$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/bae8e28d-e4a2-3286-91f3-d55570d1925e.roa File: bae8e28d-e4a2-3286-91f3-d55570d1925e.roa (raw, json) Hash identifier: 8QxrRQvnOwGRjUTrVE4Fqthg9btqly9XgaUR2iDw1lg= Subject key identifier: CA:55:8F:A5:25:80:4D:99:E6:82:CD:3E:98:8D:4F:78:E8:FE:3B:F8 Certificate issuer: /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b Certificate serial: 010D0C9F4328584D746FCD1C04FFED8D55886A80 Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/bae8e28d-e4a2-3286-91f3-d55570d1925e.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 16904 IP address blocks: 2600:a00::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Apr 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:cd:1c:04:ff:ed:8d:55:88:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=99b216c4-4944-480f-bda0-9166a3ad6243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2d:ae:22:98:a7:52:c9:fd:3b:82:7e:38:cb: e2:f9:2a:e2:24:45:ab:25:98:08:f0:81:a0:7a:4c: f0:85:d0:ba:4f:07:a4:1c:a5:f7:27:b1:ea:78:77: f4:15:36:54:58:8f:54:3c:2a:85:95:7b:f9:7b:b2: e5:1f:5b:26:b8:46:02:49:f6:09:5c:9b:fd:68:fa: ac:9f:12:d7:65:a1:f3:6a:c4:88:71:6a:3f:cf:db: 93:c7:f6:9b:d5:bf:d8:27:6c:bf:4b:63:a5:61:34: ea:cb:99:7b:32:02:78:82:ee:af:86:52:08:12:e3: f9:bd:9b:ab:c8:df:03:3b:ae:a1:e7:90:36:04:21: 71:8c:c2:21:1a:42:33:24:00:a0:bd:f0:2e:6a:f1: 1a:1d:3d:f4:f2:ff:f7:39:d3:46:6e:95:d9:aa:48: 72:8e:fc:21:b1:e0:f1:25:91:79:1a:76:5c:ac:5c: df:dd:75:27:56:25:29:a0:72:78:44:e6:97:e7:56: 06:a3:36:9d:ed:3d:c8:8c:c7:12:4a:7b:c1:63:ef: 97:fe:cd:38:f6:65:b6:9d:eb:f4:0a:c1:1c:dc:8a: 71:8e:42:71:77:e6:94:9c:17:bd:22:3f:e7:51:01: e2:39:b9:dd:ba:45:f8:5d:11:26:04:44:a7:ff:17: 9e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:55:8F:A5:25:80:4D:99:E6:82:CD:3E:98:8D:4F:78:E8:FE:3B:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/bae8e28d-e4a2-3286-91f3-d55570d1925e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl X509v3 Authority Key Identifier: keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer sbgp-ipAddrBlock: critical IPv6: 2600:a00::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:6c:18:bf:7d:c8:ed:a8:43:9e:99:3e:d4:d2:30:2a:de:f9: 57:09:65:a4:13:c2:a3:05:eb:fb:ff:e8:25:e6:1e:ed:46:cf: 17:71:68:ad:00:56:c8:e4:37:8e:ea:05:4f:36:fa:41:b6:14: c4:59:d9:ca:e2:ae:53:b1:cb:18:53:f5:34:e1:a8:c1:5b:31: e8:5f:e7:86:e9:2b:30:ae:f3:c1:58:af:6c:a3:9b:82:9e:87: 36:49:f8:76:d5:e5:10:69:a7:75:1a:41:d5:52:c2:a9:31:5f: 38:98:06:96:60:90:9a:0d:83:72:f3:fd:ed:24:8d:e7:93:b1: 85:a8:af:33:1a:6d:26:04:d3:c0:b9:85:dd:b4:a5:b4:01:ac: 92:31:e4:0f:dc:e4:62:d5:f3:de:35:e6:47:ca:d2:e4:bd:2d: 7e:d4:c5:1f:b4:58:7a:9d:f4:56:9f:ec:9a:61:ca:84:53:bb: 33:57:37:6f:2e:e8:e9:58:bf:a9:f0:ce:be:90:22:5f:db:e5: 05:4e:fd:ef:ef:3e:c6:53:45:d2:d7:88:ec:4b:66:95:f8:2a: 97:d5:8b:86:d8:2b:be:0c:eb:4f:ed:7c:b7:fe:85:a8:44:35: 4e:11:c6:9b:37:2d:84:06:01:1c:23:1e:28:49:bc:77:08:ce: a1:b3:08:58 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE10b80cBP/tjVWIaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA0NWMyNWEtMDVlMy00MGJhLWEyZGMtNWM1YmRhYjAx MzFiMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk OTliMjE2YzQtNDk0NC00ODBmLWJkYTAtOTE2NmEzYWQ2MjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAli2uIpinUsn9O4J+OMvi+SriJEWrJZgI8IGg ekzwhdC6TwekHKX3J7HqeHf0FTZUWI9UPCqFlXv5e7LlH1smuEYCSfYJXJv9aPqs nxLXZaHzasSIcWo/z9uTx/ab1b/YJ2y/S2OlYTTqy5l7MgJ4gu6vhlIIEuP5vZur yN8DO66h55A2BCFxjMIhGkIzJACgvfAuavEaHT308v/3OdNGbpXZqkhyjvwhseDx JZF5GnZcrFzf3XUnViUpoHJ4ROaX51YGozad7T3IjMcSSnvBY++X/s049mW2nev0 CsEc3IpxjkJxd+aUnBe9Ij/nUQHiObndukX4XREmBESn/xeehQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMpVj6UlgE2Z5oLNPpiNT3jo/jv4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1 YzI1YS0wNWUzLTQwYmEtYTJkYy01YzViZGFiMDEzMWIvYmFlOGUyOGQtZTRhMi0z Mjg2LTkxZjMtZDU1NTcwZDE5MjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA0NWMyNWEtMDVlMy00MGJhLWEy ZGMtNWM1YmRhYjAxMzFiLzAwNDVjMjVhLTA1ZTMtNDBiYS1hMmRjLTVjNWJkYWIw MTMxYi5jcmwwHwYDVR0jBBgwFoAUbbgrxbTjT35CXDlBEzNufGgjfl8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1YzI1YS0wNWUzLTQwYmEtYTJkYy01YzVi ZGFiMDEzMWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgAKADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBybBi/fcjtqEOemT7U0jAq3vlXCWWkE8KjBev7/+gl5h7tRs8XcWit AFbI5DeO6gVPNvpBthTEWdnK4q5TscsYU/U04ajBWzHoX+eG6SswrvPBWK9so5uC noc2Sfh21eUQaad1GkHVUsKpMV84mAaWYJCaDYNy8/3tJI3nk7GFqK8zGm0mBNPA uYXdtKW0AaySMeQP3ORi1fPeNeZHytLkvS1+1MUftFh6nfRWn+yaYcqEU7szVzdv LujpWL+p8M6+kCJf2+UFTv3v7z7GU0XS14jsS2aV+CqX1YuG2Cu+DOtP7Xy3/oWo RDVOEcabNy2EBgEcIx4oSbx3CM6hswhY -----END CERTIFICATE-----Generated at Sat Apr 11 01:30:31 2026 by rpki-client