$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d6ea8a2a-963c-4cb3-be4b-30ef91b52807/bf7217dd-4d3e-3190-8cd7-28d3a00b6493.roa File: bf7217dd-4d3e-3190-8cd7-28d3a00b6493.roa (raw, json) Hash identifier: yEuP1d20rmTpirPFWtdWIFZUFaq9c49SCObWxAsQ0qE= Subject key identifier: 11:70:3A:4E:71:F4:00:C7:A9:F5:51:59:2A:91:3F:58:92:84:14:48 Certificate issuer: /CN=d6ea8a2a-963c-4cb3-be4b-30ef91b52807 Certificate serial: 010D0C9F4328584D4D5A793DD378CBCD89164C80 Authority key identifier: 6A:78:91:DB:FF:D4:D8:E2:17:FD:7E:82:29:22:78:75:F3:2E:78:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d6ea8a2a-963c-4cb3-be4b-30ef91b52807.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d6ea8a2a-963c-4cb3-be4b-30ef91b52807/bf7217dd-4d3e-3190-8cd7-28d3a00b6493.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 13765 IP address blocks: 96.46.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d6ea8a2a-963c-4cb3-be4b-30ef91b52807/d6ea8a2a-963c-4cb3-be4b-30ef91b52807.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d6ea8a2a-963c-4cb3-be4b-30ef91b52807/d6ea8a2a-963c-4cb3-be4b-30ef91b52807.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d6ea8a2a-963c-4cb3-be4b-30ef91b52807.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:79:3d:d3:78:cb:cd:89:16:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6ea8a2a-963c-4cb3-be4b-30ef91b52807 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=6292ee2c-1d89-4a8f-94d2-7dbb9e0fe716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:38:eb:f6:53:c1:13:b0:10:2c:78:89:74:fb: 23:58:ec:88:04:e2:64:48:18:63:db:e9:d7:99:98: 06:85:31:af:36:11:7f:88:4e:c3:29:01:9a:81:b8: 94:2a:cb:4e:53:7c:b2:d3:2c:b4:13:7d:bb:eb:a7: 9f:6a:9f:7e:2c:fa:2f:5e:6f:eb:9d:52:05:7c:f1: 65:58:f3:7c:08:7a:76:ef:c3:01:eb:4b:79:25:75: 47:01:96:69:a4:76:72:2f:98:69:b5:fb:04:aa:3c: 29:a4:a8:a0:6b:a5:09:8f:cd:23:59:fd:d3:f9:59: e6:22:5d:93:02:13:12:c8:c4:91:e9:43:76:b6:8a: fc:46:b1:69:d0:9d:ec:00:f3:cc:b7:d6:e4:60:70: 5c:01:ee:5c:d7:41:99:78:2c:93:42:ce:60:16:b8: 8d:80:8d:6a:9a:d3:2e:96:e0:7d:4e:0c:6a:1d:1c: 64:99:01:b7:76:20:39:d6:1f:29:12:7e:83:c5:ae: 79:b9:fe:be:c7:e4:98:fe:53:be:9e:30:d5:8a:43: 12:c5:e7:51:2b:b3:82:d1:8f:de:96:b5:0d:39:f2: 21:64:aa:15:70:57:89:90:f8:2d:38:ad:4e:40:bb: 95:40:ef:cc:6a:a3:e5:74:3b:10:8c:73:ae:64:26: e9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:70:3A:4E:71:F4:00:C7:A9:F5:51:59:2A:91:3F:58:92:84:14:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d6ea8a2a-963c-4cb3-be4b-30ef91b52807/bf7217dd-4d3e-3190-8cd7-28d3a00b6493.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d6ea8a2a-963c-4cb3-be4b-30ef91b52807/d6ea8a2a-963c-4cb3-be4b-30ef91b52807.crl X509v3 Authority Key Identifier: keyid:6A:78:91:DB:FF:D4:D8:E2:17:FD:7E:82:29:22:78:75:F3:2E:78:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d6ea8a2a-963c-4cb3-be4b-30ef91b52807.cer sbgp-ipAddrBlock: critical IPv4: 96.46.