$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/b80d2774-6aec-31a4-9770-9e20e3e2eb10.roa File: b80d2774-6aec-31a4-9770-9e20e3e2eb10.roa (raw, json) Hash identifier: Gc6sjP8Gwq5cSUkiSPO2DGi7exELo4Ubk0W6R4eiubU= Subject key identifier: B1:33:48:50:61:BC:84:0E:28:95:5B:4D:72:0D:78:74:A1:DB:24:6D Certificate issuer: /CN=badf1586-901d-41a7-b0f3-521998d53931 Certificate serial: 010D0C9F4328584D5DF2A7C298207CB2CBCDB880 Authority key identifier: 17:DD:BE:D5:1B:27:91:56:B0:48:C7:7E:3D:0E:D9:4F:FA:37:AB:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/b80d2774-6aec-31a4-9770-9e20e3e2eb10.roa Signing time: Wed 01 Apr 2026 23:40:40 +0000 ROA not before: Wed 01 Apr 2026 23:40:40 +0000 ROA not after: Tue 30 Jun 2026 23:40:40 +0000 asID: 210554 IP address blocks: 2604:be0:ffe2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/badf1586-901d-41a7-b0f3-521998d53931.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/badf1586-901d-41a7-b0f3-521998d53931.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5d:f2:a7:c2:98:20:7c:b2:cb:cd:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=badf1586-901d-41a7-b0f3-521998d53931 Validity Not Before: Apr 1 23:40:40 2026 GMT Not After : Jun 30 23:40:40 2026 GMT Subject: CN=68f12f04-d72f-4c14-9f52-31bea7d4eed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ba:fc:22:a0:dd:ce:3c:d2:3b:21:97:0a:da: 17:43:ce:e6:a8:f4:b9:6a:fe:87:63:37:9d:6d:10: de:5d:40:d3:af:12:a1:34:d8:8b:14:3c:b0:cd:99: 29:31:d7:af:71:17:d5:a1:77:08:21:c0:ba:65:26: 64:c4:ea:3a:74:15:c6:07:b4:11:40:81:7b:50:43: 41:3b:35:87:93:7a:39:42:21:9c:0b:99:90:a7:a2: 52:df:97:a3:c0:fd:e6:61:1e:2b:e8:69:50:4b:76: 6b:7b:70:0d:13:ca:39:a8:ae:a8:a0:bd:67:3a:6d: 1d:7e:e6:a0:16:1f:39:b1:cf:f8:f1:1b:f7:54:75: 29:92:df:20:10:91:df:56:f4:7b:74:39:4b:dd:d1: a6:1e:03:8e:4a:7f:bd:99:32:31:1d:b3:86:32:7c: cd:cf:ab:89:b1:5f:f9:d4:55:2d:c6:f5:2e:0d:a2: 15:bc:c1:34:51:84:80:33:bc:b7:6b:98:c1:b5:8b: e8:15:1d:71:d4:3b:dd:8b:2c:ef:01:08:73:a1:79: a2:b3:b6:06:a7:e9:e7:64:bb:f2:03:c2:77:c6:d3: 84:d1:8b:16:16:9d:15:2e:55:ef:27:a8:85:00:67: b4:4c:33:12:a4:d8:68:92:bf:21:2d:cc:a7:f1:ed: 05:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:33:48:50:61:BC:84:0E:28:95:5B:4D:72:0D:78:74:A1:DB:24:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/b80d2774-6aec-31a4-9770-9e20e3e2eb10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/badf1586-901d-41a7-b0f3-521998d53931.crl X509v3 Authority Key Identifier: keyid:17:DD:BE:D5:1B:27:91:56:B0:48:C7:7E:3D:0E:D9:4F:FA:37:AB:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931.cer sbgp-ipAddrBlock: critical IPv6: 