$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/e58394a7-c7bd-300f-8d04-4cce1e69a9eb.roa File: e58394a7-c7bd-300f-8d04-4cce1e69a9eb.roa (raw, json) Hash identifier: k4mqEuxGivBw/MY2AsyrF3a0bUer4aA2IrYgGsFqpxI= Subject key identifier: 0F:65:7E:17:A8:7A:6D:24:87:18:02:EB:48:6D:7C:98:81:31:B2:BE Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584D60E507C7BC6CC4B6BB622580 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/e58394a7-c7bd-300f-8d04-4cce1e69a9eb.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 35908 IP address blocks: 2607:f180::/31 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:07:c7:bc:6c:c4:b6:bb:62:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=40dd9afe-a738-4d45-b7e4-dad474494b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6e:72:99:66:f4:2b:e6:15:39:af:21:ef:d4: a0:e4:86:7a:c4:ac:b1:fe:42:82:28:b7:fc:7f:36: f9:e4:5c:0d:04:d1:8c:75:a4:fa:1c:65:dd:ba:17: 6e:5d:18:44:05:d9:77:50:3b:ae:f9:3f:70:07:4b: a8:7f:bd:44:07:96:d2:8a:10:97:bc:45:4d:e9:55: c8:13:4e:da:08:6b:1f:09:7c:18:f8:06:b3:a4:a1: 52:55:ab:4a:29:42:e8:f5:88:b5:34:13:cf:16:23: 1a:85:4c:94:bc:28:f1:42:a5:cf:30:76:9e:be:ed: 93:24:51:8d:3d:2b:54:08:da:08:38:3a:4c:ef:7c: 08:f0:d9:56:0c:76:8a:e4:75:91:f6:cf:9d:40:e7: ba:7c:d0:1c:a1:51:ee:a9:d7:b0:74:7c:13:93:7b: c9:6e:9f:30:7b:72:ae:53:91:68:59:cc:62:cd:90: 78:4f:30:25:ce:d8:90:d8:8a:f6:de:34:cf:96:68: 18:8f:b0:c7:7b:bf:6b:54:47:a1:c7:bb:3f:5f:73: c0:d9:ae:2e:0e:20:ba:d9:f9:e8:42:e7:0a:06:26: bf:63:f9:ea:5a:ab:73:7d:3d:61:e4:2b:83:8a:5c: d2:84:c8:a2:ce:1e:71:cc:8b:e1:1e:9b:24:19:c8: cc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:65:7E:17:A8:7A:6D:24:87:18:02:EB:48:6D:7C:98:81:31:B2:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/e58394a7-c7bd-300f-8d04-4cce1e69a9eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv6: 2607:f180::/31 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:d9:fb:d0:63:fa:ea:e5:9d:84:8d:ca:11:10:ea:60:de:93: 2e:54:ee:26:9a:80:6f:04:95:c9:ac:c2:1c:e6:d4:a4:11:21: f8:d1:d9:7b:a9:20:ac:a9:28:08:4b:92:ea:e2:0a:d0:13:ba: e2:02:93:d3:a1:25:06:df:b8:c1:b1:26:22:87:fe:84:75:9e: 52:a9:03:b1:5d:ac:71:be:64:a0:aa:b6:0e:5f:aa:59:a6:a6: b4:25:46:92:f5:05:73:03:a5:42:22:18:13:28:eb:b4:e7:77: 5b:e7:2b:a2:b9:fa:cb:82:71:0c:9f:14:6b:f8:00:9f:9c:9e: 9c:e2:28:dd:6d:29:51:c0:8d:da:d7:4a:a9:fe:33:8d:ef:93: de:04:c5:0a:d0:2a:ad:d7:9d:37:f0:69:38:03:6e:44:7d:e5: 0b:f6:98:00:22:9e:f7:81:a4:40:86:34:dd:ed:b7:3c:0c:fe: f2:34:be:99:0e:e9:d6:ff:4c:a8:4f:dc:84:2c:42:87:57:0f: f7:f0:ba:21:44:5c:27:05:a3:f1:65:c3:51:4e:08:37:ed:42: 68:fa:93:e3:b0:61:fb:7a:38:98:b6:57:5e:bc:78:d2:7e:98: c3:a7:f0:55:bf:57:07:6b:d7:03:75:9d:e5:67:9a:0e:27:6e: 11:a0:49:0e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1g5QfHvGzEtrtiJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk NDBkZDlhZmUtYTczOC00ZDQ1LWI3ZTQtZGFkNDc0NDk0Yjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx25ymWb0K+YVOa8h79Sg5IZ6xKyx/kKCKLf8 fzb55FwNBNGMdaT6HGXduhduXRhEBdl3UDuu+T9wB0uof71EB5bSihCXvEVN6VXI E07aCGsfCXwY+AazpKFSVatKKULo9Yi1NBPPFiMahUyUvCjxQqXPMHaevu2TJFGN PStUCNoIODpM73wI8NlWDHaK5HWR9s+dQOe6fNAcoVHuqdewdHwTk3vJbp8we3Ku U5FoWcxizZB4TzAlztiQ2Ir23jTPlmgYj7DHe79rVEehx7s/X3PA2a4uDiC62fno QucKBia/Y/nqWqtzfT1h5CuDilzShMiizh5xzIvhHpskGcjMtwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFA9lfheoem0khxgC60htfJiBMbK+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvZTU4Mzk0YTctYzdiZC0z MDBmLThkMDQtNGNjZTFlNjlhOWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUBJgfxgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAq2fvQY/rq5Z2EjcoREOpg3pMuVO4mmoBvBJXJrMIc5tSkESH40dl7 qSCsqSgIS5Lq4grQE7riApPToSUG37jBsSYih/6EdZ5SqQOxXaxxvmSgqrYOX6pZ pqa0JUaS9QVzA6VCIhgTKOu053db5yuiufrLgnEMnxRr+ACfnJ6c4ijdbSlRwI3a 10qp/jON75PeBMUK0Cqt15038Gk4A25EfeUL9pgAIp73gaRAhjTd7bc8DP7yNL6Z DunW/0yoT9yELEKHVw/38LohRFwnBaPxZcNRTgg37UJo+pPjsGH7ejiYtldevHjS fpjDp/BVv1cHa9cDdZ3lZ5oOJ24RoEkO -----END CERTIFICATE-----Generated at Fri Apr 17 11:12:43 2026 by rpki-client