$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd4e7fdc-90bd-3837-b7a0-4969f999d906.roa File: bd4e7fdc-90bd-3837-b7a0-4969f999d906.roa (raw, json) Hash identifier: 0jpE2vrdyvSc+yjepN380EUD/c1tr5lJAaBZH/PrBSw= Subject key identifier: A1:4E:DC:B1:63:6C:E1:1C:3A:20:3E:AC:8D:0B:CF:5C:A3:1E:8F:EF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F6EB1956CBA5641629ED56080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd4e7fdc-90bd-3837-b7a0-4969f999d906.roa Signing time: Thu 08 Oct 2026 09:12:11 +0000 ROA not before: Thu 08 Oct 2026 09:12:11 +0000 ROA not after: Wed 06 Jan 2027 10:12:11 +0000 asID: 21342 IP address blocks: 2600:14c0:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6e:b1:95:6c:ba:56:41:62:9e:d5:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 8 09:12:11 2026 GMT Not After : Jan 6 10:12:11 2027 GMT Subject: CN=f429e6bc-208c-4493-9ab9-d6820d067712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cd:8e:b1:6c:85:42:04:7d:c3:d9:56:59:bf: 3a:a7:5b:d0:fd:f4:15:09:ac:47:6a:57:62:d8:4c: 45:02:75:b4:2e:92:fc:61:e5:6c:58:f5:a1:26:d0: 12:e0:8d:8b:fc:b3:cb:7a:ae:4d:20:c9:f9:25:87: fa:c2:9d:72:58:72:0b:09:ed:c3:61:a7:04:0f:45: 67:70:5c:dd:04:e5:64:c7:fc:a5:51:1d:9a:e5:a9: 94:a1:b3:0a:3a:b0:08:a1:a8:b8:56:3d:4d:97:89: ad:0a:fd:da:ed:de:5e:51:27:fe:69:b3:c1:b4:65: e3:07:21:cb:52:9a:b9:14:18:a6:1d:42:35:1a:62: 2f:ce:98:e9:d7:49:a1:a1:ec:b6:a9:75:f9:30:d6: 95:ef:0b:2a:c4:85:09:3a:b9:c5:82:ee:fb:c6:37: b0:3b:41:a6:bd:22:e1:e9:96:2c:d6:ef:9a:ec:94: c5:c0:d3:a9:e0:fd:d4:ef:f9:72:f7:a0:c5:e0:94: 61:3b:63:6d:d4:c4:b1:d2:59:72:8c:e9:df:c0:5a: 84:50:57:84:d4:4a:19:1e:7d:f3:8d:75:21:c1:70: 37:bd:0b:a1:77:63:3d:d1:6e:95:c7:39:fd:fd:6b: 57:c4:84:31:e3:c3:0e:ef:35:8e:80:d4:04:31:04: a2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:4E:DC:B1:63:6C:E1:1C:3A:20:3E:AC:8D:0B:CF:5C:A3:1E:8F:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd4e7fdc-90bd-3837-b7a0-4969f999d906.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:14c0:4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:1e:d0:21:f5:0e:30:75:5d:57:3c:75:e3:5b:4c:07:68:37: 0f:0b:f4:49:6d:3a:c3:f3:bc:81:2b:12:1d:2f:30:8c:dc:93: b8:97:b6:cd:92:9a:42:5d:13:b2:2c:8a:e7:ee:bc:52:11:b6: 45:53:9d:4b:3a:12:04:de:32:44:35:5e:f9:af:ad:98:3a:6f: 88:7e:c1:21:2e:5c:0a:1a:26:0e:4f:ee:8d:88:54:72:ed:a8: 63:de:5c:9d:5e:1b:ea:6e:6f:07:35:70:60:56:0e:30:7e:44: 17:a3:14:83:3c:aa:11:0a:13:3e:4f:e5:33:a0:12:22:11:b9: 77:9e:f1:72:69:77:43:cf:de:e4:a0:d2:00:8e:5a:48:a9:d5: c9:66:41:14:83:27:86:8a:3c:80:4c:80:5d:43:c4:a3:74:b4: af:2f:dc:fd:8a:4b:4f:11:eb:54:72:14:55:24:a7:3a:58:93: cc:1d:b7:f4:79:a3:ef:b0:72:bb:54:7b:70:51:86:96:35:30: 7b:08:9f:bb:89:ff:10:12:a1:e1:d4:40:94:a3:86:3b:9a:86: 15:a3:69:48:aa:0f:7b:3b:19:ce:b9:e8:c7:aa:67:7c:4d:cc: a8:ed:7d:e4:f1:bb:36:c0:bb:e9:fb:d1:c9:10:b4:25:8a:cb: 82:21:7f:d9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9usZVsulZBYp7VYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAwODA5MTIxMVoXDTI3MDEwNjEwMTIxMVowLzEtMCsGA1UEAxMk ZjQyOWU2YmMtMjA4Yy00NDkzLTlhYjktZDY4MjBkMDY3NzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA082OsWyFQgR9w9lWWb86p1vQ/fQVCaxHaldi 2ExFAnW0LpL8YeVsWPWhJtAS4I2L/LPLeq5NIMn5JYf6wp1yWHILCe3DYacED0Vn cFzdBOVkx/ylUR2a5amUobMKOrAIoai4Vj1Nl4mtCv3a7d5eUSf+abPBtGXjByHL Upq5FBimHUI1GmIvzpjp10mhoey2qXX5MNaV7wsqxIUJOrnFgu77xjewO0GmvSLh 6ZYs1u+a7JTFwNOp4P3U7/ly96DF4JRhO2Nt1MSx0llyjOnfwFqEUFeE1EoZHn3z jXUhwXA3vQuhd2M90W6Vxzn9/WtXxIQx48MO7zWOgNQEMQSi8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKFO3LFjbOEcOiA+rI0Lz1yjHo/vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmQ0ZTdmZGMtOTBiZC0z ODM3LWI3YTAtNDk2OWY5OTlkOTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUwAAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJYe0CH1DjB1XVc8deNbTAdoNw8L9EltOsPzvIErEh0vMIzck7iX ts2SmkJdE7IsiufuvFIRtkVTnUs6EgTeMkQ1XvmvrZg6b4h+wSEuXAoaJg5P7o2I VHLtqGPeXJ1eG+pubwc1cGBWDjB+RBejFIM8qhEKEz5P5TOgEiIRuXee8XJpd0PP 3uSg0gCOWkip1clmQRSDJ4aKPIBMgF1DxKN0tK8v3P2KS08R61RyFFUkpzpYk8wd t/R5o++wcrtUe3BRhpY1MHsIn7uJ/xASoeHUQJSjhjuahhWjaUiqD3s7Gc656Meq Z3xNzKjtfeTxuzbAu+n70ckQtCWKy4Ihf9k= -----END CERTIFICATE-----Generated at Thu Oct 22 03:28:20 2026 by rpki-client