$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bf0d8f5a-37be-31d2-bc71-22237b74a3e6.roa File: bf0d8f5a-37be-31d2-bc71-22237b74a3e6.roa (raw, json) Hash identifier: gpgkJkZ9CpNMZlS9BCIRAupnqJVIToIQfDZ+5x2YCG8= Subject key identifier: D3:38:C8:44:F0:F4:9E:F4:66:27:BE:5A:BF:3A:DB:39:18:6C:71:51 Certificate issuer: /CN=bc3bcc6d-6679-419c-8300-bdebdffc8ffd Certificate serial: 010D0C9F4328584C9ACC4735D9ECFB700D0D5880 Authority key identifier: CC:59:79:C9:D5:F2:E0:6A:F8:9F:25:4F:78:84:1B:76:E3:65:E4:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bf0d8f5a-37be-31d2-bc71-22237b74a3e6.roa Signing time: Thu 22 Jan 2026 02:00:31 +0000 ROA not before: Thu 22 Jan 2026 02:00:31 +0000 ROA not after: Wed 22 Apr 2026 01:00:31 +0000 asID: 398698 IP address blocks: 2605:eac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9a:cc:47:35:d9:ec:fb:70:0d:0d:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc3bcc6d-6679-419c-8300-bdebdffc8ffd Validity Not Before: Jan 22 02:00:31 2026 GMT Not After : Apr 22 01:00:31 2026 GMT Subject: CN=da17ffe1-f37c-4e39-8043-60177717edd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:79:a2:8d:55:6f:c4:c2:5c:c2:35:be:d0:9f: c7:af:37:80:bf:cc:52:43:fd:84:d8:64:77:76:27: 52:72:a1:f4:27:06:aa:38:52:af:77:a8:44:97:2b: 92:3e:7b:27:0b:42:29:da:3b:6d:e9:7b:01:13:35: 07:94:90:5c:f3:60:26:e6:72:a9:50:86:dc:dc:fa: 00:8c:b9:b0:eb:47:3b:e6:8d:cf:71:b0:a9:54:40: 51:fc:de:03:aa:fa:38:10:db:9f:83:dd:80:59:1b: 19:82:1c:8c:06:98:21:39:e7:40:d7:ad:8c:1f:1f: d9:ce:39:b1:97:7f:c1:e2:0f:a4:77:ae:1a:c2:50: 4c:f4:7f:c5:a3:fc:c7:38:cb:72:f2:06:ed:8f:67: 84:be:7e:da:44:eb:4e:a0:26:0a:c4:48:1d:9f:c4: 10:52:d5:8b:c5:8f:7c:5e:61:d2:4c:70:3d:04:8d: bf:4b:77:e0:d5:c9:51:15:54:ad:71:bf:d6:08:a5: dc:39:d5:02:3f:05:ed:fa:1c:dc:e5:52:5d:e5:7b: 2d:ef:3a:d6:bc:c8:ca:2f:6a:6e:ca:ed:7b:b0:8d: 8b:15:61:be:67:ea:de:e1:ff:db:88:99:94:c6:87: b1:a3:27:78:36:8b:0c:25:d0:c3:7e:f1:25:67:af: 79:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:38:C8:44:F0:F4:9E:F4:66:27:BE:5A:BF:3A:DB:39:18:6C:71:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bf0d8f5a-37be-31d2-bc71-22237b74a3e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.crl X509v3 Authority Key Identifier: keyid:CC:59:79:C9:D5:F2:E0:6A:F8:9F:25:4F:78:84:1B:76:E3:65:E4:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.cer sbgp-ipAddrBlock: critical IPv6: 2605:eac0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:38:17:f4:1b:ef:c4:70:32:61:60:22:6d:be:09:2e:bb:fe: 