$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bb760eff-5d50-348f-809c-0dc1a1c253a5.roa File: bb760eff-5d50-348f-809c-0dc1a1c253a5.roa (raw, json) Hash identifier: CuIWhwJk/IFv/R1epCmkrYcirRL10SIzlDWAjzuF8DA= Subject key identifier: A7:D8:3E:D3:07:76:6C:E4:4F:12:89:81:E3:28:73:35:D3:CA:4C:AF Certificate issuer: /CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Certificate serial: 010D0C9F4328584D80FFF46888A296D6523F1300 Authority key identifier: BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bb760eff-5d50-348f-809c-0dc1a1c253a5.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 40867 IP address blocks: 2605:3240::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:f4:68:88:a2:96:d6:52:3f:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=6a59ccd3-0e35-4252-9a16-2119e176eb1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f7:cb:f8:12:5b:7f:77:bc:2c:82:8b:81:fe: 75:b6:01:57:fe:54:3b:4f:5b:7e:e4:af:b0:5c:9a: 3c:56:84:17:4a:a3:43:d3:9e:09:6a:eb:f5:50:ac: c9:23:77:00:fc:c8:a9:d6:f7:08:f5:9a:c1:0b:16: 65:59:da:29:f4:9b:fa:6b:9e:c9:1f:43:35:af:8d: f2:4c:75:e5:69:8a:9b:88:1f:3b:8e:5c:b4:d2:30: 0d:e7:db:e1:97:26:c3:c9:82:eb:36:3a:2c:3d:e5: 2a:2c:fa:32:04:63:f2:28:f6:2f:5e:df:a9:4e:54: b8:8b:ad:d0:c8:e1:1a:d7:03:ee:1c:c1:77:a0:e9: 26:20:f7:25:b3:f4:ce:f4:cb:f8:c4:89:24:db:bc: de:f7:04:f8:a1:ea:c6:7a:26:71:5e:55:70:3f:90: 82:9f:9c:fd:9f:7c:41:e5:b5:ef:44:ba:a0:86:34: 4f:a9:4c:e6:e4:94:a5:02:78:ba:25:25:f0:84:fd: db:54:75:d5:52:ad:da:cb:6c:41:d7:8e:bc:86:ff: 30:b0:0c:c3:de:c5:21:b8:be:9f:fc:fa:08:26:8a: 3d:03:0f:38:b7:41:70:ce:52:29:e8:7a:6e:de:01: 1d:68:02:8a:ec:dd:4f:6f:4b:d7:b2:15:7f:c2:09: 08:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D8:3E:D3:07:76:6C:E4:4F:12:89:81:E3:28:73:35:D3:CA:4C:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bb760eff-5d50-348f-809c-0dc1a1c253a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl X509v3 Authority Key Identifier: keyid:BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer sbgp-ipAddrBlock: critical IPv6: 2605:3240::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:41:e5:ac:a5:22:9b:30:73:34:c1:d6:b8:a5:e0:ba:1a:8e: 4c:62:de:ba:73:bb:90:d9:80:c2:0e:8e:48:08:3a:9a:81:f1: cb:cb:08:b6:f3:81:9b:82:42:54:ff:70:30:bf:53:2d:52:45: b9:34:41:72:df:f6:38:b5:75:70:45:bf:52:4e:3b:fc:18:41: de:e9:fd:19:54:20:75:e4:b5:97:d7:92:c3:b6:a0:c3:1b:8e: 9c:05:f9:5c:55:5a:8b:7c:7e:10:2f:85:b5:88:f3:97:29:10: 49:1d:07:7b:a7:96:1d:bb:16:77:cb:a8:1d:2b:d3:8e:8a:31: a1:d1:cf:3b:86:b3:76:b0:a5:3c:cb:90:e5:45:92:7a:34:76: 46:71:a4:d4:21:00:19:7f:98:ed:f8:cd:aa:91:0a:df:1a:5f: dc:46:a1:91:76:cd:68:22:2e:28:92:fe:4e:76:c7:07:a6:39: e0:5e:47:04:6e:52:d8:ad:1a:2c:c0:96:44:1c:ad:46:d7:35: ba:05:7e:c2:5a:df:e8:25:8f:c3:6e:c6:2b:2a:df:77:e9:04: 72:64:33:70:7b:6c:82:17:8d:c0:b8:43:24:bb:93:b1:7c:3c: 49:e4:64:c4:50:34:9a:2c:20:be:7c:b9:bd:94:4c:9f:db:e1: ae:d4:1e:16 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2A//RoiKKW1lI/EwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYzYzNiZDUtM2I5NC00N2UyLTgxZmMtZjQ5MDA4MTRl NDk0MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk NmE1OWNjZDMtMGUzNS00MjUyLTlhMTYtMjExOWUxNzZlYjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvfL+BJbf3e8LIKLgf51tgFX/lQ7T1t+5K+w XJo8VoQXSqND054Jauv1UKzJI3cA/Mip1vcI9ZrBCxZlWdop9Jv6a57JH0M1r43y THXlaYqbiB87jly00jAN59vhlybDyYLrNjosPeUqLPoyBGPyKPYvXt+pTlS4i63Q yOEa1wPuHMF3oOkmIPcls/TO9Mv4xIkk27ze9wT4oerGeiZxXlVwP5CCn5z9n3xB 5bXvRLqghjRPqUzm5JSlAni6JSXwhP3bVHXVUq3ay2xB1468hv8wsAzD3sUhuL6f /PoIJoo9Aw84t0FwzlIp6Hpu3gEdaAKK7N1Pb0vXshV/wgkIIwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKfYPtMHdmzkTxKJgeMoczXTykyvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNj M2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkwMDgxNGU0OTQvYmI3NjBlZmYtNWQ1MC0z NDhmLTgwOWMtMGRjMWExYzI1M2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmYzYzNiZDUtM2I5NC00N2UyLTgx ZmMtZjQ5MDA4MTRlNDk0L2JmM2MzYmQ1LTNiOTQtNDdlMi04MWZjLWY0OTAwODE0 ZTQ5NC5jcmwwHwYDVR0jBBgwFoAUv27gzbQvdJZGDC7Ndgx/FlpcgW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNjM2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkw MDgxNGU0OTQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUyQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAdQeWspSKbMHM0wda4peC6Go5MYt66c7uQ2YDCDo5ICDqagfHLywi2 84GbgkJU/3Awv1MtUkW5NEFy3/Y4tXVwRb9STjv8GEHe6f0ZVCB15LWX15LDtqDD G46cBflcVVqLfH4QL4W1iPOXKRBJHQd7p5YduxZ3y6gdK9OOijGh0c87hrN2sKU8 y5DlRZJ6NHZGcaTUIQAZf5jt+M2qkQrfGl/cRqGRds1oIi4okv5OdscHpjngXkcE blLYrRoswJZEHK1G1zW6BX7CWt/oJY/DbsYrKt936QRyZDNwe2yCF43AuEMku5Ox fDxJ5GTEUDSaLCC+fLm9lEyf2+Gu1B4W -----END CERTIFICATE-----Generated at Fri Apr 17 23:02:46 2026 by rpki-client