$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecc7bb42-b9f8-4638-86ba-c2a809d45c1e/b11bacc8-92b8-3f08-80e6-248e23e7f2b3.roa File: b11bacc8-92b8-3f08-80e6-248e23e7f2b3.roa (raw, json) Hash identifier: 23jrTLCN0nf0ZLwrfi7JUk7JbrUC/vOHDEEOtvVuBPA= Subject key identifier: D6:2A:34:E3:68:2A:21:8A:57:11:05:1A:83:55:B3:6B:0B:BF:42:E1 Certificate issuer: /CN=ecc7bb42-b9f8-4638-86ba-c2a809d45c1e Certificate serial: 010D0C9F4328584FC0367AFF4E82374F296C1040 Authority key identifier: 44:96:EE:C3:8A:2E:9F:8D:30:BB:84:5B:4C:9F:37:01:BE:D0:0E:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecc7bb42-b9f8-4638-86ba-c2a809d45c1e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecc7bb42-b9f8-4638-86ba-c2a809d45c1e/b11bacc8-92b8-3f08-80e6-248e23e7f2b3.roa Signing time: Fri 06 Nov 2026 14:00:13 +0000 ROA not before: Fri 06 Nov 2026 14:00:13 +0000 ROA not after: Thu 04 Feb 2027 14:00:13 +0000 asID: 393337 IP address blocks: 2604:7000::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecc7bb42-b9f8-4638-86ba-c2a809d45c1e/ecc7bb42-b9f8-4638-86ba-c2a809d45c1e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecc7bb42-b9f8-4638-86ba-c2a809d45c1e/ecc7bb42-b9f8-4638-86ba-c2a809d45c1e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecc7bb42-b9f8-4638-86ba-c2a809d45c1e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c0:36:7a:ff:4e:82:37:4f:29:6c:10:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecc7bb42-b9f8-4638-86ba-c2a809d45c1e Validity Not Before: Nov 6 14:00:13 2026 GMT Not After : Feb 4 14:00:13 2027 GMT Subject: CN=f9e4a10b-7766-4b8f-89a9-00dbc0029f87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:ad:14:d8:b1:86:7b:19:b2:fa:7c:a1:08:e3: 67:3c:14:50:e9:32:32:9f:71:b4:a8:c6:b0:5d:f0: 2c:5b:83:4f:14:5b:a9:15:d5:88:d8:16:e1:ec:1f: c0:0d:f5:b0:af:d1:ce:f4:99:08:98:46:ee:45:bd: ca:9b:aa:8f:ec:cf:53:7d:ec:25:41:46:d8:f4:e8: 8f:13:26:9e:53:5d:01:c0:48:9e:5a:e4:07:48:16: 64:1e:a8:88:ae:57:0e:bb:6c:ad:e3:a9:01:c6:13: 47:c1:34:f8:a2:5b:ef:9c:f3:2a:8c:41:aa:fd:57: 18:e2:89:95:a0:e7:72:2d:0c:bd:29:3d:a8:65:46: 16:4c:e0:2d:e1:e8:d0:e0:31:12:a8:c7:6d:11:73: 0c:aa:e8:77:61:4f:50:4e:a7:e8:ab:3b:a7:d4:72: bc:42:63:05:15:d2:9a:34:22:56:9d:90:7f:04:22: c6:bb:c5:24:9f:e2:ff:b3:20:fa:fa:19:ca:3c:7b: 78:32:e7:ab:7b:5c:e9:61:76:8a:bd:af:d5:cf:2b: ea:a2:76:94:ff:7e:f6:46:79:5c:f0:a3:fa:cb:81: 67:5c:fc:97:00:ba:ac:8b:eb:96:c0:71:e4:3c:bd: b2:36:ee:0e:a9:79:a9:64:fb:14:9a:73:f9:83:55: a3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:2A:34:E3:68:2A:21:8A:57:11:05:1A:83:55:B3:6B:0B:BF:42:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecc7bb42-b9f8-4638-86ba-c2a809d45c1e/b11bacc8-92b8-3f08-80e6-248e23e7f2b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecc7bb42-b9f8-4638-86ba-c2a809d45c1e/ecc7bb42-b9f8-4638-86ba-c2a809d45c1e.crl X509v3 Authority