$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/bdfcc1e7-27e3-3897-ab58-43b3dc80eeff.roa File: bdfcc1e7-27e3-3897-ab58-43b3dc80eeff.roa (raw, json) Hash identifier: QL0FrYMPbRWoZQNddneQDSs428xqc8yjcnugCuvg8SI= Subject key identifier: B4:83:CD:3A:80:D9:9A:2B:D7:37:CA:94:92:39:78:05:37:94:14:BC Certificate issuer: /CN=a4e67936-c857-487d-93df-2dff7fa79988 Certificate serial: 010D0C9F4328584D4CEF229368C00822A5C36B00 Authority key identifier: 16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/bdfcc1e7-27e3-3897-ab58-43b3dc80eeff.roa Signing time: Thu 26 Mar 2026 21:24:50 +0000 ROA not before: Thu 26 Mar 2026 21:24:50 +0000 ROA not after: Wed 24 Jun 2026 21:24:50 +0000 asID: 16509 IP address blocks: 2606:8800:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4c:ef:22:93:68:c0:08:22:a5:c3:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e67936-c857-487d-93df-2dff7fa79988 Validity Not Before: Mar 26 21:24:50 2026 GMT Not After : Jun 24 21:24:50 2026 GMT Subject: CN=662b8ecf-232b-40ca-aa05-a15bc99dde17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:be:b1:81:33:03:2c:40:ac:d0:3b:67:fa:26: 17:36:14:77:e4:55:2b:c6:c4:77:01:52:e8:1e:93: 9e:fe:af:14:7e:fa:4b:0e:ca:e5:cd:c1:4f:a5:43: a6:4d:2a:c5:40:db:1a:6c:7a:9b:5d:e4:bb:51:28: d6:52:df:43:a4:e7:95:2c:a8:3f:89:4d:d7:f3:bd: 2f:ef:f4:c1:b6:16:24:db:b7:b1:44:8f:bb:e2:0d: 1d:62:fc:f2:df:39:0a:89:21:63:f7:80:c6:cb:b8: e3:7b:0a:e4:ec:67:90:fc:3c:2f:f9:0e:c3:23:9f: b5:be:60:86:72:ab:7c:4a:9d:42:31:1e:25:ea:38: 88:d0:38:85:f0:34:9b:e4:ce:05:43:ce:c9:4b:f9: ce:0d:d2:b4:32:99:80:dd:de:2d:8d:8e:59:c7:fa: 25:c8:8b:96:d8:5e:b8:cb:ed:cb:df:ad:e0:60:a7: d2:8a:a8:08:c7:06:af:48:05:0d:2f:f8:d8:72:db: 96:60:ae:7d:9e:f9:fc:1f:0b:d5:18:6f:e9:ea:52: f3:1a:1f:4d:eb:ae:40:f1:d2:5a:7d:8b:84:a2:f7: b0:43:74:89:05:11:28:f4:8b:19:84:dc:c1:77:e4: 7a:a5:14:3c:9c:63:fc:1f:34:fa:a1:d9:d3:77:2e: 02:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:83:CD:3A:80:D9:9A:2B:D7:37:CA:94:92:39:78:05:37:94:14:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/bdfcc1e7-27e3-3897-ab58-43b3dc80eeff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl X509v3 Authority Key Identifier: keyid:16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer sbgp-ipAddrBlock: critical IPv6: 2606:8800:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:7c:37:99:a0:16:3a:bb:08:3a:d5:f8:27:66:11:5d:d1:1b: b3:b3:db:2c:98:52:1b:55:e7:4f:90:03:1b:7e:57:95:f1:41: b6:d6:4a:a7:04:7c:21:73:f4:a3:2d:35:49:a4:9c:b8:5e:1b: 9b:28:ae:03:39:cb:15:10:6b:d7:64:0d:9a:7b:b1:9c:bc:81: 2d:0c:74:b5:22:2e:6b:4e:d7:a6:f7:3c:65:2d:f9:05:15:25: e2:05:2e:d2:6e:d1:4e:71:96:ce:85:7b:fc:b9:17:ce:10:36: f0:c2:cd:1b:41:30:72:bb:0d:ce:79:5f:e7:53:8b:01:0c:ae: f6:fd:aa:f4:4e:00:00:77:da:73:53:ff:5c:94:73:7e:3f:dc: 61:ee:d0:ac:21:ce:a7:c7:0f:31:7c:b9:5b:5b:8c:3f:99:19: c1:e9:5c:9b:98:47:2b:ba:b6:df:bd:2d:90:ce:11:d1:85:53: bf:b7:a3:33:19:a6:3b:19:94:07:c0:81:85:2b:25:90:22:c2: 6c:79:27:be:61:27:c9:60:3b:38:b8:d9:64:8e:fc:c0:f9:12: 4e:4d:d0:d9:d9:e3:0d:7c:70:95:a6:20:a7:13:c6:f4:3c:59: d8:77:76:99:b9:3d:df:ff:d6:65:89:20:f4:55:58:48:e8:e7: 1a:2d:36:1d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1M7yKTaMAIIqXDawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRlNjc5MzYtYzg1Ny00ODdkLTkzZGYtMmRmZjdmYTc5 OTg4MB4XDTI2MDMyNjIxMjQ1MFoXDTI2MDYyNDIxMjQ1MFowLzEtMCsGA1UEAxMk NjYyYjhlY2YtMjMyYi00MGNhLWFhMDUtYTE1YmM5OWRkZTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhL6xgTMDLECs0Dtn+iYXNhR35FUrxsR3AVLo HpOe/q8UfvpLDsrlzcFPpUOmTSrFQNsabHqbXeS7USjWUt9DpOeVLKg/iU3X870v 7/TBthYk27exRI+74g0dYvzy3zkKiSFj94DGy7jjewrk7GeQ/Dwv+Q7DI5+1vmCG cqt8Sp1CMR4l6jiI0DiF8DSb5M4FQ87JS/nODdK0MpmA3d4tjY5Zx/olyIuW2F64 y+3L363gYKfSiqgIxwavSAUNL/jYctuWYK59nvn8HwvVGG/p6lLzGh9N665A8dJa fYuEovewQ3SJBREo9IsZhNzBd+R6pRQ8nGP8HzT6odnTdy4CxQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLSDzTqA2Zor1zfKlJI5eAU3lBS8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2 NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZmN2ZhNzk5ODgvYmRmY2MxZTctMjdlMy0z ODk3LWFiNTgtNDNiM2RjODBlZWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTRlNjc5MzYtYzg1Ny00ODdkLTkz ZGYtMmRmZjdmYTc5OTg4L2E0ZTY3OTM2LWM4NTctNDg3ZC05M2RmLTJkZmY3ZmE3 OTk4OC5jcmwwHwYDVR0jBBgwFoAUFqXjOhIoly6fUjQBp27hlpzf6Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZm N2ZhNzk5ODguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgaIAAAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE18N5mgFjq7CDrV+CdmEV3RG7Oz2yyYUhtV50+QAxt+V5XxQbbW SqcEfCFz9KMtNUmknLheG5sorgM5yxUQa9dkDZp7sZy8gS0MdLUiLmtO16b3PGUt +QUVJeIFLtJu0U5xls6Fe/y5F84QNvDCzRtBMHK7Dc55X+dTiwEMrvb9qvROAAB3 2nNT/1yUc34/3GHu0KwhzqfHDzF8uVtbjD+ZGcHpXJuYRyu6tt+9LZDOEdGFU7+3 ozMZpjsZlAfAgYUrJZAiwmx5J75hJ8lgOzi42WSO/MD5Ek5N0NnZ4w18cJWmIKcT xvQ8Wdh3dpm5Pd//1mWJIPRVWEjo5xotNh0= -----END CERTIFICATE-----Generated at Tue Apr 7 13:25:05 2026 by rpki-client