$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/bd24ff87-c178-3f0d-a1e7-788cf90a8c56.roa File: bd24ff87-c178-3f0d-a1e7-788cf90a8c56.roa (raw, json) Hash identifier: cuPkrVQNTxiz57VKWFt2EKSUEtgJnTY8nYngUd1H6X4= Subject key identifier: BD:74:7D:DF:1C:1A:BE:F7:17:2B:50:C1:CE:B8:6F:EE:32:50:C0:DC Certificate issuer: /CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f Certificate serial: 010D0C9F4328584D9A201874A119EDC0A281C600 Authority key identifier: E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/bd24ff87-c178-3f0d-a1e7-788cf90a8c56.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 0 IP address blocks: 2001:504:1b::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:18:74:a1:19:ed:c0:a2:81:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=e1a9c22a-e56f-459e-9a3d-fae19c5e8bf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3b:65:33:a0:98:d7:42:0c:ec:95:b5:2e:a2: 7e:13:78:f5:3e:19:7d:83:68:10:45:4d:80:31:9a: de:59:09:fc:a5:a1:af:53:80:6e:08:77:e3:ba:74: 15:10:c7:01:b7:84:87:8f:9f:45:53:ec:ae:39:cd: 36:70:fb:63:a9:a8:29:f0:74:32:1d:f1:88:3c:b8: 24:46:42:55:62:9e:76:c4:dd:5e:ba:84:de:70:42: 03:25:44:62:26:54:e3:22:29:47:9e:f6:47:63:4e: 82:73:5b:e7:72:c8:61:d5:52:e3:07:9e:17:d3:c6: 71:c6:b9:5f:44:2e:06:d4:0d:04:93:46:8b:f5:d3: 77:83:a6:f7:28:85:f1:f2:b3:e0:d9:84:b9:4f:51: b6:cd:2b:b2:d2:63:0c:47:b4:88:fd:a7:0f:41:79: e3:02:b5:a6:da:48:a1:02:6f:6a:8f:3f:b1:e1:ec: 30:77:0b:96:70:69:45:31:d8:ad:88:34:44:ad:c4: 70:16:0c:fc:0c:8c:12:5c:d9:00:82:19:38:02:9a: 95:d0:0c:19:8b:26:e5:49:72:d2:42:7e:06:3e:0f: 17:f8:eb:48:84:b4:30:df:f5:a7:f6:15:46:8a:fb: 0e:82:5f:b7:26:1b:5f:d5:21:41:74:6b:c4:4b:fd: a3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:74:7D:DF:1C:1A:BE:F7:17:2B:50:C1:CE:B8:6F:EE:32:50:C0:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/bd24ff87-c178-3f0d-a1e7-788cf90a8c56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.crl X509v3 Authority Key Identifier: keyid:E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:1b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:75:49:ba:18:92:9a:40:54:b4:fb:ec:7f:99:07:58:cc:f7: fa:b5:47:28:82:aa:55:7f:67:6f:54:9b:2d:47:09:ba:0e:d3: e9:7a:4b:3e:8e:67:c2:47:02:c5:88:72:b5:04:c3:4d:99:da: 27:2b:f4:a5:f5:dc:8b:0d:85:49:77:95:ab:bb:05:11:64:0b: f4:73:8e:96:68:d7:0b:f7:b9:f1:f1:30:b4:88:2b:c6:7c:1f: 53:3d:34:60:a6:db:79:51:2f:46:08:94:c5:79:8c:5f:81:62: fd:0a:ff:a2:b8:a5:c5:15:af:8e:1d:57:e7:9a:86:41:07:1a: f6:d0:b6:5f:b9:9d:f6:91:40:65:36:0c:de:8c:95:19:04:f4: fc:b3:f4:43:68:3b:7d:62:49:d2:0d:f4:30:60:1e:85:be:f3: f2:ae:a7:63:a5:f0:d4:12:d1:ad:ae:88:6d:4b:4f:04:61:24: ca:b0:80:24:fd:2d:55:67:6e:01:b7:8b:2a:e8:69:0e:6e:81: 0c:22:08:5b:ae:aa:05:e1:ae:4c:55:69:1e:db:6e:e8:63:6b: 77:ca:f9:7b:5e:ac:40:71:bf:df:b6:f7:1e:ef:f9:f5:39:c3: 4c:42:3f:d7:60:a4:d4:9f:13:bc:06:40:49:7b:c1:23:83:24: 8e:79:0b:da -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2aIBh0oRntwKKBxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE2MTFlZjEtMTk1ZS00OTU4LWE2YWMtZjRhMWQyY2Q4 YzhmMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk ZTFhOWMyMmEtZTU2Zi00NTllLTlhM2QtZmFlMTljNWU4YmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DtlM6CY10IM7JW1LqJ+E3j1Phl9g2gQRU2A MZreWQn8paGvU4BuCHfjunQVEMcBt4SHj59FU+yuOc02cPtjqagp8HQyHfGIPLgk RkJVYp52xN1euoTecEIDJURiJlTjIilHnvZHY06Cc1vncshh1VLjB54X08Zxxrlf RC4G1A0Ek0aL9dN3g6b3KIXx8rPg2YS5T1G2zSuy0mMMR7SI/acPQXnjArWm2kih Am9qjz+x4ewwdwuWcGlFMditiDRErcRwFgz8DIwSXNkAghk4ApqV0AwZiyblSXLS Qn4GPg8X+OtIhLQw3/Wn9hVGivsOgl+3Jhtf1SFBdGvES/2j8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL10fd8cGr73FytQwc64b+4yUMDcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yYTYx MWVmMS0xOTVlLTQ5NTgtYTZhYy1mNGExZDJjZDhjOGYvYmQyNGZmODctYzE3OC0z ZjBkLWExZTctNzg4Y2Y5MGE4YzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmE2MTFlZjEtMTk1ZS00OTU4LWE2 YWMtZjRhMWQyY2Q4YzhmLzJhNjExZWYxLTE5NWUtNDk1OC1hNmFjLWY0YTFkMmNk OGM4Zi5jcmwwHwYDVR0jBBgwFoAU58NNkhO9kN6+mFO2dWGXhlsnRk0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yYTYxMWVmMS0xOTVlLTQ5NTgtYTZhYy1mNGEx ZDJjZDhjOGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAAb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHh1SboYkppAVLT77H+ZB1jM9/q1RyiCqlV/Z29Umy1HCboO0+l6 Sz6OZ8JHAsWIcrUEw02Z2icr9KX13IsNhUl3lau7BRFkC/RzjpZo1wv3ufHxMLSI K8Z8H1M9NGCm23lRL0YIlMV5jF+BYv0K/6K4pcUVr44dV+eahkEHGvbQtl+5nfaR QGU2DN6MlRkE9Pyz9ENoO31iSdIN9DBgHoW+8/Kup2Ol8NQS0a2uiG1LTwRhJMqw gCT9LVVnbgG3iyroaQ5ugQwiCFuuqgXhrkxVaR7bbuhja3fK+XterEBxv9+29x7v +fU5w0xCP9dgpNSfE7wGQEl7wSODJI55C9o= -----END CERTIFICATE-----Generated at Fri May 1 17:05:07 2026 by rpki-client