$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bcab9913-1f29-399b-b061-fd3b9f212155.roa File: bcab9913-1f29-399b-b061-fd3b9f212155.roa (raw, json) Hash identifier: g53NGMS7NQf/FKRHk+VZuNf9aog+Mc0fRiJ1NN3yiOQ= Subject key identifier: 67:FF:A5:A0:07:1A:A8:FE:F3:D4:0D:03:54:0B:FB:77:AA:E5:B9:89 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4E981C85276F3E3C9F2520 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bcab9913-1f29-399b-b061-fd3b9f212155.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33662 IP address blocks: 2601:2c2:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:98:1c:85:27:6f:3e:3c:9f:25:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=2290d5f9-da40-4020-a8f7-fd0b4192cac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f8:c5:51:7b:17:63:c1:7e:3d:c3:b3:a2:3a: d9:29:1a:41:cd:be:d3:a5:33:c8:fb:b6:9f:32:d8: f8:6d:24:aa:b7:8f:bb:95:88:3c:59:49:8a:d1:de: e3:a8:56:d2:26:81:f3:27:8a:91:5f:16:f0:de:49: 00:e2:af:9a:03:90:dc:49:2c:f4:d5:37:f5:2b:9e: 86:4d:00:98:43:fd:9c:0c:50:01:26:c5:d4:24:15: 24:bc:1f:47:51:8c:02:85:77:9e:f4:15:d2:90:e6: e1:27:4b:eb:5e:3b:7a:83:ac:d0:ae:28:b5:c5:d1: 12:0d:81:c5:ba:0d:df:2e:c8:21:79:49:01:a4:ac: 55:12:17:96:8c:ed:65:96:83:2b:86:16:75:a1:25: c9:90:82:6d:6d:72:15:36:aa:19:0b:76:43:97:17: 02:78:3e:e9:1e:6e:d8:03:d9:59:95:11:2a:e1:6a: 03:ff:bf:16:a7:5c:d8:90:99:3e:ca:9b:4e:23:87: 81:51:68:c8:f0:b7:7e:2e:ce:80:f8:8e:1b:3f:e5: d6:1f:63:6e:01:c9:9d:a4:13:82:54:d9:53:25:40: 22:90:d5:06:20:aa:5f:59:2d:af:9e:65:78:f5:fc: 49:51:87:fd:2a:fe:01:58:0e:01:b0:27:9e:93:d9: 47:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FF:A5:A0:07:1A:A8:FE:F3:D4:0D:03:54:0B:FB:77:AA:E5:B9:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bcab9913-1f29-399b-b061-fd3b9f212155.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:2c2:8000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:99:b2:97:a7:2e:74:af:48:04:83:dd:20:01:02:5e:58:c0: 47:a9:89:50:d0:80:95:04:6b:2b:1c:df:3b:30:ba:f6:d2:8e: 58:59:e2:56:18:86:df:93:6c:48:59:75:c8:de:00:77:a3:79: 8a:06:5c:9e:5a:c9:ae:9c:f3:a0:3a:ed:af:e9:ef:70:fa:9f: dd:32:4d:e7:02:fa:a2:90:22:3f:0b:9c:ce:49:79:ab:a9:16: 4b:ac:db:b1:c6:6e:ab:11:cf:4f:f9:e7:8b:5b:52:da:ce:c4: 35:97:18:d1:5a:2c:84:af:6f:6b:f9:f9:cb:70:c3:fe:df:2a: 20:46:ca:ae:b7:d9:31:99:d0:a4:6b:9a:0b:10:93:17:50:52: e4:22:ea:b9:1e:61:b8:01:ff:70:45:4e:22:b3:df:cc:bb:10: 5d:f4:83:cf:ab:9a:66:38:e3:0c:29:07:d8:d6:89:45:1b:d9: c7:bc:80:27:99:1e:92:9a:00:44:5f:50:22:87:05:0c:4b:51: a6:07:70:a6:b7:a5:d1:eb:23:85:aa:f3:85:ba:82:58:d3:b5: 43:b9:3c:51:03:77:69:e6:eb:77:96:6a:45:94:fd:ef:fc:3d: 6a:5b:b2:26:ad:80:1b:16:06:25:29:ef:61:a9:99:f6:2a:95: b0:78:be:50 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE96TpgchSdvPjyfJSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk MjI5MGQ1ZjktZGE0MC00MDIwLWE4ZjctZmQwYjQxOTJjYWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvjFUXsXY8F+PcOzojrZKRpBzb7TpTPI+7af Mtj4bSSqt4+7lYg8WUmK0d7jqFbSJoHzJ4qRXxbw3kkA4q+aA5DcSSz01Tf1K56G TQCYQ/2cDFABJsXUJBUkvB9HUYwChXee9BXSkObhJ0vrXjt6g6zQrii1xdESDYHF ug3fLsgheUkBpKxVEheWjO1lloMrhhZ1oSXJkIJtbXIVNqoZC3ZDlxcCeD7pHm7Y A9lZlREq4WoD/78Wp1zYkJk+yptOI4eBUWjI8Ld+Ls6A+I4bP+XWH2NuAcmdpBOC VNlTJUAikNUGIKpfWS2vnmV49fxJUYf9Kv4BWA4BsCeek9lHaQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGf/paAHGqj+89QNA1QL+3eq5bmJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmNhYjk5MTMtMWYyOS0z OTliLWIwNjEtZmQzYjlmMjEyMTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgECwoAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAiZmyl6cudK9IBIPdIAECXljAR6mJUNCAlQRrKxzfOzC69tKOWFni VhiG35NsSFl1yN4Ad6N5igZcnlrJrpzzoDrtr+nvcPqf3TJN5wL6opAiPwuczkl5 q6kWS6zbscZuqxHPT/nni1tS2s7ENZcY0VoshK9va/n5y3DD/t8qIEbKrrfZMZnQ pGuaCxCTF1BS5CLquR5huAH/cEVOIrPfzLsQXfSDz6uaZjjjDCkH2NaJRRvZx7yA J5kekpoARF9QIocFDEtRpgdwprel0esjharzhbqCWNO1Q7k8UQN3aebrd5ZqRZT9 7/w9aluyJq2AGxYGJSnvYamZ9iqVsHi+UA== -----END CERTIFICATE-----Generated at Mon Oct 26 19:42:43 2026 by rpki-client