$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/bf49e12d-a2b6-3ee5-9d20-355ee805e407.roa File: bf49e12d-a2b6-3ee5-9d20-355ee805e407.roa (raw, json) Hash identifier: X6wS2NcAHl60CYnLPNwDwIaKKQ2fxDDB9jYd99BUsuY= Subject key identifier: E9:28:E3:31:7A:21:B8:65:D2:98:68:20:D6:5D:B3:70:70:0A:AD:B2 Certificate issuer: /CN=2d448124-6e45-40ca-b551-28ef364c99c7 Certificate serial: 010D0C9F4328584CFC8229CBF3602AA2BFCE0B20 Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/bf49e12d-a2b6-3ee5-9d20-355ee805e407.roa Signing time: Thu 26 Feb 2026 02:00:32 +0000 ROA not before: Thu 26 Feb 2026 02:00:32 +0000 ROA not after: Wed 27 May 2026 01:00:32 +0000 asID: 16509 IP address blocks: 2620:a0:200d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fc:82:29:cb:f3:60:2a:a2:bf:ce:0b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7 Validity Not Before: Feb 26 02:00:32 2026 GMT Not After : May 27 01:00:32 2026 GMT Subject: CN=7b31c5cd-0938-4bc9-9006-90eddded5b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9f:08:af:4b:d0:77:02:06:87:4e:3e:b8:da: 7f:43:d4:74:e1:de:ba:18:37:2e:b2:04:51:91:de: 0b:f6:51:ab:c5:5f:95:41:ca:3e:cb:5f:15:49:42: 3b:26:d2:cb:61:15:7e:5d:2d:6b:0f:fa:ba:cc:d6: 72:e1:1e:53:86:04:e8:62:e7:f3:8e:cb:76:39:4b: 34:2a:43:ee:98:7c:d4:80:97:69:fb:0c:86:ad:62: dc:3f:09:be:d1:d0:35:d1:ff:f5:be:b8:da:df:cf: 1b:c8:b4:01:68:1b:c1:9d:4e:1b:f9:d4:d3:54:b9: 32:0e:76:c0:93:e8:a4:9e:41:99:50:83:77:c0:98: b7:c2:22:13:79:0a:26:ac:65:66:72:d3:a9:2a:be: a2:7b:aa:f4:45:44:3c:e9:ec:fb:46:0e:d3:cc:0b: 4f:6e:56:3e:5e:45:9f:a5:b7:8f:75:f5:8a:d6:cd: c6:22:5f:68:6d:44:eb:05:41:9f:6e:a0:ac:1d:c8: ff:a6:66:47:41:cf:db:5a:9e:93:ca:19:1b:ff:82: d5:73:6a:74:28:bd:4b:26:2c:42:2d:ea:d4:62:95: b5:af:95:d2:c4:2d:6e:ae:4b:e0:09:71:d3:3e:f2: e3:f6:6d:a1:49:de:f3:29:27:47:1b:3e:8f:60:d3: 65:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:28:E3:31:7A:21:B8:65:D2:98:68:20:D6:5D:B3:70:70:0A:AD:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/bf49e12d-a2b6-3ee5-9d20-355ee805e407.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl X509v3 Authority Key Identifier: keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer sbgp-ipAddrBlock: critical IPv6: 2620:a0:200d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:95:2d:78:d4:c1:e2:27:68:60:c3:bd:8d:e3:90:57:ec:46: d4:71:04:88:0c:e5:dd:b9:89:77:77:7d:9b:ae:14:40:63:b2: 09:1e:92:db:aa:39:50:9c:4c:b9:d7:17:fa:cf:86:8d:6e:ec: 