$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/2c3ae0d6-7bb1-375d-87b4-f1d9fd95ef10.roa File: 2c3ae0d6-7bb1-375d-87b4-f1d9fd95ef10.roa (raw, json) Hash identifier: 4l3fYFGGz+c3wD9xA+XZ/aOPezuckjpn5oYSsDb0Fq4= Subject key identifier: CE:BC:A6:AD:84:83:D8:A4:95:D2:6E:A8:3F:17:A5:A2:56:DF:34:21 Certificate issuer: /CN=ba5e814e-0ab8-4257-8c39-4091cb3be269 Certificate serial: 010D0C9F4328584D8C2AAD46ED9E9643D7E46C80 Authority key identifier: 62:39:8D:CB:D2:3A:1C:06:4A:D4:6F:96:C8:CC:02:3A:93:C3:15:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/2c3ae0d6-7bb1-375d-87b4-f1d9fd95ef10.roa Signing time: Sat 18 Apr 2026 13:00:30 +0000 ROA not before: Sat 18 Apr 2026 13:00:30 +0000 ROA not after: Fri 17 Jul 2026 13:00:30 +0000 asID: 40021 IP address blocks: 2605:a140::/28 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:2a:ad:46:ed:9e:96:43:d7:e4:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba5e814e-0ab8-4257-8c39-4091cb3be269 Validity Not Before: Apr 18 13:00:30 2026 GMT Not After : Jul 17 13:00:30 2026 GMT Subject: CN=8ca42fdc-260f-4c8a-a37d-762dd76f11e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:79:13:9e:d4:6f:45:29:eb:9b:10:ed:8b:92: 4d:ca:1f:f5:d5:e3:40:2f:ea:76:0a:54:7e:0c:1d: 86:d8:6a:85:e9:bd:e2:f5:ad:f6:41:42:b4:a8:2e: 08:38:c4:39:b6:be:b1:cb:33:ea:e8:99:7c:27:a4: b8:bf:c6:af:4b:e3:d1:7e:48:da:63:35:cd:0e:78: 00:ca:e4:78:b2:ff:f5:7f:dc:4e:50:e7:bc:dc:80: ed:56:8a:ec:f8:3e:88:2d:22:db:e0:1a:7f:bf:1d: fc:4b:b4:c3:5e:db:cd:cf:33:63:b6:4e:d8:a7:23: b8:dd:3b:16:7b:ca:b3:fa:24:d6:c6:d5:4a:b0:38: 34:bd:18:63:a0:53:42:51:a6:71:c4:08:49:4b:b4: bd:75:40:36:f5:9d:d1:9c:07:ee:32:2b:db:aa:24: ff:94:cc:2e:85:18:91:56:e8:62:95:62:80:a2:76: 34:53:2e:39:ef:3f:c6:ea:8a:5a:d1:a2:d2:0f:3e: 15:03:59:fb:5f:9d:35:19:81:f2:9c:af:65:b4:2e: f0:4f:e6:8e:e1:bb:59:3c:f9:8b:46:f4:8e:8e:aa: e4:dd:ec:3d:f9:ea:56:9d:43:42:e6:c2:c3:17:74: 2f:23:0c:7a:9c:ee:02:53:d5:c2:91:ea:da:2a:42: b6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:BC:A6:AD:84:83:D8:A4:95:D2:6E:A8:3F:17:A5:A2:56:DF:34:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/2c3ae0d6-7bb1-375d-87b4-f1d9fd95ef10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.crl X509v3 Authority Key Identifier: keyid:62:39:8D:CB:D2:3A:1C:06:4A:D4:6F:96:C8:CC:02:3A:93:C3:15:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer sbgp-ipAddrBlock: critical IPv6: 2605:a140::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:ea:7c:9c:5d:dc:e5:45:fb:cc:4b:32:24:f9:7f:92:fb:28: 