$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc05dec8-13fc-4dc7-9e11-364c06532342/34f20233-d5bc-3617-afbe-0de094f26787.roa File: 34f20233-d5bc-3617-afbe-0de094f26787.roa (raw, json) Hash identifier: bxnx43N8QenB5u50oyPPAPWcwPxFTgH//mRn8okM8/Y= Subject key identifier: 27:01:73:9A:A1:26:1A:83:3A:8C:FA:34:15:6F:F0:3E:56:2D:06:1C Certificate issuer: /CN=bc05dec8-13fc-4dc7-9e11-364c06532342 Certificate serial: 010D0C9F4328584D4D5A3296A0E2DEF05B1C8780 Authority key identifier: 51:C8:97:12:0C:73:F4:9F:FD:B7:24:8C:7D:91:92:40:21:26:32:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc05dec8-13fc-4dc7-9e11-364c06532342.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc05dec8-13fc-4dc7-9e11-364c06532342/34f20233-d5bc-3617-afbe-0de094f26787.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 402028 IP address blocks: 2604:2320::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc05dec8-13fc-4dc7-9e11-364c06532342/bc05dec8-13fc-4dc7-9e11-364c06532342.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc05dec8-13fc-4dc7-9e11-364c06532342/bc05dec8-13fc-4dc7-9e11-364c06532342.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc05dec8-13fc-4dc7-9e11-364c06532342.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:32:96:a0:e2:de:f0:5b:1c:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc05dec8-13fc-4dc7-9e11-364c06532342 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=fd2eb5a3-6c9f-4842-992b-15b8b92471a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:64:c8:58:bc:09:dd:49:96:47:22:56:5a:20: 91:03:11:28:c6:fe:39:cf:42:f6:89:81:22:bc:81: 37:51:09:4b:59:26:60:26:62:61:b0:29:62:63:f5: f3:b0:89:0c:f4:8f:a8:dd:8a:52:9b:18:d9:3c:d4: ae:05:89:d3:e9:f9:78:04:e9:fc:41:0d:ef:53:d4: ff:20:16:60:5f:db:ef:12:22:1a:cb:b4:b1:02:80: d2:b6:b6:70:94:e4:12:f6:8f:61:45:ca:dc:1c:3c: 07:32:ef:91:ce:c8:7d:49:eb:a7:e6:a3:e2:9b:09: 7c:ee:98:40:b1:90:0c:1f:ac:be:48:4e:1a:83:b3: 45:bd:d2:4c:f6:58:63:c5:49:b8:22:bf:39:b9:91: c7:a4:53:13:3b:f8:61:1c:12:19:8a:90:76:d5:c4: aa:6d:7b:1d:21:44:03:39:a8:58:ef:b2:7c:50:01: 7c:8f:17:fa:ef:2c:87:51:84:32:9d:61:85:e9:b3: 4f:67:95:80:97:39:19:16:b4:a9:cf:67:8b:18:ba: 9d:0f:63:72:d2:25:4b:2f:fe:f6:d5:9e:48:ce:0b: e6:95:25:3e:01:3c:44:47:37:e8:5a:81:09:f7:3b: 99:d8:73:d9:d9:7c:99:08:1e:05:a9:9f:e2:10:b3: 34:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:01:73:9A:A1:26:1A:83:3A:8C:FA:34:15:6F:F0:3E:56:2D:06:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc05dec8-13fc-4dc7-9e11-364c06532342/34f20233-d5bc-3617-afbe-0de094f26787.