$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/bd1a2e9c-e288-3f4d-8934-fcbd347671d6.roa File: bd1a2e9c-e288-3f4d-8934-fcbd347671d6.roa (raw, json) Hash identifier: Gdi0wqDPtVSq4iiugrc1mYBz4C8oN8tjq24SzSuq920= Subject key identifier: C2:1C:51:1B:EA:EA:FD:DF:82:32:00:76:93:2E:CB:AF:CC:CA:67:6B Certificate issuer: /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c Certificate serial: 010D0C9F4328584D6C0FAFCC9EE2C78A343E2E80 Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/bd1a2e9c-e288-3f4d-8934-fcbd347671d6.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 14618 IP address blocks: 2605:84c0:55::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:af:cc:9e:e2:c7:8a:34:3e:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=64977296-c39f-401c-a74e-33d3e6bf8a55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:42:eb:fb:3f:89:4c:fd:3e:17:61:b5:3d:70: 2d:20:5c:ef:3d:19:87:b1:cf:83:91:49:40:f2:39: 5d:83:8c:2e:bf:2a:3b:0c:ab:4c:64:0f:2a:79:fb: d9:1b:8c:81:39:80:bd:d4:59:76:65:6d:73:cd:f4: 93:ae:18:aa:10:32:31:4d:c6:7f:c4:f8:64:6c:e2: c4:bd:14:e0:fe:97:87:e7:ca:3a:1b:20:83:04:e5: 3f:04:eb:e5:76:92:03:b6:18:74:d2:58:76:f5:ae: a1:c3:db:8f:31:d5:dd:32:8d:26:1f:a9:8e:8d:f4: 6e:82:d5:95:a4:68:6d:04:07:0a:65:8f:12:ea:56: 83:86:34:66:c3:bd:de:b9:d1:8d:0b:05:c7:cd:3d: a7:30:4f:dc:8f:51:f2:98:6a:c5:72:3f:cf:23:46: 64:83:be:07:0d:90:a4:f1:03:5e:d6:f1:76:a1:3a: e2:d7:72:27:98:72:c9:d1:71:22:6c:b7:02:a5:5f: 23:ad:7f:33:66:f4:e3:18:54:07:75:0c:ab:37:77: 12:27:a9:57:3d:1f:d7:ad:83:32:85:5c:3d:7b:9e: 68:2a:58:ce:f9:38:6e:4e:12:a9:6f:30:3e:cc:cf: 7d:44:92:ed:de:b2:65:f2:49:fc:b7:07:d5:f5:69: a3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:1C:51:1B:EA:EA:FD:DF:82:32:00:76:93:2E:CB:AF:CC:CA:67:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/bd1a2e9c-e288-3f4d-8934-fcbd347671d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl X509v3 Authority Key Identifier: keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer sbgp-ipAddrBlock: critical IPv6: 2605:84c0:55::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:02:2e:50:dc:02:d6:d3:f2:ef:16:1b:ad:51:d4:a6:ab:d8: 10:14:12:43:49:34:9a:aa:ad:e3:d3:99:37:f5:e4:f3:ed:85: 8b:5d:9e:05:29:55:9a:b9:6c:c4:2d:ff:56:74:c7:ae:96:ff: 64:ac:43:29:01:9e:c7:57:d6:a8:be:ca:ed:5d:ce:4b:32:71: 59:c4:64:ef:32:9a:6b:56:dd:ff:ec:1d:98:18:1d:54:ff:63: 6c:22:07:93:77:4c:11:63:f6:56:aa:aa:2b:02:2d:ef:a2:60: c0:64:b0:89:85:10:e0:26:e8:44:0e:a3:f5:a1:d7:6b:21:8e: 81:5b:54:a9:1c:fd:dd:42:af:e4:1e:31:4f:46:09:3d:dd:0c: ee:14:d9:f9:62:3a:e7:ad:88:d8:2e:0f:c7:6e:2e:bf:75:f0: 8d:28:c5:8f:0d:40:a8:a7:56:8c:3f:3d:cb:1a:7e:3b:e4:8a: 2a:20:8a:f3:43:76:11:48:4d:82:98:bb:de:89:d4:49:2f:d6: a6:67:1d:34:4d:2d:c2:dd:f8:30:3f:45:87:2e:26:28:5a:8e: 97:31:1c:c3:37:83:6e:e4:21:d0:57:e4:39:d5:c3:5b:77:17: 84:9e:d5:cd:64:45:83:59:83:fa:33:4d:b2:71:4a:48:ed:0e: 2b:bd:dd:b4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1sD6/MnuLHijQ+LoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzNzM5YTgtNGM4ZC00N2IwLTg0MTMtNzdlMjdhOTY3 MDBjMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk NjQ5NzcyOTYtYzM5Zi00MDFjLWE3NGUtMzNkM2U2YmY4YTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkLr+z+JTP0+F2G1PXAtIFzvPRmHsc+DkUlA 8jldg4wuvyo7DKtMZA8qefvZG4yBOYC91Fl2ZW1zzfSTrhiqEDIxTcZ/xPhkbOLE vRTg/peH58o6GyCDBOU/BOvldpIDthh00lh29a6hw9uPMdXdMo0mH6mOjfRugtWV pGhtBAcKZY8S6laDhjRmw73eudGNCwXHzT2nME/cj1HymGrFcj/PI0Zkg74HDZCk 8QNe1vF2oTri13InmHLJ0XEibLcCpV8jrX8zZvTjGFQHdQyrN3cSJ6lXPR/XrYMy hVw9e55oKljO+ThuThKpbzA+zM99RJLt3rJl8kn8twfV9WmjKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMIcURvq6v3fgjIAdpMuy6/MymdrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85YzM3 MzlhOC00YzhkLTQ3YjAtODQxMy03N2UyN2E5NjcwMGMvYmQxYTJlOWMtZTI4OC0z ZjRkLTg5MzQtZmNiZDM0NzY3MWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWMzNzM5YTgtNGM4ZC00N2IwLTg0 MTMtNzdlMjdhOTY3MDBjLzljMzczOWE4LTRjOGQtNDdiMC04NDEzLTc3ZTI3YTk2 NzAwYy5jcmwwHwYDVR0jBBgwFoAU+wIdgT8j/hKbg5O+tBSlJ6W9WXkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85YzM3MzlhOC00YzhkLTQ3YjAtODQxMy03N2Uy N2E5NjcwMGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWEwABV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAYCLlDcAtbT8u8WG61R1Kar2BAUEkNJNJqqrePTmTf15PPthYtd ngUpVZq5bMQt/1Z0x66W/2SsQykBnsdX1qi+yu1dzksycVnEZO8ymmtW3f/sHZgY HVT/Y2wiB5N3TBFj9laqqisCLe+iYMBksImFEOAm6EQOo/Wh12shjoFbVKkc/d1C r+QeMU9GCT3dDO4U2fliOuetiNguD8duLr918I0oxY8NQKinVow/Pcsafjvkiiog ivNDdhFITYKYu96J1Ekv1qZnHTRNLcLd+DA/RYcuJihajpcxHMM3g27kIdBX5DnV w1t3F4Se1c1kRYNZg/ozTbJxSkjtDiu93bQ= -----END CERTIFICATE-----Generated at Tue Apr 7 10:35:12 2026 by rpki-client