9f:89:00:d8:65:e1:5a:23:00:9d:54:1d:1b:f5:9f:40:c6:a8: 5f:32:db:26:3b:bc:d8:a2:6b:5e:cc:c8:e3:2f:d6:87:56:99: bc:5f:f0:a1:eb:10:c3:ed:78:8e:85:17:03:c9:a0:d9:6b:00: 43:14:6d:b8:ad:c3:a7:4a:dd:32:c5:f9:88:41:dd:17:85:99: e4:c8:1b:d0:ae:78:dd:b4:76:57:0c:2c:9b:fa:7e:32:34:01: 31:39:bc:9b:af:e1:44:04:6c:18:d1:f4:51:7d:c2:e9:8c:7f: 52:1f:fd:9f:3d:d2:53:f5:00:90:1d:53:96:7f:cb:e7:b1:5b: cc:5d:c5:09:7e:9e:70:ae:55:59:39:6c:3c:ad:8a:e8:38:f4: 37:b6:cd:0f:57:85:d0:9e:46:01:ab:96:d9:3e:4f:42:18:94: 91:b0:99:54:4d:7d:48:53:da:d5:40:34:bd:70:86:0c:07:2c: bc:92:28:b4:b0:e5:23:ab:09:cd:14:5a:9f:a9:56:3b:f2:65: 71:e7:88:3c:41:58:f5:c4:65:d7:d6:f7:46:be:c0:bf:61:d2: 25:1f:02:50:db:4a:a8:f0:3d:bb:0d:be:6b:17:e5:5a:47:88: cf:7d:c0:b7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEyazEc12ez7cA0NWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzYmNjNmQtNjY3OS00MTljLTgzMDAtYmRlYmRmZmM4 ZmZkMB4XDTI2MDEyMjAyMDAzMVoXDTI2MDQyMjAxMDAzMVowLzEtMCsGA1UEAxMk ZGExN2ZmZTEtZjM3Yy00ZTM5LTgwNDMtNjAxNzc3MTdlZGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnmijVVvxMJcwjW+0J/HrzeAv8xSQ/2E2GR3 didScqH0JwaqOFKvd6hElyuSPnsnC0Ip2jtt6XsBEzUHlJBc82Am5nKpUIbc3PoA jLmw60c75o3PcbCpVEBR/N4Dqvo4ENufg92AWRsZghyMBpghOedA162MHx/Zzjmx l3/B4g+kd64awlBM9H/Fo/zHOMty8gbtj2eEvn7aROtOoCYKxEgdn8QQUtWLxY98 XmHSTHA9BI2/S3fg1clRFVStcb/WCKXcOdUCPwXt+hzc5VJd5Xst7zrWvMjKL2pu yu17sI2LFWG+Z+re4f/biJmUxoexoyd4NosMJdDDfvElZ695twIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNM4yETw9J70Zie+Wr862zkYbHFRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iYzNi Y2M2ZC02Njc5LTQxOWMtODMwMC1iZGViZGZmYzhmZmQvYmYwZDhmNWEtMzdiZS0z MWQyLWJjNzEtMjIyMzdiNzRhM2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYmMzYmNjNmQtNjY3OS00MTljLTgz MDAtYmRlYmRmZmM4ZmZkL2JjM2JjYzZkLTY2NzktNDE5Yy04MzAwLWJkZWJkZmZj OGZmZC5jcmwwHwYDVR0jBBgwFoAUzFl5ydXy4Gr4nyVPeIQbduNl5EkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iYzNiY2M2ZC02Njc5LTQxOWMtODMwMC1iZGVi ZGZmYzhmZmQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXqwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB4OBf0G+/EcDJhYCJtvgkuu/6fiQDYZeFaIwCdVB0b9Z9AxqhfMtsm O7zYomtezMjjL9aHVpm8X/Ch6xDD7XiOhRcDyaDZawBDFG24rcOnSt0yxfmIQd0X hZnkyBvQrnjdtHZXDCyb+n4yNAExObybr+FEBGwY0fRRfcLpjH9SH/2fPdJT9QCQ HVOWf8vnsVvMXcUJfp5wrlVZOWw8rYroOPQ3ts0PV4XQnkYBq5bZPk9CGJSRsJlU TX1IU9rVQDS9cIYMByy8kii0sOUjqwnNFFqfqVY78mVx54g8QVj1xGXX1vdGvsC/ YdIlHwJQ20qo8D27Db5rF+VaR4jPfcC3 -----END CERTIFICATE-----Generated at Mon Mar 2 01:51:02 2026 by rpki-client