$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/bd24ff87-c178-3f0d-a1e7-788cf90a8c56.roa File: bd24ff87-c178-3f0d-a1e7-788cf90a8c56.roa (raw, json) Hash identifier: 1U8tvRYyYjIsbjXid8LPx/eRwcGCpwfcCg++4I+YWic= Subject key identifier: A2:25:30:10:51:E1:A0:07:54:31:D6:A6:C1:F8:C1:74:7D:E2:66:3E Certificate issuer: /CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f Certificate serial: 010D0C9F4328584CB981D686CA1862D009348CDA Authority key identifier: E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/bd24ff87-c178-3f0d-a1e7-788cf90a8c56.roa Signing time: Mon 02 Feb 2026 02:00:32 +0000 ROA not before: Mon 02 Feb 2026 02:00:32 +0000 ROA not after: Sun 03 May 2026 01:00:32 +0000 asID: 0 IP address blocks: 2001:504:1b::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b9:81:d6:86:ca:18:62:d0:09:34:8c:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f Validity Not Before: Feb 2 02:00:32 2026 GMT Not After : May 3 01:00:32 2026 GMT Subject: CN=c73fc4fe-4ed4-44d7-9cb7-0aeb31c4313c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:dc:25:95:9a:3a:67:32:13:1f:65:64:04:f6: e2:2c:11:1b:ab:8a:ff:de:78:57:d5:e0:da:d6:4b: a2:2b:5c:f1:2b:9c:e5:14:b1:23:93:5f:1d:1a:52: 7c:1b:03:28:32:dd:4a:70:88:e0:65:ac:3d:3a:03: f0:a9:a7:ef:32:59:73:33:f1:12:70:09:9a:dc:88: 26:42:04:29:7d:48:23:36:18:69:ae:3e:e6:34:32: 2a:c5:b5:bd:54:b3:20:27:8d:26:1b:00:03:86:5f: eb:d3:d7:25:12:b1:6c:35:05:cf:b3:75:46:60:25: fe:fe:83:d8:1a:c5:91:c1:22:6d:99:7f:29:df:8a: 21:57:41:32:3a:70:05:32:d6:59:45:11:0c:f7:2b: 65:6d:4d:d4:27:df:d3:b5:ba:93:85:1a:1b:6a:7f: c2:57:10:f4:26:93:c8:96:3c:51:43:fb:c3:61:6d: 1f:85:5a:02:06:2c:9f:48:85:46:9c:f0:33:a1:9e: e6:86:97:80:6a:7c:92:9f:ef:4c:67:cd:f9:57:5b: e2:85:49:15:0f:f6:fa:e2:24:71:cc:95:06:42:d1: 72:3b:ad:9b:7c:e3:31:a0:9f:22:db:44:e7:e1:50: 95:3a:2e:2c:2c:85:6c:e8:0e:66:be:ff:12:a0:39: a0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:25:30:10:51:E1:A0:07:54:31:D6:A6:C1:F8:C1:74:7D:E2:66:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/bd24ff87-c178-3f0d-a1e7-788cf90a8c56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.crl X509v3 Authority Key Identifier: keyid:E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:1b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:ba:24:59:12:3b:43:c6:39:1f:50:0b:88:6e:b3:d6:17:ce: be:af:44:0f:b8:64:82:d0:00:61:34:3a:59:7e:1e:74:cb:f0: 6b:99:3f:7c:c4:29:48:6c:ce:59:3e:9e:68:56:16:79:7c:29: 