$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/92e4fe3a-a2ff-4d3a-a18e-48eea010aa86/ba4cc889-14cf-3470-a6f4-0d1cf0df6de0.roa File: ba4cc889-14cf-3470-a6f4-0d1cf0df6de0.roa (raw, json) Hash identifier: dN2shdbt1Xt1FcATeb7+NdYdfvsRr0QCIa8MruQX9tQ= Subject key identifier: 23:80:B0:1C:7D:E5:C1:A8:31:33:4E:0E:60:64:97:19:52:0D:E3:26 Certificate issuer: /CN=92e4fe3a-a2ff-4d3a-a18e-48eea010aa86 Certificate serial: 010D0C9F4328584F49735C26B7F046E5B3621EC0 Authority key identifier: 71:F0:61:E6:B8:BB:CB:67:80:21:15:24:A7:56:52:50:88:1B:13:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/92e4fe3a-a2ff-4d3a-a18e-48eea010aa86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/92e4fe3a-a2ff-4d3a-a18e-48eea010aa86/ba4cc889-14cf-3470-a6f4-0d1cf0df6de0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3131 IP address blocks: 2604:6640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/92e4fe3a-a2ff-4d3a-a18e-48eea010aa86/92e4fe3a-a2ff-4d3a-a18e-48eea010aa86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/92e4fe3a-a2ff-4d3a-a18e-48eea010aa86/92e4fe3a-a2ff-4d3a-a18e-48eea010aa86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/92e4fe3a-a2ff-4d3a-a18e-48eea010aa86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:5c:26:b7:f0:46:e5:b3:62:1e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92e4fe3a-a2ff-4d3a-a18e-48eea010aa86 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=afda80eb-e855-43fe-892c-a93237f5790d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2f:00:05:00:75:89:7f:84:1a:d4:2f:52:95: 34:b0:1c:75:d2:e1:08:8d:b5:03:95:ea:7f:4d:ef: a5:a1:a0:0e:8d:09:09:67:61:f9:94:c6:b2:12:df: 1c:99:03:f4:89:d2:e4:ab:e6:7e:9f:7d:c7:9f:ac: 96:fb:22:b6:d8:0c:81:20:ec:f6:42:a8:4f:c9:95: 29:c0:e0:a7:88:22:40:cd:39:43:95:60:73:94:f0: 82:be:06:21:e9:9b:46:0f:8c:dd:46:28:73:05:9a: db:76:95:b9:87:1e:fe:55:12:43:43:23:2c:0f:2f: 32:3c:85:f0:7c:cf:da:03:27:2e:0d:97:5d:80:84: 8e:9b:cb:90:04:28:2e:eb:d0:3f:25:f1:50:20:a3: d9:3e:64:c8:d9:c4:8d:aa:a8:a3:c5:c9:80:95:90: c1:83:a8:4c:25:ee:ee:8a:4f:98:e1:32:57:bf:5a: 84:47:eb:16:c6:0d:fb:34:c5:e1:bc:a0:2c:1b:65: f9:f2:cc:3f:11:69:4a:bf:31:50:0b:9a:11:37:74: 55:72:48:ef:52:41:f4:8d:4a:15:45:b9:5b:7c:43: 02:71:39:64:87:5d:e0:b6:f5:9a:62:29:4d:9b:e1: 68:a7:24:57:43:05:60:1b:7d:8f:a5:99:d5:cf:90: 5d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:80:B0:1C:7D:E5:C1:A8:31:33:4E:0E:60:64:97:19:52:0D:E3:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/92e4fe3a-a2ff-4d3a-a18e-48eea010aa86/ba4cc889-14cf-3470-a6f4-0d1cf0df6de0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/92e4fe3a-a2ff-4d3a-a18e-48eea010aa86/92e4fe3a-a2ff-4d3a-a18e-48eea010aa86.crl X509v3 Authority Key Identifier: keyid:71:F0:61:E6:B8:BB:CB:67:80:21:15:24:A7:56:52:50:88:1B:13:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/92e4fe3a-a2ff-4d3a-a18e-48eea010aa86.cer sbgp-ipAddrBlock: critical IPv6: 2604:6640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:b1:5a:e5:a7:02:b0:45:2f:13:52:93:55:aa:53:58:e5:bc: b8:96:4d:75:cb:bc:de:87:a3:62:c8:8e:30:22:e0:4c:32:b9: 96:b7:fe:94:b4:36:c1:5a:c9:d8:7b:f9:bb:6e:f3:2d:c6:dc: b9:10:c4:07:8c:72:48:9c:89:7a:b6:48:a9:29:d4:40:5e:5f: 87:76:fc:87:0d:30:fa:90:5b:1c:da:11:e7:54:7f:71:76:60: 0b:e8:41:a4:25:0d:d9:be:5d:4e:52:71:f5:ae:42:03:41:55: 5d:ad:cd:b9:3f:31:34:61:52:a0:42:0f:b5:19:64:29:77:e0: fe:a4:66:b6:5f:1d:35:0d:15:33:7e:90:da:49:28:08:72:b2: 92:66:20:4f:d3:1a:a0:62:08:c5:2c:54:a6:b6:96:9e:8b:ee: 85:9a:ac:f7:e5:55:e9:9e:c7:58:5f:b2:ed:9c:e9:cb:84:0c: 46:e8:49:15:1c:c5:d7:e3:b4:61:13:6c:c9:a8:8b:92:7e:d0: e3:3a:95:0e:a8:b5:93:bd:8e:fc:b6:45:7d:6e:05:95:30:85: 8a:8c:58:08:39:0c:72:48:7a:9a:0b:48:57:ea:5b:e3:42:0c: d0:56:ed:4f:ea:0e:f2:74:b5:ab:9f:22:39:8e:75:2b:99:9c: 28:14:b8:2d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Jc1wmt/BG5bNiHsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTJlNGZlM2EtYTJmZi00ZDNhLWExOGUtNDhlZWEwMTBh YTg2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWZkYTgwZWItZTg1NS00M2ZlLTg5MmMtYTkzMjM3ZjU3OTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnS8ABQB1iX+EGtQvUpU0sBx10uEIjbUDlep/ Te+loaAOjQkJZ2H5lMayEt8cmQP0idLkq+Z+n33Hn6yW+yK22AyBIOz2QqhPyZUp wOCniCJAzTlDlWBzlPCCvgYh6ZtGD4zdRihzBZrbdpW5hx7+VRJDQyMsDy8yPIXw fM/aAycuDZddgISOm8uQBCgu69A/JfFQIKPZPmTI2cSNqqijxcmAlZDBg6hMJe7u ik+Y4TJXv1qER+sWxg37NMXhvKAsG2X58sw/EWlKvzFQC5oRN3RVckjvUkH0jUoV RblbfEMCcTlkh13gtvWaYilNm+FopyRXQwVgG32PpZnVz5BdWQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCOAsBx95cGoMTNODmBklxlSDeMmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85MmU0 ZmUzYS1hMmZmLTRkM2EtYTE4ZS00OGVlYTAxMGFhODYvYmE0Y2M4ODktMTRjZi0z NDcwLWE2ZjQtMGQxY2YwZGY2ZGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTJlNGZlM2EtYTJmZi00ZDNhLWEx OGUtNDhlZWEwMTBhYTg2LzkyZTRmZTNhLWEyZmYtNGQzYS1hMThlLTQ4ZWVhMDEw YWE4Ni5jcmwwHwYDVR0jBBgwFoAUcfBh5ri7y2eAIRUkp1ZSUIgbE50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85MmU0ZmUzYS1hMmZmLTRkM2EtYTE4ZS00OGVl YTAxMGFhODYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRmQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBjsVrlpwKwRS8TUpNVqlNY5by4lk11y7zeh6NiyI4wIuBMMrmWt/6U tDbBWsnYe/m7bvMtxty5EMQHjHJInIl6tkipKdRAXl+HdvyHDTD6kFsc2hHnVH9x dmAL6EGkJQ3Zvl1OUnH1rkIDQVVdrc25PzE0YVKgQg+1GWQpd+D+pGa2Xx01DRUz fpDaSSgIcrKSZiBP0xqgYgjFLFSmtpaei+6Fmqz35VXpnsdYX7LtnOnLhAxG6EkV HMXX47RhE2zJqIuSftDjOpUOqLWTvY78tkV9bgWVMIWKjFgIOQxySHqaC0hX6lvj QgzQVu1P6g7ydLWrnyI5jnUrmZwoFLgt -----END CERTIFICATE-----Generated at Tue Oct 13 06:18:06 2026 by rpki-client