$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/aa0e6fba-e370-45c9-9b11-9af9568150ee/5d390028-6b3d-3bd7-ac3d-731b6484914b.roa File: 5d390028-6b3d-3bd7-ac3d-731b6484914b.roa (raw, json) Hash identifier: J+eeHZkRwjhurO96sgqDi8ZUxBz2Ehw+xIf2RUndKg8= Subject key identifier: F1:E6:1C:D0:70:F6:C2:60:74:1E:2E:AA:58:E5:94:98:BB:10:DC:34 Certificate issuer: /CN=aa0e6fba-e370-45c9-9b11-9af9568150ee Certificate serial: 010D0C9F4328584F2FA4736CF73F276A6B520540 Authority key identifier: 05:8F:12:27:0F:96:D8:C6:F6:C2:1E:59:79:00:FF:79:58:71:15:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/aa0e6fba-e370-45c9-9b11-9af9568150ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/aa0e6fba-e370-45c9-9b11-9af9568150ee/5d390028-6b3d-3bd7-ac3d-731b6484914b.roa Signing time: Tue 15 Sep 2026 19:09:47 +0000 ROA not before: Tue 15 Sep 2026 19:09:47 +0000 ROA not after: Mon 14 Dec 2026 20:09:47 +0000 asID: 400804 IP address blocks: 2604:1ae0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/aa0e6fba-e370-45c9-9b11-9af9568150ee/aa0e6fba-e370-45c9-9b11-9af9568150ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/aa0e6fba-e370-45c9-9b11-9af9568150ee/aa0e6fba-e370-45c9-9b11-9af9568150ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/aa0e6fba-e370-45c9-9b11-9af9568150ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2f:a4:73:6c:f7:3f:27:6a:6b:52:05:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa0e6fba-e370-45c9-9b11-9af9568150ee Validity Not Before: Sep 15 19:09:47 2026 GMT Not After : Dec 14 20:09:47 2026 GMT Subject: CN=90dca403-4f2b-4faf-8a7c-1e5b08570a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8d:fc:f1:a4:70:19:8b:a2:0b:01:49:86:76: 7f:28:a8:65:80:ab:e8:03:2f:7b:cb:3f:77:b3:52: a5:37:b5:8e:bf:8d:38:3e:07:c7:11:12:be:1a:46: 15:7d:d7:0d:e6:4c:ba:94:f2:37:f3:14:a7:d7:45: 86:c0:b7:88:82:80:cb:20:c4:09:a3:3b:e9:12:46: b6:0d:9a:15:ba:5f:57:09:ad:53:d7:9f:0a:c1:a7: 6b:f1:ab:92:db:6f:79:8e:3c:fc:22:08:76:ef:24: 6c:ae:72:cc:91:b2:63:2b:a9:b3:08:2e:e2:dc:d3: ee:bd:66:a1:39:d6:90:6b:38:04:d8:75:83:e1:dc: 21:49:15:f9:1a:a5:4e:76:de:87:74:dc:4d:95:70: eb:f0:27:95:24:42:96:be:f0:ef:73:65:3a:95:7a: 78:cb:26:7a:c6:e6:6d:dc:51:12:b9:d0:c2:72:0c: fe:b4:4e:27:cf:ae:93:23:0e:9d:62:a0:96:ce:72: 2e:8b:32:d7:24:0f:11:52:7c:4c:e0:1a:cd:7d:0c: b5:a7:00:ae:04:d5:7a:fa:29:d8:ed:93:62:37:93: 3b:78:19:6f:6f:77:6d:09:00:f0:6d:dd:d1:19:95: 86:11:e4:d2:12:6a:ac:b9:dd:88:68:a4:56:e0:75: ff:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E6:1C:D0:70:F6:C2:60:74:1E:2E:AA:58:E5:94:98:BB:10:DC:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/aa0e6fba-e370-45c9-9b11-9af9568150ee/5d390028-6b3d-3bd7-ac3d-731b6484914b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/aa0e6fba-e370-45c9-9b11-9af9568150ee/aa0e6fba-e370-45c9-9b11-9af9568150ee.crl X509v3 Authority