$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/2aaeb1c2-92f7-3251-8149-72558a4ea315.roa File: 2aaeb1c2-92f7-3251-8149-72558a4ea315.roa (raw, json) Hash identifier: arDyzV4qa/YjW/uXhRH1CAjDgWaYi88NJzNfCIP3VGM= Subject key identifier: 8F:44:58:AD:C4:3A:C5:F3:8D:CE:33:89:DA:5C:B2:F5:1A:32:F9:15 Certificate issuer: /CN=09440a93-986f-41da-8723-7b67f81bdbce Certificate serial: 010D0C9F4328584EB6E1B533E5F5AA826CB83C00 Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/2aaeb1c2-92f7-3251-8149-72558a4ea315.roa Signing time: Mon 03 Aug 2026 13:00:12 +0000 ROA not before: Mon 03 Aug 2026 13:00:12 +0000 ROA not after: Sun 01 Nov 2026 14:00:12 +0000 asID: 19901 IP address blocks: 2607:6c40:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b6:e1:b5:33:e5:f5:aa:82:6c:b8:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce Validity Not Before: Aug 3 13:00:12 2026 GMT Not After : Nov 1 14:00:12 2026 GMT Subject: CN=a9a40eda-d7bc-4c41-b9f2-a08c27a71958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f2:57:94:9f:a7:81:cd:93:e2:b9:d3:ab:9c: 07:13:f0:d5:57:a9:0e:0b:20:bb:03:c0:ec:c9:d6: 03:aa:bb:e6:69:2f:c0:f3:e9:ef:2c:62:48:ac:5d: 97:7d:58:76:43:ba:fe:47:a5:45:79:a5:54:a4:1c: 88:e9:1f:53:00:17:40:c4:d0:ee:77:c4:c7:bb:83: bf:34:9e:9d:3c:fc:4d:04:21:62:09:18:bb:83:cd: a5:8b:07:e3:cf:80:04:b8:b0:6a:42:4e:27:4a:d0: 02:07:39:ca:9d:5f:bc:cc:87:f1:b9:34:04:77:4a: 97:31:36:1c:bc:66:33:63:94:b8:34:9d:4c:40:6c: 51:24:18:a9:28:df:ed:b8:c8:6d:4c:ba:81:c3:79: be:d9:f3:bb:fb:3d:47:13:7f:5d:e8:a3:c2:a7:8a: a4:3e:93:63:4f:eb:a1:ab:4b:1b:86:4f:19:ae:98: 21:85:71:fe:78:49:c0:ac:6c:02:e3:04:ac:88:b9: 0d:3a:11:df:f5:99:65:1f:20:27:fc:00:3f:36:d8: 21:e6:37:42:3a:e1:df:54:fc:82:29:56:53:e5:e0: 02:1a:26:17:ea:23:99:a6:23:25:bf:cc:9a:af:ac: 1c:80:c8:f0:2e:c3:39:de:ac:34:f3:05:03:ac:4f: 7e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:44:58:AD:C4:3A:C5:F3:8D:CE:33:89:DA:5C:B2:F5:1A:32:F9:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/2aaeb1c2-92f7-3251-8149-72558a4ea315.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl X509v3 Authority Key Identifier: keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer sbgp-ipAddrBlock: critical IPv6: 2607:6c40:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:f4:db:ed:10:8e:a8:ce:51:d4:30:33:4b:ca:42:4f:78:5b: 04:5d:ef:ec:8f:a5:e3:cd:e6:f5:ea:fb:45:2b:7e:ca:22:83: d7:d3:c6:b6:c8:f1:d3:1c:c3:9d:16:06:eb:0d:48:55:be:bc: