$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/8d02ecff-6567-3ab5-b937-d1e8ed0cc1d7.roa File: 8d02ecff-6567-3ab5-b937-d1e8ed0cc1d7.roa (raw, json) Hash identifier: Yidq7aQOegc9UHooh6gQemDjtZrQSY35zQ9Zspd0pgc= Subject key identifier: A6:AC:0D:46:E3:F2:FF:22:6C:DE:33:FB:A9:27:1B:D6:31:C8:2D:30 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584FC5CBD3F5BA147998C80F4400 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/8d02ecff-6567-3ab5-b937-d1e8ed0cc1d7.roa Signing time: Sun 08 Nov 2026 14:00:12 +0000 ROA not before: Sun 08 Nov 2026 14:00:12 +0000 ROA not after: Sat 06 Feb 2027 14:00:12 +0000 asID: 33392 IP address blocks: 2606:2480::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c5:cb:d3:f5:ba:14:79:98:c8:0f:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Nov 8 14:00:12 2026 GMT Not After : Feb 6 14:00:12 2027 GMT Subject: CN=8c407fb1-55d5-4e9d-821e-98360fcdce12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9f:ec:cb:7c:87:12:01:cd:0a:85:6c:ca:02: ab:ff:13:70:5a:0a:13:5c:0c:55:c0:b2:12:53:47: 09:2f:ed:0f:19:5c:50:38:22:77:56:90:c0:5f:f0: d9:7f:a0:a2:93:6b:8b:62:0a:3d:66:c8:66:a8:dd: 22:49:b9:76:9b:f6:f7:50:07:14:53:10:73:32:75: b0:a6:55:af:45:da:ba:c4:fd:6a:ee:c8:e0:c2:17: 76:bd:ff:49:20:0c:dd:8c:b2:57:2c:ec:8d:fa:8f: fa:71:aa:92:c2:09:e5:65:bd:81:fb:9e:08:48:bf: 25:7e:69:69:dd:f2:39:4d:58:7c:8d:f4:19:52:6d: 3b:cf:58:f6:7d:05:65:36:23:7d:27:50:df:98:17: 12:37:63:cc:3d:17:6f:2b:d7:4c:ce:86:37:d2:7c: 50:92:84:2b:01:a6:77:f1:98:56:d9:03:35:4f:94: 0c:76:11:b0:21:d5:ed:8a:c1:93:8b:51:e2:44:a8: 84:ab:23:fc:c4:28:4a:e7:aa:64:b8:f9:4d:88:aa: 1e:d8:46:f1:5b:21:e2:83:01:3c:e7:39:67:7b:73: 55:4e:ba:7a:c8:73:48:07:cf:af:74:10:5d:bd:b4: b9:75:c6:5b:d6:c8:29:28:55:76:5e:f0:3a:6e:de: ff:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:AC:0D:46:E3:F2:FF:22:6C:DE:33:FB:A9:27:1B:D6:31:C8:2D:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/8d02ecff-6567-3ab5-b937-d1e8ed0cc1d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv6: 2606:2480::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:a5:67:c2:ba:4c:9c:53:c8:05:39:b9:d7:88:ea:3c:ca:0b: c7:9c:d7:4f:a5:b3:7a:08:3d:20:c2:21:82:75:33:08:93:4f: 2b:b4:fd:3e:f6:5b:0b:eb:8e:88:e3:67:03:47:57:e3:cc:30: 47:4f:1d:7e:40:07:68:63:6c:2e:46:42:19:6b:21:c2:f1:64: a7:dd:7c:0b:88:ba:fb:de:9e:3c:70:0b:b0:43:bf:5f:96:51: 2b:4b:bc:02:01:f0:33:31:e9:31:15:f1:67:87:52:56:b8:34: 21:06:d6:25:b9:f4:2b:f8:c8:53:57:2e:6a:30:93:7b:9f:30: 4e:82:bb:dd:a6:3a:96:f7:58:9c:f8:d0:1a:98:be:cd:72:fb: da:fa:e8:18:b4:6e:68:c8:99:e2:72:67:31:bd:fd:46:2d:99: b2:76:b1:47:13:5b:fc:e1:45:2e:6b:4d:73:d6:c0:5d:e7:db: 8d:68:66:d2:51:4e:c7:ba:8f:93:b7:8c:71:82:6c:83:69:a4: 09:80:36:cf:66:3b:76:ed:87:20:81:88:88:dc:0d:58:9f:0e: 33:2b:f7:68:5e:c8:55:65:10:e9:c7:3a:80:d3:8d:0f:c5:be: 6f:36:dc:79:b2:4b:24:a2:65:83:cf:5c:c0:fa:50:f5:25:e0: 64:2c:0a:f9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE/Fy9P1uhR5mMgPRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI2MTEwODE0MDAxMloXDTI3MDIwNjE0MDAxMlowLzEtMCsGA1UEAxMk OGM0MDdmYjEtNTVkNS00ZTlkLTgyMWUtOTgzNjBmY2RjZTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp/sy3yHEgHNCoVsygKr/xNwWgoTXAxVwLIS U0cJL+0PGVxQOCJ3VpDAX/DZf6Cik2uLYgo9ZshmqN0iSbl2m/b3UAcUUxBzMnWw plWvRdq6xP1q7sjgwhd2vf9JIAzdjLJXLOyN+o/6caqSwgnlZb2B+54ISL8lfmlp 3fI5TVh8jfQZUm07z1j2fQVlNiN9J1DfmBcSN2PMPRdvK9dMzoY30nxQkoQrAaZ3 8ZhW2QM1T5QMdhGwIdXtisGTi1HiRKiEqyP8xChK56pkuPlNiKoe2EbxWyHigwE8 5zlne3NVTrp6yHNIB8+vdBBdvbS5dcZb1sgpKFV2XvA6bt7/gQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKasDUbj8v8ibN4z+6knG9YxyC0wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvOGQwMmVjZmYtNjU2Ny0z YWI1LWI5MzctZDFlOGVkMGNjMWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgYkgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB+pWfCukycU8gFObnXiOo8ygvHnNdPpbN6CD0gwiGCdTMIk08rtP0+ 9lsL646I42cDR1fjzDBHTx1+QAdoY2wuRkIZayHC8WSn3XwLiLr73p48cAuwQ79f llErS7wCAfAzMekxFfFnh1JWuDQhBtYlufQr+MhTVy5qMJN7nzBOgrvdpjqW91ic +NAamL7Ncvva+ugYtG5oyJnicmcxvf1GLZmydrFHE1v84UUua01z1sBd59uNaGbS UU7Huo+Tt4xxgmyDaaQJgDbPZjt27YcggYiI3A1Ynw4zK/doXshVZRDpxzqA040P xb5vNtx5skskomWDz1zA+lD1JeBkLAr5 -----END CERTIFICATE-----Generated at Sun Nov 15 13:35:13 2026 by rpki-client