$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/89fa7171-bce0-3688-ab6e-27f3cac68965.roa File: 89fa7171-bce0-3688-ab6e-27f3cac68965.roa (raw, json) Hash identifier: mmf8ENTcN0B51wfOI81bR8OCilfIdASMwSEUQRts4CI= Subject key identifier: 5A:3D:9A:EF:9F:CC:E5:1B:74:84:49:D2:56:BD:67:D6:61:22:B4:5D Certificate issuer: /CN=aa363d52-209b-47ac-aa24-f8c86d11fcb9 Certificate serial: 010D0C9F4328584DAC456C15AF6C0B56A31DD2C0 Authority key identifier: F2:BC:8C:E9:CC:0C:09:4F:50:2B:F4:AA:DE:CF:CE:3D:BA:40:58:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/89fa7171-bce0-3688-ab6e-27f3cac68965.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 12243 IP address blocks: 2606:1040::/32 maxlen: 32 2620:11f:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/aa363d52-209b-47ac-aa24-f8c86d11fcb9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/aa363d52-209b-47ac-aa24-f8c86d11fcb9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 03 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:6c:15:af:6c:0b:56:a3:1d:d2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa363d52-209b-47ac-aa24-f8c86d11fcb9 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=c7a6770b-fee4-4cb3-b94f-b9c5465164bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:07:b2:8d:ac:3a:99:fa:6a:14:dc:ab:11:b9: 51:b0:b0:11:ea:87:c7:73:95:ab:59:68:c2:46:0b: d6:c0:db:95:3a:0a:51:8d:33:bd:f5:e9:68:e5:4b: f4:30:83:b7:70:aa:48:e3:fc:be:fd:f4:9f:1b:70: a2:d3:fc:19:fd:77:c1:a4:41:01:cd:e3:18:19:dc: 0f:98:ee:05:78:29:d6:75:db:f5:9c:76:ae:04:cb: 84:1f:19:89:40:e1:af:ce:61:94:e1:1e:37:75:e8: c4:ae:63:6b:f3:0c:89:f2:f9:ea:14:87:0d:e6:a7: 83:d3:a7:dd:68:93:c6:69:98:65:4f:87:82:01:c1: ba:c4:73:5f:89:f5:d8:7e:92:a0:f0:51:ca:64:ee: ab:db:76:89:ad:ea:40:3e:cb:ca:54:f1:d2:9a:6f: 78:4b:a2:b5:df:4d:78:d6:14:63:c1:58:d5:e0:01: da:a4:0c:ed:e9:36:c7:81:d2:03:1d:ef:ae:b5:78: 60:19:16:5e:2d:ea:9d:c2:3e:76:e5:42:9e:b7:94: 89:3e:3e:f3:e3:d0:f2:e5:9e:98:65:0c:29:06:69: 51:ab:53:ff:31:91:2a:c2:31:59:1e:68:44:4b:d0: e6:d2:35:a1:69:9c:85:d1:b5:28:6f:f2:fb:7c:91: 74:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3D:9A:EF:9F:CC:E5:1B:74:84:49:D2:56:BD:67:D6:61:22:B4:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/89fa7171-bce0-3688-ab6e-27f3cac68965.