$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/0aafa072-9065-3d0d-bc2d-86c1387cec16.roa File: 0aafa072-9065-3d0d-bc2d-86c1387cec16.roa (raw, json) Hash identifier: 0P2EVsx0DCZJ3xkHF8SN2Xssgm6/T2DAU32ME8erFmI= Subject key identifier: 95:38:51:DD:36:3F:B8:40:09:B8:4C:1E:BD:0A:5B:B4:32:90:99:A6 Certificate issuer: /CN=956c8740-f351-4625-a3ff-54fb1e6a5b97 Certificate serial: 010D0C9F4328584E86F50D492C103E5CFB069240 Authority key identifier: BB:D2:7B:65:6D:CD:DF:15:B1:AD:AB:28:F0:F5:C8:F7:A3:1B:25:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/0aafa072-9065-3d0d-bc2d-86c1387cec16.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 25957 IP address blocks: 2602:f6ae::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/956c8740-f351-4625-a3ff-54fb1e6a5b97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/956c8740-f351-4625-a3ff-54fb1e6a5b97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f5:0d:49:2c:10:3e:5c:fb:06:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=956c8740-f351-4625-a3ff-54fb1e6a5b97 Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=6e56dd64-fc69-4315-89d5-e970076ac0a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:41:6b:c1:86:5e:45:e1:77:ad:d9:89:64:76: ee:9a:6b:67:72:51:94:94:2b:c6:74:ea:64:a4:f6: 02:27:31:3a:0f:ae:6b:a8:12:ab:8a:a2:d4:07:1e: de:9d:bc:d9:60:9c:5e:06:48:c1:71:94:c8:53:32: 22:b9:bc:f5:e6:7a:ce:cd:65:9d:7b:c9:06:8e:27: 23:49:5a:33:55:28:ab:41:f9:09:c1:fa:c4:37:a6: c5:a3:bf:9e:ad:a9:67:c8:f2:9a:50:13:d5:a7:c6: d0:a6:29:c4:f0:df:fd:de:07:a1:d8:9a:72:12:9e: 37:68:6d:ad:87:b4:2d:7a:85:82:88:01:f0:3e:f7: 96:a7:7f:a9:c9:09:66:f5:7f:da:33:f1:ff:4b:cf: 8a:dc:b4:96:24:ff:f8:51:d8:7a:0c:13:24:8b:69: 55:3e:e0:22:cf:4d:f3:0d:40:fd:2c:4c:a3:88:b2: 4e:8f:0f:81:59:47:6c:c4:b6:73:9d:c9:aa:c9:a6: f1:a3:c4:4b:fc:0c:72:6b:47:a8:40:d6:1b:ec:54: f3:90:be:43:16:7d:9f:73:39:35:36:3e:c5:e1:67: 1a:99:52:5d:6e:1d:c7:d7:dc:8a:83:c8:99:83:f8: 78:67:5c:73:75:5e:6b:66:f4:3c:7f:35:5e:c9:64: 6b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:38:51:DD:36:3F:B8:40:09:B8:4C:1E:BD:0A:5B:B4:32:90:99:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/0aafa072-9065-3d0d-bc2d-86c1387cec16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/956c8740-f351-4625-a3ff-54fb1e6a5b97.crl X509v3 Authority Key Identifier: keyid:BB:D2:7B:65:6D:CD:DF:15:B1:AD:AB:28:F0:F5:C8:F7:A3:1B:25:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97.cer sbgp-ipAddrBlock: critical IPv6: 2602:f6ae::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:be:96:c0:e1:97:fd:8c:fa:b8:95:aa:c8:1f:fa:1d:81:bb: 