$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/dad7d956-91ce-309d-a710-c9e480e1eb82.roa File: dad7d956-91ce-309d-a710-c9e480e1eb82.roa (raw, json) Hash identifier: 2+UPttdS3S16diZwLqQIFYkZ8dgbhsMY2iHmJsUYrhU= Subject key identifier: 80:71:6E:63:01:06:F4:76:1D:A1:DD:7F:FD:49:13:B1:AF:B7:0B:7C Certificate issuer: /CN=5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca Certificate serial: 010D0C9F4328584EA78807448C1CD47D781A1780 Authority key identifier: 02:5F:8E:3F:1A:33:F6:22:34:19:90:CE:F1:19:AB:2B:9B:5B:AF:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/dad7d956-91ce-309d-a710-c9e480e1eb82.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 400644 IP address blocks: 2620:aa:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:07:44:8c:1c:d4:7d:78:1a:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=1ef5bc86-8a52-4b0f-a899-504d8e1fb2e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5d:71:f6:e9:a8:5a:63:5e:14:4a:f7:0a:88: 0c:d2:03:09:29:f6:96:80:10:d7:a6:b5:78:58:c8: 9c:f4:e1:97:8e:bf:c2:fb:43:f0:67:10:ad:7e:75: 52:a1:cb:c4:d1:6f:68:59:95:99:01:4f:84:78:0b: 4b:24:d4:c6:3b:41:1c:fd:9f:37:a3:d5:e6:53:fd: 9d:a4:55:fa:78:ad:b7:72:98:56:29:e6:83:6b:56: 75:53:bd:91:ef:8d:aa:d2:15:76:4f:4a:83:d1:bd: ab:b8:85:10:18:93:65:96:45:2f:0c:ef:7e:50:dc: 15:fd:96:6a:bb:04:57:30:40:59:58:d6:ee:84:b2: 6b:ed:e7:40:bd:d2:f4:56:de:d0:4c:f1:b3:42:59: 0b:d7:3b:b0:aa:a9:47:9e:6f:f4:ad:f7:e4:b9:99: 63:a3:05:4c:a4:ec:2c:b9:a5:5e:5f:d1:e7:0c:70: 48:6c:0e:91:2b:e0:b1:d7:95:55:5b:c4:88:ab:3f: d1:b3:92:67:2d:30:b7:0f:c5:e5:ab:b0:7b:2f:9c: 87:57:99:ac:d8:09:ee:1a:77:32:dc:56:22:86:ce: 83:34:f7:f4:07:b8:9b:86:ff:25:92:b8:03:76:41: 8f:46:1b:8d:2d:8b:34:9d:a0:8c:42:36:09:2c:5a: 3e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:71:6E:63:01:06:F4:76:1D:A1:DD:7F:FD:49:13:B1:AF:B7:0B:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/dad7d956-91ce-309d-a710-c9e480e1eb82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.crl X509v3 Authority Key Identifier: keyid:02:5F:8E:3F:1A:33:F6:22:34:19:90:CE:F1:19:AB:2B:9B:5B:AF:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.cer sbgp-ipAddrBlock: critical IPv6: 2620:aa:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:dc:4b:92:a5:45:30:ff:f4:2f:23:ea:e5:a7:2a:9d:28:29: 4d:b2:b2:0a:f0:ad:fd:fc:fb:12:38:93:a0:37:92:7a:37:6c: 80:fc:f9:1d:10:10:12:96:4f:c1:b2:98:12:5e:be:58:dc:9d: 29:58:99:c4:3c:b6:be:52:50:18:9a:72:ba:b3:59:71:fc:1a: 47:be:80:12:f4:a1:10:7d:ff:a4:a6:5e:d5:92:eb:c4:80:85: ae:65:4b:d9:98:f1:85:e4:d5:5e:97:a8:75:99:3a:f4:56:5c: 23:e2:83:61:45:d7:fa:aa:6c:72:b3:18:6a:4f:93:61:ab:bc: 79:38:93:55:dd:8f:1f:0f:4e:f2:14:2d:13:6b:e9:18:d5:59: 7a:67:73:bf:c0:44:65:e5:df:c5:74:7c:e5:5f:c0:41:8c:19: 8c:7c:52:8e:56:4f:ab:c0:9f:cd:db:2f:e4:c5:7f:1a:2f:4d: 2a:1f:0c:09:a6:93:00:20:d4:4e:0e:87:fe:8f:1c:40:0e:cf: e6:14:80:af:21:3d:44:44:92:9a:b9:c8:65:55:25:70:5e:de: 86:06:f4:f6:cd:76:68:eb:9e:32:ad:54:fd:92:d5:90:c3:ec: cd:9f:c8:9d:72:80:40:96:a5:a3:45:5a:aa:c5:95:ba:bd:d8: 4c:52:e9:12 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6niAdEjBzUfXgaF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWJhMWFhOGEtYmFkNi00ZTA5LWE0YzYtYWM0MjRmMDRm NWNhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MWVmNWJjODYtOGE1Mi00YjBmLWE4OTktNTA0ZDhlMWZiMmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo11x9umoWmNeFEr3CogM0gMJKfaWgBDXprV4 WMic9OGXjr/C+0PwZxCtfnVSocvE0W9oWZWZAU+EeAtLJNTGO0Ec/Z83o9XmU/2d pFX6eK23cphWKeaDa1Z1U72R742q0hV2T0qD0b2ruIUQGJNllkUvDO9+UNwV/ZZq uwRXMEBZWNbuhLJr7edAvdL0Vt7QTPGzQlkL1zuwqqlHnm/0rffkuZljowVMpOws uaVeX9HnDHBIbA6RK+Cx15VVW8SIqz/Rs5JnLTC3D8Xlq7B7L5yHV5ms2AnuGncy 3FYihs6DNPf0B7ibhv8lkrgDdkGPRhuNLYs0naCMQjYJLFo+nQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIBxbmMBBvR2HaHdf/1JE7Gvtwt8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YmEx YWE4YS1iYWQ2LTRlMDktYTRjNi1hYzQyNGYwNGY1Y2EvZGFkN2Q5NTYtOTFjZS0z MDlkLWE3MTAtYzllNDgwZTFlYjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWJhMWFhOGEtYmFkNi00ZTA5LWE0 YzYtYWM0MjRmMDRmNWNhLzViYTFhYThhLWJhZDYtNGUwOS1hNGM2LWFjNDI0ZjA0 ZjVjYS5jcmwwHwYDVR0jBBgwFoAUAl+OPxoz9iI0GZDO8RmrK5tbr3kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YmExYWE4YS1iYWQ2LTRlMDktYTRjNi1hYzQy NGYwNGY1Y2EuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAqqAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACvcS5KlRTD/9C8j6uWnKp0oKU2ysgrwrf38+xI4k6A3kno3bID8 +R0QEBKWT8GymBJevljcnSlYmcQ8tr5SUBiacrqzWXH8Gke+gBL0oRB9/6SmXtWS 68SAha5lS9mY8YXk1V6XqHWZOvRWXCPig2FF1/qqbHKzGGpPk2GrvHk4k1Xdjx8P TvIULRNr6RjVWXpnc7/ARGXl38V0fOVfwEGMGYx8Uo5WT6vAn83bL+TFfxovTSof DAmmkwAg1E4Oh/6PHEAOz+YUgK8hPUREkpq5yGVVJXBe3oYG9PbNdmjrnjKtVP2S 1ZDD7M2fyJ1ygECWpaNFWqrFlbq92ExS6RI= -----END CERTIFICATE-----Generated at Thu Aug 13 07:49:46 2026 by rpki-client