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/aa363d52-209b-47ac-aa24-f8c86d11fcb9.crl X509v3 Authority Key Identifier: keyid:F2:BC:8C:E9:CC:0C:09:4F:50:2B:F4:AA:DE:CF:CE:3D:BA:40:58:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9.cer sbgp-ipAddrBlock: critical IPv6: 2606:1040::/32 2620:11f:e000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:79:e8:60:a0:46:4b:87:4e:a9:ba:32:77:d2:7f:53:b8:b9: 78:b2:20:40:88:4e:5d:7a:35:12:e9:5b:cd:55:81:73:6d:ff: e8:9e:76:b3:75:32:00:58:4f:d8:af:a0:16:cc:77:31:c9:8d: a6:3d:05:f0:8f:12:a1:dc:5a:03:46:73:cb:71:e8:8c:b9:db: 02:50:2a:52:bc:cc:64:af:d4:b3:06:30:65:7f:ea:a1:36:87: a9:b1:e9:d2:ef:97:8f:33:8f:76:53:1b:6e:44:55:21:06:fa: ca:89:b7:4e:ff:9a:b9:5c:f8:ed:3a:75:41:9f:fc:ce:48:73: 0e:fb:0d:da:23:67:00:f2:48:c0:d2:ae:57:87:68:5e:4a:58: fa:e0:61:1a:7d:74:54:16:9c:b1:8a:90:ed:2a:58:95:15:b5: 67:10:01:a9:55:b6:24:b5:ac:94:9a:25:e4:27:1b:c9:ff:69: 47:69:b9:dd:73:e8:2e:fb:0c:f5:f7:28:7f:77:05:50:20:37: 57:0a:dd:22:50:93:ec:3a:50:9a:3f:26:34:3f:17:d7:0e:1a: 02:82:9f:ca:35:95:ad:58:14:c5:c7:53:62:9b:ad:8b:02:45: ab:1b:9e:ff:17:26:a8:77:fc:96:27:8e:57:df:2c:5f:8b:1d: 4a:f7:b6:a9 -----BEGIN CERTIFICATE----- MIIGTDCCBTSgAwIBAgIUAQ0Mn0MoWE2sRWwVr2wLVqMd0sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzNjNkNTItMjA5Yi00N2FjLWFhMjQtZjhjODZkMTFm Y2I5MB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk YzdhNjc3MGItZmVlNC00Y2IzLWI5NGYtYjljNTQ2NTE2NGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgeyjaw6mfpqFNyrEblRsLAR6ofHc5WrWWjC RgvWwNuVOgpRjTO99elo5Uv0MIO3cKpI4/y+/fSfG3Ci0/wZ/XfBpEEBzeMYGdwP mO4FeCnWddv1nHauBMuEHxmJQOGvzmGU4R43dejErmNr8wyJ8vnqFIcN5qeD06fd aJPGaZhlT4eCAcG6xHNfifXYfpKg8FHKZO6r23aJrepAPsvKVPHSmm94S6K13014 1hRjwVjV4AHapAzt6TbHgdIDHe+utXhgGRZeLeqdwj525UKet5SJPj7z49Dy5Z6Y ZQwpBmlRq1P/MZEqwjFZHmhES9Dm0jWhaZyF0bUob/L7fJF0PQIDAQABo4IDXjCC A1owHQYDVR0OBBYEFFo9mu+fzOUbdIRJ0la9Z9ZhIrRdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hYTM2 M2Q1Mi0yMDliLTQ3YWMtYWEyNC1mOGM4NmQxMWZjYjkvODlmYTcxNzEtYmNlMC0z Njg4LWFiNmUtMjdmM2NhYzY4OTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWEzNjNkNTItMjA5Yi00N2FjLWFh MjQtZjhjODZkMTFmY2I5L2FhMzYzZDUyLTIwOWItNDdhYy1hYTI0LWY4Yzg2ZDEx ZmNiOS5jcmwwHwYDVR0jBBgwFoAU8ryM6cwMCU9QK/Sq3s/OPbpAWDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hYTM2M2Q1Mi0yMDliLTQ3YWMtYWEyNC1mOGM4 NmQxMWZjYjkuY2VyMCgGCCsGAQUFBwEHAQH/BBkwFzAVBAIAAjAPAwUAJgYQQAMG ACYgAR/gMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAF956GCgRkuHTqm6MnfSf1O4uXiyIECITl16NRLpW81V gXNt/+iedrN1MgBYT9ivoBbMdzHJjaY9BfCPEqHcWgNGc8tx6Iy52wJQKlK8zGSv 1LMGMGV/6qE2h6mx6dLvl48zj3ZTG25EVSEG+sqJt07/mrlc+O06dUGf/M5Icw77 DdojZwDySMDSrleHaF5KWPrgYRp9dFQWnLGKkO0qWJUVtWcQAalVtiS1rJSaJeQn G8n/aUdpud1z6C77DPX3KH93BVAgN1cK3SJQk+w6UJo/JjQ/F9cOGgKCn8o1la1Y FMXHU2KbrYsCRasbnv8XJqh3/JYnjlffLF+LHUr3tqk= -----END CERTIFICATE-----Generated at Fri May 1 22:19:37 2026 by rpki-client