$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c16513b-2697-3b28-b3a6-069788e76f01.roa File: 1c16513b-2697-3b28-b3a6-069788e76f01.roa (raw, json) Hash identifier: +lR3CRkiAavqysFu9lnaL2tFA/5ujTRBPJpH2JLGq70= Subject key identifier: C5:E9:60:E3:6C:2E:2C:6C:9A:B0:7F:9D:F5:CD:CD:5B:55:AF:18:E0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F8DD850A755CD27C9D638D260 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c16513b-2697-3b28-b3a6-069788e76f01.roa Signing time: Mon 19 Oct 2026 13:00:12 +0000 ROA not before: Mon 19 Oct 2026 13:00:12 +0000 ROA not after: Sun 17 Jan 2027 14:00:12 +0000 asID: 16509 IP address blocks: 2600:6801:11ff:1000::/52 maxlen: 64 2600:6801:11ff:2000::/52 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:d8:50:a7:55:cd:27:c9:d6:38:d2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 19 13:00:12 2026 GMT Not After : Jan 17 14:00:12 2027 GMT Subject: CN=a68eeebb-bfa8-427b-b915-3dd2987b6458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b7:da:d4:22:36:62:49:14:0e:28:c4:46:14: 26:c6:c4:39:d7:ab:56:03:30:72:43:20:71:8a:30: 38:ed:61:cb:b2:1c:8d:b8:bf:0f:f1:83:d1:fb:dd: 03:1d:77:90:63:17:b7:8c:3b:b7:c4:8b:14:d0:5f: 64:fa:94:dc:ae:1d:a5:c7:4f:34:0b:bf:3e:9a:be: c2:e3:66:97:45:30:07:f8:83:df:63:f4:df:2b:3c: 78:c3:86:77:a1:e4:07:8b:f2:73:a5:5f:fb:c5:7e: 6c:fb:a3:d0:86:e7:77:fc:a6:2e:8c:b8:a2:ac:d1: 6a:50:cf:17:7a:19:70:f8:ed:91:53:ef:70:f2:32: 46:7a:9d:11:44:e3:02:f4:15:e4:70:1d:63:24:25: 54:f7:d2:76:17:94:76:49:4d:cd:cc:f5:71:3c:23: 0a:b8:c4:20:65:c0:26:4f:d7:e2:c5:89:e0:06:8c: f9:fe:d6:07:21:bc:37:01:2c:03:a0:46:6f:91:62: 2d:40:89:5c:db:d9:3a:81:70:41:2f:52:c4:00:0b: 8a:9c:be:08:45:73:6f:fe:88:90:14:b6:99:fd:be: 1d:e6:70:0a:e1:e2:2b:9c:f8:e8:d7:7b:50:e5:9b: e6:5a:40:d4:ee:7c:d6:3c:be:d6:7a:37:a3:83:b2: ee:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E9:60:E3:6C:2E:2C:6C:9A:B0:7F:9D:F5:CD:CD:5B:55:AF:18:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c16513b-2697-3b28-b3a6-069788e76f01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv6: 2600:6801:11ff:1000::-2600:6801:11ff:2fff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:12:65:1a:ae:67:87:6e:ee:28:3e:6c:bb:01:6b:f8:c5:f6: e4:87:ea:88:ac:91:29:5a:25:45:b3:a8:0e:67:18:26:4f:c5: c7:ba:bb:84:56:62:19:ed:bc:5a:5f:25:f9:f8:72:b4:ba:d8: 85:62:b6:cf:80:e3:c8:94:72:42:19:2a:3c:8f:e6:03:21:58: c2:d0:5d:89:02:55:16:14:15:ca:79:ad:77:e5:c5:88:f3:33: c0:b6:cf:e7:91:ed:ec:48:14:b1:e7:fa:4a:02:9c:65:a1:48: 47:40:59:c4:80:8a:7a:78:a6:4c:5e:dd:bd:3c:3b:f3:0f:29: e9:25:4c:13:02:a2:3c:bf:93:21:51:40:bc:f2:41:62:41:15: a2:cf:0f:e3:14:9c:03:9c:18:01:66:e2:71:b0:c0:65:31:36: b6:63:10:12:ff:55:26:f4:4a:ba:19:f0:04:3b:94:51:f0:01: 2c:60:10:de:4f:4f:eb:b8:d6:67:25:42:65:6a:fa:8d:46:e9: 50:98:cc:33:ef:84:1f:0e:45:80:d5:12:ab:2d:6e:6c:1b:5d: 79:95:d6:e4:ab:d6:09:a2:4c:5c:ce:15:ff:14:19:d8:2f:0c: 42:75:a4:06:fd:b4:16:45:49:ef:48:f8:95:9c:18:5d:01:84: 48:fd:53:e8 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE+N2FCnVc0nydY40mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MTAxOTEzMDAxMloXDTI3MDExNzE0MDAxMlowLzEtMCsGA1UEAxMk YTY4ZWVlYmItYmZhOC00MjdiLWI5MTUtM2RkMjk4N2I2NDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrfa1CI2YkkUDijERhQmxsQ516tWAzByQyBx ijA47WHLshyNuL8P8YPR+90DHXeQYxe3jDu3xIsU0F9k+pTcrh2lx080C78+mr7C 42aXRTAH+IPfY/TfKzx4w4Z3oeQHi/JzpV/7xX5s+6PQhud3/KYujLiirNFqUM8X ehlw+O2RU+9w8jJGep0RROMC9BXkcB1jJCVU99J2F5R2SU3NzPVxPCMKuMQgZcAm T9fixYngBoz5/tYHIbw3ASwDoEZvkWItQIlc29k6gXBBL1LEAAuKnL4IRXNv/oiQ FLaZ/b4d5nAK4eIrnPjo13tQ5ZvmWkDU7nzWPL7Wejejg7LutwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFMXpYONsLixsmrB/nfXNzVtVrxjgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWMxNjUxM2ItMjY5Ny0z YjI4LWIzYTYtMDY5Nzg4ZTc2ZjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAcBAIAAjAWMBQDCAQmAGgB Ef8QAwgEJgBoARH/IDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBuEmUarmeHbu4oPmy7AWv4xfbkh+qIrJEp WiVFs6gOZxgmT8XHuruEVmIZ7bxaXyX5+HK0utiFYrbPgOPIlHJCGSo8j+YDIVjC 0F2JAlUWFBXKea135cWI8zPAts/nke3sSBSx5/pKApxloUhHQFnEgIp6eKZMXt29 PDvzDynpJUwTAqI8v5MhUUC88kFiQRWizw/jFJwDnBgBZuJxsMBlMTa2YxAS/1Um 9Eq6GfAEO5RR8AEsYBDeT0/ruNZnJUJlavqNRulQmMwz74QfDkWA1RKrLW5sG115 ldbkq9YJokxczhX/FBnYLwxCdaQG/bQWRUnvSPiVnBhdAYRI/VPo -----END CERTIFICATE-----Generated at Wed Oct 28 14:21:10 2026 by rpki-client