$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/2ca15b8f-fe5b-35c9-966f-7f8a15c5f18a.roa File: 2ca15b8f-fe5b-35c9-966f-7f8a15c5f18a.roa (raw, json) Hash identifier: zZ5q+6VEprXZDu+DLajc9ZIwdbav3GwbuGDDewfgMXA= Subject key identifier: EC:F3:E3:00:7C:5C:6D:A2:BC:D0:81:EA:A5:7A:82:05:AE:FC:01:F0 Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F4328584FCCC68D30B7E952784986E040 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/2ca15b8f-fe5b-35c9-966f-7f8a15c5f18a.roa Signing time: Wed 11 Nov 2026 02:00:12 +0000 ROA not before: Wed 11 Nov 2026 02:00:12 +0000 ROA not after: Tue 09 Feb 2027 02:00:12 +0000 asID: 20253 IP address blocks: 2606:bc40:f0b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:cc:c6:8d:30:b7:e9:52:78:49:86:e0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Nov 11 02:00:12 2026 GMT Not After : Feb 9 02:00:12 2027 GMT Subject: CN=4bdfefb1-4056-409e-85e0-136e745f45f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:64:1e:b5:56:7a:3e:cc:d2:39:9b:48:55:f7: d8:35:b8:07:7b:11:22:0e:0b:4a:9f:23:4c:cf:25: af:7b:39:13:85:7b:c7:ee:85:4f:66:20:2e:d2:fa: db:42:4c:c2:78:9e:30:ea:ab:b2:03:c2:88:df:fb: 01:33:9a:a3:b9:e1:79:49:67:76:1a:71:f5:92:ad: dd:8e:90:96:d1:74:14:69:c4:af:e7:16:a9:18:64: df:8f:6e:c8:b1:0f:88:3a:ec:a0:68:33:e1:0a:76: 6e:49:34:40:fe:e6:19:b2:35:f6:8c:31:e4:22:35: f3:be:59:3f:d6:e6:ac:97:e9:28:11:f4:45:18:bf: d0:53:97:5d:74:f3:e3:3f:52:55:d5:29:c3:23:37: f8:f3:81:8a:07:d2:89:78:f5:0d:db:dd:51:36:46: 44:34:d4:91:da:1b:42:5f:e3:74:19:12:6d:33:fb: f6:54:87:c1:83:d2:1d:2d:a6:ce:ea:f3:79:fe:f6: 1d:db:70:20:0a:fa:25:5a:58:40:30:0e:fa:c0:30: 2a:38:0e:41:5a:a1:ae:c6:87:23:cb:19:5a:7b:53: 75:af:50:cc:97:fd:44:fd:15:dc:fe:a9:90:c3:29: 16:57:39:15:c6:64:7b:0a:d2:2f:40:c8:cb:7c:0d: 78:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F3:E3:00:7C:5C:6D:A2:BC:D0:81:EA:A5:7A:82:05:AE:FC:01:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/2ca15b8f-fe5b-35c9-966f-7f8a15c5f18a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:f0b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:09:22:2c:61:61:70:9e:74:4b:78:8d:76:8f:0a:8e:63:b7: 9e:d1:71:01:21:1e:b3:4c:e3:e3:25:90:d0:e9:02:11:f0:df: 1f:2f:83:c6:10:b3:8b:ee:af:c0:cb:44:c1:99:36:f7:b1:21: 3e:17:30:ba:68:22:e1:0e:ea:0d:85:bc:30:b8:01:f0:89:cd: 93:95:42:0b:cf:c7:ef:39:7c:e8:4e:f8:f2:7f:63:07:88:f0: 99:a5:14:eb:d9:fd:bb:49:f1:fa:2e:d4:fb:68:fa:4c:6b:06: 8c:c6:1e:4e:40:d1:82:32:61:8f:21:ea:da:53:a9:97:63:27: 9d:3d:c2:96:1e:10:07:f4:f9:f0:34:d9:9c:7d:90:dd:04:9c: e6:a6:cf:a9:06:ba:75:cb:98:f3:41:d1:fa:5c:9d:7f:30:62: bb:09:ad:21:94:0b:f1:52:32:6d:99:07:30:d0:e3:27:29:4e: 70:06:27:4e:3c:bc:8e:34:83:24:e6:50:2a:a8:07:0f:9a:0b: 0d:32:cd:e3:39:b0:60:38:fa:5f:a7:7a:ba:0c:fe:18:3d:89: f4:b4:b8:65:4f:78:2d:62:d9:1d:95:ae:d9:23:be:41:f8:8e: ac:9e:62:1b:29:2d:61:97:25:1e:1d:c8:e4:ac:6b:42:93:2a: b2:80:f9:34 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE/Mxo0wt+lSeEmG4EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI2MTExMTAyMDAxMloXDTI3MDIwOTAyMDAxMlowLzEtMCsGA1UEAxMk NGJkZmVmYjEtNDA1Ni00MDllLTg1ZTAtMTM2ZTc0NWY0NWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmQetVZ6PszSOZtIVffYNbgHexEiDgtKnyNM zyWvezkThXvH7oVPZiAu0vrbQkzCeJ4w6quyA8KI3/sBM5qjueF5SWd2GnH1kq3d jpCW0XQUacSv5xapGGTfj27IsQ+IOuygaDPhCnZuSTRA/uYZsjX2jDHkIjXzvlk/ 1uasl+koEfRFGL/QU5dddPPjP1JV1SnDIzf484GKB9KJePUN291RNkZENNSR2htC X+N0GRJtM/v2VIfBg9IdLabO6vN5/vYd23AgCvolWlhAMA76wDAqOA5BWqGuxocj yxlae1N1r1DMl/1E/RXc/qmQwykWVzkVxmR7CtIvQMjLfA14hwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOzz4wB8XG2ivNCB6qV6ggWu/AHwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvMmNhMTViOGYtZmU1Yi0z NWM5LTk2NmYtN2Y4YTE1YzVmMThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QA8L MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAkJIixhYXCedEt4jXaPCo5jt57RcQEhHrNM4+MlkNDpAhHw3x8v g8YQs4vur8DLRMGZNvexIT4XMLpoIuEO6g2FvDC4AfCJzZOVQgvPx+85fOhO+PJ/ YweI8JmlFOvZ/btJ8fou1Pto+kxrBozGHk5A0YIyYY8h6tpTqZdjJ509wpYeEAf0 +fA02Zx9kN0EnOamz6kGunXLmPNB0fpcnX8wYrsJrSGUC/FSMm2ZBzDQ4ycpTnAG J048vI40gyTmUCqoBw+aCw0yzeM5sGA4+l+neroM/hg9ifS0uGVPeC1i2R2Vrtkj vkH4jqyeYhspLWGXJR4dyOSsa0KTKrKA+TQ= -----END CERTIFICATE-----Generated at Sun Nov 15 11:57:05 2026 by rpki-client