$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bcdc5a3b-8a91-3cba-9870-081f5af450c0.roa File: bcdc5a3b-8a91-3cba-9870-081f5af450c0.roa (raw, json) Hash identifier: 0cCtYk4gG3pqnVKvIYST4jsnj4VTC+x50wN+k6urLhQ= Subject key identifier: E5:99:15:14:97:73:F9:B4:B2:B8:8A:08:40:E2:69:01:FA:18:A1:71 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584DA90D7B90C33C9505A7180880 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bcdc5a3b-8a91-3cba-9870-081f5af450c0.roa Signing time: Tue 28 Apr 2026 21:20:21 +0000 ROA not before: Tue 28 Apr 2026 21:20:21 +0000 ROA not after: Mon 27 Jul 2026 21:20:21 +0000 asID: 209242 IP address blocks: 2606:4700:4f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a9:0d:7b:90:c3:3c:95:05:a7:18:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 28 21:20:21 2026 GMT Not After : Jul 27 21:20:21 2026 GMT Subject: CN=0939ed65-a187-4f47-9098-4ac1415045d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:cd:dc:bf:99:2d:0b:b3:a5:56:ff:1b:fa:da: ca:d0:f3:9a:44:c7:f0:1f:09:18:4d:53:62:a3:c9: c3:f7:33:41:08:57:0e:90:3c:00:84:a3:61:39:45: b4:da:63:3a:a5:67:c6:60:2b:98:c8:3b:75:51:76: fd:5e:6a:9e:28:dd:11:5b:cd:7b:16:e6:f0:a3:ab: b3:e9:8a:9c:87:c3:3c:f5:4e:b5:6d:ef:f2:1a:05: 6c:41:c5:08:ac:1c:6a:20:13:7c:f9:e1:34:1d:e9: b7:1f:df:b8:ad:2c:f0:38:c1:b6:60:45:60:39:27: 0b:99:0c:1e:b8:1c:e5:e0:4e:a2:09:4f:37:3c:9e: 4d:2a:af:fe:fc:b7:ad:f3:5d:01:91:de:7c:70:90: 4d:e9:a8:ae:f9:2e:02:13:4e:36:c5:a3:e9:3e:63: c2:a3:cb:77:26:ef:57:76:02:93:06:ec:48:7a:92: b2:d9:40:63:77:e9:64:00:d3:97:27:32:2a:b8:3c: 1e:8b:80:15:8b:96:7d:85:81:d5:83:5d:8c:17:e1: 7e:b7:97:9a:1b:e4:2c:fc:db:5c:a6:85:be:07:34: 98:11:e8:42:bc:95:5a:58:c2:c0:e9:3a:95:fa:aa: 07:a0:16:83:a9:ed:26:64:62:48:c3:36:c4:34:bf: f6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:99:15:14:97:73:F9:B4:B2:B8:8A:08:40:E2:69:01:FA:18:A1:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bcdc5a3b-8a91-3cba-9870-081f5af450c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:4f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:14:2c:76:51:ab:e9:b2:76:67:dc:8c:94:0d:a9:b6:2f:41: 84:43:15:ac:13:59:8d:ce:cb:b7:8e:a3:07:8a:2d:35:db:3a: 7f:03:a8:cc:10:48:a8:b9:ad:e1:9a:a2:38:a9:46:d7:dc:5a: 05:11:bd:d0:56:97:63:d1:9b:10:80:51:45:b2:46:b0:a4:19: a6:5f:06:21:92:db:3e:ef:1b:60:c4:60:8d:0e:b4:08:b0:65: a1:be:cd:81:44:cd:c9:25:45:b2:91:ce:bb:3c:9d:9b:8d:41: 7b:2d:2d:15:8f:5b:3e:ed:96:86:73:89:27:91:4e:c5:5b:be: 68:3c:89:c8:3c:ab:46:ff:1a:1d:0e:9a:c0:31:d5:d3:dc:7f: 24:a0:04:93:d2:ae:dd:78:c2:0a:8a:18:0f:b3:c7:77:17:0c: 45:c4:3a:b9:e9:49:4a:a1:1d:e1:46:22:07:2c:aa:2a:20:2d: 2c:b6:a9:ac:cd:28:cb:eb:32:e9:0b:cc:1b:85:59:90:c2:ff: f0:37:7e:82:eb:42:38:99:f4:44:ba:84:fc:ac:e7:47:ae:a4: 30:13:9a:74:0f:93:3e:4d:0d:32:ff:b8:60:ea:40:59:53:4e: bf:48:7f:ad:f1:19:f3:e7:0e:ca:58:ac:a5:00:8e:22:f9:9d: 67:10:60:73 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2pDXuQwzyVBacYCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQyODIxMjAyMVoXDTI2MDcyNzIxMjAyMVowLzEtMCsGA1UEAxMk MDkzOWVkNjUtYTE4Ny00ZjQ3LTkwOTgtNGFjMTQxNTA0NWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlc3cv5ktC7OlVv8b+trK0POaRMfwHwkYTVNi o8nD9zNBCFcOkDwAhKNhOUW02mM6pWfGYCuYyDt1UXb9XmqeKN0RW817Fubwo6uz 6Yqch8M89U61be/yGgVsQcUIrBxqIBN8+eE0Hem3H9+4rSzwOMG2YEVgOScLmQwe uBzl4E6iCU83PJ5NKq/+/Let810Bkd58cJBN6aiu+S4CE042xaPpPmPCo8t3Ju9X dgKTBuxIepKy2UBjd+lkANOXJzIquDwei4AVi5Z9hYHVg12MF+F+t5eaG+Qs/Ntc poW+BzSYEehCvJVaWMLA6TqV+qoHoBaDqe0mZGJIwzbENL/25QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOWZFRSXc/m0sriKCEDiaQH6GKFxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmNkYzVhM2ItOGE5MS0z Y2JhLTk4NzAtMDgxZjVhZjQ1MGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAABP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADUULHZRq+mydmfcjJQNqbYvQYRDFawTWY3Oy7eOoweKLTXbOn8D qMwQSKi5reGaojipRtfcWgURvdBWl2PRmxCAUUWyRrCkGaZfBiGS2z7vG2DEYI0O tAiwZaG+zYFEzcklRbKRzrs8nZuNQXstLRWPWz7tloZziSeRTsVbvmg8icg8q0b/ Gh0OmsAx1dPcfySgBJPSrt14wgqKGA+zx3cXDEXEOrnpSUqhHeFGIgcsqiogLSy2 qazNKMvrMukLzBuFWZDC//A3foLrQjiZ9ES6hPys50eupDATmnQPkz5NDTL/uGDq QFlTTr9If63xGfPnDspYrKUAjiL5nWcQYHM= -----END CERTIFICATE-----Generated at Sat May 9 08:09:44 2026 by rpki-client