$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/34c6d0e5-e0f9-32d7-8fe3-e69401e8d259.roa File: 34c6d0e5-e0f9-32d7-8fe3-e69401e8d259.roa (raw, json) Hash identifier: j0WCXSuucy+YjOR5BCQaBvJq7/DuKfgRRRMW2Wjc2Mo= Subject key identifier: DD:A8:C9:7A:0B:92:C3:C0:D7:5F:80:8B:30:40:AA:5E:1B:4F:61:A8 Certificate issuer: /CN=ce4bae22-282c-4c42-a04f-dc6b4250fa84 Certificate serial: 010D0C9F4328584F8F3DBF87DF7B8D2ABE6AB9F0 Authority key identifier: 9A:FA:30:EF:DB:56:29:65:F4:E7:84:99:AE:B1:D5:D5:A7:89:5C:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/34c6d0e5-e0f9-32d7-8fe3-e69401e8d259.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 13490 IP address blocks: 2600:2800::/30 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/ce4bae22-282c-4c42-a04f-dc6b4250fa84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/ce4bae22-282c-4c42-a04f-dc6b4250fa84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:bf:87:df:7b:8d:2a:be:6a:b9:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce4bae22-282c-4c42-a04f-dc6b4250fa84 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=a113abb5-9e22-4544-bd87-3fa2aafc842a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:18:71:aa:94:d5:aa:85:74:5b:e4:76:49:3c: a5:fe:aa:75:7d:b3:d3:72:9d:93:d1:ea:19:26:9d: de:17:85:60:d1:20:4b:96:0d:36:d6:33:56:43:e6: c5:19:2e:27:ad:a4:12:d6:24:4f:b9:95:6a:5b:fc: c4:26:ad:4d:11:ae:3c:2e:6a:bf:35:c9:fd:9f:25: cf:0b:57:ab:3c:74:22:f5:da:3e:ca:40:fd:18:b1: 1f:91:fe:0e:b4:93:bf:71:d2:7e:fd:c5:6d:1b:ad: 9a:f4:ce:d9:23:38:a3:b2:ff:c4:95:6f:68:8a:31: 31:78:47:36:53:ca:d8:5f:2b:0b:2c:9d:b9:b3:0a: b0:bf:f8:9b:b4:2b:68:fd:9a:fa:3c:19:9d:b8:10: 6f:06:af:37:1f:dd:03:b7:77:61:71:6c:5e:9b:3a: f6:3d:d9:30:36:c4:33:9c:0c:65:1d:a4:cd:54:5b: fe:3e:d9:67:bd:d4:e9:d4:ad:c8:43:82:e8:fb:78: 53:b7:04:2f:64:2e:33:aa:91:2d:c4:8a:b9:a2:d5: 24:54:cb:46:16:99:e3:63:31:0a:54:bd:6f:df:bc: 13:8e:d7:dd:d4:e8:61:25:5a:84:f9:b8:91:65:98: 7c:2e:bd:95:6c:a4:7c:14:99:1c:9b:80:3f:6e:f6: db:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A8:C9:7A:0B:92:C3:C0:D7:5F:80:8B:30:40:AA:5E:1B:4F:61:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/34c6d0e5-e0f9-32d7-8fe3-e69401e8d259.