$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/dad7d956-91ce-309d-a710-c9e480e1eb82.roa File: dad7d956-91ce-309d-a710-c9e480e1eb82.roa (raw, json) Hash identifier: mHWVOKXqZvagUV+zOc9sF+uTMwnrjYyNYwYFzGyLB0w= Subject key identifier: 6D:ED:FB:A3:89:CC:70:5D:DF:43:25:38:B0:93:6A:BE:B2:F1:E7:AB Certificate issuer: /CN=5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca Certificate serial: 010D0C9F4328584F4973CDEE5BD6F03EB5A39980 Authority key identifier: 02:5F:8E:3F:1A:33:F6:22:34:19:90:CE:F1:19:AB:2B:9B:5B:AF:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/dad7d956-91ce-309d-a710-c9e480e1eb82.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 400644 IP address blocks: 2620:aa:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:cd:ee:5b:d6:f0:3e:b5:a3:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d012857e-af8f-48db-be86-29b72f1e67e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:36:4a:0c:e3:64:6f:c3:b6:fc:44:ac:48:f2: 45:7e:e3:ff:aa:14:22:18:43:30:54:1c:f8:23:aa: 11:09:3b:a2:9f:14:d8:01:c7:e3:a3:1a:60:11:3c: ca:bb:fb:fd:93:9b:65:7d:c2:fe:69:e8:c7:d4:8f: c7:56:be:6c:38:0d:d5:dc:11:13:76:8a:47:33:f6: 6d:c3:8d:2e:72:6a:c6:61:f0:ed:23:0a:d7:9c:02: 97:dc:73:b4:3b:06:bb:7b:6f:c9:45:a4:75:df:4b: 53:22:3c:35:bf:79:5d:d7:3e:ee:87:47:76:a0:18: f6:df:03:0a:a1:ed:3e:64:95:21:23:ce:a1:ee:11: da:71:49:bf:d0:34:c3:1b:62:a4:50:2a:eb:4c:d0: ff:05:d3:da:46:de:84:75:9b:7f:96:95:73:3f:bc: 34:4a:ba:b6:90:81:41:25:75:bc:12:d1:a4:e8:c6: dd:fe:83:22:9f:84:48:aa:43:7e:e1:cc:f3:90:fb: cb:32:13:25:21:11:49:7e:a3:c4:26:b5:02:a7:9e: 34:8c:4c:68:0a:f0:8a:0c:28:61:07:2e:b5:ee:73: be:b3:9e:26:26:82:59:d8:4e:11:6b:08:bc:c7:0f: 47:a3:6c:8a:e7:cd:8d:b8:01:3e:81:b5:0f:e8:78: a7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:ED:FB:A3:89:CC:70:5D:DF:43:25:38:B0:93:6A:BE:B2:F1:E7:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/dad7d956-91ce-309d-a710-c9e480e1eb82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.crl X509v3 Authority Key Identifier: keyid:02:5F:8E:3F:1A:33:F6:22:34:19:90:CE:F1:19:AB:2B:9B:5B:AF:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.cer sbgp-ipAddrBlock: critical IPv6: 2620:aa:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:b6:cf:85:2f:a2:45:90:34:b7:e6:a9:cd:a4:a6:9e:fe:88: 48:b0:56:bc:c7:5d:95:33:cf:be:97:69:72:9f:a1:da:e2:c7: eb:7d:e4:a6:af:c1:f7:b5:33:22:01:b4:b6:b8:69:79:68:6a: d7:ac:3e:d8:49:fe:33:c8:91:52:25:58:ca:c8:3b:27:d4:60: 13:61:b3:5a:6a:57:1a:12:24:cd:b1:e1:86:09:20:b3:2d:1f: 26:3a:32:cb:89:1b:93:54:1c:02:ec:e7:4a:83:ce:5d:4a:f6: 3b:e3:76:6e:5e:ed:aa:f8:48:b5:4e:d8:8e:be:46:07:cf:35: ee:0e:cb:40:98:7d:37:5e:ce:e1:c6:d7:07:54:20:ea:7b:52: 84:76:14:cc:90:e6:f1:47:56:f6:8a:90:f1:7c:de:4a:00:ac: 8b:06:47:4d:9b:b3:e7:de:61:10:bd:0c:9b:b8:55:2b:9c:1b: 08:87:73:8f:dc:b1:9a:04:1a:55:6a:5f:6e:b1:1a:41:9f:82: d4:e4:5a:c9:01:5d:47:93:c1:d9:71:80:d6:b2:37:ee:65:99: 7e:be:63:11:e5:43:dd:0a:a6:0b:a3:2d:8f:80:ce:02:62:e2: f8:b7:b4:9b:b6:b0:45:8d:e5:ee:67:82:db:59:e6:7e:74:27: 0d:ff:45:86 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc83uW9bwPrWjmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWJhMWFhOGEtYmFkNi00ZTA5LWE0YzYtYWM0MjRmMDRm NWNhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDAxMjg1N2UtYWY4Zi00OGRiLWJlODYtMjliNzJmMWU2N2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjZKDONkb8O2/ESsSPJFfuP/qhQiGEMwVBz4 I6oRCTuinxTYAcfjoxpgETzKu/v9k5tlfcL+aejH1I/HVr5sOA3V3BETdopHM/Zt w40ucmrGYfDtIwrXnAKX3HO0Owa7e2/JRaR130tTIjw1v3ld1z7uh0d2oBj23wMK oe0+ZJUhI86h7hHacUm/0DTDG2KkUCrrTND/BdPaRt6EdZt/lpVzP7w0Srq2kIFB JXW8EtGk6Mbd/oMin4RIqkN+4czzkPvLMhMlIRFJfqPEJrUCp540jExoCvCKDChh By617nO+s54mJoJZ2E4Rawi8xw9Ho2yK582NuAE+gbUP6HinkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG3t+6OJzHBd30MlOLCTar6y8eerMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YmEx YWE4YS1iYWQ2LTRlMDktYTRjNi1hYzQyNGYwNGY1Y2EvZGFkN2Q5NTYtOTFjZS0z MDlkLWE3MTAtYzllNDgwZTFlYjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWJhMWFhOGEtYmFkNi00ZTA5LWE0 YzYtYWM0MjRmMDRmNWNhLzViYTFhYThhLWJhZDYtNGUwOS1hNGM2LWFjNDI0ZjA0 ZjVjYS5jcmwwHwYDVR0jBBgwFoAUAl+OPxoz9iI0GZDO8RmrK5tbr3kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YmExYWE4YS1iYWQ2LTRlMDktYTRjNi1hYzQy NGYwNGY1Y2EuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAqqAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHu2z4UvokWQNLfmqc2kpp7+iEiwVrzHXZUzz76XaXKfodrix+t9 5Kavwfe1MyIBtLa4aXloatesPthJ/jPIkVIlWMrIOyfUYBNhs1pqVxoSJM2x4YYJ ILMtHyY6MsuJG5NUHALs50qDzl1K9jvjdm5e7ar4SLVO2I6+RgfPNe4Oy0CYfTde zuHG1wdUIOp7UoR2FMyQ5vFHVvaKkPF83koArIsGR02bs+feYRC9DJu4VSucGwiH c4/csZoEGlVqX26xGkGfgtTkWskBXUeTwdlxgNayN+5lmX6+YxHlQ90KpgujLY+A zgJi4vi3tJu2sEWN5e5ngttZ5n50Jw3/RYY= -----END CERTIFICATE-----Generated at Fri Sep 25 22:14:33 2026 by rpki-client