$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/ae0ccfe5-813a-30c6-ad89-44f55329642c.roa File: ae0ccfe5-813a-30c6-ad89-44f55329642c.roa (raw, json) Hash identifier: UQpsiM4AAeUkKcjRO0ITMM+LB7f8Igx3uHdvyBSOKW4= Subject key identifier: 12:A3:92:4A:18:AF:4D:44:03:14:97:21:70:0A:B1:46:D6:04:09:03 Certificate issuer: /CN=a521f5ee-89d2-4088-abb9-f69291655e39 Certificate serial: 010D0C9F4328584EFE1228D9DBB603211555AB00 Authority key identifier: 14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/ae0ccfe5-813a-30c6-ad89-44f55329642c.roa Signing time: Sat 29 Aug 2026 01:00:12 +0000 ROA not before: Sat 29 Aug 2026 01:00:12 +0000 ROA not after: Fri 27 Nov 2026 02:00:12 +0000 asID: 25820 IP address blocks: 2607:8700::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fe:12:28:d9:db:b6:03:21:15:55:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a521f5ee-89d2-4088-abb9-f69291655e39 Validity Not Before: Aug 29 01:00:12 2026 GMT Not After : Nov 27 02:00:12 2026 GMT Subject: CN=2e12ac96-2937-4d0d-b06c-16b6f2a40b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9a:62:7c:4e:56:21:39:53:23:54:1b:1d:74: b7:39:55:a0:16:09:19:10:95:53:83:04:50:85:d7: 09:07:88:5d:5c:b7:d5:f4:b9:af:7c:c8:de:70:97: 82:6d:63:b4:bf:a8:ed:bc:85:7c:b9:26:79:46:c3: a3:fc:12:92:83:88:f0:84:a7:b2:eb:41:e3:83:9d: 49:61:e9:2a:7d:27:03:b5:36:ed:a6:3d:cb:61:99: 22:fd:7d:d6:ce:7f:da:06:dd:b5:e4:68:50:5c:5c: 56:e8:a3:18:c0:b9:4b:8b:e7:8d:c9:9a:92:fc:a3: 23:75:de:8e:4d:29:0a:b5:f3:5b:b1:05:70:b1:ce: e1:5e:a0:c5:57:6a:8e:75:27:4e:3a:2c:f5:e7:95: 96:d4:c7:33:0c:1e:2b:4d:73:f8:3e:5b:a6:11:9c: 11:94:4f:b7:23:59:5d:ba:58:8c:32:7c:07:3c:87: d9:6d:c6:54:32:67:56:f7:8b:72:1c:41:9d:27:c7: 06:7c:ba:b4:4a:8b:9f:b9:d8:6a:14:54:14:5a:94: 57:be:3f:8d:8d:61:11:85:22:b3:be:e5:9d:8f:9c: 51:df:1d:3c:30:1a:ac:24:75:5c:77:7f:96:83:02: e3:f6:03:7f:5f:c3:ed:59:66:cb:69:14:3d:a6:3e: d4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A3:92:4A:18:AF:4D:44:03:14:97:21:70:0A:B1:46:D6:04:09:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/ae0ccfe5-813a-30c6-ad89-44f55329642c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl X509v3 Authority Key Identifier: keyid:14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer sbgp-ipAddrBlock: critical IPv6: 2607:8700::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:06:17:b2:02:6a:36:cb:1a:85:6c:b6:11:b1:41:88:2c:56: fe:60:f8:86:33:e3:4c:7c:32:bf:62:e8:a2:f5:a1:9c:ca:94: 