$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/3167000e-cb0e-3c02-8954-911a60c2a9da.roa File: 3167000e-cb0e-3c02-8954-911a60c2a9da.roa (raw, json) Hash identifier: JUfvhQMPsmveTGqFpS+hk+9DUn+lIiFAY4bfkTr1of8= Subject key identifier: AE:13:36:3B:DC:5B:EC:55:60:D3:B9:1B:08:18:B6:F6:A0:47:D9:8B Certificate issuer: /CN=ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f Certificate serial: 010D0C9F4328584F549D49E6C701E2DB8B512280 Authority key identifier: 83:88:B3:BC:24:88:CC:99:8F:F1:E8:77:05:FB:2A:C3:E9:A0:B3:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/3167000e-cb0e-3c02-8954-911a60c2a9da.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 16698 IP address blocks: 2604:f500::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:49:e6:c7:01:e2:db:8b:51:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=2248c03f-b22d-4f92-a8e0-a0f5e8ddd8e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d9:cc:61:a2:15:42:de:f2:00:25:d4:ff:f7: 0e:15:6d:77:2a:84:ec:4f:cf:b1:e0:24:8d:44:b2: 8e:66:2d:1e:9a:dc:b7:cd:c2:06:fc:cc:e6:c3:18: 74:09:16:b5:9c:45:b0:9a:c5:7c:9b:cb:4f:ef:16: f3:7f:ab:8c:65:5b:53:8c:e3:2a:44:86:cb:ae:2d: b4:1c:a0:af:b7:ea:d7:bc:99:a3:2f:a9:de:e2:f4: 97:2a:aa:3d:21:2c:b8:65:ad:1b:c3:31:89:57:ee: 42:39:a5:34:9a:af:af:84:10:6d:c7:01:99:3f:cd: 53:b8:bd:d1:15:e1:8f:69:d6:00:79:bb:cc:9b:76: f8:3a:ad:47:d9:23:21:61:2c:5d:75:04:ba:c9:75: 4c:85:00:1f:50:48:9b:36:55:3f:e5:72:95:24:00: 6a:9e:5b:50:2c:14:dd:4a:fa:ac:55:c7:20:40:b1: a6:68:c8:b0:cc:53:2a:07:06:c1:d2:68:0e:5e:6d: 18:a8:f3:01:f2:50:54:9a:b4:9b:ec:b2:37:74:e7: 3c:3e:4a:e6:60:e5:95:77:00:12:43:52:18:bc:90: 89:e9:06:bb:2e:a8:b2:b9:1d:a6:be:41:96:a7:f2: 43:39:ae:a0:52:c3:05:61:7b:dd:8b:d5:32:e1:d0: e1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:13:36:3B:DC:5B:EC:55:60:D3:B9:1B:08:18:B6:F6:A0:47:D9:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/3167000e-cb0e-3c02-8954-911a60c2a9da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.crl X509v3 Authority Key Identifier: keyid:83:88:B3:BC:24:88:CC:99:8F:F1:E8:77:05:FB:2A:C3:E9:A0:B3:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.cer sbgp-ipAddrBlock: critical IPv6: 2604:f500::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:92:68:bb:30:9d:d5:7a:73:d3:53:e0:26:e5:f7:bb:8c:af: 9d:54:56:ee:9d:ed:71:9c:77:ae:9d:58:1b:75:00:bb:b9:66: dc:a1:69:a7:64:c4:15:ff:89:d0:2f:f0:b3:e4:b4:54:25:63: f0:70:3f:3b:06:c4:84:e7:a8:62:b7:66:e9:d1:2f:3c:4b:29: 16:79:07:0e:11:f6:ef:ec:be:3c:a4:22:c0:d4:c5:a1:15:b6: 36:ea:72:e1:a5:4b:20:ac:3a:7c:3f:51:e1:d4:ef:41:2d:ac: 7e:7b:cc:9f:47:42:96:c6:91:ed:3a:74:10:7e:00:91:86:8b: 42:d1:34:ba:a8:88:f4:ef:8a:c7:55:07:aa:33:af:8b:b6:f1: 0c:48:5b:80:f6:75:4f:1b:40:95:2d:9a:60:41:e6:f0:2b:f9: 14:ab:41:a7:a8:4f:ca:bb:68:2f:3a:98:14:ee:81:21:5f:a9: 83:98:fc:a9:df:1e:ce:b6:e2:4c:51:58:d7:16:d0:71:1c:83: 46:c9:9e:38:74:5e:ef:3b:8a:ab:82:2b:58:59:94:a8:b1:ca: 07:9b:a1:d1:94:7b:08:e1:a3:11:83:9b:80:88:03:43:cc:89: 9b:90:79:cd:19:0a:4e:7c:22:87:9e:55:88:00:74:60:49:54: 80:47:b2:36 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9UnUnmxwHi24tRIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE4YzFkNDEtMmM3Yy00OTA1LThkZWItYzZhNTBlMWQ3 ZTJmMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk MjI0OGMwM2YtYjIyZC00ZjkyLWE4ZTAtYTBmNWU4ZGRkOGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39nMYaIVQt7yACXU//cOFW13KoTsT8+x4CSN RLKOZi0emty3zcIG/Mzmwxh0CRa1nEWwmsV8m8tP7xbzf6uMZVtTjOMqRIbLri20 HKCvt+rXvJmjL6ne4vSXKqo9ISy4Za0bwzGJV+5COaU0mq+vhBBtxwGZP81TuL3R FeGPadYAebvMm3b4Oq1H2SMhYSxddQS6yXVMhQAfUEibNlU/5XKVJABqnltQLBTd SvqsVccgQLGmaMiwzFMqBwbB0mgOXm0YqPMB8lBUmrSb7LI3dOc8PkrmYOWVdwAS Q1IYvJCJ6Qa7LqiyuR2mvkGWp/JDOa6gUsMFYXvdi9Uy4dDh9QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK4TNjvcW+xVYNO5GwgYtvagR9mLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYThj MWQ0MS0yYzdjLTQ5MDUtOGRlYi1jNmE1MGUxZDdlMmYvMzE2NzAwMGUtY2IwZS0z YzAyLTg5NTQtOTExYTYwYzJhOWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmE4YzFkNDEtMmM3Yy00OTA1LThk ZWItYzZhNTBlMWQ3ZTJmL2JhOGMxZDQxLTJjN2MtNDkwNS04ZGViLWM2YTUwZTFk N2UyZi5jcmwwHwYDVR0jBBgwFoAUg4izvCSIzJmP8eh3Bfsqw+mgs84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYThjMWQ0MS0yYzdjLTQ5MDUtOGRlYi1jNmE1 MGUxZDdlMmYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT1ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC2kmi7MJ3VenPTU+Am5fe7jK+dVFbune1xnHeunVgbdQC7uWbcoWmn ZMQV/4nQL/Cz5LRUJWPwcD87BsSE56hit2bp0S88SykWeQcOEfbv7L48pCLA1MWh FbY26nLhpUsgrDp8P1Hh1O9BLax+e8yfR0KWxpHtOnQQfgCRhotC0TS6qIj074rH VQeqM6+LtvEMSFuA9nVPG0CVLZpgQebwK/kUq0GnqE/Ku2gvOpgU7oEhX6mDmPyp 3x7OtuJMUVjXFtBxHINGyZ44dF7vO4qrgitYWZSoscoHm6HRlHsI4aMRg5uAiAND zImbkHnNGQpOfCKHnlWIAHRgSVSAR7I2 -----END CERTIFICATE-----Generated at Sun Oct 4 10:16:56 2026 by rpki-client