$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/baafe843-1100-3177-9505-bd29ba099cbe.roa File: baafe843-1100-3177-9505-bd29ba099cbe.roa (raw, json) Hash identifier: J3npsR8PoS9KF+D0RqFf1D1stTOLzcLIlbFJP3iYM88= Subject key identifier: BC:29:7F:5E:F0:DE:C0:BF:30:70:58:76:E4:9C:BF:AB:84:9B:AE:6F Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584EA787399BB0130C487ACAFE00 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/baafe843-1100-3177-9505-bd29ba099cbe.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 30103 IP address blocks: 2620:123:2010::/48 maxlen: 48 2620:123:2011::/48 maxlen: 48 2620:123:2012::/48 maxlen: 48 2620:123:2013::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:39:9b:b0:13:0c:48:7a:ca:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=52e70927-08b2-47d7-ae86-27e4c99843c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c4:70:ce:f9:ab:4a:56:88:d9:a0:31:bd:cd: 2a:4f:24:53:26:b2:96:b4:87:cb:4e:46:c1:ba:f3: 7b:ad:85:d2:44:51:57:b1:0e:a9:cb:c5:5b:ba:9d: 5a:18:9d:5e:ee:c6:86:cc:ad:5b:1b:ea:25:08:8a: 41:47:81:21:24:d0:45:30:65:d7:f7:07:97:fc:cc: 13:12:f1:1e:2b:10:13:b3:f1:77:73:37:a3:ff:6a: e2:2d:6e:b3:4c:d6:32:5b:99:8d:d7:be:ed:ba:46: c0:66:45:fb:d9:f0:fe:e3:02:4d:fb:6b:49:08:8d: 61:66:32:36:88:5b:66:75:12:bb:ac:8a:b8:f0:99: 57:b2:2c:fe:9d:a4:f8:a7:0f:e6:d6:9d:20:61:54: 9d:52:81:5a:ca:a9:62:9c:4d:db:56:6e:9a:f2:5b: b1:30:55:4a:58:0e:0f:27:d4:30:8e:74:87:1b:02: 5b:ec:f2:20:04:45:af:81:8e:a2:e3:be:9b:aa:11: 19:54:a6:71:2d:de:c5:5f:6b:c5:69:c2:3a:09:b6: c9:0d:f7:b1:79:1e:c5:01:1f:11:3e:8f:67:28:44: 61:cc:15:0a:ad:3b:10:10:c3:ad:69:d1:24:cf:da: 35:6e:df:3a:1d:0a:f1:5c:4a:50:37:cd:45:2a:12: 3b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:29:7F:5E:F0:DE:C0:BF:30:70:58:76:E4:9C:BF:AB:84:9B:AE:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/baafe843-1100-3177-9505-bd29ba099cbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv6: 2620:123:2010::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:fe:c8:aa:09:d9:c0:1d:0d:da:7a:64:f8:00:7a:6c:ec:18: a8:16:a1:e6:0a:52:65:6b:a8:c2:6b:e0:07:bc:fb:21:b0:b6: 5f:00:fd:2b:1b:07:ca:6b:ee:ec:8e:38:a9:09:36:ea:55:67: 08:03:23:02:49:01:04:1c:53:45:e9:56:0c:70:4f:11:2b:4a: 58:39:2d:0f:48:74:fb:24:90:ec:73:2b:e0:23:0c:b2:9e:e7: cf:37:91:c6:0a:67:c1:2e:13:58:b1:9b:5d:04:a8:26:16:a2: a0:45:e8:bb:da:4d:6c:7a:43:1a:62:0f:f0:87:c1:20:fe:14: dd:d7:69:d1:d6:b1:8f:3a:24:8e:4d:b9:5b:0a:ac:53:04:c8: 9b:8c:e8:6c:6d:06:a3:86:0c:f1:e6:8b:f3:d3:1b:44:07:2c: f4:90:3e:32:43:4c:42:82:76:7c:4c:cb:8e:c3:e1:85:e7:eb: 2b:98:ea:80:af:c1:c3:1d:6a:7f:ef:d9:f7:3d:3d:a2:67:2a: ce:d2:d3:c1:cc:be:30:9d:bf:e7:49:5f:39:d0:7e:24:3b:53: 1a:cc:6e:c5:bc:9d:70:10:24:3a:88:fe:cd:81:90:60:ff:9b: 2c:f7:95:87:e4:f5:9d:e0:ce:81:11:e9:90:1a:cc:c3:f5:59: a9:b1:97:3a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nhzmbsBMMSHrK/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NTJlNzA5MjctMDhiMi00N2Q3LWFlODYtMjdlNGM5OTg0M2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMRwzvmrSlaI2aAxvc0qTyRTJrKWtIfLTkbB uvN7rYXSRFFXsQ6py8Vbup1aGJ1e7saGzK1bG+olCIpBR4EhJNBFMGXX9weX/MwT EvEeKxATs/F3czej/2riLW6zTNYyW5mN177tukbAZkX72fD+4wJN+2tJCI1hZjI2 iFtmdRK7rIq48JlXsiz+naT4pw/m1p0gYVSdUoFayqlinE3bVm6a8luxMFVKWA4P J9QwjnSHGwJb7PIgBEWvgY6i476bqhEZVKZxLd7FX2vFacI6CbbJDfexeR7FAR8R Po9nKERhzBUKrTsQEMOtadEkz9o1bt86HQrxXEpQN81FKhI7dwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLwpf17w3sC/MHBYduScv6uEm65vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvYmFhZmU4NDMtMTEwMC0z MTc3LTk1MDUtYmQyOWJhMDk5Y2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJiABIyAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADX+yKoJ2cAdDdp6ZPgAemzsGKgWoeYKUmVrqMJr4Ae8+yGwtl8A /SsbB8pr7uyOOKkJNupVZwgDIwJJAQQcU0XpVgxwTxErSlg5LQ9IdPskkOxzK+Aj DLKe5883kcYKZ8EuE1ixm10EqCYWoqBF6LvaTWx6QxpiD/CHwSD+FN3XadHWsY86 JI5NuVsKrFMEyJuM6GxtBqOGDPHmi/PTG0QHLPSQPjJDTEKCdnxMy47D4YXn6yuY 6oCvwcMdan/v2fc9PaJnKs7S08HMvjCdv+dJXznQfiQ7UxrMbsW8nXAQJDqI/s2B kGD/myz3lYfk9Z3gzoER6ZAazMP1Wamxlzo= -----END CERTIFICATE-----Generated at Wed Jul 29 11:03:15 2026 by rpki-client