$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/963a6036-d518-33f5-9050-74210816b478.roa File: 963a6036-d518-33f5-9050-74210816b478.roa (raw, json) Hash identifier: WQJJ/ovnXWrSWGsOUpOLq3E9rFdx6jJLUcT2+jFbJAg= Subject key identifier: 4D:8F:ED:C5:EF:F2:27:B7:85:46:3E:87:0D:9A:5E:BA:66:12:12:75 Certificate issuer: /CN=badf1586-901d-41a7-b0f3-521998d53931 Certificate serial: 010D0C9F4328584D5884EC0B2C3B0E5320F50E00 Authority key identifier: 17:DD:BE:D5:1B:27:91:56:B0:48:C7:7E:3D:0E:D9:4F:FA:37:AB:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/963a6036-d518-33f5-9050-74210816b478.roa Signing time: Tue 31 Mar 2026 01:00:23 +0000 ROA not before: Tue 31 Mar 2026 01:00:23 +0000 ROA not after: Mon 29 Jun 2026 01:00:23 +0000 asID: 209630 IP address blocks: 2604:be0:ffe0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/badf1586-901d-41a7-b0f3-521998d53931.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/badf1586-901d-41a7-b0f3-521998d53931.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:58:84:ec:0b:2c:3b:0e:53:20:f5:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=badf1586-901d-41a7-b0f3-521998d53931 Validity Not Before: Mar 31 01:00:23 2026 GMT Not After : Jun 29 01:00:23 2026 GMT Subject: CN=6e74445c-946c-452c-aa58-81632a2d08b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:30:41:4d:28:1c:30:4d:72:61:3b:e5:bc:bb: 0f:69:0a:14:ed:34:e5:36:d5:1e:e7:d3:18:cd:47: 0f:c8:21:9f:15:23:5d:0c:82:53:9e:31:e7:59:0e: 67:a8:ac:61:06:5d:58:66:f2:18:30:b0:f2:e3:e7: f9:3a:10:5a:71:bf:6b:70:30:ad:1c:8d:60:7e:fd: de:bd:98:c7:09:02:6c:dd:1e:2e:6c:0e:5a:72:81: 97:9f:83:54:0f:9f:44:e0:42:ea:b6:6f:3b:a4:fd: d8:d3:65:49:3b:dd:56:36:5b:43:f4:c8:6d:78:ad: b9:54:8b:af:24:9f:73:a5:8f:c6:db:f3:74:7a:d8: e4:cf:90:6b:fa:23:4a:84:33:6c:ef:08:0e:83:f8: 39:41:da:69:22:ff:ea:8b:e3:2f:35:66:42:96:6a: 59:c8:88:2d:eb:30:ab:3a:c5:6a:99:44:c2:ce:4f: 78:34:32:c5:d6:54:ac:ce:68:9a:17:8c:88:64:ab: 94:50:90:7c:6b:02:13:b6:4e:2d:02:1c:3e:e1:9d: 24:47:17:4c:a1:40:99:17:e3:9a:38:15:26:4f:12: 64:60:33:8f:ba:d0:31:0b:ad:8b:8e:76:06:06:f7: bd:52:71:94:b4:9e:ab:e3:ba:6c:ed:00:99:80:9c: 70:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:8F:ED:C5:EF:F2:27:B7:85:46:3E:87:0D:9A:5E:BA:66:12:12:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/963a6036-d518-33f5-9050-74210816b478.