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc05dec8-13fc-4dc7-9e11-364c06532342/bc05dec8-13fc-4dc7-9e11-364c06532342.crl X509v3 Authority Key Identifier: keyid:51:C8:97:12:0C:73:F4:9F:FD:B7:24:8C:7D:91:92:40:21:26:32:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc05dec8-13fc-4dc7-9e11-364c06532342.cer sbgp-ipAddrBlock: critical IPv6: 2604:2320::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:7f:af:b3:5b:29:4d:b4:01:00:91:3b:27:a3:bd:58:52:11: c6:36:73:2d:74:c5:66:43:1e:0c:a9:00:00:d1:58:d9:94:4e: 73:90:45:08:3b:4c:b8:6f:51:24:2b:50:ea:a8:33:db:35:5f: 0e:30:97:59:f9:19:4d:d3:6a:81:9f:8c:a1:38:3d:ed:cb:5d: a0:1d:ba:a1:76:47:65:cc:4c:0a:f1:49:f1:a3:6e:b0:cf:d1: c4:3d:20:78:4e:21:05:c9:26:eb:3e:f6:3c:72:c0:dd:2f:98: 7d:41:14:99:01:cc:18:68:f7:aa:48:5a:45:1f:34:6f:7d:45: 35:4c:c9:b2:f8:8c:fe:46:d7:f5:df:cd:30:f8:63:7a:7a:8d: ac:d2:44:ba:3e:dd:ec:52:e2:40:07:ad:32:d9:e9:d2:21:9e: 5a:51:39:4f:06:c6:b2:6a:93:8b:d7:b0:47:f9:7e:fd:2c:75: 38:58:71:b1:84:e8:e8:c2:34:0f:7f:6f:c2:80:12:9a:b1:c9: 1a:c6:05:6f:f3:36:7c:ad:8d:c6:5d:de:96:ca:26:2d:03:04: 83:eb:4f:b0:44:5f:0d:f1:4f:69:90:be:e0:a0:be:75:04:bf: 7d:58:d5:0f:fc:95:e6:be:39:d2:7a:cd:b5:99:fc:a0:3f:c9: 80:11:a1:f2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1NWjKWoOLe8Fsch4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMwNWRlYzgtMTNmYy00ZGM3LTllMTEtMzY0YzA2NTMy MzQyMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk ZmQyZWI1YTMtNmM5Zi00ODQyLTk5MmItMTViOGI5MjQ3MWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmTIWLwJ3UmWRyJWWiCRAxEoxv45z0L2iYEi vIE3UQlLWSZgJmJhsCliY/XzsIkM9I+o3YpSmxjZPNSuBYnT6fl4BOn8QQ3vU9T/ IBZgX9vvEiIay7SxAoDStrZwlOQS9o9hRcrcHDwHMu+Rzsh9Seun5qPimwl87phA sZAMH6y+SE4ag7NFvdJM9lhjxUm4Ir85uZHHpFMTO/hhHBIZipB21cSqbXsdIUQD OahY77J8UAF8jxf67yyHUYQynWGF6bNPZ5WAlzkZFrSpz2eLGLqdD2Ny0iVLL/72 1Z5IzgvmlSU+ATxERzfoWoEJ9zuZ2HPZ2XyZCB4FqZ/iELM0VQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCcBc5qhJhqDOoz6NBVv8D5WLQYcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iYzA1 ZGVjOC0xM2ZjLTRkYzctOWUxMS0zNjRjMDY1MzIzNDIvMzRmMjAyMzMtZDViYy0z NjE3LWFmYmUtMGRlMDk0ZjI2Nzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYmMwNWRlYzgtMTNmYy00ZGM3LTll MTEtMzY0YzA2NTMyMzQyL2JjMDVkZWM4LTEzZmMtNGRjNy05ZTExLTM2NGMwNjUz MjM0Mi5jcmwwHwYDVR0jBBgwFoAUUciXEgxz9J/9tySMfZGSQCEmMvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iYzA1ZGVjOC0xM2ZjLTRkYzctOWUxMS0zNjRj MDY1MzIzNDIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQjIDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBjf6+zWylNtAEAkTsno71YUhHGNnMtdMVmQx4MqQAA0VjZlE5zkEUI O0y4b1EkK1DqqDPbNV8OMJdZ+RlN02qBn4yhOD3ty12gHbqhdkdlzEwK8Unxo26w z9HEPSB4TiEFySbrPvY8csDdL5h9QRSZAcwYaPeqSFpFHzRvfUU1TMmy+Iz+Rtf1 380w+GN6eo2s0kS6Pt3sUuJAB60y2enSIZ5aUTlPBsayapOL17BH+X79LHU4WHGx hOjowjQPf2/CgBKasckaxgVv8zZ8rY3GXd6WyiYtAwSD60+wRF8N8U9pkL7goL51 BL99WNUP/JXmvjnSes21mfygP8mAEaHy -----END CERTIFICATE-----Generated at Tue Apr 7 16:53:29 2026 by rpki-client