$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/bbc0b940-a0b0-357f-9c12-e3747f91a6e9.roa File: bbc0b940-a0b0-357f-9c12-e3747f91a6e9.roa (raw, json) Hash identifier: UrCfVO+sGF/oVDXhP9oS4EINfcKzVxKX9HW0g9ku2Gg= Subject key identifier: BF:67:B0:44:19:16:B5:D1:66:C4:2B:1A:BC:DD:EF:B3:8D:B4:51:1A Certificate issuer: /CN=039cfe68-90bd-49ec-9597-6ac7ebfc0cf9 Certificate serial: 010D0C9F4328584D6AAA776D32ED20A45B5C19C0 Authority key identifier: 68:4C:8A:9A:C3:36:3B:3A:06:FA:5D:6B:80:2F:49:44:EA:10:01:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/bbc0b940-a0b0-357f-9c12-e3747f91a6e9.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 14159 IP address blocks: 2604:aa00::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:77:6d:32:ed:20:a4:5b:5c:19:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=039cfe68-90bd-49ec-9597-6ac7ebfc0cf9 Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=14c269e6-7011-48ee-899b-79b9c0619fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:17:3e:d7:a0:97:2d:c9:95:47:42:e9:e9:a9: 95:ec:58:19:d7:41:92:bb:4e:dc:25:08:7b:24:7c: 8c:59:2b:55:8e:28:58:fc:fb:6c:2b:67:91:3d:35: 2c:85:c0:76:87:a9:7c:60:d4:86:f3:cf:1f:4b:50: 85:e2:08:1f:92:39:aa:af:f4:b0:ef:76:0f:a3:3f: 4e:c6:ff:3a:86:fc:af:4b:8f:d5:f8:2d:8b:23:ce: 4a:e9:8f:f1:b3:0c:c6:1d:85:3c:cf:08:8d:69:b6: ac:57:dd:52:e9:02:12:1d:36:c2:9a:0f:91:9b:66: 69:39:6c:0c:aa:4d:aa:ef:67:a0:8c:62:01:7d:07: 60:22:05:1a:b5:1b:19:51:e0:1c:e0:9b:1d:4c:d5: 4f:a2:6c:48:41:db:83:2b:69:78:35:04:37:3c:4f: 2e:d4:53:a9:f5:1d:44:bb:4d:3b:64:75:16:fc:df: 00:b0:e7:89:97:e3:c1:7b:8f:6e:f4:87:ce:f9:cc: 02:a7:5f:3f:f2:a2:b1:76:2e:58:da:fd:10:65:92: e0:2e:f7:42:a6:ed:c0:5d:e0:ae:0c:3c:6a:a9:98: 3d:09:c9:9a:1e:3d:02:fd:dd:13:94:79:24:46:73: 68:15:97:36:33:d2:be:89:db:d1:aa:11:a7:3c:8f: 16:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:67:B0:44:19:16:B5:D1:66:C4:2B:1A:BC:DD:EF:B3:8D:B4:51:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/bbc0b940-a0b0-357f-9c12-e3747f91a6e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.crl X509v3 Authority Key Identifier: keyid:68:4C:8A:9A:C3:36:3B:3A:06:FA:5D:6B:80:2F:49:44:EA:10:01:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer sbgp-ipAddrBlock: critical IPv6: 2604:aa00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:c1:1c:b3:e7:79:fb:86:b3:cb:13:1c:b4:18:e0:c1:35:27: 2c:e4:6d:59:59:91:53:76:db:1c:0a:24:16:25:0b:b5:17:6c: 