$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/ddf8e00d-05ad-34ea-8108-ca71e74d4fd3.roa File: ddf8e00d-05ad-34ea-8108-ca71e74d4fd3.roa (raw, json) Hash identifier: YiGEES+wdlxkmlWaSnOrwcRDu3xrdlcx+EaCgrhKrE0= Subject key identifier: C0:CB:B2:2C:C1:3B:48:2B:4D:89:08:09:DE:D2:82:82:3B:E8:00:E4 Certificate issuer: /CN=aae465c0-2a10-495a-b7d2-2aa048b286a0 Certificate serial: 010D0C9F4328584E921FA93EC51B04ED701324E0 Authority key identifier: AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/ddf8e00d-05ad-34ea-8108-ca71e74d4fd3.roa Signing time: Tue 21 Jul 2026 09:00:12 +0000 ROA not before: Tue 21 Jul 2026 09:00:12 +0000 ROA not after: Mon 19 Oct 2026 09:00:12 +0000 asID: 10911 IP address blocks: 2600:c00:2:3::/64 maxlen: 64 2600:c00:1002::/64 maxlen: 64 2600:c00:1002:3::/64 maxlen: 64 2600:c00:1002:4::/64 maxlen: 64 2600:c02:b002:12::/64 maxlen: 64 2600:c02:b002:13::/64 maxlen: 64 2600:c04:e002:2::/64 maxlen: 64 2600:c05:3002:5::/64 maxlen: 64 2600:c05:3002:6::/64 maxlen: 64 2600:c0e:1002::/64 maxlen: 64 2600:c0e:7002:b::/64 maxlen: 64 2600:c12:6002:e::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:92:1f:a9:3e:c5:1b:04:ed:70:13:24:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aae465c0-2a10-495a-b7d2-2aa048b286a0 Validity Not Before: Jul 21 09:00:12 2026 GMT Not After : Oct 19 09:00:12 2026 GMT Subject: CN=a39e8888-0be5-4ca1-a8f6-0bd43fe90411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a7:8e:aa:7d:f3:cb:c4:72:e8:13:f8:d0:91: 74:4b:90:9a:07:aa:2a:32:c8:9b:70:aa:7c:e6:27: ae:9c:cf:e4:92:c4:76:12:ef:9f:b6:3c:68:25:9f: ea:6b:3e:3c:49:9d:9f:c0:90:a8:e3:48:06:7c:4b: 08:65:eb:fe:69:cd:28:c2:89:ba:06:4a:71:7e:cb: 9f:21:4a:f5:18:ff:aa:1b:f4:99:93:7f:0e:13:c2: 0f:8f:2b:7d:f5:2a:2b:ab:13:96:2d:21:fc:e1:09: cc:6d:4d:d1:d6:51:b4:2f:66:38:3a:62:d8:ac:89: 1b:f7:9f:71:42:27:ab:c5:ad:d7:0b:c2:74:4e:61: 32:9a:57:f3:4b:33:f4:a3:ab:d3:aa:8f:58:3f:38: dc:76:fb:9e:cc:01:5b:93:e9:5d:f9:2a:e3:8f:2d: de:b4:72:52:ee:dc:d0:6d:12:e7:9c:dc:6e:1d:19: 56:01:e7:79:57:bb:2e:77:9f:bc:a4:bb:4f:20:2e: 04:aa:27:ec:89:4f:a9:60:46:da:e6:57:eb:15:72: aa:f8:bc:de:f9:03:96:4a:9b:c3:3a:1d:05:cb:98: 0c:60:1c:cc:95:09:ef:39:6e:4b:28:15:db:8d:d2: 39:26:10:50:54:f5:94:99:8b:e6:d2:38:ab:60:5b: 4c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:CB:B2:2C:C1:3B:48:2B:4D:89:08:09:DE:D2:82:82:3B:E8:00:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/ddf8e00d-05ad-34ea-8108-ca71e74d4fd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl X509v3 Authority Key Identifier: keyid:AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer sbgp-ipAddrBlock: critical IPv6: 2600:c00:2:3::/64 2600:c00:1002::/64 2600:c00:1002:3::-2600:c00:1002:4:ffff:ffff:ffff:ffff 2600:c02:b002:12::/63 2600:c04:e002:2::/64 2600:c05:3002:5::-2600:c05:3002:6:ffff:ffff:ffff:ffff 