86:3f:74:a6:be:0e:30:59:e2:fd:5a:7e:1a:ce:7a:f4:ec:62: b2:fb:87:21:8c:26:a1:3b:83:46:7f:37:8d:47:d0:dd:da:87: 4e:b1:5b:47:9b:7b:d5:2b:42:e3:ba:c0:c5:0b:e6:01:33:a7: b9:30:a9:3a:c6:3b:2e:a1:70:3f:e8:6a:27:c2:a9:c8:f3:f5: 8c:d7:c1:5f:44:20:e6:9d:47:54:27:f8:ab:59:a2:9c:f1:8b: 38:c4:5c:a7:0f:fd:58:ee:0f:3a:96:b8:46:de:da:9c:f0:37: 84:6d:8c:64:f5:bc:c4:b7:35:13:88:8c:2b:7b:d3:d8:89:dc: c5:ae:19:35:f2:32:7e:86:29:79:b5:4b:86:f6:5d:07:0d:dc: 27:b5:b7:7c:17:03:6d:98:b4:c7:07:42:35:97:82:20:10:22: b3:49:54:c3:74:58:fe:90:eb:2d:f3:19:cd:dc:29:92:4f:8b: e1:aa:d1:16:3c:71:39:60:a0:fa:f3:ba:a5:b5:aa:9c:b9:1a: a7:50:4b:d0:b1:ee:ca:92:9f:39:9e:73:2a:da:4c:55:60:1e: ff:fb:41:0f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7+EijZ27YDIRVVqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUyMWY1ZWUtODlkMi00MDg4LWFiYjktZjY5MjkxNjU1 ZTM5MB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk MmUxMmFjOTYtMjkzNy00ZDBkLWIwNmMtMTZiNmYyYTQwYjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAippifE5WITlTI1QbHXS3OVWgFgkZEJVTgwRQ hdcJB4hdXLfV9LmvfMjecJeCbWO0v6jtvIV8uSZ5RsOj/BKSg4jwhKey60Hjg51J YekqfScDtTbtpj3LYZki/X3Wzn/aBt215GhQXFxW6KMYwLlLi+eNyZqS/KMjdd6O TSkKtfNbsQVwsc7hXqDFV2qOdSdOOiz155WW1MczDB4rTXP4PlumEZwRlE+3I1ld uliMMnwHPIfZbcZUMmdW94tyHEGdJ8cGfLq0SoufudhqFFQUWpRXvj+NjWERhSKz vuWdj5xR3x08MBqsJHVcd3+WgwLj9gN/X8PtWWbLaRQ9pj7UtwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBKjkkoYr01EAxSXIXAKsUbWBAkDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNTIx ZjVlZS04OWQyLTQwODgtYWJiOS1mNjkyOTE2NTVlMzkvYWUwY2NmZTUtODEzYS0z MGM2LWFkODktNDRmNTUzMjk2NDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTUyMWY1ZWUtODlkMi00MDg4LWFi YjktZjY5MjkxNjU1ZTM5L2E1MjFmNWVlLTg5ZDItNDA4OC1hYmI5LWY2OTI5MTY1 NWUzOS5jcmwwHwYDVR0jBBgwFoAUFO4NvHhYb0lqT3wuMEpOEan+m3MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNTIxZjVlZS04OWQyLTQwODgtYWJiOS1mNjky OTE2NTVlMzkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgeHADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB4BheyAmo2yxqFbLYRsUGILFb+YPiGM+NMfDK/Yuii9aGcypSGP3Sm vg4wWeL9Wn4aznr07GKy+4chjCahO4NGfzeNR9Dd2odOsVtHm3vVK0LjusDFC+YB M6e5MKk6xjsuoXA/6GonwqnI8/WM18FfRCDmnUdUJ/irWaKc8Ys4xFynD/1Y7g86 lrhG3tqc8DeEbYxk9bzEtzUTiIwre9PYidzFrhk18jJ+hil5tUuG9l0HDdwntbd8 FwNtmLTHB0I1l4IgECKzSVTDdFj+kOst8xnN3CmST4vhqtEWPHE5YKD687qltaqc uRqnUEvQse7Kkp85nnMq2kxVYB7/+0EP -----END CERTIFICATE-----Generated at Sun Oct 11 07:07:05 2026 by rpki-client