39:e6:72:81:9d:fc:6f:7d:cc:a8:ad:e4:cc:4f:22:0e:7a:6a: 56:b8:33:bd:d2:a7:73:c2:78:67:83:00:96:27:1a:37:88:ee: 8f:7a:42:3b:3c:f8:b1:86:c5:94:07:7c:5e:d8:0d:45:6b:88: 46:fa:6a:3f:8b:7a:66:16:56:0a:17:b8:17:5d:22:09:f6:6b: 91:16:4d:95:a0:36:14:73:7b:cd:60:4d:8e:34:39:b3:e8:5a: e9:d3:bc:af:43:62:06:48:c8:64:d8:8f:5c:96:8a:1b:b5:32: c8:28:30:a9:14:2c:0e:92:02:3b:e3:5d:d0:59:ee:07:31:14: 1a:a9:ce:48:fb:3b:25:15:5c:e6:b1:74:d9:fe:74:6a:b6:03: 2c:8a:65:65:ac:b4:b8:5a:7c:ba:56:01:f0:20:7a:ed:ab:88: 83:ef:0a:81:03:7d:a2:7f:06:ea:63:1d:f4:58:c0:67:62:02: cf:92:c0:88:ea:59:94:ec:3f:6c:d6:77:d5:4f:45:e1:6e:33: f0:18:64:cb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEz8ginL82Aqor/OCyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ0NDgxMjQtNmU0NS00MGNhLWI1NTEtMjhlZjM2NGM5 OWM3MB4XDTI2MDIyNjAyMDAzMloXDTI2MDUyNzAxMDAzMlowLzEtMCsGA1UEAxMk N2IzMWM1Y2QtMDkzOC00YmM5LTkwMDYtOTBlZGRkZWQ1YjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmp8Ir0vQdwIGh04+uNp/Q9R04d66GDcusgRR kd4L9lGrxV+VQco+y18VSUI7JtLLYRV+XS1rD/q6zNZy4R5ThgToYufzjst2OUs0 KkPumHzUgJdp+wyGrWLcPwm+0dA10f/1vrja388byLQBaBvBnU4b+dTTVLkyDnbA k+iknkGZUIN3wJi3wiITeQomrGVmctOpKr6ie6r0RUQ86ez7Rg7TzAtPblY+XkWf pbePdfWK1s3GIl9obUTrBUGfbqCsHcj/pmZHQc/bWp6Tyhkb/4LVc2p0KL1LJixC LerUYpW1r5XSxC1urkvgCXHTPvLj9m2hSd7zKSdHGz6PYNNlmQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOko4zF6Ibhl0phoINZds3BwCq2yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yZDQ0 ODEyNC02ZTQ1LTQwY2EtYjU1MS0yOGVmMzY0Yzk5YzcvYmY0OWUxMmQtYTJiNi0z ZWU1LTlkMjAtMzU1ZWU4MDVlNDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmQ0NDgxMjQtNmU0NS00MGNhLWI1 NTEtMjhlZjM2NGM5OWM3LzJkNDQ4MTI0LTZlNDUtNDBjYS1iNTUxLTI4ZWYzNjRj OTljNy5jcmwwHwYDVR0jBBgwFoAUJX0bU4WU/K2RPsORNHt3eV5Y9aYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yZDQ0ODEyNC02ZTQ1LTQwY2EtYjU1MS0yOGVm MzY0Yzk5YzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAoCAN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACuVLXjUweInaGDDvY3jkFfsRtRxBIgM5d25iXd3fZuuFEBjsgke ktuqOVCcTLnXF/rPho1u7DnmcoGd/G99zKit5MxPIg56ala4M73Sp3PCeGeDAJYn GjeI7o96Qjs8+LGGxZQHfF7YDUVriEb6aj+LemYWVgoXuBddIgn2a5EWTZWgNhRz e81gTY40ObPoWunTvK9DYgZIyGTYj1yWihu1MsgoMKkULA6SAjvjXdBZ7gcxFBqp zkj7OyUVXOaxdNn+dGq2AyyKZWWstLhafLpWAfAgeu2riIPvCoEDfaJ/BupjHfRY wGdiAs+SwIjqWZTsP2zWd9VPReFuM/AYZMs= -----END CERTIFICATE-----Generated at Mon Mar 2 00:28:03 2026 by rpki-client