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:01:a1:f7:53:b2:e3:96:68:ed:2d:48:a2:2a:ac:31:7c:35: 93:cc:d3:1a:2b:43:5d:78:a0:60:8b:bb:7f:7c:c5:6f:46:05: 1a:26:b0:bf:b0:87:31:13:bf:a5:07:30:e1:79:8b:75:8b:53: dd:d6:d0:5d:2d:59:db:64:13:b9:0c:ab:10:df:29:74:7a:6d: 05:f2:99:7a:bb:16:aa:42:93:61:2e:fb:f8:10:be:7a:49:e3: 95:52:52:c1:94:6c:65:65:2d:6d:b4:f3:a2:77:4d:c5:c0:79: 69:b1:84:81:e5:4c:51:23:43:6a:06:4b:f0:7f:38:c6:81:3b: c0:7c:ea:fa:97:eb:ef:b8:c9:8f:e1:aa:0b:40:83:f6:2c:5a: c0:1c:4c:ba:3e:f7:aa:9c:1e:47:97:ff:20:37:08:20:5b:08: 24:40:69:0f:b1:bc:7c:c2:32:72:35:86:5b:81:16:32:a5:92: 20:78:e8:c6:1b:7a:65:f4:d9:2b:d3:70:be:9f:98:04:b2:bc: 81:c6:fd:e9:95:f5:31:16:9c:f3:0e:63:f8:9a:3f:03:01:9d: 50:ba:0f:b6:d9:e3:8d:6b:29:85:35:40:9a:27:7f:b3:c2:fb: d2:fe:8d:26:92:51:e0:6f:4c:62:bb:70:2b:8d:00:ef:4c:dc: 35:4a:a8:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWnk903jLzYkWTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZlYThhMmEtOTYzYy00Y2IzLWJlNGItMzBlZjkxYjUy ODA3MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk NjI5MmVlMmMtMWQ4OS00YThmLTk0ZDItN2RiYjllMGZlNzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTjr9lPBE7AQLHiJdPsjWOyIBOJkSBhj2+nX mZgGhTGvNhF/iE7DKQGagbiUKstOU3yy0yy0E32766efap9+LPovXm/rnVIFfPFl WPN8CHp278MB60t5JXVHAZZppHZyL5hptfsEqjwppKiga6UJj80jWf3T+VnmIl2T AhMSyMSR6UN2tor8RrFp0J3sAPPMt9bkYHBcAe5c10GZeCyTQs5gFriNgI1qmtMu luB9TgxqHRxkmQG3diA51h8pEn6Dxa55uf6+x+SY/lO+njDVikMSxedRK7OC0Y/e lrUNOfIhZKoVcFeJkPgtOK1OQLuVQO/MaqPldDsQjHOuZCbplwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFwOk5x9ADHqfVRWSqRP1iShBRIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kNmVh OGEyYS05NjNjLTRjYjMtYmU0Yi0zMGVmOTFiNTI4MDcvYmY3MjE3ZGQtNGQzZS0z MTkwLThjZDctMjhkM2EwMGI2NDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDZlYThhMmEtOTYzYy00Y2IzLWJl NGItMzBlZjkxYjUyODA3L2Q2ZWE4YTJhLTk2M2MtNGNiMy1iZTRiLTMwZWY5MWI1 MjgwNy5jcmwwHwYDVR0jBBgwFoAUaniR2//U2OIX/X6CKSJ4dfMueGcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kNmVhOGEyYS05NjNjLTRjYjMtYmU0Yi0zMGVm OTFiNTI4MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYC5oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIBofdTsuOWaO0tSKIqrDF8NZPM0xorQ114oGCLu398xW9GBRomsL+w hzETv6UHMOF5i3WLU93W0F0tWdtkE7kMqxDfKXR6bQXymXq7FqpCk2Eu+/gQvnpJ 45VSUsGUbGVlLW2086J3TcXAeWmxhIHlTFEjQ2oGS/B/OMaBO8B86vqX6++4yY/h qgtAg/YsWsAcTLo+96qcHkeX/yA3CCBbCCRAaQ+xvHzCMnI1hluBFjKlkiB46MYb emX02SvTcL6fmASyvIHG/emV9TEWnPMOY/iaPwMBnVC6D7bZ441rKYU1QJonf7PC +9L+jSaSUeBvTGK7cCuNAO9M3DVKqFM= -----END CERTIFICATE-----Generated at Sun Mar 29 03:02:37 2026 by rpki-client