82:27:f8:6d:0b:c0:8e:6d:ea:e3:4e:1f:1e:ba:63:5f:eb:be: 98:b7:50:05:d5:59:60:e1:c5:04:9f:3b:b5:db:4d:2b:07:1f: 9b:30:4a:39:c4:2e:fa:fc:e5:49:20:77:53:68:12:be:f9:63: 4b:b9:25:15:82:0f:c8:25:77:e3:e9:c8:7e:fc:f9:be:58:9d: e3:51:f9:0a:cd:bd:df:94:2e:ed:64:b5:30:ce:46:08:0a:f0: 43:ef:a0:1a:6b:61:aa:90:e5:13:58:93:a3:a7:99:51:6d:bf: dd:16:7a:2d:fb:a5:49:c7:74:80:30:13:51:b4:4d:91:13:7d: ec:74:79:f9:a9:be:34:2e:17:fc:f3:ad:23:51:df:dd:9e:dc: ac:c5:05:f0:51:08:a7:70:98:a8:f5:cd:2c:35:05:e8:37:e9: b6:4c:6c:59:9c:41:5c:5a:86:2c:63:de:74:ff:95:e9:f0:69: 49:ae:2d:c5:58:ce:8c:71:d6:4a:b1:65:1f:c2:39:50:c2:ed: 90:a2:ea:3d:91:8f:04:76:1b:71:43:38:8e:a2:67:f8:77:d6: bf:a6:e8:e5:fc:3e:df:5e:e3:95:bf:fb:4d:64:28:50:da:a9: 8d:0e:60:a1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6G9Q1JLBA+XPsGkkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU2Yzg3NDAtZjM1MS00NjI1LWEzZmYtNTRmYjFlNmE1 Yjk3MB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk NmU1NmRkNjQtZmM2OS00MzE1LTg5ZDUtZTk3MDA3NmFjMGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0FrwYZeReF3rdmJZHbummtnclGUlCvGdOpk pPYCJzE6D65rqBKriqLUBx7enbzZYJxeBkjBcZTIUzIiubz15nrOzWWde8kGjicj SVozVSirQfkJwfrEN6bFo7+eralnyPKaUBPVp8bQpinE8N/93geh2JpyEp43aG2t h7QteoWCiAHwPveWp3+pyQlm9X/aM/H/S8+K3LSWJP/4Udh6DBMki2lVPuAiz03z DUD9LEyjiLJOjw+BWUdsxLZzncmqyabxo8RL/Axya0eoQNYb7FTzkL5DFn2fczk1 Nj7F4WcamVJdbh3H19yKg8iZg/h4Z1xzdV5rZvQ8fzVeyWRrnQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJU4Ud02P7hACbhMHr0KW7QykJmmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85NTZj ODc0MC1mMzUxLTQ2MjUtYTNmZi01NGZiMWU2YTViOTcvMGFhZmEwNzItOTA2NS0z ZDBkLWJjMmQtODZjMTM4N2NlYzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTU2Yzg3NDAtZjM1MS00NjI1LWEz ZmYtNTRmYjFlNmE1Yjk3Lzk1NmM4NzQwLWYzNTEtNDYyNS1hM2ZmLTU0ZmIxZTZh NWI5Ny5jcmwwHwYDVR0jBBgwFoAUu9J7ZW3N3xWxraso8PXI96MbJUwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85NTZjODc0MC1mMzUxLTQ2MjUtYTNmZi01NGZi MWU2YTViOTcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgL2rjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAXvpbA4Zf9jPq4larIH/odgbuCJ/htC8COberjTh8eumNf676Yt1AF 1Vlg4cUEnzu1200rBx+bMEo5xC76/OVJIHdTaBK++WNLuSUVgg/IJXfj6ch+/Pm+ WJ3jUfkKzb3flC7tZLUwzkYICvBD76Aaa2GqkOUTWJOjp5lRbb/dFnot+6VJx3SA MBNRtE2RE33sdHn5qb40Lhf8860jUd/dntysxQXwUQincJio9c0sNQXoN+m2TGxZ nEFcWoYsY950/5Xp8GlJri3FWM6McdZKsWUfwjlQwu2Qouo9kY8EdhtxQziOomf4 d9a/pujl/D7fXuOVv/tNZChQ2qmNDmCh -----END CERTIFICATE-----Generated at Tue Jul 21 20:06:06 2026 by rpki-client