$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c16513b-2697-3b28-b3a6-069788e76f01.roa File: 1c16513b-2697-3b28-b3a6-069788e76f01.roa (raw, json) Hash identifier: OJr7nTLAck72MpOssGJ877UVRF5Tj3ZvkgK8FVLiKxw= Subject key identifier: 29:4A:EA:72:93:D4:E9:B8:0E:55:E9:A4:14:67:D8:6B:42:43:12:F9 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EEA874EF313808193AE7806C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c16513b-2697-3b28-b3a6-069788e76f01.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 16509 IP address blocks: 2600:6801:11ff:1000::/52 maxlen: 64 2600:6801:11ff:2000::/52 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:4e:f3:13:80:81:93:ae:78:06:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=d09dd2ac-233d-41b0-ae1d-290fa2be3a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3f:48:29:47:9c:cb:13:21:34:25:0b:94:b7: 06:f4:a8:1a:ed:a4:af:6e:94:78:56:d2:3d:75:03: 94:5e:e4:a6:72:8b:9b:e5:78:4b:01:13:1d:53:29: bd:9d:62:5b:00:79:01:5c:a1:2b:85:d6:44:a6:d9: 42:ed:2f:49:76:73:8b:d6:69:d7:cd:da:b3:bb:96: f7:e8:6e:98:ff:2e:59:c8:72:8c:3e:0e:95:7e:36: 89:2f:ae:51:04:94:68:00:bc:99:68:8c:05:0d:50: 64:d9:16:57:3c:ad:31:e2:99:37:36:4a:87:0f:78: ef:74:ac:4f:e8:38:f2:28:15:9e:14:e7:b5:bb:a7: da:7e:7a:57:e0:60:38:97:e6:51:b5:d5:33:91:ad: 94:91:fc:d9:66:b0:6a:1c:bd:1b:06:d5:74:a0:9f: 54:03:e0:cd:d8:bc:4e:e1:6d:ae:ec:b4:a9:43:42: bd:9b:f2:89:de:f4:ea:9a:34:29:14:7f:04:8d:92: 88:5f:d9:a8:dd:ce:74:92:80:13:f4:0c:30:a4:46: 6d:56:e5:94:79:e4:c8:64:fc:3c:0a:d9:dc:b9:6f: 8e:3a:d1:8a:f4:4f:7d:39:d7:1a:22:0a:ef:bb:2b: 8a:76:af:8c:5f:5d:b0:61:ff:3a:e6:0f:7d:fd:b7: 6d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:4A:EA:72:93:D4:E9:B8:0E:55:E9:A4:14:67:D8:6B:42:43:12:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c16513b-2697-3b28-b3a6-069788e76f01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv6: 2600:6801:11ff:1000::-2600:6801:11ff:2fff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:2b:40:ea:f8:15:c9:9c:fe:aa:8a:83:71:f2:94:6e:04:c3: c9:8f:a5:c2:a3:1c:7d:41:99:b0:d4:6e:dc:3a:06:e1:b6:b8: 48:f5:3c:3d:81:68:b0:72:ee:3f:04:a2:65:a5:54:fd:99:c0: 33:54:c7:98:3c:21:8d:6c:10:81:83:cb:31:4d:04:56:3e:1c: 95:f1:d3:4f:99:2e:f7:20:5c:63:b5:f4:fb:39:e5:22:6b:6c: 61:19:59:c8:05:c2:99:41:30:1c:3d:ef:26:fe:6c:b0:39:1c: 5d:44:a3:fc:fb:8c:aa:4a:c2:4b:06:e2:75:ad:d6:19:5c:8b: fb:98:bd:26:b1:93:e1:04:ab:26:b2:e3:87:b2:29:9b:b2:c2: db:79:04:92:3c:f5:13:3e:53:89:30:52:01:7c:0b:01:e1:fe: 64:b2:08:5b:0f:cc:49:d4:27:61:37:46:f8:94:d9:1c:b8:4c: e5:52:95:40:61:50:da:3d:40:82:89:51:51:23:cc:f3:f1:78: e2:8d:fe:78:24:6f:36:48:7a:0e:b2:a9:b3:01:57:63:f2:9b: 0a:31:2c:31:1e:05:46:78:3c:ef:76:3f:57:68:56:29:e9:e7: c1:5f:cd:72:84:59:09:7b:00:4b:ae:88:83:f4:37:a4:2a:21: 54:7c:05:a5 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE7qh07zE4CBk654BsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk ZDA5ZGQyYWMtMjMzZC00MWIwLWFlMWQtMjkwZmEyYmUzYTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvj9IKUecyxMhNCULlLcG9Kga7aSvbpR4VtI9 dQOUXuSmcoub5XhLARMdUym9nWJbAHkBXKErhdZEptlC7S9JdnOL1mnXzdqzu5b3 6G6Y/y5ZyHKMPg6VfjaJL65RBJRoALyZaIwFDVBk2RZXPK0x4pk3NkqHD3jvdKxP 6DjyKBWeFOe1u6fafnpX4GA4l+ZRtdUzka2UkfzZZrBqHL0bBtV0oJ9UA+DN2LxO 4W2u7LSpQ0K9m/KJ3vTqmjQpFH8EjZKIX9mo3c50koAT9AwwpEZtVuWUeeTIZPw8 CtncuW+OOtGK9E99OdcaIgrvuyuKdq+MX12wYf865g99/bdtnwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFClK6nKT1Om4DlXppBRn2GtCQxL5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWMxNjUxM2ItMjY5Ny0z YjI4LWIzYTYtMDY5Nzg4ZTc2ZjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAcBAIAAjAWMBQDCAQmAGgB Ef8QAwgEJgBoARH/IDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA8K0Dq+BXJnP6qioNx8pRuBMPJj6XCoxx9 QZmw1G7cOgbhtrhI9Tw9gWiwcu4/BKJlpVT9mcAzVMeYPCGNbBCBg8sxTQRWPhyV 8dNPmS73IFxjtfT7OeUia2xhGVnIBcKZQTAcPe8m/mywORxdRKP8+4yqSsJLBuJ1 rdYZXIv7mL0msZPhBKsmsuOHsimbssLbeQSSPPUTPlOJMFIBfAsB4f5ksghbD8xJ 1CdhN0b4lNkcuEzlUpVAYVDaPUCCiVFRI8zz8Xjijf54JG82SHoOsqmzAVdj8psK MSwxHgVGeDzvdj9XaFYp6efBX81yhFkJewBLroiD9DekKiFUfAWl -----END CERTIFICATE-----Generated at Fri Aug 28 05:15:39 2026 by rpki-client