$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/2c3ae0d6-7bb1-375d-87b4-f1d9fd95ef10.roa File: 2c3ae0d6-7bb1-375d-87b4-f1d9fd95ef10.roa (raw, json) Hash identifier: O8Zir86LF+Z4GcqRdFvsRPOyk/Mch5TLtE+q4v5y1x0= Subject key identifier: 25:CA:04:2F:B3:C1:AA:67:37:D3:AC:E5:6E:CA:D4:BA:4B:22:11:38 Certificate issuer: /CN=ba5e814e-0ab8-4257-8c39-4091cb3be269 Certificate serial: 010D0C9F4328584CAB8C609B087C10D194CC4880 Authority key identifier: 62:39:8D:CB:D2:3A:1C:06:4A:D4:6F:96:C8:CC:02:3A:93:C3:15:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/2c3ae0d6-7bb1-375d-87b4-f1d9fd95ef10.roa Signing time: Wed 28 Jan 2026 02:00:29 +0000 ROA not before: Wed 28 Jan 2026 02:00:29 +0000 ROA not after: Tue 28 Apr 2026 01:00:29 +0000 asID: 40021 IP address blocks: 2605:a140::/28 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ab:8c:60:9b:08:7c:10:d1:94:cc:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba5e814e-0ab8-4257-8c39-4091cb3be269 Validity Not Before: Jan 28 02:00:29 2026 GMT Not After : Apr 28 01:00:29 2026 GMT Subject: CN=d87e530b-3ad6-4cc9-be26-86c3ac2a792e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8a:93:74:46:6e:ef:0e:59:47:4e:97:cf:c2: e5:dc:be:59:8a:ea:03:83:e6:18:cd:32:0d:0a:12: 94:95:d0:f8:7e:86:ba:7f:d7:c2:85:22:bc:cd:94: ab:bb:e0:76:4f:f6:55:06:17:3d:aa:db:d1:6c:b4: be:e6:03:7d:d8:42:a1:a7:30:2b:46:b2:b7:51:db: 50:83:fb:69:c4:a1:a1:db:b8:ca:6a:9d:cb:8f:a0: e4:a3:c5:a3:95:09:5c:2a:02:fc:e4:68:b0:32:04: eb:7e:d3:da:83:1a:67:d1:8d:d3:b6:b3:e3:a6:59: e7:b4:38:f6:af:e7:fa:97:f0:be:f1:26:2d:88:3d: 33:98:ab:3b:73:f3:4b:5e:f9:ef:ea:28:94:7a:cd: 50:77:05:c2:e6:ac:55:8c:13:cc:bb:61:11:58:ec: 05:12:ef:ba:a9:df:57:07:66:fa:c6:9a:74:c2:97: eb:e4:23:be:8c:58:9f:10:6f:a6:2d:a9:d0:ab:5e: 04:b5:ff:c5:c3:a4:de:ba:79:81:17:f7:d7:6d:3a: 9b:20:da:6a:c7:a2:ff:b9:60:68:fd:70:1a:41:ec: 77:be:9d:4d:6e:2c:68:c5:b4:89:f7:70:60:3d:d5: 5e:5a:3f:27:47:92:dc:58:56:67:4a:05:fa:34:37: 43:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:CA:04:2F:B3:C1:AA:67:37:D3:AC:E5:6E:CA:D4:BA:4B:22:11:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/2c3ae0d6-7bb1-375d-87b4-f1d9fd95ef10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.crl X509v3 Authority Key Identifier: keyid:62:39:8D:CB:D2:3A:1C:06:4A:D4:6F:96:C8:CC:02:3A:93:C3:15:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer sbgp-ipAddrBlock: critical IPv6: 2605:a140::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:7d:05:99:19:bf:82:3b:1f:ac:4b:61:d7:2f:bc:49:0c:6d: 