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/ce4bae22-282c-4c42-a04f-dc6b4250fa84.crl X509v3 Authority Key Identifier: keyid:9A:FA:30:EF:DB:56:29:65:F4:E7:84:99:AE:B1:D5:D5:A7:89:5C:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84.cer sbgp-ipAddrBlock: critical IPv6: 2600:2800::/30 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:ac:92:22:c6:46:9b:5a:a9:53:19:6c:87:ca:f9:da:2d:b6: 6f:e2:72:12:4a:0b:5b:be:43:e5:fe:ec:c9:19:f3:a0:43:69: a9:b9:2c:70:7e:57:49:10:3d:fa:86:42:ff:bb:f0:94:dc:7f: 56:3e:22:88:ce:23:68:d2:7e:6d:03:63:ce:50:99:be:76:70: 34:0f:e4:ae:16:6c:03:97:1a:58:c4:c9:28:b9:d1:37:e5:c8: 91:9b:aa:26:e1:9c:af:73:01:64:0d:b7:1b:a5:35:06:77:35: 6b:a0:01:a4:f7:9f:ef:47:de:34:3c:0b:c8:1e:9e:34:f3:e3: 3b:19:3c:fc:2f:23:c2:11:cf:ef:4f:5d:63:05:7e:3f:f8:bf: 8a:da:57:ec:3b:fa:9b:a6:30:57:3d:3f:6b:42:b3:2d:b0:e9: df:e2:8a:38:5e:a5:5b:51:63:ea:e9:02:9c:1e:7b:32:86:2a: 0d:77:cc:23:c1:61:ae:65:cf:85:7e:aa:78:9b:37:9f:f6:79: a5:a6:66:a3:f1:30:64:44:48:30:d3:40:0e:31:a3:c4:9c:c8: f7:da:79:11:79:78:93:39:81:ba:bf:98:16:a7:c0:b3:53:a5: a6:a0:9c:c2:0a:90:a8:8d:20:7a:9d:e4:0a:86:9c:cd:95:c5: 85:8e:cf:7f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE+PPb+H33uNKr5qufAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2U0YmFlMjItMjgyYy00YzQyLWEwNGYtZGM2YjQyNTBm YTg0MB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk YTExM2FiYjUtOWUyMi00NTQ0LWJkODctM2ZhMmFhZmM4NDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhhxqpTVqoV0W+R2STyl/qp1fbPTcp2T0eoZ Jp3eF4Vg0SBLlg021jNWQ+bFGS4nraQS1iRPuZVqW/zEJq1NEa48Lmq/Ncn9nyXP C1erPHQi9do+ykD9GLEfkf4OtJO/cdJ+/cVtG62a9M7ZIzijsv/ElW9oijExeEc2 U8rYXysLLJ25swqwv/ibtCto/Zr6PBmduBBvBq83H90Dt3dhcWxemzr2PdkwNsQz nAxlHaTNVFv+PtlnvdTp1K3IQ4Lo+3hTtwQvZC4zqpEtxIq5otUkVMtGFpnjYzEK VL1v37wTjtfd1OhhJVqE+biRZZh8Lr2VbKR8FJkcm4A/bvbb8wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFN2oyXoLksPA11+AizBAql4bT2GoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZTRi YWUyMi0yODJjLTRjNDItYTA0Zi1kYzZiNDI1MGZhODQvMzRjNmQwZTUtZTBmOS0z MmQ3LThmZTMtZTY5NDAxZThkMjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvY2U0YmFlMjItMjgyYy00YzQyLWEw NGYtZGM2YjQyNTBmYTg0L2NlNGJhZTIyLTI4MmMtNGM0Mi1hMDRmLWRjNmI0MjUw ZmE4NC5jcmwwHwYDVR0jBBgwFoAUmvow79tWKWX054SZrrHV1aeJXNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZTRiYWUyMi0yODJjLTRjNDItYTA0Zi1kYzZi NDI1MGZhODQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUCJgAoADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQASrJIixkabWqlTGWyHyvnaLbZv4nISSgtbvkPl/uzJGfOgQ2mpuSxw fldJED36hkL/u/CU3H9WPiKIziNo0n5tA2POUJm+dnA0D+SuFmwDlxpYxMkoudE3 5ciRm6om4ZyvcwFkDbcbpTUGdzVroAGk95/vR940PAvIHp408+M7GTz8LyPCEc/v T11jBX4/+L+K2lfsO/qbpjBXPT9rQrMtsOnf4oo4XqVbUWPq6QKcHnsyhioNd8wj wWGuZc+Ffqp4mzef9nmlpmaj8TBkREgw00AOMaPEnMj32nkReXiTOYG6v5gWp8Cz U6WmoJzCCpCojSB6neQKhpzNlcWFjs9/ -----END CERTIFICATE-----Generated at Sun Nov 15 18:18:02 2026 by rpki-client