Key Identifier: keyid:05:8F:12:27:0F:96:D8:C6:F6:C2:1E:59:79:00:FF:79:58:71:15:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/aa0e6fba-e370-45c9-9b11-9af9568150ee.cer sbgp-ipAddrBlock: critical IPv6: 2604:1ae0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:c9:64:a7:a7:61:e0:17:8b:66:8f:ea:72:61:ec:9a:63:df: 5a:1e:89:24:53:05:4e:cb:8f:64:7b:fe:98:4f:ee:5d:ad:f8: 89:e7:08:3c:70:73:ae:c8:7f:18:f2:07:a5:c0:73:2c:99:fd: 86:73:a7:8f:ad:ff:78:32:37:d8:6c:56:20:83:a7:44:ba:b3: 09:0e:d4:2a:bb:1c:98:2d:4b:64:ad:d7:ac:02:37:45:c6:4b: 3b:1e:f8:db:24:6a:95:7f:4e:a9:4f:51:4b:a8:35:76:8c:ac: ee:3a:5b:d2:ae:a7:1d:b6:14:d1:02:c5:58:8f:18:21:04:70: 5e:a5:85:7b:a8:35:c0:62:0f:55:70:3e:22:f0:20:16:eb:42: d5:74:77:0d:7a:88:03:f3:45:d5:1f:5f:81:76:c1:48:82:b0: 37:f3:c6:ac:b1:cf:a5:10:81:87:93:bc:dd:06:29:80:14:d5: 18:4b:44:a3:6c:04:a2:76:85:96:55:39:1f:ce:fa:a1:c4:45: 90:92:07:d3:51:0e:72:c0:b9:d3:6f:02:15:32:43:34:a7:1f: fe:9e:1d:b6:2d:de:ef:52:c0:34:4d:97:60:7b:d5:14:c8:d4: 89:0d:58:85:aa:da:e8:20:2d:22:f8:b7:c1:76:f5:95:4e:3a: ba:60:f0:87 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8vpHNs9z8namtSBUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwZTZmYmEtZTM3MC00NWM5LTliMTEtOWFmOTU2ODE1 MGVlMB4XDTI2MDkxNTE5MDk0N1oXDTI2MTIxNDIwMDk0N1owLzEtMCsGA1UEAxMk OTBkY2E0MDMtNGYyYi00ZmFmLThhN2MtMWU1YjA4NTcwYTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzo388aRwGYuiCwFJhnZ/KKhlgKvoAy97yz93 s1KlN7WOv404PgfHERK+GkYVfdcN5ky6lPI38xSn10WGwLeIgoDLIMQJozvpEka2 DZoVul9XCa1T158Kwadr8auS2295jjz8Igh27yRsrnLMkbJjK6mzCC7i3NPuvWah OdaQazgE2HWD4dwhSRX5GqVOdt6HdNxNlXDr8CeVJEKWvvDvc2U6lXp4yyZ6xuZt 3FESudDCcgz+tE4nz66TIw6dYqCWznIuizLXJA8RUnxM4BrNfQy1pwCuBNV6+inY 7ZNiN5M7eBlvb3dtCQDwbd3RGZWGEeTSEmqsud2IaKRW4HX/HwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPHmHNBw9sJgdB4uqljllJi7ENw0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9hYTBl NmZiYS1lMzcwLTQ1YzktOWIxMS05YWY5NTY4MTUwZWUvNWQzOTAwMjgtNmIzZC0z YmQ3LWFjM2QtNzMxYjY0ODQ5MTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvYWEwZTZmYmEtZTM3MC00NWM5LTli MTEtOWFmOTU2ODE1MGVlL2FhMGU2ZmJhLWUzNzAtNDVjOS05YjExLTlhZjk1Njgx NTBlZS5jcmwwHwYDVR0jBBgwFoAUBY8SJw+W2Mb2wh5ZeQD/eVhxFTIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9hYTBlNmZiYS1lMzcwLTQ1YzktOWIxMS05YWY5 NTY4MTUwZWUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQa4DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA+yWSnp2HgF4tmj+pyYeyaY99aHokkUwVOy49ke/6YT+5drfiJ5wg8 cHOuyH8Y8gelwHMsmf2Gc6ePrf94MjfYbFYgg6dEurMJDtQquxyYLUtkrdesAjdF xks7HvjbJGqVf06pT1FLqDV2jKzuOlvSrqcdthTRAsVYjxghBHBepYV7qDXAYg9V cD4i8CAW60LVdHcNeogD80XVH1+BdsFIgrA388assc+lEIGHk7zdBimAFNUYS0Sj bASidoWWVTkfzvqhxEWQkgfTUQ5ywLnTbwIVMkM0px/+nh22Ld7vUsA0TZdge9UU yNSJDViFqtroIC0i+LfBdvWVTjq6YPCH -----END CERTIFICATE-----Generated at Wed Sep 16 13:11:03 2026 by rpki-client