$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a2acb878-6cfd-4407-9620-cc328f43d1be/bc6d8576-49c9-3f25-a119-c10eeac0a805.roa File: bc6d8576-49c9-3f25-a119-c10eeac0a805.roa (raw, json) Hash identifier: 6f2mVr12ml2L7sRSZDEffx7ydMWht89ALADBt4nWwbE= Subject key identifier: 18:43:4D:5F:95:8F:83:94:13:0F:FA:9F:6D:A5:6B:C9:B1:51:EA:C6 Certificate issuer: /CN=a2acb878-6cfd-4407-9620-cc328f43d1be Certificate serial: 010D0C9F4328584EA7947777C83A928ED2E9DD80 Authority key identifier: E5:E9:07:D8:5E:BA:1A:4A:AC:31:99:45:DF:0D:5B:30:28:9A:16:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a2acb878-6cfd-4407-9620-cc328f43d1be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a2acb878-6cfd-4407-9620-cc328f43d1be/bc6d8576-49c9-3f25-a119-c10eeac0a805.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 3450 IP address blocks: 2620:120:5000::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a2acb878-6cfd-4407-9620-cc328f43d1be/a2acb878-6cfd-4407-9620-cc328f43d1be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a2acb878-6cfd-4407-9620-cc328f43d1be/a2acb878-6cfd-4407-9620-cc328f43d1be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a2acb878-6cfd-4407-9620-cc328f43d1be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:77:77:c8:3a:92:8e:d2:e9:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2acb878-6cfd-4407-9620-cc328f43d1be Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=edec49fd-cf2b-41a0-b9f1-858ada2e3e15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:bd:52:b8:de:34:6f:b5:af:a8:9a:6e:2c:18: ff:a7:17:1c:b8:6e:5f:ba:d2:5b:34:e3:1f:ea:09: 32:51:7f:a8:1a:99:eb:54:b2:40:0c:b7:d4:15:5a: 2e:f7:9c:71:07:7e:a0:b7:05:a5:29:9e:32:bf:7d: 5b:1d:f5:a1:06:15:2a:3c:97:cd:44:ad:01:d1:f1: a4:16:e6:67:95:52:8b:e8:a5:e2:b3:cc:11:36:b8: d3:7c:65:37:f6:11:ec:3a:2a:27:fd:20:46:b7:5e: f1:86:37:1e:28:c9:d1:75:95:d8:82:9d:30:db:43: 0a:76:b4:b1:4a:48:be:a7:db:28:84:8e:3d:b1:e8: 38:64:8c:92:73:21:b8:be:a1:e6:75:6e:0a:38:8f: e9:86:97:ed:f0:c3:e7:9a:99:30:93:a6:f9:74:5a: 47:32:04:15:b0:6f:3e:c8:99:7f:16:74:ad:f2:72: 49:86:6f:6e:63:93:88:11:5e:c9:cf:03:81:27:3d: ee:3f:bd:87:35:63:a1:9d:1f:8e:c9:d7:44:a8:a8: 8a:d0:f4:94:32:f9:88:aa:71:45:82:7c:e8:8e:ac: 67:2c:55:bc:3c:84:7d:d6:d4:3c:2b:52:39:32:88: 35:3b:1e:ef:30:92:fe:ed:d4:dc:7b:61:1b:f8:2a: 07:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:43:4D:5F:95:8F:83:94:13:0F:FA:9F:6D:A5:6B:C9:B1:51:EA:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a2acb878-6cfd-4407-9620-cc328f43d1be/bc6d8576-49c9-3f25-a119-c10eeac0a805.