da:a5:d0:ca:4a:87:11:37:b0:7b:8a:21:5d:38:cd:3a:66:cc: 0f:59:de:f2:9c:df:92:4b:07:0e:3e:d8:02:2b:ce:b2:2f:9e: 63:47:03:50:e6:5d:d1:f8:82:67:ad:58:d9:6d:89:bd:53:3b: b5:ea:f1:f4:fd:65:2e:ce:b2:d5:25:05:a1:6d:00:0a:56:d6: f4:2f:cc:c1:51:e2:03:66:d5:2b:a9:e1:94:e2:a5:3b:b4:5f: 05:5d:13:9d:e7:37:62:dc:89:08:db:3e:40:08:9b:d3:51:c4: 03:81:01:49:0a:74:a5:a3:bc:2c:2a:ae:99:bd:36:ab:37:f1: bb:4b:bf:63:1b:a4:f0:a3:a8:f7:8a:c7:29:d8:70:4a:69:7a: 27:91:7b:55:66:4d:d7:1a:03:40:af:82:38:56:e5:42:eb:25: 61:82:01:1a:f8:99:ca:e5:6e:2a:00:9c:90:de:1b:eb:63:35: 65:90:e2:38:c6:1a:ef:e1:71:0d:c5:2c:48:04:4a:62:2f:03: fe:3f:b3:97 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE624bUz5fWqgmy4PAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDk0NDBhOTMtOTg2Zi00MWRhLTg3MjMtN2I2N2Y4MWJk YmNlMB4XDTI2MDgwMzEzMDAxMloXDTI2MTEwMTE0MDAxMlowLzEtMCsGA1UEAxMk YTlhNDBlZGEtZDdiYy00YzQxLWI5ZjItYTA4YzI3YTcxOTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPJXlJ+ngc2T4rnTq5wHE/DVV6kOCyC7A8Ds ydYDqrvmaS/A8+nvLGJIrF2XfVh2Q7r+R6VFeaVUpByI6R9TABdAxNDud8THu4O/ NJ6dPPxNBCFiCRi7g82liwfjz4AEuLBqQk4nStACBznKnV+8zIfxuTQEd0qXMTYc vGYzY5S4NJ1MQGxRJBipKN/tuMhtTLqBw3m+2fO7+z1HE39d6KPCp4qkPpNjT+uh q0sbhk8ZrpghhXH+eEnArGwC4wSsiLkNOhHf9ZllHyAn/AA/Ntgh5jdCOuHfVPyC KVZT5eACGiYX6iOZpiMlv8yar6wcgMjwLsM53qw08wUDrE9+mwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI9EWK3EOsXzjc4zidpcsvUaMvkVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0 MGE5My05ODZmLTQxZGEtODcyMy03YjY3ZjgxYmRiY2UvMmFhZWIxYzItOTJmNy0z MjUxLTgxNDktNzI1NThhNGVhMzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDk0NDBhOTMtOTg2Zi00MWRhLTg3 MjMtN2I2N2Y4MWJkYmNlLzA5NDQwYTkzLTk4NmYtNDFkYS04NzIzLTdiNjdmODFi ZGJjZS5jcmwwHwYDVR0jBBgwFoAUSEuB66mWlz+y3uneit7pXEIwQ4MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0MGE5My05ODZmLTQxZGEtODcyMy03YjY3 ZjgxYmRiY2UuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgdsQAAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACb02+0QjqjOUdQwM0vKQk94WwRd7+yPpePN5vXq+0Urfsoig9fT xrbI8dMcw50WBusNSFW+vNql0MpKhxE3sHuKIV04zTpmzA9Z3vKc35JLBw4+2AIr zrIvnmNHA1DmXdH4gmetWNltib1TO7Xq8fT9ZS7OstUlBaFtAApW1vQvzMFR4gNm 1Sup4ZTipTu0XwVdE53nN2LciQjbPkAIm9NRxAOBAUkKdKWjvCwqrpm9Nqs38btL v2MbpPCjqPeKxynYcEppeieRe1VmTdcaA0CvgjhW5ULrJWGCARr4mcrlbioAnJDe G+tjNWWQ4jjGGu/hcQ3FLEgESmIvA/4/s5c= -----END CERTIFICATE-----Generated at Sun Sep 13 12:37:07 2026 by rpki-client