7e:17:8e:9a:ac:d6:2e:12:5d:89:c4:6d:57:7e:bd:f4:19:ff: 66:08:b0:ac:32:9c:c7:24:1f:ab:36:65:42:ce:12:95:a7:83: 2e:1e:97:d7:49:0a:e5:42:ba:b7:5e:fb:24:a5:59:ec:21:ee: ea:4a:40:d4:57:7b:78:f9:d6:26:30:2f:3c:da:e6:a9:0c:b1: 61:7a:82:c5:2b:c7:13:68:b4:ba:af:86:4e:8e:3e:13:6b:6e: 7a:32:4e:bd:c4:e4:fe:01:0d:ed:ac:d3:c2:0a:cf:41:68:47: e1:9d:ea:33:93:27:09:f6:d4:ed:33:03:43:66:0a:a2:2a:0b: ba:ce:cb:e0:5a:f6:08:2e:17:b8:bf:09:00:cc:d5:c0:7a:87: 19:a4:e8:77:91:02:de:4f:4e:c7:fc:10:87:1d:aa:0c:be:5e: 99:45:d4:57:e3:ed:d9:eb:28:8c:d6:3e:b4:63:a0:e4:12:a4: b4:36:f2:9e:60:57:e1:d5:35:59:8c:00:51:d3:73:45:47:c9: 20:5e:e0:52:d8:64:98:14:95:52:16:27:ca:8e:9f:9a:2e:62: f1:c8:7f:54:c0:1b:11:8c:7d:7f:3a:0b:a5:79:35:74:8b:f6: 5c:d4:0e:55 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2MKq1G7Z6WQ9fkbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE1ZTgxNGUtMGFiOC00MjU3LThjMzktNDA5MWNiM2Jl MjY5MB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk OGNhNDJmZGMtMjYwZi00YzhhLWEzN2QtNzYyZGQ3NmYxMWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHkTntRvRSnrmxDti5JNyh/11eNAL+p2ClR+ DB2G2GqF6b3i9a32QUK0qC4IOMQ5tr6xyzPq6Jl8J6S4v8avS+PRfkjaYzXNDngA yuR4sv/1f9xOUOe83IDtVors+D6ILSLb4Bp/vx38S7TDXtvNzzNjtk7YpyO43TsW e8qz+iTWxtVKsDg0vRhjoFNCUaZxxAhJS7S9dUA29Z3RnAfuMivbqiT/lMwuhRiR VuhilWKAonY0Uy457z/G6opa0aLSDz4VA1n7X501GYHynK9ltC7wT+aO4btZPPmL RvSOjqrk3ew9+epWnUNC5sLDF3QvIwx6nO4CU9XCkeraKkK2RwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFM68pq2Eg9ikldJuqD8XpaJW3zQhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iYTVl ODE0ZS0wYWI4LTQyNTctOGMzOS00MDkxY2IzYmUyNjkvMmMzYWUwZDYtN2JiMS0z NzVkLTg3YjQtZjFkOWZkOTVlZjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYmE1ZTgxNGUtMGFiOC00MjU3LThj MzktNDA5MWNiM2JlMjY5L2JhNWU4MTRlLTBhYjgtNDI1Ny04YzM5LTQwOTFjYjNi ZTI2OS5jcmwwHwYDVR0jBBgwFoAUYjmNy9I6HAZK1G+WyMwCOpPDFSYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iYTVlODE0ZS0wYWI4LTQyNTctOGMzOS00MDkx Y2IzYmUyNjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgWhQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAQ6nycXdzlRfvMSzIk+X+S+yh+F46arNYuEl2JxG1Xfr30Gf9mCLCs MpzHJB+rNmVCzhKVp4MuHpfXSQrlQrq3XvskpVnsIe7qSkDUV3t4+dYmMC882uap DLFheoLFK8cTaLS6r4ZOjj4Ta256Mk69xOT+AQ3trNPCCs9BaEfhneozkycJ9tTt MwNDZgqiKgu6zsvgWvYILhe4vwkAzNXAeocZpOh3kQLeT07H/BCHHaoMvl6ZRdRX 4+3Z6yiM1j60Y6DkEqS0NvKeYFfh1TVZjABR03NFR8kgXuBS2GSYFJVSFifKjp+a LmLxyH9UwBsRjH1/OguleTV0i/Zc1A5V -----END CERTIFICATE-----Generated at Mon Apr 20 01:56:10 2026 by rpki-client