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a2acb878-6cfd-4407-9620-cc328f43d1be/a2acb878-6cfd-4407-9620-cc328f43d1be.crl X509v3 Authority Key Identifier: keyid:E5:E9:07:D8:5E:BA:1A:4A:AC:31:99:45:DF:0D:5B:30:28:9A:16:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a2acb878-6cfd-4407-9620-cc328f43d1be.cer sbgp-ipAddrBlock: critical IPv6: 2620:120:5000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:43:f5:9f:5b:38:16:35:b7:67:06:8f:cf:05:d0:3c:81:ae: 8f:1c:10:ff:66:63:4e:0e:57:c8:f0:1a:9c:95:f2:23:a7:7a: c6:4d:b0:3e:01:c2:6a:59:c1:e5:f5:40:94:fc:41:47:01:74: 66:d0:65:5a:48:82:e1:13:11:c0:0b:22:39:56:77:d5:3e:19: dd:f9:5e:de:7a:05:9c:1c:87:1c:bc:df:54:c6:0d:4c:8d:06: e9:ef:22:51:ae:1e:df:a2:1c:1d:90:6e:38:42:03:13:be:0a: bf:2e:20:d8:c4:95:3d:46:16:1a:5c:5a:9b:d3:b9:fb:81:ba: f8:01:d8:97:8e:81:85:1a:59:07:1b:28:07:80:6f:cc:f2:aa: e3:05:33:b9:54:2f:ee:df:0c:f0:63:46:43:47:b6:1c:ad:90: bb:67:3d:c6:c0:5b:c5:cc:e1:20:cb:4c:34:33:ed:d8:2f:6c: 8d:41:3a:f5:e7:24:50:c3:b7:cc:a4:c6:c1:d4:62:85:a4:07: 10:81:31:f4:61:d0:eb:81:74:08:73:c8:49:5a:a2:f9:05:b9: 8f:f1:35:df:9b:3c:a6:b4:f3:3a:b5:cb:18:6b:9d:d2:11:bc: b8:c8:59:02:cf:8d:7f:68:8f:07:08:df:8e:2c:2f:3f:39:28: 68:33:eb:89 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6nlHd3yDqSjtLp3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJhY2I4NzgtNmNmZC00NDA3LTk2MjAtY2MzMjhmNDNk MWJlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZWRlYzQ5ZmQtY2YyYi00MWEwLWI5ZjEtODU4YWRhMmUzZTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk71SuN40b7WvqJpuLBj/pxccuG5futJbNOMf 6gkyUX+oGpnrVLJADLfUFVou95xxB36gtwWlKZ4yv31bHfWhBhUqPJfNRK0B0fGk FuZnlVKL6KXis8wRNrjTfGU39hHsOion/SBGt17xhjceKMnRdZXYgp0w20MKdrSx Ski+p9sohI49seg4ZIyScyG4vqHmdW4KOI/phpft8MPnmpkwk6b5dFpHMgQVsG8+ yJl/FnSt8nJJhm9uY5OIEV7JzwOBJz3uP72HNWOhnR+OyddEqKiK0PSUMvmIqnFF gnzojqxnLFW8PIR91tQ8K1I5Mog1Ox7vMJL+7dTce2Eb+CoH8wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBhDTV+Vj4OUEw/6n22la8mxUerGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hMmFj Yjg3OC02Y2ZkLTQ0MDctOTYyMC1jYzMyOGY0M2QxYmUvYmM2ZDg1NzYtNDljOS0z ZjI1LWExMTktYzEwZWVhYzBhODA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYTJhY2I4NzgtNmNmZC00NDA3LTk2 MjAtY2MzMjhmNDNkMWJlL2EyYWNiODc4LTZjZmQtNDQwNy05NjIwLWNjMzI4ZjQz ZDFiZS5jcmwwHwYDVR0jBBgwFoAU5ekH2F66GkqsMZlF3w1bMCiaFnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hMmFjYjg3OC02Y2ZkLTQ0MDctOTYyMC1jYzMy OGY0M2QxYmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABIFAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAXUP1n1s4FjW3ZwaPzwXQPIGujxwQ/2ZjTg5XyPAanJXyI6d6xk2w PgHCalnB5fVAlPxBRwF0ZtBlWkiC4RMRwAsiOVZ31T4Z3fle3noFnByHHLzfVMYN TI0G6e8iUa4e36IcHZBuOEIDE74Kvy4g2MSVPUYWGlxam9O5+4G6+AHYl46BhRpZ BxsoB4BvzPKq4wUzuVQv7t8M8GNGQ0e2HK2Qu2c9xsBbxczhIMtMNDPt2C9sjUE6 9eckUMO3zKTGwdRihaQHEIEx9GHQ64F0CHPISVqi+QW5j/E135s8prTzOrXLGGud 0hG8uMhZAs+Nf2iPBwjfjiwvPzkoaDPriQ== -----END CERTIFICATE-----Generated at Wed Jul 29 12:53:12 2026 by rpki-client