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/badf1586-901d-41a7-b0f3-521998d53931.crl X509v3 Authority Key Identifier: keyid:17:DD:BE:D5:1B:27:91:56:B0:48:C7:7E:3D:0E:D9:4F:FA:37:AB:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931.cer sbgp-ipAddrBlock: critical IPv6: 2604:be0:ffe0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:d5:aa:f0:d2:02:6e:7f:4d:04:7d:57:ef:0e:b7:f5:92:92: 35:2a:fc:a8:50:50:dd:33:5a:58:22:50:9b:16:2b:d6:6a:f9: 11:fa:12:60:23:6e:70:6c:6b:a3:6b:91:a1:1b:ad:60:67:7d: 94:fd:11:64:aa:5a:e0:4b:71:5c:58:2f:11:b3:d8:db:22:69: 71:2b:62:a2:1b:f3:aa:38:40:ab:2d:7b:74:db:36:94:87:06: bb:86:e4:70:74:4d:a6:15:21:70:88:17:a3:8a:5c:4b:b7:8e: a1:00:f9:49:2b:d7:07:eb:c0:90:0c:2d:54:37:75:b9:75:fb: 49:02:34:11:65:79:e5:63:24:92:4a:a4:b5:81:bf:02:80:72: 99:8c:be:52:00:ea:72:b1:e7:47:82:7c:69:bf:33:59:51:f9: d4:7f:a9:67:a8:43:2c:33:86:46:9f:b0:ff:dd:48:0d:e8:ac: 42:d7:f2:8d:2c:c5:98:96:67:20:ac:89:6e:76:00:2f:fe:cd: 09:68:4e:d2:22:35:c4:84:50:82:67:48:4f:ca:34:b8:5a:a7: 73:3c:4e:03:ba:af:c1:7d:03:64:1e:92:99:89:3b:ad:0a:92: 69:dc:ea:01:28:08:2a:fe:10:15:5b:a8:bd:0a:95:7e:7b:4e: bd:ad:22:62 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1YhOwLLDsOUyD1DgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFkZjE1ODYtOTAxZC00MWE3LWIwZjMtNTIxOTk4ZDUz OTMxMB4XDTI2MDMzMTAxMDAyM1oXDTI2MDYyOTAxMDAyM1owLzEtMCsGA1UEAxMk NmU3NDQ0NWMtOTQ2Yy00NTJjLWFhNTgtODE2MzJhMmQwOGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDBBTSgcME1yYTvlvLsPaQoU7TTlNtUe59MY zUcPyCGfFSNdDIJTnjHnWQ5nqKxhBl1YZvIYMLDy4+f5OhBacb9rcDCtHI1gfv3e vZjHCQJs3R4ubA5acoGXn4NUD59E4ELqtm87pP3Y02VJO91WNltD9MhteK25VIuv JJ9zpY/G2/N0etjkz5Br+iNKhDNs7wgOg/g5QdppIv/qi+MvNWZClmpZyIgt6zCr OsVqmUTCzk94NDLF1lSszmiaF4yIZKuUUJB8awITtk4tAhw+4Z0kRxdMoUCZF+Oa OBUmTxJkYDOPutAxC62LjnYGBve9UnGUtJ6r47ps7QCZgJxw2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE2P7cXv8ie3hUY+hw2aXrpmEhJ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYWRm MTU4Ni05MDFkLTQxYTctYjBmMy01MjE5OThkNTM5MzEvOTYzYTYwMzYtZDUxOC0z M2Y1LTkwNTAtNzQyMTA4MTZiNDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmFkZjE1ODYtOTAxZC00MWE3LWIw ZjMtNTIxOTk4ZDUzOTMxL2JhZGYxNTg2LTkwMWQtNDFhNy1iMGYzLTUyMTk5OGQ1 MzkzMS5jcmwwHwYDVR0jBBgwFoAUF92+1RsnkVawSMd+PQ7ZT/o3q54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYWRmMTU4Ni05MDFkLTQxYTctYjBmMy01MjE5 OThkNTM5MzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQL4P/g MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABHVqvDSAm5/TQR9V+8Ot/WSkjUq/KhQUN0zWlgiUJsWK9Zq+RH6 EmAjbnBsa6NrkaEbrWBnfZT9EWSqWuBLcVxYLxGz2NsiaXErYqIb86o4QKste3Tb NpSHBruG5HB0TaYVIXCIF6OKXEu3jqEA+Ukr1wfrwJAMLVQ3dbl1+0kCNBFleeVj JJJKpLWBvwKAcpmMvlIA6nKx50eCfGm/M1lR+dR/qWeoQywzhkafsP/dSA3orELX 8o0sxZiWZyCsiW52AC/+zQloTtIiNcSEUIJnSE/KNLhap3M8TgO6r8F9A2QekpmJ O60Kkmnc6gEoCCr+EBVbqL0KlX57Tr2tImI= -----END CERTIFICATE-----Generated at Sat Apr 4 11:04:30 2026 by rpki-client