$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dbf5bff9-818a-3eaa-8a8f-cc27270151b1.roa File: dbf5bff9-818a-3eaa-8a8f-cc27270151b1.roa (raw, json) Hash identifier: hR4EbjL6XQEDKlX9+36gIYZVfbtr2Ath2bRh1CXLscs= Subject key identifier: E0:F0:E2:35:4B:45:48:D6:CC:3D:92:23:43:3A:9E:0F:BA:46:79:A8 Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F4328584F71ED9A99AD007C5B2A371500 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dbf5bff9-818a-3eaa-8a8f-cc27270151b1.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 20253 IP address blocks: 2606:bc40:23::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:9a:99:ad:00:7c:5b:2a:37:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=9de93782-48f3-4a2c-a586-cb5b70e76cd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:40:c9:11:9d:a2:a1:24:cc:4f:a4:5e:12:b4: 68:71:c0:ff:c0:5f:a3:0a:b7:b5:db:ea:cc:68:48: 2d:1b:fb:5a:18:39:c0:33:65:28:2e:a9:7f:b0:7b: 19:b6:33:12:9d:56:09:ca:ac:13:32:1d:cc:7a:b5: a5:d5:a6:a6:65:c7:59:ea:f9:8b:fe:eb:04:59:55: 23:d3:dc:97:12:40:0d:44:b2:0a:24:8b:80:6b:a0: 7d:8c:6a:fa:a5:a1:e1:ec:a2:d0:be:76:4a:df:bd: af:97:8b:3c:b2:b7:4b:9b:44:bf:6a:4a:ef:54:64: f4:20:8e:0e:fb:11:8d:fc:75:37:a7:e2:08:17:88: bf:fc:a4:5a:84:05:49:40:87:12:63:f4:27:0d:2b: 21:ad:a1:63:ec:1e:66:c0:fb:6b:ff:4d:ba:5a:21: 70:75:29:f4:77:99:fd:ad:bf:23:c1:27:d1:50:ab: ed:73:2e:e6:8b:e1:91:a1:ad:42:73:92:05:4c:43: f5:fe:4a:44:47:f6:e8:be:fd:90:99:91:97:70:4e: a8:d1:6c:88:8d:60:cd:b2:ed:4a:c0:8b:e9:75:fa: af:4e:a3:4f:53:ff:52:f0:a1:56:b0:78:bb:84:c5: c2:10:24:1b:26:58:88:dc:32:4f:cb:31:74:03:f5: d8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F0:E2:35:4B:45:48:D6:CC:3D:92:23:43:3A:9E:0F:BA:46:79:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dbf5bff9-818a-3eaa-8a8f-cc27270151b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:23::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:90:8b:81:9a:c5:7d:05:5e:c2:83:1d:ef:bc:04:81:78:ed: f9:6d:a0:f9:8f:20:a2:cf:41:c6:b7:66:c1:88:3a:17:fa:52: 7d:45:c6:8c:8e:9d:ab:df:95:f8:6a:12:47:9b:aa:73:97:40: bd:39:55:3e:e7:ca:2c:26:a6:b9:05:85:7c:2f:ad:48:fd:af: fa:db:93:54:38:93:7e:4f:2d:8f:8b:02:e6:ba:43:6a:14:62: 7d:65:82:4f:1e:9c:40:a3:3e:ed:3a:b9:d2:39:27:6a:27:f3: 86:0d:0f:ba:bd:ef:30:74:9f:31:aa:13:52:28:4e:cb:eb:c3: bc:70:44:8b:fc:26:d7:f0:ec:8f:d1:53:4e:56:e4:da:0e:dd: de:d5:8e:29:25:2e:ce:08:94:24:5c:94:34:d6:00:13:c9:35: 53:0a:38:7a:ef:4e:79:f6:69:ff:9e:ef:5f:68:06:66:2e:9a: 99:29:86:e9:17:af:a8:b9:de:4f:14:29:82:44:8a:5f:88:9c: fc:9f:aa:a8:9e:bf:62:81:4a:e5:af:ef:28:55:2d:7f:4a:a8: b5:fc:77:f3:6c:da:98:a2:25:f0:94:96:29:53:29:cb:92:3e: 11:74:59:76:b8:2b:78:5a:cf:2e:1a:7e:d2:47:76:1f:9e:9a: 30:6c:e5:20 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9x7ZqZrQB8Wyo3FQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk OWRlOTM3ODItNDhmMy00YTJjLWE1ODYtY2I1YjcwZTc2Y2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkDJEZ2ioSTMT6ReErRoccD/wF+jCre12+rM aEgtG/taGDnAM2UoLql/sHsZtjMSnVYJyqwTMh3MerWl1aamZcdZ6vmL/usEWVUj 09yXEkANRLIKJIuAa6B9jGr6paHh7KLQvnZK372vl4s8srdLm0S/akrvVGT0II4O +xGN/HU3p+IIF4i//KRahAVJQIcSY/QnDSshraFj7B5mwPtr/026WiFwdSn0d5n9 rb8jwSfRUKvtcy7mi+GRoa1Cc5IFTEP1/kpER/bovv2QmZGXcE6o0WyIjWDNsu1K wIvpdfqvTqNPU/9S8KFWsHi7hMXCECQbJliI3DJPyzF0A/XYRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFODw4jVLRUjWzD2SI0M6ng+6RnmoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvZGJmNWJmZjktODE4YS0z ZWFhLThhOGYtY2MyNzI3MDE1MWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QAAj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAACQi4GaxX0FXsKDHe+8BIF47fltoPmPIKLPQca3ZsGIOhf6Un1F xoyOnavflfhqEkebqnOXQL05VT7nyiwmprkFhXwvrUj9r/rbk1Q4k35PLY+LAua6 Q2oUYn1lgk8enECjPu06udI5J2on84YND7q97zB0nzGqE1IoTsvrw7xwRIv8Jtfw 7I/RU05W5NoO3d7VjiklLs4IlCRclDTWABPJNVMKOHrvTnn2af+e719oBmYumpkp hukXr6i53k8UKYJEil+InPyfqqiev2KBSuWv7yhVLX9KqLX8d/Ns2piiJfCUlilT KcuSPhF0WXa4K3hazy4aftJHdh+emjBs5SA= -----END CERTIFICATE-----Generated at Mon Oct 12 20:01:47 2026 by rpki-client