$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/c06a09fc-2584-35b2-be4c-9069314d842e.roa File: c06a09fc-2584-35b2-be4c-9069314d842e.roa (raw, json) Hash identifier: mJgC740UhduHYjq1yVOQ/InjAzoCv+md+4crWRvOEpQ= Subject key identifier: F2:13:8E:59:C8:64:45:96:4E:C4:77:F2:9E:F8:0E:1F:59:3C:33:85 Certificate issuer: /CN=ba5e814e-0ab8-4257-8c39-4091cb3be269 Certificate serial: 010D0C9F4328584E6C6F630D9C8C3D1D62A3BF70 Authority key identifier: 62:39:8D:CB:D2:3A:1C:06:4A:D4:6F:96:C8:CC:02:3A:93:C3:15:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/c06a09fc-2584-35b2-be4c-9069314d842e.roa Signing time: Tue 07 Jul 2026 21:00:13 +0000 ROA not before: Tue 07 Jul 2026 21:00:13 +0000 ROA not after: Mon 05 Oct 2026 21:00:13 +0000 asID: 40021 IP address blocks: 2607:4740::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:6f:63:0d:9c:8c:3d:1d:62:a3:bf:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba5e814e-0ab8-4257-8c39-4091cb3be269 Validity Not Before: Jul 7 21:00:13 2026 GMT Not After : Oct 5 21:00:13 2026 GMT Subject: CN=0148cf9d-bea7-4105-8356-faec71c99b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a8:8f:7a:24:59:7a:0e:56:c6:d8:7f:3e:d4: 56:d5:86:0e:23:15:6a:60:7d:5e:24:25:ae:53:62: 02:cc:07:83:ab:58:6d:88:b0:d6:f5:57:cc:6f:d7: 80:b5:5a:01:71:2e:d0:66:fa:85:6d:2d:84:79:48: fe:c7:7b:5f:32:0b:bb:fb:cd:b7:74:7c:87:b0:51: 70:b1:40:a3:ca:68:e9:58:94:37:86:73:df:54:c3: 8e:aa:ed:88:f6:ed:e4:a0:91:76:9a:35:82:a4:9c: 36:79:eb:ca:fc:dd:1a:30:e5:fa:5f:1c:5e:72:17: 87:fa:fd:a8:cc:2c:d4:f3:0e:7f:ea:9d:9c:1b:f0: 3a:0b:62:eb:3a:2d:e5:2e:67:28:8e:4a:46:77:8f: 80:f7:df:1e:1b:bb:39:1d:c9:40:e6:26:be:66:8b: 9d:83:6a:1f:66:e9:c7:0e:66:4a:11:08:32:25:29: 24:0e:84:f0:8f:5d:31:4a:74:6f:2e:b6:2b:fe:1c: 81:dc:7b:cf:db:49:04:35:72:16:0d:40:59:a1:05: 4a:40:68:7d:1d:3e:9e:dc:62:11:a7:15:8d:1f:54: b3:4f:c7:6f:19:29:8f:6e:ab:28:f1:14:69:05:57: cb:c0:8a:9a:f4:96:3c:b8:3b:61:38:80:f8:b4:a8: b5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:13:8E:59:C8:64:45:96:4E:C4:77:F2:9E:F8:0E:1F:59:3C:33:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/c06a09fc-2584-35b2-be4c-9069314d842e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.crl X509v3 Authority Key Identifier: keyid:62:39:8D:CB:D2:3A:1C:06:4A:D4:6F:96:C8:CC:02:3A:93:C3:15:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer sbgp-ipAddrBlock: critical IPv6: 2607:4740::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:03:8d:37:b1:8c:4c:7c:61:8e:5d:79:60:7f:48:d0:0e:67: 