$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/5423c03a-697e-3ed6-9dca-a727e4820c14.roa File: 5423c03a-697e-3ed6-9dca-a727e4820c14.roa (raw, json) Hash identifier: xpzXwkK9BHADcfr7TAiXX1Db4BZ6fEC2EQ/HIurEoN8= Subject key identifier: D8:17:84:B1:FC:4F:D5:10:F9:60:39:B6:38:B9:2A:09:07:BF:CE:06 Certificate issuer: /CN=bb69a441-76b7-4b20-a411-7a618bd61bcb Certificate serial: 010D0C9F4328584F7782EE89ABA7ADAD4953DAC0 Authority key identifier: 09:46:D0:A7:31:C8:12:1B:5F:66:60:53:4B:90:0C:BD:5D:9D:15:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/5423c03a-697e-3ed6-9dca-a727e4820c14.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 32338 IP address blocks: 2605:6280::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/bb69a441-76b7-4b20-a411-7a618bd61bcb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/bb69a441-76b7-4b20-a411-7a618bd61bcb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:82:ee:89:ab:a7:ad:ad:49:53:da:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb69a441-76b7-4b20-a411-7a618bd61bcb Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=d19b01ca-11c7-431e-9a98-46e2062a1023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f2:81:b8:f3:40:5e:e2:81:25:db:ec:5f:6f: 68:b6:ac:9a:40:52:69:8b:9f:a7:60:93:11:85:09: d5:56:d1:73:4b:f0:e1:91:dd:f2:57:85:38:27:3b: eb:aa:29:f5:11:e6:a0:82:22:8c:47:b5:b3:d8:50: 1f:4c:33:bb:4a:42:62:13:fc:75:19:cd:1f:c8:52: 78:c1:8c:47:b3:95:f8:c2:0a:4a:ae:8d:5e:b2:d8: 11:c2:ec:39:33:65:d7:e4:cf:6a:78:8b:1d:2b:3d: 98:e6:54:a0:2c:0a:23:03:f2:01:b0:ad:d1:d9:f2: 4a:47:58:f7:56:8b:19:fb:9a:66:a1:de:28:47:ce: 57:23:34:8b:d0:4e:48:a7:eb:81:3d:42:aa:b1:e0: 20:38:fd:56:72:a9:13:55:32:0f:44:fc:92:9e:2c: e0:a4:8a:62:66:be:99:a5:7e:31:0f:de:d8:5d:6d: f3:c2:b7:46:91:de:2e:83:fd:46:82:cf:a5:05:6d: 3e:63:4b:21:21:31:2b:74:1a:b1:00:bd:b3:a1:29: 47:1e:c4:fa:57:12:3d:42:bc:2e:0f:68:a4:db:cf: cd:3c:7a:42:dc:69:5c:10:31:e1:42:da:bf:b1:18: 1b:bd:5d:41:13:e8:f8:71:3c:f7:c0:f5:6f:cc:0c: c9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:17:84:B1:FC:4F:D5:10:F9:60:39:B6:38:B9:2A:09:07:BF:CE:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/5423c03a-697e-3ed6-9dca-a727e4820c14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/bb69a441-76b7-4b20-a411-7a618bd61bcb.crl X509v3 Authority Key Identifier: keyid:09:46:D0:A7:31:C8:12:1B:5F:66:60:53:4B:90:0C:BD:5D:9D:15:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb.cer sbgp-ipAddrBlock: critical IPv6: 2605:6280::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:5c:10:af:33:39:04:42:d1:6f:5a:9f:b0:d2:c1:93:96:9c: 