2600:c0e:1002::/64 2600:c0e:7002:b::/64 2600:c12:6002:e::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:ca:90:8d:ff:8a:4a:62:f7:9b:05:4e:5d:1f:de:af:3d:29: fa:6d:ed:da:30:6a:83:92:2f:23:22:99:39:7c:f2:ef:36:21: 47:cf:17:34:4c:b9:f5:ef:1a:76:47:17:cf:04:de:be:26:6d: 5a:a3:89:f2:f1:16:10:82:bd:cd:89:e6:fa:e3:38:39:58:c7: 1a:2d:45:31:4a:2d:52:d6:54:21:d3:d2:01:93:e3:ce:13:c9: 56:e8:55:95:69:7c:63:4d:2e:dd:40:fa:72:ab:8c:01:8c:b2: 6b:e6:19:10:05:92:31:04:bd:33:f9:e6:c3:27:3c:de:99:93: 4d:0f:3e:76:ca:29:62:7d:49:68:b4:9d:bf:d5:2d:ed:f7:20: 65:5c:4a:e5:74:38:48:ad:c4:39:e8:f6:88:22:36:c7:8f:dd: fc:95:c0:d4:67:19:08:d4:af:3d:cf:58:bd:27:ed:e0:3c:01: 58:a5:0e:2b:d8:97:ce:9d:ce:6b:87:3d:89:e6:ae:87:79:3d: cc:99:23:a9:d4:31:cf:68:70:13:e4:ec:b0:4b:39:be:ab:d9: de:67:2c:64:45:da:1b:a6:e7:0d:45:a8:2a:7b:f9:b3:c3:9a: b9:06:fa:37:b8:d6:ef:7c:a5:fd:c6:67:eb:a0:b5:83:c3:0b: 07:1c:b4:ed -----BEGIN CERTIFICATE----- MIIGvjCCBaagAwIBAgIUAQ0Mn0MoWE6SH6k+xRsE7XATJOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFlNDY1YzAtMmExMC00OTVhLWI3ZDItMmFhMDQ4YjI4 NmEwMB4XDTI2MDcyMTA5MDAxMloXDTI2MTAxOTA5MDAxMlowLzEtMCsGA1UEAxMk YTM5ZTg4ODgtMGJlNS00Y2ExLWE4ZjYtMGJkNDNmZTkwNDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6eOqn3zy8Ry6BP40JF0S5CaB6oqMsibcKp8 5ieunM/kksR2Eu+ftjxoJZ/qaz48SZ2fwJCo40gGfEsIZev+ac0owom6Bkpxfsuf IUr1GP+qG/SZk38OE8IPjyt99SorqxOWLSH84QnMbU3R1lG0L2Y4OmLYrIkb959x Qierxa3XC8J0TmEymlfzSzP0o6vTqo9YPzjcdvuezAFbk+ld+Srjjy3etHJS7tzQ bRLnnNxuHRlWAed5V7sud5+8pLtPIC4EqifsiU+pYEba5lfrFXKq+Lze+QOWSpvD Oh0Fy5gMYBzMlQnvOW5LKBXbjdI5JhBQVPWUmYvm0jirYFtMYQIDAQABo4ID0DCC A8wwHQYDVR0OBBYEFMDLsizBO0grTYkICd7SgoI76ADkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYWU0 NjVjMC0yYTEwLTQ5NWEtYjdkMi0yYWEwNDhiMjg2YTAvZGRmOGUwMGQtMDVhZC0z NGVhLTgxMDgtY2E3MWU3NGQ0ZmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWFlNDY1YzAtMmExMC00OTVhLWI3 ZDItMmFhMDQ4YjI4NmEwL2FhZTQ2NWMwLTJhMTAtNDk1YS1iN2QyLTJhYTA0OGIy ODZhMC5jcmwwHwYDVR0jBBgwFoAUqvGlGuuoqNwlLVt4tOGaGNmKjyQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYWU0NjVjMC0yYTEwLTQ5NWEtYjdkMi0yYWEw NDhiMjg2YTAuY2VyMIGZBggrBgEFBQcBBwEB/wSBiTCBhjCBgwQCAAIwfQMJACYA DAAAAgADAwkAJgAMABACAAAwFgMJACYADAAQAgADAwkAJgAMABACAAQDCQEmAAwC sAIAEgMJACYADATgAgACMBYDCQAmAAwFMAIABQMJACYADAUwAgAGAwkAJgAMDhAC AAADCQAmAAwOcAIACwMJACYADBJgAgAOMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGDKkI3/ikpi95sFTl0f 3q89Kfpt7dowaoOSLyMimTl88u82IUfPFzRMufXvGnZHF88E3r4mbVqjifLxFhCC vc2J5vrjODlYxxotRTFKLVLWVCHT0gGT484TyVboVZVpfGNNLt1A+nKrjAGMsmvm GRAFkjEEvTP55sMnPN6Zk00PPnbKKWJ9SWi0nb/VLe33IGVcSuV0OEitxDno9ogi NseP3fyVwNRnGQjUrz3PWL0n7eA8AVilDivYl86dzmuHPYnmrod5PcyZI6nUMc9o cBPk7LBLOb6r2d5nLGRF2hum5w1FqCp7+bPDmrkG+je41u98pf3GZ+ugtYPDCwcc tO0= -----END CERTIFICATE-----Generated at Tue Jul 21 13:13:29 2026 by rpki-client