$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/bc36308e-607f-36db-982f-4ca4d4f2788b.roa File: bc36308e-607f-36db-982f-4ca4d4f2788b.roa (raw, json) Hash identifier: TRMyeWnPzOXnquiJYIGWju5ufwc+jGEggURpq9D+6o4= Subject key identifier: A8:71:BA:5A:1F:01:AA:FC:43:A1:13:FF:59:F2:8D:75:DF:05:65:C0 Certificate issuer: /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798 Certificate serial: 010D0C9F4328584D6AAA6A570F4CA5B106BAE000 Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/bc36308e-607f-36db-982f-4ca4d4f2788b.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 1403 IP address blocks: 2600:d400::/28 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:6a:57:0f:4c:a5:b1:06:ba:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798 Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=b0120da8-b644-43f9-8ee4-75d42719c425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f5:d3:6c:07:b7:39:3f:e2:07:3f:41:21:9b: 91:fd:f4:27:c1:4c:ec:f6:e4:eb:32:d8:5c:3a:15: c9:22:44:52:5b:32:66:ca:f5:1a:f3:0c:ce:47:20: e0:55:8f:93:68:b3:14:cd:ea:4f:1a:57:ed:fd:82: 73:83:71:cd:cf:02:38:29:d8:ef:a0:25:c6:d4:a0: 5c:2e:a6:3d:54:0d:20:ba:db:9f:d2:d1:f3:ad:f4: 3c:29:c6:d6:6d:1b:d0:9f:80:bf:0c:a2:54:e4:46: 71:c0:47:fb:5a:5d:d0:e2:9e:7c:79:31:0f:07:10: 35:b3:e0:ae:6d:1e:2f:6f:95:1e:d6:19:cf:ab:92: 40:d3:8a:61:81:89:ab:de:cf:9f:98:a0:e4:dc:91: 4c:3e:e8:ec:24:85:b2:b5:b5:97:fa:81:37:83:9b: 46:9d:30:98:60:42:af:45:04:45:4c:34:dc:16:7f: fa:52:81:62:e2:c0:e3:22:0c:f8:83:2b:f5:44:36: 5c:67:5c:4d:9c:c9:38:49:de:fb:60:42:39:2e:49: 20:2a:69:c8:fb:bf:c3:e2:bd:90:d9:7b:6a:ed:53: 28:5d:2b:0d:68:93:ac:d5:e2:24:04:8b:e0:03:bb: 63:37:d6:c8:35:d0:64:d5:a0:63:66:bc:c0:0f:1b: 6a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:71:BA:5A:1F:01:AA:FC:43:A1:13:FF:59:F2:8D:75:DF:05:65:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/bc36308e-607f-36db-982f-4ca4d4f2788b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl X509v3 Authority Key Identifier: keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer sbgp-ipAddrBlock: critical IPv6: 2600:d400::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:8f:b1:1c:7f:28:94:5c:eb:a7:88:87:34:6e:e9:48:d4:24: c9:00:e9:c6:e6:d0:48:c0:46:f2:53:ae:2b:cd:3e:82:5b:2a: 5d:60:b5:4e:43:e4:67:3f:94:df:ca:9d:c8:13:81:54:ae:3e: e7:8d:f1:9b:54:38:15:dc:ef:73:8f:e6:52:9e:ed:ec:00:88: 9b:b8:01:1e:54:5d:fa:9a:86:9c:4b:8f:4e:c0:36:30:fd:95: 75:8c:35:28:ec:22:8f:dc:a5:47:a8:29:7c:d7:7c:ea:ec:54: 03:81:89:aa:14:3c:45:78:6e:ca:11:d2:b2:31:42:ab:2c:8f: f1:7a:5e:d1:f5:41:a2:81:77:18:35:18:26:3a:e2:e2:bb:af: b3:08:26:cf:b1:2b:56:28:dd:8d:07:70:ef:fd:6e:e5:2a:5c: 2c:d2:fb:d1:a2:ba:51:37:ba:b4:7e:c1:39:bf:d5:f9:71:54: 70:12:ec:32:71:9f:67:50:50:b8:d1:38:2d:21:49:d3:28:29: ba:9b:43:24:7a:b6:a1:36:b3:d2:3f:11:d8:b7:f8:f2:df:ad: 84:cf:57:6b:d2:db:32:84:1e:b1:f3:17:10:21:89:b2:e7:09: e7:aa:80:19:4b:00:e6:27:52:fa:e4:f3:88:5d:48:b2:fa:0a: 09:75:c3:e3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1qqmpXD0ylsQa64AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg0YWI1MmQtOTE1ZS00ZDhhLWIzN2ItNDk2ZWE0OWM2 Nzk4MB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk YjAxMjBkYTgtYjY0NC00M2Y5LThlZTQtNzVkNDI3MTljNDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvXTbAe3OT/iBz9BIZuR/fQnwUzs9uTrMthc OhXJIkRSWzJmyvUa8wzORyDgVY+TaLMUzepPGlft/YJzg3HNzwI4KdjvoCXG1KBc LqY9VA0gutuf0tHzrfQ8KcbWbRvQn4C/DKJU5EZxwEf7Wl3Q4p58eTEPBxA1s+Cu bR4vb5Ue1hnPq5JA04phgYmr3s+fmKDk3JFMPujsJIWytbWX+oE3g5tGnTCYYEKv RQRFTDTcFn/6UoFi4sDjIgz4gyv1RDZcZ1xNnMk4Sd77YEI5LkkgKmnI+7/D4r2Q 2Xtq7VMoXSsNaJOs1eIkBIvgA7tjN9bINdBk1aBjZrzADxtqjwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKhxulofAar8Q6ET/1nyjXXfBWXAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRh YjUyZC05MTVlLTRkOGEtYjM3Yi00OTZlYTQ5YzY3OTgvYmMzNjMwOGUtNjA3Zi0z NmRiLTk4MmYtNGNhNGQ0ZjI3ODhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjg0YWI1MmQtOTE1ZS00ZDhhLWIz N2ItNDk2ZWE0OWM2Nzk4L2I4NGFiNTJkLTkxNWUtNGQ4YS1iMzdiLTQ5NmVhNDlj Njc5OC5jcmwwHwYDVR0jBBgwFoAU3bUy71MQu1ndgStV6Nv35hADJHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRhYjUyZC05MTVlLTRkOGEtYjM3Yi00OTZl YTQ5YzY3OTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgDUADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA+j7EcfyiUXOuniIc0bulI1CTJAOnG5tBIwEbyU64rzT6CWypdYLVO Q+RnP5Tfyp3IE4FUrj7njfGbVDgV3O9zj+ZSnu3sAIibuAEeVF36moacS49OwDYw /ZV1jDUo7CKP3KVHqCl813zq7FQDgYmqFDxFeG7KEdKyMUKrLI/xel7R9UGigXcY NRgmOuLiu6+zCCbPsStWKN2NB3Dv/W7lKlws0vvRorpRN7q0fsE5v9X5cVRwEuwy cZ9nUFC40TgtIUnTKCm6m0MkerahNrPSPxHYt/jy362Ez1dr0tsyhB6x8xcQIYmy 5wnnqoAZSwDmJ1L65POIXUiy+goJdcPj -----END CERTIFICATE-----Generated at Wed Apr 15 12:58:40 2026 by rpki-client