57:eb:8b:00:43:a4:8a:23:ae:67:0b:51:d8:fe:ca:8d:25:a1: f5:3d:ce:e9:bf:75:26:e4:8f:18:19:ff:29:a8:cb:fe:09:ce: 60:ad:c2:0d:a3:a4:cb:62:90:22:c9:78:ec:f4:66:06:67:eb: 41:91:fc:55:99:5c:a8:19:b0:1d:29:3a:1d:5d:41:e2:75:87: e3:9c:53:f5:25:e1:d3:15:f0:ba:74:2f:14:dd:65:75:73:6d: 51:af:0a:dc:14:16:38:18:8a:f2:47:de:ac:50:62:f2:67:49: 24:7a:e3:fd:7f:0a:af:88:95:17:3f:8c:e3:f4:2f:f5:1d:e3: 5f:40:49:41:89:18:7a:9d:57:46:46:27:3d:92:cb:2e:6d:4e: 7f:1c:1d:bd:4e:e8:65:b2:98:d6:41:fb:a1:1c:64:a1:c9:0b: 7e:1a:9e:ef:44:a5:c7:cc:53:c5:78:64:9f:7f:88:b9:1c:8f: 2c:ea:7c:c4:bf:99:37:3f:07:bf:3d:64:c1:70:11:ae:d9:ba: 2e:db:77:5f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEy5gdaGyhhi0Ak0jNowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE2MTFlZjEtMTk1ZS00OTU4LWE2YWMtZjRhMWQyY2Q4 YzhmMB4XDTI2MDIwMjAyMDAzMloXDTI2MDUwMzAxMDAzMlowLzEtMCsGA1UEAxMk YzczZmM0ZmUtNGVkNC00NGQ3LTljYjctMGFlYjMxYzQzMTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitwllZo6ZzITH2VkBPbiLBEbq4r/3nhX1eDa 1kuiK1zxK5zlFLEjk18dGlJ8GwMoMt1KcIjgZaw9OgPwqafvMllzM/EScAma3Igm QgQpfUgjNhhprj7mNDIqxbW9VLMgJ40mGwADhl/r09clErFsNQXPs3VGYCX+/oPY GsWRwSJtmX8p34ohV0EyOnAFMtZZRREM9ytlbU3UJ9/TtbqThRoban/CVxD0JpPI ljxRQ/vDYW0fhVoCBiyfSIVGnPAzoZ7mhpeAanySn+9MZ835V1vihUkVD/b64iRx zJUGQtFyO62bfOMxoJ8i20Tn4VCVOi4sLIVs6A5mvv8SoDmgMQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKIlMBBR4aAHVDHWpsH4wXR94mY+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yYTYx MWVmMS0xOTVlLTQ5NTgtYTZhYy1mNGExZDJjZDhjOGYvYmQyNGZmODctYzE3OC0z ZjBkLWExZTctNzg4Y2Y5MGE4YzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmE2MTFlZjEtMTk1ZS00OTU4LWE2 YWMtZjRhMWQyY2Q4YzhmLzJhNjExZWYxLTE5NWUtNDk1OC1hNmFjLWY0YTFkMmNk OGM4Zi5jcmwwHwYDVR0jBBgwFoAU58NNkhO9kN6+mFO2dWGXhlsnRk0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yYTYxMWVmMS0xOTVlLTQ5NTgtYTZhYy1mNGEx ZDJjZDhjOGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAAb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIa6JFkSO0PGOR9QC4hus9YXzr6vRA+4ZILQAGE0Oll+HnTL8GuZ P3zEKUhszlk+nmhWFnl8KVfriwBDpIojrmcLUdj+yo0lofU9zum/dSbkjxgZ/ymo y/4JzmCtwg2jpMtikCLJeOz0ZgZn60GR/FWZXKgZsB0pOh1dQeJ1h+OcU/Ul4dMV 8Lp0LxTdZXVzbVGvCtwUFjgYivJH3qxQYvJnSSR64/1/Cq+IlRc/jOP0L/Ud419A SUGJGHqdV0ZGJz2Syy5tTn8cHb1O6GWymNZB+6EcZKHJC34anu9EpcfMU8V4ZJ9/ iLkcjyzqfMS/mTc/B789ZMFwEa7Zui7bd18= -----END CERTIFICATE-----Generated at Mon Mar 2 01:09:11 2026 by rpki-client