$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/3167000e-cb0e-3c02-8954-911a60c2a9da.roa File: 3167000e-cb0e-3c02-8954-911a60c2a9da.roa (raw, json) Hash identifier: GTVai4Zuc/CcUsZKr6KRBYS8ftPRLO1mPhDJWJJJdwo= Subject key identifier: 3E:96:FC:F0:93:74:F6:BA:89:74:B9:03:AF:90:9E:00:B6:38:84:C6 Certificate issuer: /CN=ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f Certificate serial: 010D0C9F4328584D300A196AB28F54C2EAD73280 Authority key identifier: 83:88:B3:BC:24:88:CC:99:8F:F1:E8:77:05:FB:2A:C3:E9:A0:B3:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/3167000e-cb0e-3c02-8954-911a60c2a9da.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 16698 IP address blocks: 2604:f500::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:19:6a:b2:8f:54:c2:ea:d7:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=7da31976-7aac-439f-b957-cfd6ccf05204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f7:02:9b:b7:f9:a1:fa:99:ce:2f:82:4c:f4: 01:04:3b:cf:9a:cd:b6:8a:24:d2:5e:a7:a6:63:41: a4:cb:f5:05:3c:34:e3:c2:11:1e:82:32:84:ef:10: bc:75:29:5b:26:ef:1d:5d:49:c2:23:b1:b6:8a:9c: 67:e5:94:45:47:a8:8a:b1:a3:13:e9:1c:8b:e4:2a: 70:b4:53:16:f4:1e:b3:16:09:3c:01:31:40:06:da: 3f:d0:95:78:d6:f0:1f:37:eb:2a:ef:5f:4f:a7:1d: c4:40:a0:33:ed:a1:85:d9:17:e3:88:b1:b7:88:cb: 2e:7e:eb:3e:de:27:fe:80:66:ec:1b:f8:2a:54:87: f2:92:91:73:c8:18:5a:80:2b:63:50:dc:58:a3:3d: cf:e3:b3:ca:4c:74:11:b5:72:30:6b:fc:8f:75:d1: 14:cc:3c:ae:aa:c3:32:5f:9f:db:f8:b4:4c:60:d5: 35:2a:b6:66:e1:24:42:36:20:65:3b:95:0e:70:ce: 03:73:ad:9f:8d:ee:cd:14:73:9b:5f:c2:6a:ba:c4: 42:8b:c8:53:91:97:df:56:60:98:03:09:a3:ef:90: af:84:9d:6e:25:01:e0:63:0b:05:f9:db:b3:82:e6: 3a:d0:e9:9b:56:6c:55:d1:a5:2d:b6:6f:6d:df:c1: 16:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:96:FC:F0:93:74:F6:BA:89:74:B9:03:AF:90:9E:00:B6:38:84:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/3167000e-cb0e-3c02-8954-911a60c2a9da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.crl X509v3 Authority Key Identifier: keyid:83:88:B3:BC:24:88:CC:99:8F:F1:E8:77:05:FB:2A:C3:E9:A0:B3:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.cer sbgp-ipAddrBlock: critical IPv6: 2604:f500::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:6f:43:42:06:18:24:32:4d:33:5a:2e:81:37:ce:43:f5:d5: b2:7e:41:cb:24:92:f7:74:4c:ff:fc:d8:d3:5c:9d:23:5d:d1: 3f:29:e5:22:68:08:ce:b5:df:a3:88:2e:e2:2e:72:47:44:d5: 7f:14:aa:18:c1:39:23:4d:4d:93:58:b8:31:23:d8:b4:9a:ef: 9c:21:2c:bd:23:b9:e6:11:67:1b:58:55:82:1f:31:42:77:a1: 14:84:04:e3:24:1e:83:00:e3:d4:a4:ff:59:42:d7:aa:95:78: 43:23:03:9b:9e:52:9e:08:89:36:41:98:c8:cb:64:19:ab:42: 5b:ad:69:38:41:d7:65:7d:c8:73:aa:9a:3c:97:e7:17:92:be: 49:34:45:42:7e:f2:59:9a:a5:e3:91:f5:b3:55:70:be:40:af: fd:91:89:20:26:35:04:91:b1:58:bd:b6:79:98:1a:6f:d1:f5: bc:51:e1:b7:3f:fb:19:de:30:24:bb:84:b2:e8:be:9b:61:a0: 64:30:f1:8e:33:2a:0f:a9:d4:2e:33:85:b8:a9:43:a6:8e:9b: b0:5d:53:a1:2f:72:b3:ce:d4:1b:79:9e:ed:8f:12:e2:c0:32: 85:ec:3b:a4:ac:a5:90:8b:f4:5d:e7:ec:00:37:be:62:c3:b7: 0c:3a:21:f4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0wChlqso9UwurXMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE4YzFkNDEtMmM3Yy00OTA1LThkZWItYzZhNTBlMWQ3 ZTJmMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk N2RhMzE5NzYtN2FhYy00MzlmLWI5NTctY2ZkNmNjZjA1MjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/cCm7f5ofqZzi+CTPQBBDvPms22iiTSXqem Y0Gky/UFPDTjwhEegjKE7xC8dSlbJu8dXUnCI7G2ipxn5ZRFR6iKsaMT6RyL5Cpw tFMW9B6zFgk8ATFABto/0JV41vAfN+sq719Ppx3EQKAz7aGF2RfjiLG3iMsufus+ 3if+gGbsG/gqVIfykpFzyBhagCtjUNxYoz3P47PKTHQRtXIwa/yPddEUzDyuqsMy X5/b+LRMYNU1KrZm4SRCNiBlO5UOcM4Dc62fje7NFHObX8JqusRCi8hTkZffVmCY Awmj75CvhJ1uJQHgYwsF+duzguY60OmbVmxV0aUttm9t38EWPQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFD6W/PCTdPa6iXS5A6+QngC2OITGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYThj MWQ0MS0yYzdjLTQ5MDUtOGRlYi1jNmE1MGUxZDdlMmYvMzE2NzAwMGUtY2IwZS0z YzAyLTg5NTQtOTExYTYwYzJhOWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmE4YzFkNDEtMmM3Yy00OTA1LThk ZWItYzZhNTBlMWQ3ZTJmL2JhOGMxZDQxLTJjN2MtNDkwNS04ZGViLWM2YTUwZTFk N2UyZi5jcmwwHwYDVR0jBBgwFoAUg4izvCSIzJmP8eh3Bfsqw+mgs84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYThjMWQ0MS0yYzdjLTQ5MDUtOGRlYi1jNmE1 MGUxZDdlMmYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT1ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDQb0NCBhgkMk0zWi6BN85D9dWyfkHLJJL3dEz//NjTXJ0jXdE/KeUi aAjOtd+jiC7iLnJHRNV/FKoYwTkjTU2TWLgxI9i0mu+cISy9I7nmEWcbWFWCHzFC d6EUhATjJB6DAOPUpP9ZQteqlXhDIwObnlKeCIk2QZjIy2QZq0JbrWk4Qddlfchz qpo8l+cXkr5JNEVCfvJZmqXjkfWzVXC+QK/9kYkgJjUEkbFYvbZ5mBpv0fW8UeG3 P/sZ3jAku4Sy6L6bYaBkMPGOMyoPqdQuM4W4qUOmjpuwXVOhL3KzztQbeZ7tjxLi wDKF7DukrKWQi/Rd5+wAN75iw7cMOiH0 -----END CERTIFICATE-----Generated at Thu Mar 26 16:11:04 2026 by rpki-client