$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa5bec33-2d6c-3cf8-9ccb-8566b3787b21.roa File: aa5bec33-2d6c-3cf8-9ccb-8566b3787b21.roa (raw, json) Hash identifier: I3rteCI1MX/6fZBa+6clBG83BXLLLWlvzg3lDpD6dV4= Subject key identifier: 6E:07:A9:9F:FA:D0:02:CC:EE:CD:39:B2:1E:DE:04:D5:06:EE:E8:04 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EA788D3930186642C9B922200 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa5bec33-2d6c-3cf8-9ccb-8566b3787b21.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 10515 IP address blocks: 2001:501:8a29::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:d3:93:01:86:64:2c:9b:92:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=53813527-cb03-4a69-bbbd-1020e2a422e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8f:56:6d:d9:44:9c:22:77:7c:e3:71:0a:ab: a0:0f:1b:e8:89:6e:8d:20:3b:f2:b6:42:8e:2a:02: f0:71:9d:43:a6:a1:38:2e:aa:04:04:53:35:ef:9d: 9e:ba:ea:ad:d9:f5:ad:6d:60:cd:11:31:c4:eb:c1: d6:c1:2b:eb:d2:b7:8f:13:99:91:7b:18:41:da:cf: f1:3b:91:3a:66:99:3d:31:9c:39:6c:25:ab:f3:5e: a3:da:98:9b:b3:51:39:f2:b8:15:79:0e:65:24:75: 1a:f9:36:21:09:2d:b9:f0:cf:73:6d:62:00:c1:f3: 83:55:55:83:bc:96:83:f5:16:d2:cb:5c:81:98:74: cc:db:64:71:0f:40:85:13:88:2d:73:d3:cd:4a:16: 9a:6c:25:1d:87:3f:28:19:30:b0:60:8b:41:30:d6: 52:bb:85:a3:a5:97:41:1f:f3:7c:54:cd:49:86:1b: 84:37:73:e2:b6:bb:6a:0c:62:7a:82:2e:ca:c2:4f: 70:4d:62:4e:ba:fc:80:1b:c6:01:4c:ff:9a:5e:95: a9:e8:10:db:f1:68:fb:40:41:e1:3c:cc:72:79:8a: 69:ce:85:06:71:aa:20:f1:d6:89:59:63:3f:2f:90: 6e:dc:02:ac:8d:c3:6e:1d:1b:41:69:3f:58:21:41: 3c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:07:A9:9F:FA:D0:02:CC:EE:CD:39:B2:1E:DE:04:D5:06:EE:E8:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa5bec33-2d6c-3cf8-9ccb-8566b3787b21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:2b:96:c7:d4:9f:66:4e:ff:d2:df:4f:0c:cd:3e:4f:0a:62: 0d:b5:fd:70:c4:b0:f6:dd:76:a4:79:fc:80:45:21:2c:d8:24: 82:7a:12:d3:2e:87:d9:86:4a:bd:2a:c7:fa:9d:c4:d6:25:95: 30:f7:f4:f2:8d:82:93:94:b6:ca:50:1c:dc:05:63:3e:b8:50: 64:03:2e:b3:c0:17:c8:53:18:b0:90:2c:01:4a:ba:d5:bc:0e: d8:c3:31:9f:60:9a:3b:e4:f3:01:53:6f:c7:ca:e1:28:dc:32: 2e:6c:e8:c3:10:fe:86:43:1b:7e:9e:03:91:c6:7a:6f:a6:d2: 71:88:1c:70:97:bb:5c:26:25:86:37:73:9a:1f:17:26:18:83: 1f:db:a6:f7:d9:e1:4b:f6:0b:96:07:af:d6:50:74:94:e7:50: 72:71:50:e2:38:5a:42:d4:e6:bc:42:b0:ef:ee:c8:53:f0:d2: 13:ed:99:88:fd:d7:83:51:72:ac:79:2b:a1:f5:17:d0:8a:c9: 65:a5:19:4d:8b:f6:28:01:b8:3e:23:84:ef:f3:4e:99:95:23: 8b:06:fa:cc:f3:e2:a8:84:c2:93:44:50:cb:48:cd:27:85:6a: a5:4b:bd:d8:2c:ef:a9:62:38:e7:23:99:69:aa:1c:96:c2:ed: ae:55:27:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6niNOTAYZkLJuSIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NTM4MTM1MjctY2IwMy00YTY5LWJiYmQtMTAyMGUyYTQyMmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyY9WbdlEnCJ3fONxCqugDxvoiW6NIDvytkKO KgLwcZ1DpqE4LqoEBFM1752euuqt2fWtbWDNETHE68HWwSvr0rePE5mRexhB2s/x O5E6Zpk9MZw5bCWr816j2pibs1E58rgVeQ5lJHUa+TYhCS258M9zbWIAwfODVVWD vJaD9RbSy1yBmHTM22RxD0CFE4gtc9PNShaabCUdhz8oGTCwYItBMNZSu4WjpZdB H/N8VM1JhhuEN3PitrtqDGJ6gi7Kwk9wTWJOuvyAG8YBTP+aXpWp6BDb8Wj7QEHh PMxyeYppzoUGcaog8daJWWM/L5Bu3AKsjcNuHRtBaT9YIUE8LwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG4HqZ/60ALM7s05sh7eBNUG7ugEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWE1YmVjMzMtMmQ2Yy0z Y2Y4LTljY2ItODU2NmIzNzg3YjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAYop MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALQrlsfUn2ZO/9LfTwzNPk8KYg21/XDEsPbddqR5/IBFISzYJIJ6 EtMuh9mGSr0qx/qdxNYllTD39PKNgpOUtspQHNwFYz64UGQDLrPAF8hTGLCQLAFK utW8DtjDMZ9gmjvk8wFTb8fK4SjcMi5s6MMQ/oZDG36eA5HGem+m0nGIHHCXu1wm JYY3c5ofFyYYgx/bpvfZ4Uv2C5YHr9ZQdJTnUHJxUOI4WkLU5rxCsO/uyFPw0hPt mYj914NRcqx5K6H1F9CKyWWlGU2L9igBuD4jhO/zTpmVI4sG+szz4qiEwpNEUMtI zSeFaqVLvdgs76liOOcjmWmqHJbC7a5VJ0s= -----END CERTIFICATE-----Generated at Wed Aug 19 20:16:49 2026 by rpki-client