$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf6e44d8-1c1f-3257-b81c-8ae2657dbccc.roa File: bf6e44d8-1c1f-3257-b81c-8ae2657dbccc.roa (raw, json) Hash identifier: E49WloqdAWTIFKngCsJ+DLMyoOWRRC9nou2A62e41M8= Subject key identifier: BD:61:D3:F5:B0:E0:76:37:75:86:24:4C:D3:99:DF:E7:A0:41:74:DF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D75D5435A84753F489358A580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf6e44d8-1c1f-3257-b81c-8ae2657dbccc.roa Signing time: Fri 10 Apr 2026 13:00:31 +0000 ROA not before: Fri 10 Apr 2026 13:00:31 +0000 ROA not after: Thu 09 Jul 2026 13:00:31 +0000 asID: 33657 IP address blocks: 2001:559:a01c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:d5:43:5a:84:75:3f:48:93:58:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 10 13:00:31 2026 GMT Not After : Jul 9 13:00:31 2026 GMT Subject: CN=4f769060-253e-4a81-964a-4d80d8b9dc06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e8:98:00:75:61:ef:5c:b0:52:69:1a:c1:d5: 3a:04:85:b9:a2:52:12:8c:bc:78:a9:a0:68:8c:32: 7c:5f:11:3b:b7:dc:10:2b:fb:72:78:36:0c:a8:e8: 41:2c:4e:1a:b6:bc:9b:c4:22:b4:ff:ab:e4:5e:49: 87:d4:05:b3:b5:4f:35:67:e5:99:23:b1:18:70:87: e3:52:c3:e4:62:b3:91:38:c8:82:4f:92:12:ce:d9: f6:e4:e3:ce:27:e6:81:c9:08:34:30:4b:39:80:ba: ed:0c:49:53:45:8c:c6:f7:ed:f2:c1:f6:5a:43:42: 7f:ef:c6:15:2f:15:a9:5f:fc:e7:43:92:50:1e:80: a9:2f:dd:b3:65:e7:4d:9a:7c:2b:d5:bd:0d:67:35: db:64:0d:dd:c1:06:0b:a7:d4:7d:dd:8a:cd:25:93: 22:2f:4c:e1:fa:fa:05:13:c3:79:a8:aa:f4:05:94: 6c:b9:0f:d4:83:3d:b9:c7:f4:03:3a:05:50:a0:34: 2d:53:a3:e4:bb:9d:e6:48:eb:73:63:dc:5d:96:05: 46:5a:f0:68:e7:51:17:77:55:7a:c8:91:1d:69:5f: 1a:40:e5:d2:96:1d:84:32:a1:79:5f:48:24:94:a5: d9:e5:90:4f:ad:5d:f0:3b:f2:65:a2:4c:9b:6c:47: 2c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:61:D3:F5:B0:E0:76:37:75:86:24:4C:D3:99:DF:E7:A0:41:74:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf6e44d8-1c1f-3257-b81c-8ae2657dbccc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:a01c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:61:af:33:c3:e4:23:8d:22:bb:e6:11:48:b5:33:fd:67:72: 3c:18:45:ee:22:62:a8:b7:6b:e1:33:9d:c8:ed:76:5e:58:90: 23:b3:a8:65:20:e7:95:9c:38:f6:c1:b6:0d:be:42:96:5b:86: 83:0f:fe:82:a4:f4:57:d5:19:e0:22:d4:d7:ed:3f:21:42:cb: 12:cf:92:e3:2e:81:e3:02:52:51:e0:32:38:ad:f5:32:9b:31: 4d:88:9e:5f:18:3f:44:79:84:dd:59:45:74:18:a1:45:43:cc: 09:ad:b5:49:85:dd:8e:82:3e:7d:5b:e3:cd:f0:d6:35:f6:9e: c7:ed:2e:ba:6a:bf:fd:a5:21:80:84:5b:8e:31:7a:a1:6a:ba: f9:de:41:50:90:f9:9b:de:42:2e:85:35:12:14:12:e6:92:91: 49:19:bd:b0:15:29:3e:8a:76:83:38:6b:8a:38:67:84:57:57: 26:5b:70:05:c2:5e:f0:21:27:47:9c:9f:95:3f:a7:ec:ba:47: 87:b9:34:63:9f:91:0f:d4:fa:14:51:9d:78:ff:6b:d6:dc:56: 1b:04:ec:61:bd:96:45:ae:ca:e3:d9:86:6a:6a:7b:a9:30:ee: 4d:e3:7a:a6:9f:99:e8:cd:d5:5c:74:42:4a:f7:5a:8d:ac:18: a1:30:6e:74 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE111UNahHU/SJNYpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk NGY3NjkwNjAtMjUzZS00YTgxLTk2NGEtNGQ4MGQ4YjlkYzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuiYAHVh71ywUmkawdU6BIW5olISjLx4qaBo jDJ8XxE7t9wQK/tyeDYMqOhBLE4atrybxCK0/6vkXkmH1AWztU81Z+WZI7EYcIfj UsPkYrOROMiCT5ISztn25OPOJ+aByQg0MEs5gLrtDElTRYzG9+3ywfZaQ0J/78YV LxWpX/znQ5JQHoCpL92zZedNmnwr1b0NZzXbZA3dwQYLp9R93YrNJZMiL0zh+voF E8N5qKr0BZRsuQ/Ugz25x/QDOgVQoDQtU6Pku53mSOtzY9xdlgVGWvBo51EXd1V6 yJEdaV8aQOXSlh2EMqF5X0gklKXZ5ZBPrV3wO/JlokybbEcs5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL1h0/Ww4HY3dYYkTNOZ3+egQXTfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmY2ZTQ0ZDgtMWMxZi0z MjU3LWI4MWMtOGFlMjY1N2RiY2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWaAc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADphrzPD5CONIrvmEUi1M/1ncjwYRe4iYqi3a+Ezncjtdl5YkCOz qGUg55WcOPbBtg2+QpZbhoMP/oKk9FfVGeAi1NftPyFCyxLPkuMugeMCUlHgMjit 9TKbMU2Inl8YP0R5hN1ZRXQYoUVDzAmttUmF3Y6CPn1b483w1jX2nsftLrpqv/2l IYCEW44xeqFquvneQVCQ+ZveQi6FNRIUEuaSkUkZvbAVKT6KdoM4a4o4Z4RXVyZb cAXCXvAhJ0ecn5U/p+y6R4e5NGOfkQ/U+hRRnXj/a9bcVhsE7GG9lkWuyuPZhmpq e6kw7k3jeqafmejN1Vx0Qkr3Wo2sGKEwbnQ= -----END CERTIFICATE-----Generated at Fri Apr 17 12:23:16 2026 by rpki-client