74:40:f9:f9:82:e5:cf:c2:f5:c8:86:5b:bb:3f:12:9f:11:0d: 4c:97:26:a1:5f:02:6d:19:6c:7b:c9:35:e7:50:7a:c9:0b:eb: fb:9d:85:c0:0e:70:b6:25:4c:ed:34:a5:6d:f7:59:39:25:4c: c1:ed:36:cc:ef:1a:94:b8:ad:d3:19:12:08:4d:2a:a4:7a:ab: 87:57:c5:2c:05:16:e7:74:9d:bc:d5:ec:11:05:21:b6:53:75: 23:71:1a:b5:e7:30:76:33:57:53:67:57:0a:b4:2d:c0:db:c2: 2e:08:0f:70:b6:50:16:6b:fd:9b:28:40:2a:ff:d9:62:f0:49: b6:e2:89:4e:5f:eb:50:9e:2e:ef:ba:91:ed:2c:ee:b5:ae:73: ec:31:22:be:c9:e5:31:5c:5e:d0:e3:a3:45:b9:50:56:6e:1c: 0c:07:72:db:ed:85:6f:03:24:aa:fc:db:5a:11:82:c4:05:80: 53:38:c6:2c:69:e9:8c:bb:ac:40:ad:d8:43:3e:53:51:fd:fd: 25:96:e4:60:a0:b0:e8:1a:05:46:2e:82:4d:53:81:b5:96:9d: 57:c5:b5:65:63:28:a1:8c:e9:cd:9d:62:85:f6:fa:33:aa:26: 1e:f9:f8:04 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5sb2MNnIw9HWKjv3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE1ZTgxNGUtMGFiOC00MjU3LThjMzktNDA5MWNiM2Jl MjY5MB4XDTI2MDcwNzIxMDAxM1oXDTI2MTAwNTIxMDAxM1owLzEtMCsGA1UEAxMk MDE0OGNmOWQtYmVhNy00MTA1LTgzNTYtZmFlYzcxYzk5YjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqiPeiRZeg5Wxth/PtRW1YYOIxVqYH1eJCWu U2ICzAeDq1htiLDW9VfMb9eAtVoBcS7QZvqFbS2EeUj+x3tfMgu7+823dHyHsFFw sUCjymjpWJQ3hnPfVMOOqu2I9u3koJF2mjWCpJw2eevK/N0aMOX6XxxecheH+v2o zCzU8w5/6p2cG/A6C2LrOi3lLmcojkpGd4+A998eG7s5HclA5ia+Zoudg2ofZunH DmZKEQgyJSkkDoTwj10xSnRvLrYr/hyB3HvP20kENXIWDUBZoQVKQGh9HT6e3GIR pxWNH1SzT8dvGSmPbqso8RRpBVfLwIqa9JY8uDthOID4tKi1gQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPITjlnIZEWWTsR38p74Dh9ZPDOFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iYTVl ODE0ZS0wYWI4LTQyNTctOGMzOS00MDkxY2IzYmUyNjkvYzA2YTA5ZmMtMjU4NC0z NWIyLWJlNGMtOTA2OTMxNGQ4NDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYmE1ZTgxNGUtMGFiOC00MjU3LThj MzktNDA5MWNiM2JlMjY5L2JhNWU4MTRlLTBhYjgtNDI1Ny04YzM5LTQwOTFjYjNi ZTI2OS5jcmwwHwYDVR0jBBgwFoAUYjmNy9I6HAZK1G+WyMwCOpPDFSYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iYTVlODE0ZS0wYWI4LTQyNTctOGMzOS00MDkx Y2IzYmUyNjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdHQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDXA403sYxMfGGOXXlgf0jQDmd0QPn5guXPwvXIhlu7PxKfEQ1Mlyah XwJtGWx7yTXnUHrJC+v7nYXADnC2JUztNKVt91k5JUzB7TbM7xqUuK3TGRIITSqk equHV8UsBRbndJ281ewRBSG2U3UjcRq15zB2M1dTZ1cKtC3A28IuCA9wtlAWa/2b KEAq/9li8Em24olOX+tQni7vupHtLO61rnPsMSK+yeUxXF7Q46NFuVBWbhwMB3Lb 7YVvAySq/NtaEYLEBYBTOMYsaemMu6xArdhDPlNR/f0lluRgoLDoGgVGLoJNU4G1 lp1XxbVlYyihjOnNnWKF9vozqiYe+fgE -----END CERTIFICATE-----Generated at Tue Jul 21 14:26:08 2026 by rpki-client