$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba290ddd-27e1-33cd-82c7-756aa91e1e1b.roa File: ba290ddd-27e1-33cd-82c7-756aa91e1e1b.roa (raw, json) Hash identifier: ou/MNQxcAgg9NnCi496BlHkTAqZV1AYgfwtYKLEA/rs= Subject key identifier: F8:1E:A7:EA:0B:A2:C4:11:B8:24:C7:29:CE:00:DA:9E:41:A5:92:B8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EF182187E741AB368D9783E00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba290ddd-27e1-33cd-82c7-756aa91e1e1b.roa Signing time: Mon 24 Aug 2026 13:00:12 +0000 ROA not before: Mon 24 Aug 2026 13:00:12 +0000 ROA not after: Sun 22 Nov 2026 14:00:12 +0000 asID: 396602 IP address blocks: 2620:0:5050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f1:82:18:7e:74:1a:b3:68:d9:78:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 13:00:12 2026 GMT Not After : Nov 22 14:00:12 2026 GMT Subject: CN=ba91b22f-00d2-4a63-ae5f-1f1dd23fb61b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4c:6b:86:49:77:bd:62:b7:3f:81:47:48:af: 7d:06:68:c3:09:50:65:97:05:46:56:50:48:0f:f1: c6:b1:25:a7:43:28:d7:4c:18:1a:cc:fb:c4:c7:11: b4:d3:f4:8e:18:31:1d:43:4c:76:6a:90:90:86:92: de:12:7f:1b:97:da:25:90:84:5b:aa:d6:6c:f6:0d: 1c:bd:8e:b0:52:dd:fe:1c:5e:10:51:06:df:00:78: 7e:cd:b6:19:b8:8b:10:8b:6f:64:c0:01:88:31:fa: 5a:4e:61:2c:0a:61:ef:01:3a:b5:b2:05:dd:4a:73: f2:57:e7:22:3f:65:0c:07:46:f3:56:40:25:36:1a: ca:e7:ad:9d:d8:d1:6c:0d:ad:97:40:1d:3c:17:3d: 11:36:f4:73:79:42:31:7f:e0:62:60:55:08:1b:28: 21:37:8c:69:3a:f2:c6:10:06:35:6a:39:ab:94:cd: d7:54:60:f8:90:47:f6:8c:4c:a6:f2:4e:c4:fe:49: de:9a:40:4e:b7:80:ea:65:28:22:16:9c:c3:6c:5b: fc:f1:af:be:ad:48:87:62:5a:53:58:1a:f4:f4:95: c3:d0:49:b3:67:a1:88:ab:70:3f:af:4b:62:1b:1b: b5:25:a1:5a:5e:12:e3:82:0f:21:9a:d0:ef:24:69: b6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:1E:A7:EA:0B:A2:C4:11:B8:24:C7:29:CE:00:DA:9E:41:A5:92:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba290ddd-27e1-33cd-82c7-756aa91e1e1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5050::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:88:bc:54:aa:5e:f6:0b:cd:3e:c5:32:2c:61:e0:09:29:80: 84:8f:5f:8a:18:14:b8:04:9c:f3:c4:71:56:a9:2a:07:99:f5: 5f:6a:1f:d5:83:91:e5:fc:26:3c:e2:ab:ec:ea:4b:5d:66:05: 1a:51:4c:6b:e0:5d:99:77:96:fa:cc:00:11:0e:0c:35:c2:d9: 6c:3e:c1:e3:42:2e:7b:46:3d:b6:ca:71:d8:f5:98:e1:ce:c5: 6b:20:03:83:4b:45:14:65:0b:c2:a4:6d:dd:9b:3c:66:04:2f: bc:30:9e:78:8e:51:48:3f:04:75:d9:20:83:ec:9c:d6:3e:16: d7:80:41:d9:67:da:1c:10:53:d0:6e:b2:8d:c6:2f:d7:a4:11: a4:48:92:9c:f4:59:66:c9:b7:83:11:b1:73:99:c2:66:34:55: b2:08:15:19:94:1e:b5:36:30:fd:23:3b:3f:27:20:de:60:65: 1f:1a:e2:ef:aa:83:74:16:32:3d:5d:5a:01:46:4c:c3:3e:3b: 69:c0:cb:fc:c4:da:c3:2e:e7:6b:08:4b:a0:5b:8a:eb:bb:6a: 5f:49:a0:1f:76:6d:73:79:5a:a7:e4:e7:11:5d:e5:c2:b5:da: 48:b6:8a:20:14:20:98:a2:c7:92:91:25:39:8d:b4:a9:44:d0: 44:41:08:8a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7xghh+dBqzaNl4PgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk YmE5MWIyMmYtMDBkMi00YTYzLWFlNWYtMWYxZGQyM2ZiNjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0xrhkl3vWK3P4FHSK99BmjDCVBllwVGVlBI D/HGsSWnQyjXTBgazPvExxG00/SOGDEdQ0x2apCQhpLeEn8bl9olkIRbqtZs9g0c vY6wUt3+HF4QUQbfAHh+zbYZuIsQi29kwAGIMfpaTmEsCmHvATq1sgXdSnPyV+ci P2UMB0bzVkAlNhrK562d2NFsDa2XQB08Fz0RNvRzeUIxf+BiYFUIGyghN4xpOvLG EAY1ajmrlM3XVGD4kEf2jEym8k7E/knemkBOt4DqZSgiFpzDbFv88a++rUiHYlpT WBr09JXD0EmzZ6GIq3A/r0tiGxu1JaFaXhLjgg8hmtDvJGm2AwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPgep+oLosQRuCTHKc4A2p5BpZK4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmEyOTBkZGQtMjdlMS0z M2NkLTgyYzctNzU2YWE5MWUxZTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADuIvFSqXvYLzT7FMixh4AkpgISPX4oYFLgEnPPEcVapKgeZ9V9q H9WDkeX8Jjziq+zqS11mBRpRTGvgXZl3lvrMABEODDXC2Ww+weNCLntGPbbKcdj1 mOHOxWsgA4NLRRRlC8Kkbd2bPGYEL7wwnniOUUg/BHXZIIPsnNY+FteAQdln2hwQ U9Buso3GL9ekEaRIkpz0WWbJt4MRsXOZwmY0VbIIFRmUHrU2MP0jOz8nIN5gZR8a 4u+qg3QWMj1dWgFGTMM+O2nAy/zE2sMu52sIS6Bbiuu7al9JoB92bXN5Wqfk5xFd 5cK12ki2iiAUIJiix5KRJTmNtKlE0ERBCIo= -----END CERTIFICATE-----Generated at Tue Sep 22 06:19:20 2026 by rpki-client