Key Identifier: keyid:44:96:EE:C3:8A:2E:9F:8D:30:BB:84:5B:4C:9F:37:01:BE:D0:0E:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecc7bb42-b9f8-4638-86ba-c2a809d45c1e.cer sbgp-ipAddrBlock: critical IPv6: 2604:7000::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:0f:a0:ff:36:d9:ff:cd:ec:a5:1b:19:3e:60:11:1f:2c:db: 28:7d:18:c0:78:3b:3c:63:14:39:f0:10:5e:51:c6:7f:bb:bc: d7:76:70:97:49:13:2e:b5:ea:e1:e1:81:d8:d5:43:9a:28:53: f9:06:94:7b:80:3d:d5:9d:73:25:5e:69:2b:0a:e1:93:09:89: 97:41:b7:97:37:a5:36:b5:3f:a7:57:50:40:2b:2b:de:1c:1d: f4:e0:dd:72:96:d6:b7:d2:94:d5:22:72:b3:85:59:08:c0:9f: 5d:e9:0b:aa:63:86:b2:04:af:5a:81:0a:ef:c0:e9:9d:9c:33: 0f:c5:d5:6a:e7:57:c7:63:33:1b:f0:a6:92:98:5e:23:cf:73: 96:e4:45:06:db:7f:64:cf:fc:ce:21:87:7d:97:1b:7d:6c:dc: 5a:6f:81:32:cd:24:68:46:9a:2c:89:66:a3:c1:60:92:05:4e: 8a:dc:6f:9a:0e:3f:af:e8:67:85:0e:61:2b:11:e6:19:73:a1: 72:df:b3:b6:84:ad:c7:ee:2b:1b:63:bf:97:04:32:f1:a4:d6: 1b:93:01:ad:9e:5f:a3:2b:83:c7:32:54:24:09:b4:1c:ac:3c: c5:ac:aa:93:b9:36:73:8a:1d:1d:ec:74:c5:b6:ce:26:82:d6: 31:e0:bc:5c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE/ANnr/ToI3TylsEEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWNjN2JiNDItYjlmOC00NjM4LTg2YmEtYzJhODA5ZDQ1 YzFlMB4XDTI2MTEwNjE0MDAxM1oXDTI3MDIwNDE0MDAxM1owLzEtMCsGA1UEAxMk ZjllNGExMGItNzc2Ni00YjhmLTg5YTktMDBkYmMwMDI5Zjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/a0U2LGGexmy+nyhCONnPBRQ6TIyn3G0qMaw XfAsW4NPFFupFdWI2Bbh7B/ADfWwr9HO9JkImEbuRb3Km6qP7M9TfewlQUbY9OiP EyaeU10BwEieWuQHSBZkHqiIrlcOu2yt46kBxhNHwTT4olvvnPMqjEGq/VcY4omV oOdyLQy9KT2oZUYWTOAt4ejQ4DESqMdtEXMMquh3YU9QTqfoqzun1HK8QmMFFdKa NCJWnZB/BCLGu8Ukn+L/syD6+hnKPHt4Muere1zpYXaKva/VzyvqonaU/372Rnlc 8KP6y4FnXPyXALqsi+uWwHHkPL2yNu4OqXmpZPsUmnP5g1WjNQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNYqNONoKiGKVxEFGoNVs2sLv0LhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9lY2M3 YmI0Mi1iOWY4LTQ2MzgtODZiYS1jMmE4MDlkNDVjMWUvYjExYmFjYzgtOTJiOC0z ZjA4LTgwZTYtMjQ4ZTIzZTdmMmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZWNjN2JiNDItYjlmOC00NjM4LTg2 YmEtYzJhODA5ZDQ1YzFlL2VjYzdiYjQyLWI5ZjgtNDYzOC04NmJhLWMyYTgwOWQ0 NWMxZS5jcmwwHwYDVR0jBBgwFoAURJbuw4oun40wu4RbTJ83Ab7QDq8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9lY2M3YmI0Mi1iOWY4LTQ2MzgtODZiYS1jMmE4 MDlkNDVjMWUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRwADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDBD6D/Ntn/zeylGxk+YBEfLNsofRjAeDs8YxQ58BBeUcZ/u7zXdnCX SRMuterh4YHY1UOaKFP5BpR7gD3VnXMlXmkrCuGTCYmXQbeXN6U2tT+nV1BAKyve HB304N1ylta30pTVInKzhVkIwJ9d6QuqY4ayBK9agQrvwOmdnDMPxdVq51fHYzMb 8KaSmF4jz3OW5EUG239kz/zOIYd9lxt9bNxab4EyzSRoRposiWajwWCSBU6K3G+a Dj+v6GeFDmErEeYZc6Fy37O2hK3H7isbY7+XBDLxpNYbkwGtnl+jK4PHMlQkCbQc rDzFrKqTuTZzih0d7HTFts4mgtYx4Lxc -----END CERTIFICATE-----Generated at Sun Nov 15 11:28:45 2026 by rpki-client