:74:93:f6: 2c:a1:e1:be:b6:6e:61:a4:03:6b:d6:be:51:16:19: e0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:06:33:35:E3:E2:51:EB:DC:FD:B7:DF:8B:9E:41:92:61:FB:B1:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/aaa241b2-0e20-3965-af75-6d9f126290e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl X509v3 Authority Key Identifier: keyid:40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer sbgp-ipAddrBlock: critical IPv6: 2600:2900::/30 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:2c:07:01:b6:3b:34:06:2a:b3:a0:87:58:3d:9c:44:09:fa: a0:0a:3e:4f:ee:cb:67:9b:90:73:6d:fd:e8:02:b8:d0:bb:04: 2c:32:f0:e5:22:52:d6:6b:fc:4e:73:93:f6:40:69:40:da:82: bf:a4:a9:f8:31:1d:51:09:ac:8b:29:bb:d5:a9:5f:dc:fe:97: 1c:b1:12:7e:f5:94:93:5b:54:d5:60:ae:98:fb:62:14:89:87: fe:9e:7d:98:98:98:67:79:55:66:d0:4d:91:2c:0f:4f:bc:59: 5d:b2:cb:59:76:c9:ce:f5:0c:74:7d:d8:a6:ce:5d:c4:42:7c: 5f:46:16:7e:9c:e9:2c:65:f2:51:9f:43:44:1e:23:5a:27:52: 36:a6:ae:b5:3a:85:1d:a6:10:db:47:ab:6a:0e:50:6d:b9:d7: 6f:15:bb:de:20:9f:77:94:d0:d7:31:3a:a5:73:31:e1:4f:e4: e4:04:eb:25:3d:ff:41:a2:d3:fe:e5:e8:e6:56:ec:1b:51:db: a0:8c:b1:98:82:54:81:85:3b:59:60:a8:84:74:16:d9:5b:f9: 4b:b4:fe:13:91:23:fd:51:dc:9c:ca:5f:0a:01:65:94:68:f9: 43:55:39:85:91:60:10:e8:0e:96:47:c8:e0:c9:68:b5:64:1c: 00:6d:13:5d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE41/x7YJUV2iacfbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDE1ODZhMzctYzcwOS00ODBlLWFjMGQtYjA3ZDg1NWM2 MTViMB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk ZTY5N2E4ZjgtYzRlNS00YjM5LWExZjItMDMzYjgyZTM5NmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67Gh+uo59lDxoyQTGkjbPIGPopBWfvBKzaZD 3QkVEemlypIwO/XtvqeAdkQxOUZQXoKBypH+BJ8++pKCQRvlUYp5Rg28mOUqfrMT q0Z8KlsrC2KPaPx6YdJg6E8Br3c7tpzHxNyQ3k/XZbLSRT26MHkvuugXP4+EWxVv 9TeMebuv1eR5FqgmOZ91C4m6Fh/Z488+FpiIAytK2QeYEa+Pd5K8moLxNOUwGCEl JgJP4n7WlnTG3IWlXqpZIywBlb9DwaSDXdPCg5j303utzeA2Pcj2AuA28ce86C/l k5JA4o62TsI7q2mmYgVGS1V0k/YsoeG+tm5hpANr1r5RFhngcwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFgGMzXj4lHr3P2334ueQZJh+7FKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4 NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdkODU1YzYxNWIvYWFhMjQxYjItMGUyMC0z OTY1LWFmNzUtNmQ5ZjEyNjI5MGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDE1ODZhMzctYzcwOS00ODBlLWFj MGQtYjA3ZDg1NWM2MTViLzAxNTg2YTM3LWM3MDktNDgwZS1hYzBkLWIwN2Q4NTVj NjE1Yi5jcmwwHwYDVR0jBBgwFoAUQLhpP8kUn1wre/qIuMf/YjLrm6kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdk ODU1YzYxNWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUCJgApADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCNLAcBtjs0BiqzoIdYPZxECfqgCj5P7stnm5Bzbf3oArjQuwQsMvDl IlLWa/xOc5P2QGlA2oK/pKn4MR1RCayLKbvVqV/c/pccsRJ+9ZSTW1TVYK6Y+2IU iYf+nn2YmJhneVVm0E2RLA9PvFldsstZdsnO9Qx0fdimzl3EQnxfRhZ+nOksZfJR n0NEHiNaJ1I2pq61OoUdphDbR6tqDlBtuddvFbveIJ93lNDXMTqlczHhT+TkBOsl Pf9BotP+5ejmVuwbUdugjLGYglSBhTtZYKiEdBbZW/lLtP4TkSP9Udycyl8KAWWU aPlDVTmFkWAQ6A6WR8jgyWi1ZBwAbRNd -----END CERTIFICATE-----Generated at Fri Jul 24 11:37:23 2026 by rpki-client