$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/253905c7-5040-3e96-8afb-d1fd24d275f9.roa File: 253905c7-5040-3e96-8afb-d1fd24d275f9.roa (raw, json) Hash identifier: W2iXHdC3jUQWqrPCwPCO5nOFKinfrXd4oknlBmZvB4g= Subject key identifier: E5:5A:AD:5F:2B:34:26:7A:E3:3B:0A:F4:C5:74:E2:DA:80:DE:68:0F Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Certificate serial: 010D0C9F4328584E921FA2991CE2F04D6DC77BA0 Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/253905c7-5040-3e96-8afb-d1fd24d275f9.roa Signing time: Tue 21 Jul 2026 09:00:12 +0000 ROA not before: Tue 21 Jul 2026 09:00:12 +0000 ROA not after: Mon 19 Oct 2026 09:00:12 +0000 asID: 16509 IP address blocks: 2620:116:800a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:92:1f:a2:99:1c:e2:f0:4d:6d:c7:7b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Validity Not Before: Jul 21 09:00:12 2026 GMT Not After : Oct 19 09:00:12 2026 GMT Subject: CN=c9dec9c8-f5e6-4b30-bf15-4e07c6285f73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:21:f4:ee:ed:20:87:4e:6b:99:f2:b6:cb:b9: 8e:2f:2f:60:e2:b9:1e:9b:78:38:1a:c4:cf:66:4e: 50:5d:8f:b8:f5:2c:b3:9c:87:f1:d7:77:9a:79:ca: 08:f7:4c:31:f9:39:29:a1:42:8d:cc:86:a1:f3:ec: 2d:8a:86:06:9c:6a:ea:89:12:b2:0e:32:de:5b:d8: 69:b3:e3:36:fa:0f:fc:c1:db:10:61:ce:7c:8f:b6: ff:53:5e:97:18:21:34:05:fd:13:06:4d:bc:cb:cb: cd:ad:24:f4:36:44:20:95:23:b6:75:9a:04:9a:a7: 7c:18:05:dd:50:23:49:bf:e1:ec:14:58:c5:17:fe: 8a:86:12:9d:b9:53:89:d4:ec:39:dd:dc:90:2c:85: 6e:98:17:4d:78:fa:01:51:8f:ee:95:3d:76:33:30: 77:20:26:9f:ce:b7:99:c4:9a:1a:d1:92:a6:91:f3: ba:6c:96:ad:4e:9f:9a:ca:00:8d:47:46:29:76:26: 54:f3:01:8d:2c:ae:1f:f2:a6:77:98:67:26:7e:2d: 46:31:ca:c4:7d:e7:55:64:78:f2:e3:46:02:3e:03: 2c:2e:de:22:a8:e6:f6:30:25:02:1f:f5:e6:37:65: 5f:c6:26:f8:ee:1d:af:1a:4f:c0:9f:d0:75:42:19: 10:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:5A:AD:5F:2B:34:26:7A:E3:3B:0A:F4:C5:74:E2:DA:80:DE:68:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/253905c7-5040-3e96-8afb-d1fd24d275f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl X509v3 Authority Key Identifier: keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer sbgp-ipAddrBlock: critical IPv6: 2620:116:800a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:2f:e4:ee:f4:66:9e:4a:cf:cf:09:86:83:5e:56:5d:30:f4: a0:0b:b1:e1:34:c6:c0:a6:35:8e:9b:02:70:30:a4:74:d6:95: 68:15:1c:7a:41:7e:e8:34:5a:fb:9d:9b:c1:c4:8f:74:c2:d1: bb:30:e1:df:f6:d1:16:31:f5:56:b8:c1:f5:74:3e:f8:75:20: d5:e7:3d:ef:2c:8c:36:2e:21:91:a2:3d:ea:78:ad:5a:1a:fa: fd:bc:54:3a:b2:be:82:fd:2a:50:4f:bf:69:03:67:96:57:97: cd:e6:89:3c:1d:1d:bb:68:dd:cd:cb:46:f4:af:ec:c9:44:9a: 92:63:a7:8c:26:ab:fa:8d:f5:d5:0c:4a:9a:11:57:ec:33:5d: b2:50:ee:02:eb:dc:65:24:68:27:4c:7d:76:7b:46:96:fb:73: c0:6a:e1:c9:bc:21:c0:9a:c3:a4:69:f5:d4:15:11:4d:37:cd: 31:e2:fe:6a:d3:d2:80:02:bf:3d:7b:98:11:91:ce:98:f5:f7: 31:d8:ea:6a:29:c5:4c:a1:74:1d:42:3a:97:71:fb:9e:71:18: dc:cf:57:96:30:18:9e:bb:01:55:1a:7a:e4:d6:41:9d:13:3e: 34:6f:4e:26:12:bf:90:d2:e6:06:03:22:19:5c:23:5a:27:7c: a9:5c:7f:96 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6SH6KZHOLwTW3He6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5 Mzc4MB4XDTI2MDcyMTA5MDAxMloXDTI2MTAxOTA5MDAxMlowLzEtMCsGA1UEAxMk YzlkZWM5YzgtZjVlNi00YjMwLWJmMTUtNGUwN2M2Mjg1ZjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSH07u0gh05rmfK2y7mOLy9g4rkem3g4GsTP Zk5QXY+49SyznIfx13eaecoI90wx+TkpoUKNzIah8+wtioYGnGrqiRKyDjLeW9hp s+M2+g/8wdsQYc58j7b/U16XGCE0Bf0TBk28y8vNrST0NkQglSO2dZoEmqd8GAXd UCNJv+HsFFjFF/6KhhKduVOJ1Ow53dyQLIVumBdNePoBUY/ulT12MzB3ICafzreZ xJoa0ZKmkfO6bJatTp+aygCNR0YpdiZU8wGNLK4f8qZ3mGcmfi1GMcrEfedVZHjy 40YCPgMsLt4iqOb2MCUCH/XmN2Vfxib47h2vGk/An9B1QhkQHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOVarV8rNCZ64zsK9MV04tqA3mgPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvMjUzOTA1YzctNTA0MC0z ZTk2LThhZmItZDFmZDI0ZDI3NWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0 OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi MjE2NDkzNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABFoAK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFQv5O70Zp5Kz88JhoNeVl0w9KALseE0xsCmNY6bAnAwpHTWlWgV HHpBfug0Wvudm8HEj3TC0bsw4d/20RYx9Va4wfV0Pvh1INXnPe8sjDYuIZGiPep4 rVoa+v28VDqyvoL9KlBPv2kDZ5ZXl83miTwdHbto3c3LRvSv7MlEmpJjp4wmq/qN 9dUMSpoRV+wzXbJQ7gLr3GUkaCdMfXZ7Rpb7c8Bq4cm8IcCaw6Rp9dQVEU03zTHi /mrT0oACvz17mBGRzpj19zHY6mopxUyhdB1COpdx+55xGNzPV5YwGJ67AVUaeuTW QZ0TPjRvTiYSv5DS5gYDIhlcI1onfKlcf5Y= -----END CERTIFICATE-----Generated at Fri Jul 24 19:17:18 2026 by rpki-client