$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/2c3ae0d6-7bb1-375d-87b4-f1d9fd95ef10.roa File: 2c3ae0d6-7bb1-375d-87b4-f1d9fd95ef10.roa (raw, json) Hash identifier: Q6A9sPjB2rJD/zH5/ALxY4oxb9pv7uBEc/iOVKxwgvc= Subject key identifier: 8C:9F:8E:AC:01:CF:A5:F4:0A:DB:02:85:2C:4D:75:00:12:0A:3C:E6 Certificate issuer: /CN=ba5e814e-0ab8-4257-8c39-4091cb3be269 Certificate serial: 010D0C9F4328584F0ED2412263BB4F7BE1F692D0 Authority key identifier: 62:39:8D:CB:D2:3A:1C:06:4A:D4:6F:96:C8:CC:02:3A:93:C3:15:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/2c3ae0d6-7bb1-375d-87b4-f1d9fd95ef10.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 40021 IP address blocks: 2605:a140::/28 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:41:22:63:bb:4f:7b:e1:f6:92:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba5e814e-0ab8-4257-8c39-4091cb3be269 Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=02c0d2af-6049-4cd5-9d5f-ac546cffd4db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6b:2e:94:07:a6:1f:23:a0:2b:59:79:80:a9: 8d:85:fe:90:dc:e5:f4:6a:76:54:e7:bf:94:5f:7e: ef:86:95:21:1f:cc:de:b6:71:f8:e5:35:76:c3:ae: 7a:1e:ae:49:4f:56:17:47:0c:14:2c:05:ac:8b:cf: 0a:d2:1c:8e:7c:ad:3b:a7:35:e4:15:a2:7f:2a:c9: 31:79:3a:21:93:cd:30:f2:f2:73:2e:15:be:99:d5: 88:6e:71:86:fc:17:3f:97:66:41:28:7e:7e:b4:d4: 3d:4f:65:ed:de:1f:03:3d:e2:4d:dd:46:df:74:9e: 8d:6b:9c:d2:b4:65:c3:c2:22:a2:d6:a0:a3:2b:54: d5:e6:ec:68:ae:93:b8:86:e5:60:a1:c1:ee:de:50: 26:27:a9:e1:08:98:e8:f9:97:10:c6:ab:71:1f:68: 1b:b7:0d:2f:92:09:bc:71:49:1a:09:a8:7b:db:9c: 28:90:65:2a:63:0b:08:fb:a1:94:2a:ca:0c:72:f7: 4c:98:ac:77:24:54:77:13:f4:f5:ab:a9:57:a0:db: 97:a2:bd:1e:8e:a3:03:60:c2:25:3b:6a:97:ad:e6: 9d:50:f6:3e:9c:b0:bb:66:d8:65:d2:1d:1f:53:2a: 4d:b9:56:b5:1b:f3:9d:1d:a4:1c:c2:4d:58:de:eb: 0a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:9F:8E:AC:01:CF:A5:F4:0A:DB:02:85:2C:4D:75:00:12:0A:3C:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/2c3ae0d6-7bb1-375d-87b4-f1d9fd95ef10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.crl X509v3 Authority Key Identifier: keyid:62:39:8D:CB:D2:3A:1C:06:4A:D4:6F:96:C8:CC:02:3A:93:C3:15:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer sbgp-ipAddrBlock: critical IPv6: 2605:a140::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:d5:df:4a:5f:d7:15:0d:1d:33:53:6f:52:de:99:79:49:8c: ea:45:89:42:d9:7d:c6:68:1f:89:e1:ad:2a:c6:a2:a9:69:0a: c8:3e:ae:ff:c1:2a:f0:8c:be:8d:cc:26:f4:2d:e4:34:d5:28: 92:2c:b5:e3:f1:2b:cb:99:5e:9d:2d:ff:a1:ea:b9:10:70:aa: 53:47:d2:1f:e2:33:bd:c2:10:05:41:ba:08:f4:ee:9a:7a:f8: 8b:ae:87:c6:7f:e7:01:cc:18:11:bd:7c:44:0a:29:00:50:c7: 69:3c:fe:f3:74:d1:14:09:8d:96:64:94:f5:30:ce:87:da:ae: 69:fe:0d:45:5b:5a:28:da:77:31:77:98:fa:99:15:a4:eb:94: 46:7c:ef:07:3e:a8:92:49:8d:1b:26:61:f1:82:8e:0a:d1:b7: ae:82:e8:e0:a8:45:23:a9:49:f0:09:80:0a:84:78:37:7a:3b: 7d:c8:1f:eb:75:a3:84:36:de:17:b6:22:c9:1b:f9:29:fb:82: 11:f9:56:0a:c9:7d:22:76:33:1d:bf:9c:1b:cf:b3:92:49:47: 45:d4:1f:97:dc:4b:d7:ea:ad:5d:c0:ea:67:69:aa:28:88:4a: 64:0e:96:12:1d:d1:f0:1b:e5:d6:44:e4:a2:cc:06:b0:d4:b7: c8:2a:10:fa -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8O0kEiY7tPe+H2ktAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE1ZTgxNGUtMGFiOC00MjU3LThjMzktNDA5MWNiM2Jl MjY5MB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk MDJjMGQyYWYtNjA0OS00Y2Q1LTlkNWYtYWM1NDZjZmZkNGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGsulAemHyOgK1l5gKmNhf6Q3OX0anZU57+U X37vhpUhH8zetnH45TV2w656Hq5JT1YXRwwULAWsi88K0hyOfK07pzXkFaJ/Kskx eTohk80w8vJzLhW+mdWIbnGG/Bc/l2ZBKH5+tNQ9T2Xt3h8DPeJN3UbfdJ6Na5zS tGXDwiKi1qCjK1TV5uxorpO4huVgocHu3lAmJ6nhCJjo+ZcQxqtxH2gbtw0vkgm8 cUkaCah725wokGUqYwsI+6GUKsoMcvdMmKx3JFR3E/T1q6lXoNuXor0ejqMDYMIl O2qXreadUPY+nLC7Zthl0h0fUypNuVa1G/OdHaQcwk1Y3usKZQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIyfjqwBz6X0CtsChSxNdQASCjzmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iYTVl ODE0ZS0wYWI4LTQyNTctOGMzOS00MDkxY2IzYmUyNjkvMmMzYWUwZDYtN2JiMS0z NzVkLTg3YjQtZjFkOWZkOTVlZjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYmE1ZTgxNGUtMGFiOC00MjU3LThj MzktNDA5MWNiM2JlMjY5L2JhNWU4MTRlLTBhYjgtNDI1Ny04YzM5LTQwOTFjYjNi ZTI2OS5jcmwwHwYDVR0jBBgwFoAUYjmNy9I6HAZK1G+WyMwCOpPDFSYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iYTVlODE0ZS0wYWI4LTQyNTctOGMzOS00MDkx Y2IzYmUyNjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgWhQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBR1d9KX9cVDR0zU29S3pl5SYzqRYlC2X3GaB+J4a0qxqKpaQrIPq7/ wSrwjL6NzCb0LeQ01SiSLLXj8SvLmV6dLf+h6rkQcKpTR9If4jO9whAFQboI9O6a eviLrofGf+cBzBgRvXxECikAUMdpPP7zdNEUCY2WZJT1MM6H2q5p/g1FW1oo2ncx d5j6mRWk65RGfO8HPqiSSY0bJmHxgo4K0beugujgqEUjqUnwCYAKhHg3ejt9yB/r daOENt4XtiLJG/kp+4IR+VYKyX0idjMdv5wbz7OSSUdF1B+X3EvX6q1dwOpnaaoo iEpkDpYSHdHwG+XWROSizAaw1LfIKhD6 -----END CERTIFICATE-----Generated at Fri Sep 4 23:18:14 2026 by rpki-client