82:e8:2a:5a:1e:a6:06:06:17:66:53:1b:f6:b9:a3:68:aa:81: 4a:d4:a9:1f:76:64:2e:fe:30:d1:3f:76:9f:f7:e6:53:92:dd: f2:29:da:d9:4e:13:4f:e0:6f:84:4c:ab:28:75:03:45:24:fb: af:dc:1e:d2:6c:e1:26:28:44:0d:c8:f3:63:42:9a:83:25:40: 89:cc:e7:d1:a1:29:fb:93:e0:7c:ac:0b:23:14:d0:48:35:43: d7:c2:8d:e1:ab:9c:b8:82:b8:ac:0f:f6:ce:ef:93:71:69:b7: 2b:4c:6d:f9:63:41:d6:5f:e6:94:6b:0b:1a:6b:c1:95:18:60: 55:fa:f4:27:10:ec:15:5c:8a:30:a5:79:24:17:da:d7:82:25: 4e:10:9a:aa:59:e0:e1:4c:65:d6:04:e6:78:d3:1e:74:82:dc: 29:79:45:13:60:0d:6c:c5:16:f6:e5:f7:a3:08:96:13:58:97: 22:ed:f2:5f:42:14:86:c7:a6:6a:ff:47:62:3f:27:82:36:1c: bf:5d:fb:0d:5a:12:44:9c:e0:bc:2e:8e:ac:03:e0:6c:6f:1b: 4c:98:f0:36:82:08:cd:6e:1c:82:7d:b9:4a:a4:28:dc:1d:1b: f5:0e:70:2c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE93gu6Jq6etrUlT2sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmI2OWE0NDEtNzZiNy00YjIwLWE0MTEtN2E2MThiZDYx YmNiMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZDE5YjAxY2EtMTFjNy00MzFlLTlhOTgtNDZlMjA2MmExMDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfKBuPNAXuKBJdvsX29otqyaQFJpi5+nYJMR hQnVVtFzS/Dhkd3yV4U4Jzvrqin1EeaggiKMR7Wz2FAfTDO7SkJiE/x1Gc0fyFJ4 wYxHs5X4wgpKro1estgRwuw5M2XX5M9qeIsdKz2Y5lSgLAojA/IBsK3R2fJKR1j3 VosZ+5pmod4oR85XIzSL0E5Ip+uBPUKqseAgOP1WcqkTVTIPRPySnizgpIpiZr6Z pX4xD97YXW3zwrdGkd4ug/1Ggs+lBW0+Y0shITErdBqxAL2zoSlHHsT6VxI9Qrwu D2ik28/NPHpC3GlcEDHhQtq/sRgbvV1BE+j4cTz3wPVvzAzJ0QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNgXhLH8T9UQ+WA5tji5KgkHv84GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iYjY5 YTQ0MS03NmI3LTRiMjAtYTQxMS03YTYxOGJkNjFiY2IvNTQyM2MwM2EtNjk3ZS0z ZWQ2LTlkY2EtYTcyN2U0ODIwYzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYmI2OWE0NDEtNzZiNy00YjIwLWE0 MTEtN2E2MThiZDYxYmNiL2JiNjlhNDQxLTc2YjctNGIyMC1hNDExLTdhNjE4YmQ2 MWJjYi5jcmwwHwYDVR0jBBgwFoAUCUbQpzHIEhtfZmBTS5AMvV2dFSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iYjY5YTQ0MS03NmI3LTRiMjAtYTQxMS03YTYx OGJkNjFiY2IuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgVigDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAhXBCvMzkEQtFvWp+w0sGTlpyC6CpaHqYGBhdmUxv2uaNoqoFK1Kkf dmQu/jDRP3af9+ZTkt3yKdrZThNP4G+ETKsodQNFJPuv3B7SbOEmKEQNyPNjQpqD JUCJzOfRoSn7k+B8rAsjFNBINUPXwo3hq5y4grisD/bO75NxabcrTG35Y0HWX+aU awsaa8GVGGBV+vQnEOwVXIowpXkkF9rXgiVOEJqqWeDhTGXWBOZ40x50gtwpeUUT YA1sxRb25fejCJYTWJci7fJfQhSGx6Zq/0diPyeCNhy/XfsNWhJEnOC8Lo6sA+Bs bxtMmPA2ggjNbhyCfblKpCjcHRv1DnAs -----END CERTIFICATE-----Generated at Wed Oct 21 10:16:31 2026 by rpki-client