81:9e:ed:35:98:6b:47:34:ee:94:fe:60:05:3b:2b:6a:e2:60: 85:0f:97:2c:d9:29:9e:b7:c1:24:3f:0c:c4:17:de:36:29:d3: 37:b2:af:82:c6:d2:92:a9:6a:b2:22:c5:4b:2e:9c:21:28:73: 0d:c8:24:04:4a:d7:bf:c8:b0:6c:85:c2:2b:3b:41:9a:f1:03: b3:7f:93:13:04:1f:1a:05:25:fc:b8:d7:a0:08:02:de:3c:7f: c4:db:d0:6a:1b:a6:78:e6:88:b5:b5:65:7d:db:94:f0:6c:65: 09:3c:58:fd:31:78:da:e7:73:d1:bb:99:cf:df:2a:ed:ed:74: 39:97:bc:f6:f3:3a:88:29:d0:65:43:8c:f2:b7:4e:f6:56:00: ae:7d:0c:6d:6b:1e:56:58:a8:3c:0d:2a:ec:f1:d8:11:8c:34: ca:47:c4:ee:19:4d:cd:f2:00:e1:3e:27:e6:bc:53:1a:2a:05: ee:bf:d5:23:a2:e2:65:71:b9:88:c8:7b:39:85:d6:ae:2c:84: 42:c4:d6:0d:80:9e:81:de:76:40:a1:9f:0e:a8:9a:9b:b0:0a: 55:c3:62:7c:cc:f9:78:31:7d:48:e7:f6:82:18:3e:bc:ce:17: 6c:79:74:d6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEyrjGCbCHwQ0ZTMSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE1ZTgxNGUtMGFiOC00MjU3LThjMzktNDA5MWNiM2Jl MjY5MB4XDTI2MDEyODAyMDAyOVoXDTI2MDQyODAxMDAyOVowLzEtMCsGA1UEAxMk ZDg3ZTUzMGItM2FkNi00Y2M5LWJlMjYtODZjM2FjMmE3OTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4qTdEZu7w5ZR06Xz8Ll3L5ZiuoDg+YYzTIN ChKUldD4foa6f9fChSK8zZSru+B2T/ZVBhc9qtvRbLS+5gN92EKhpzArRrK3UdtQ g/tpxKGh27jKap3Lj6Dko8WjlQlcKgL85GiwMgTrftPagxpn0Y3TtrPjplnntDj2 r+f6l/C+8SYtiD0zmKs7c/NLXvnv6iiUes1QdwXC5qxVjBPMu2ERWOwFEu+6qd9X B2b6xpp0wpfr5CO+jFifEG+mLanQq14Etf/Fw6TeunmBF/fXbTqbINpqx6L/uWBo /XAaQex3vp1NbixoxbSJ93BgPdVeWj8nR5LcWFZnSgX6NDdD7QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCXKBC+zwapnN9Os5W7K1LpLIhE4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iYTVl ODE0ZS0wYWI4LTQyNTctOGMzOS00MDkxY2IzYmUyNjkvMmMzYWUwZDYtN2JiMS0z NzVkLTg3YjQtZjFkOWZkOTVlZjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYmE1ZTgxNGUtMGFiOC00MjU3LThj MzktNDA5MWNiM2JlMjY5L2JhNWU4MTRlLTBhYjgtNDI1Ny04YzM5LTQwOTFjYjNi ZTI2OS5jcmwwHwYDVR0jBBgwFoAUYjmNy9I6HAZK1G+WyMwCOpPDFSYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iYTVlODE0ZS0wYWI4LTQyNTctOGMzOS00MDkx Y2IzYmUyNjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgWhQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCkfQWZGb+COx+sS2HXL7xJDG2Bnu01mGtHNO6U/mAFOytq4mCFD5cs 2Smet8EkPwzEF942KdM3sq+CxtKSqWqyIsVLLpwhKHMNyCQESte/yLBshcIrO0Ga 8QOzf5MTBB8aBSX8uNegCALePH/E29BqG6Z45oi1tWV925TwbGUJPFj9MXja53PR u5nP3yrt7XQ5l7z28zqIKdBlQ4zyt072VgCufQxtax5WWKg8DSrs8dgRjDTKR8Tu GU3N8gDhPifmvFMaKgXuv9UjouJlcbmIyHs5hdauLIRCxNYNgJ6B3nZAoZ8OqJqb sApVw2J8zPl4MX1I5/aCGD68zhdseXTW -----END CERTIFICATE-----Generated at Mon Mar 2 13:24:51 2026 by rpki-client