2604:be0:ffe2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:bc:ae:e3:4d:3b:aa:b8:80:fc:5d:b9:7a:b1:fa:d3:b5:6f: cb:5f:ab:bb:2f:e1:1a:32:09:e8:68:0e:e0:a8:03:19:78:75: f5:84:79:42:2c:de:01:ff:90:ce:16:35:4a:58:6a:b3:9a:ab: 33:83:e6:f8:3a:0d:5f:90:3e:9c:29:f1:3c:d0:17:ad:02:ea: d3:e5:da:7e:6d:f3:5f:92:30:4e:5c:09:1d:c9:d7:21:ca:e9: 20:7e:63:f2:cf:78:b1:53:f7:a6:3a:71:9e:b3:9f:d6:84:8f: 15:ea:54:f2:9b:ba:ec:7a:e8:f5:e3:87:46:6d:50:e9:5b:80: 16:1a:54:80:cf:db:34:7b:21:d3:b2:6c:1b:89:57:ba:fb:58: 3c:57:c8:c3:52:b6:21:9c:80:3f:5f:48:6a:e5:05:8b:97:c1: 06:8b:49:6a:ae:b9:29:c0:0b:7f:96:43:3a:1f:bd:43:22:65: b3:af:90:75:57:c9:b5:94:ac:53:cc:e1:b4:c6:f0:78:02:21: b4:02:60:6d:22:17:81:ec:8c:87:73:32:b8:95:27:49:eb:b3: e0:27:96:01:f3:5e:8b:df:5e:87:45:d5:d7:eb:ba:da:f9:4e: 64:3a:1c:e8:6f:d8:48:9e:cb:bf:92:ff:df:57:19:8e:80:06: ed:76:9e:65 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1d8qfCmCB8ssvNuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFkZjE1ODYtOTAxZC00MWE3LWIwZjMtNTIxOTk4ZDUz OTMxMB4XDTI2MDQwMTIzNDA0MFoXDTI2MDYzMDIzNDA0MFowLzEtMCsGA1UEAxMk NjhmMTJmMDQtZDcyZi00YzE0LTlmNTItMzFiZWE3ZDRlZWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7r8IqDdzjzSOyGXCtoXQ87mqPS5av6HYzed bRDeXUDTrxKhNNiLFDywzZkpMdevcRfVoXcIIcC6ZSZkxOo6dBXGB7QRQIF7UENB OzWHk3o5QiGcC5mQp6JS35ejwP3mYR4r6GlQS3Zre3ANE8o5qK6ooL1nOm0dfuag Fh85sc/48Rv3VHUpkt8gEJHfVvR7dDlL3dGmHgOOSn+9mTIxHbOGMnzNz6uJsV/5 1FUtxvUuDaIVvME0UYSAM7y3a5jBtYvoFR1x1DvdiyzvAQhzoXmis7YGp+nnZLvy A8J3xtOE0YsWFp0VLlXvJ6iFAGe0TDMSpNhokr8hLcyn8e0F7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLEzSFBhvIQOKJVbTXINeHSh2yRtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYWRm MTU4Ni05MDFkLTQxYTctYjBmMy01MjE5OThkNTM5MzEvYjgwZDI3NzQtNmFlYy0z MWE0LTk3NzAtOWUyMGUzZTJlYjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmFkZjE1ODYtOTAxZC00MWE3LWIw ZjMtNTIxOTk4ZDUzOTMxL2JhZGYxNTg2LTkwMWQtNDFhNy1iMGYzLTUyMTk5OGQ1 MzkzMS5jcmwwHwYDVR0jBBgwFoAUF92+1RsnkVawSMd+PQ7ZT/o3q54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYWRmMTU4Ni05MDFkLTQxYTctYjBmMy01MjE5 OThkNTM5MzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQL4P/i MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD68ruNNO6q4gPxduXqx+tO1b8tfq7sv4RoyCehoDuCoAxl4dfWE eUIs3gH/kM4WNUpYarOaqzOD5vg6DV+QPpwp8TzQF60C6tPl2n5t81+SME5cCR3J 1yHK6SB+Y/LPeLFT96Y6cZ6zn9aEjxXqVPKbuux66PXjh0ZtUOlbgBYaVIDP2zR7 IdOybBuJV7r7WDxXyMNStiGcgD9fSGrlBYuXwQaLSWquuSnAC3+WQzofvUMiZbOv kHVXybWUrFPM4bTG8HgCIbQCYG0iF4HsjIdzMriVJ0nrs+AnlgHzXovfXodF1dfr utr5TmQ6HOhv2Eiey7+S/99XGY6ABu12nmU= -----END CERTIFICATE-----Generated at Sat Apr 4 13:40:54 2026 by rpki-client