$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bca96b09-e170-3659-abb9-52dfeaf972fd.roa File: bca96b09-e170-3659-abb9-52dfeaf972fd.roa (raw, json) Hash identifier: I3VEL6khjQrEtkuUKlHp+7o4AOF0yRXOI+eNey4KcLg= Subject key identifier: F4:68:D3:A0:E6:AB:D1:8C:C9:4B:AD:12:BF:D5:B2:E3:52:D0:DE:5A Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584DCDC59E3BCE9B66F8ED0E7500 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bca96b09-e170-3659-abb9-52dfeaf972fd.roa Signing time: Tue 12 May 2026 01:00:24 +0000 ROA not before: Tue 12 May 2026 01:00:24 +0000 ROA not after: Mon 10 Aug 2026 01:00:24 +0000 asID: 6643 IP address blocks: 2606:cb00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cd:c5:9e:3b:ce:9b:66:f8:ed:0e:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: May 12 01:00:24 2026 GMT Not After : Aug 10 01:00:24 2026 GMT Subject: CN=b595e508-4668-40bd-a6b1-77be92ceb722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0c:a9:fb:62:24:a7:0b:4f:71:fd:02:5f:d2: 81:b2:64:b9:eb:36:ae:88:c6:00:2b:62:5b:a5:70: f5:1e:77:9d:02:f2:cd:33:93:10:c8:db:82:7d:ca: fb:b9:15:14:28:33:b7:94:d2:3d:be:e0:36:f9:53: 23:68:3b:c5:ba:f2:f3:ad:18:16:d7:f3:b1:bc:7c: 85:4f:40:46:27:2a:01:c8:76:72:46:c0:d3:59:8f: 26:7c:ad:6d:52:07:d8:f3:64:61:be:9d:41:53:6d: c1:01:98:55:76:fb:98:5b:5a:11:c3:53:0c:83:36: 60:63:55:62:7a:e2:81:32:4d:03:67:9f:93:be:64: d9:69:5a:36:b1:6f:3c:73:b8:e1:0d:c5:e0:d3:cd: 42:ae:8f:5b:41:5f:50:24:17:98:27:27:af:0a:55: 34:09:cf:9e:1b:c4:b4:6e:35:b0:6f:25:7e:3c:22: 15:fe:47:ce:6c:53:0e:cb:b5:db:ef:b6:22:2c:dc: 62:5e:39:cf:9c:bd:98:a6:cd:37:d3:22:10:05:55: 4a:d2:17:4f:be:75:ff:82:e7:10:cf:c1:e8:22:fa: 7b:37:5d:ac:b4:b2:9d:8f:29:f0:6c:68:68:a8:66: 1a:3d:3a:9c:30:5c:bc:cf:49:1f:68:65:a9:5b:87: 9e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:68:D3:A0:E6:AB:D1:8C:C9:4B:AD:12:BF:D5:B2:E3:52:D0:DE:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bca96b09-e170-3659-abb9-52dfeaf972fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv6: 2606:cb00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption db:9c:7a:44:cb:50:0e:83:9f:a5:18:c4:54:0a:8c:b4:82:9e: 9c:26:3e:07:5b:a1:5d:28:2e:28:17:30:ef:16:26:9c:76:0f: d2:dc:bb:04:ba:6d:00:ed:c8:19:ce:7a:d1:bc:5e:f3:35:d0: 5e:a9:ab:b6:74:b3:a2:eb:d6:29:f6:3d:dd:d4:60:d1:5d:6a: b9:47:8a:35:12:ea:c7:45:e6:96:95:69:f4:f1:9d:84:a2:cf: 83:86:59:a1:e8:91:8e:3b:73:13:1f:91:8d:f7:ea:e3:0a:24: 90:58:72:75:be:62:3c:0a:0b:09:41:c9:f4:31:61:c3:ab:f3: 81:40:9f:b5:b4:86:99:1f:fc:1a:36:74:36:7d:4f:ae:55:91: 6a:43:fd:51:b0:38:40:65:20:40:b6:c9:d4:3d:64:6c:67:36: 16:80:79:56:23:a0:9c:88:6a:d8:fb:9d:a2:cd:05:c5:14:8c: 8e:56:19:45:e2:0d:e6:9d:0d:47:97:64:c5:9f:70:75:62:b9: 64:18:96:96:1b:ba:af:12:b4:a3:b9:bb:e2:b4:22:a8:7b:08: be:af:57:66:8b:05:38:fe:5c:f3:8b:d1:2f:d2:e7:9a:0e:5d: 8f:f8:54:ba:74:14:54:3b:ff:cb:d8:68:d1:05:d0:4c:65:b5: c6:e8:d4:d3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3NxZ47zptm+O0OdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDUxMjAxMDAyNFoXDTI2MDgxMDAxMDAyNFowLzEtMCsGA1UEAxMk YjU5NWU1MDgtNDY2OC00MGJkLWE2YjEtNzdiZTkyY2ViNzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwyp+2IkpwtPcf0CX9KBsmS56zauiMYAK2Jb pXD1HnedAvLNM5MQyNuCfcr7uRUUKDO3lNI9vuA2+VMjaDvFuvLzrRgW1/OxvHyF T0BGJyoByHZyRsDTWY8mfK1tUgfY82Rhvp1BU23BAZhVdvuYW1oRw1MMgzZgY1Vi euKBMk0DZ5+TvmTZaVo2sW88c7jhDcXg081Cro9bQV9QJBeYJyevClU0Cc+eG8S0 bjWwbyV+PCIV/kfObFMOy7Xb77YiLNxiXjnPnL2Yps030yIQBVVK0hdPvnX/gucQ z8HoIvp7N12stLKdjynwbGhoqGYaPTqcMFy8z0kfaGWpW4eewQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPRo06Dmq9GMyUutEr/VsuNS0N5aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYmNhOTZiMDktZTE3MC0z NjU5LWFiYjktNTJkZmVhZjk3MmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbLADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDbnHpEy1AOg5+lGMRUCoy0gp6cJj4HW6FdKC4oFzDvFiacdg/S3LsE um0A7cgZznrRvF7zNdBeqau2dLOi69Yp9j3d1GDRXWq5R4o1EurHReaWlWn08Z2E os+Dhlmh6JGOO3MTH5GN9+rjCiSQWHJ1vmI8CgsJQcn0MWHDq/OBQJ+1tIaZH/wa NnQ2fU+uVZFqQ/1RsDhAZSBAtsnUPWRsZzYWgHlWI6CciGrY+52izQXFFIyOVhlF 4g3mnQ1Hl2TFn3B1YrlkGJaWG7qvErSjubvitCKoewi+r1dmiwU4/lzzi9Ev0uea Dl2P+FS6dBRUO//L2GjRBdBMZbXG6NTT -----END CERTIFICATE-----Generated at Wed May 13 10:31:46 2026 by rpki-client