44:41:65:2b:2b:40:95:e6:11:97:96:09:10:eb:74:81:32:f4: b7:b5:22:fe:f2:9f:f3:0e:46:8f:68:d5:13:f0:d4:b0:a8:99: 79:78:a4:08:17:97:58:07:ca:c2:04:04:0d:32:4b:3e:48:c7: 27:c4:a1:ae:58:da:37:5f:74:6b:ff:28:79:6c:3d:e9:9a:a4: d8:40:27:7d:d3:45:31:19:6d:58:f9:c4:7e:32:ba:29:f9:06: f4:43:05:f6:28:3c:b7:cf:aa:28:38:74:87:4d:69:96:4e:17: 53:16:57:5e:b0:5c:9b:9a:11:3e:c9:ba:78:c8:92:9f:32:7f: 24:47:6d:97:ca:bd:d1:d7:c4:70:19:e7:2f:87:2f:b1:6b:87: ab:2a:53:c8:97:c4:b2:69:29:d3:96:2c:2b:21:d8:b3:28:f6: 43:2c:0c:8a:f9:bc:f4:d2:47:eb:b7:c5:a3:f8:58:eb:43:5c: cf:9e:b5:5c:23:57:80:ef:a3:73:67:65:e2:d0:26:5e:f2:18: ae:e3:80:e3:40:3a:5e:f7:c1:b1:88:8e:6c:dd:91:04:29:01: e3:d1:dd:29 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1qqndtMu0gpFtcGcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM5Y2ZlNjgtOTBiZC00OWVjLTk1OTctNmFjN2ViZmMw Y2Y5MB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk MTRjMjY5ZTYtNzAxMS00OGVlLTg5OWItNzliOWMwNjE5ZmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxc+16CXLcmVR0Lp6amV7FgZ10GSu07cJQh7 JHyMWStVjihY/PtsK2eRPTUshcB2h6l8YNSG888fS1CF4ggfkjmqr/Sw73YPoz9O xv86hvyvS4/V+C2LI85K6Y/xswzGHYU8zwiNabasV91S6QISHTbCmg+Rm2ZpOWwM qk2q72egjGIBfQdgIgUatRsZUeAc4JsdTNVPomxIQduDK2l4NQQ3PE8u1FOp9R1E u007ZHUW/N8AsOeJl+PBe49u9IfO+cwCp18/8qKxdi5Y2v0QZZLgLvdCpu3AXeCu DDxqqZg9CcmaHj0C/d0TlHkkRnNoFZc2M9K+idvRqhGnPI8WcQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFL9nsEQZFrXRZsQrGrzd77ONtFEaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wMzlj ZmU2OC05MGJkLTQ5ZWMtOTU5Ny02YWM3ZWJmYzBjZjkvYmJjMGI5NDAtYTBiMC0z NTdmLTljMTItZTM3NDdmOTFhNmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMDM5Y2ZlNjgtOTBiZC00OWVjLTk1 OTctNmFjN2ViZmMwY2Y5LzAzOWNmZTY4LTkwYmQtNDllYy05NTk3LTZhYzdlYmZj MGNmOS5jcmwwHwYDVR0jBBgwFoAUaEyKmsM2OzoG+l1rgC9JROoQAX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wMzljZmU2OC05MGJkLTQ5ZWMtOTU5Ny02YWM3 ZWJmYzBjZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSqADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCMwRyz53n7hrPLExy0GODBNScs5G1ZWZFTdtscCiQWJQu1F2xEQWUr K0CV5hGXlgkQ63SBMvS3tSL+8p/zDkaPaNUT8NSwqJl5eKQIF5dYB8rCBAQNMks+ SMcnxKGuWNo3X3Rr/yh5bD3pmqTYQCd900UxGW1Y+cR+Mrop+Qb0QwX2KDy3z6oo OHSHTWmWThdTFldesFybmhE+ybp4yJKfMn8kR22Xyr3R18RwGecvhy+xa4erKlPI l8SyaSnTliwrIdizKPZDLAyK+bz00kfrt8Wj+FjrQ1zPnrVcI1eA76NzZ2Xi0CZe 8hiu44DjQDpe98GxiI5s3ZEEKQHj0d0p -----END CERTIFICATE-----Generated at Thu Apr 9 02:49:40 2026 by rpki-client