$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/bf7f3f32-7977-3022-acfe-63176d0b6222.roa File: bf7f3f32-7977-3022-acfe-63176d0b6222.roa (raw, json) Hash identifier: DXc2bPpa+lAmmor4udtGEUGzeUjSQl11bNTt7XH1l4k= Subject key identifier: E5:CB:E8:7C:4E:D4:52:0E:8C:BE:30:90:BF:FB:21:BA:09:6A:BE:76 Certificate issuer: /CN=30d9e44e-9a2f-4ae3-b80b-550f90f15f64 Certificate serial: 010D0C9F4328584D4D5A67D167032ACDE4899340 Authority key identifier: 2B:4C:C1:D3:E1:35:EC:85:A4:83:C5:88:B9:DF:2C:74:F9:14:31:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/bf7f3f32-7977-3022-acfe-63176d0b6222.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 63290 IP address blocks: 2605:c880::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:67:d1:67:03:2a:cd:e4:89:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30d9e44e-9a2f-4ae3-b80b-550f90f15f64 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=6dd8bed3-0b8a-47ae-853d-dd3ec5abd931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e2:a9:d1:6c:54:3b:a8:ab:9b:1d:e1:0d:3d: 11:b5:74:8f:47:6c:8d:56:a4:34:66:1a:48:54:31: 41:af:bf:8d:06:47:da:13:2c:66:de:a5:27:4d:27: b2:66:a9:2b:e1:7c:2a:f5:f7:48:23:d5:6f:65:41: 1e:c7:54:e9:c1:88:9d:68:a0:06:f2:7e:cb:f1:08: 72:e3:81:f9:43:5e:4e:71:fd:3a:44:a4:07:f2:ee: e3:5b:8c:19:2b:06:fe:0f:87:a1:02:b2:c4:85:b1: b3:d8:4d:73:0c:dc:a1:1b:99:27:39:ea:53:66:8f: 49:67:ab:b9:55:1c:45:af:17:a5:a2:56:46:88:37: 61:22:f6:a8:97:d9:ce:a8:99:48:af:14:87:10:12: 75:ff:d0:dd:34:78:ba:2d:cf:ba:5e:32:0c:d3:e9: 63:c5:10:b6:79:9d:3b:3e:23:5e:ce:04:89:4b:0b: c5:32:75:41:50:8e:74:53:5a:db:b3:b5:33:6c:8b: bb:2c:54:6d:13:d9:c4:66:fc:5b:6f:7d:8b:6e:cd: 65:c2:86:f1:f9:e3:00:2c:dd:d0:0f:09:e8:2b:03: ea:a5:7c:68:27:0e:15:fc:be:2d:a6:94:90:79:7b: 91:4d:41:c1:f2:65:6d:75:ad:3b:29:9c:a8:95:d7: b6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:CB:E8:7C:4E:D4:52:0E:8C:BE:30:90:BF:FB:21:BA:09:6A:BE:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/bf7f3f32-7977-3022-acfe-63176d0b6222.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.crl X509v3 Authority Key Identifier: keyid:2B:4C:C1:D3:E1:35:EC:85:A4:83:C5:88:B9:DF:2C:74:F9:14:31:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.cer sbgp-ipAddrBlock: critical IPv6: 2605:c880::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:52:a8:a4:cc:2e:6b:c0:d6:a6:6b:a9:7f:00:6a:76:5a:e5: 6b:79:f5:8f:ac:11:9c:55:88:62:02:cc:0f:c7:16:25:99:8d: b7:71:e4:1e:ad:c2:a0:e5:0f:fb:b3:ca:1a:3c:fa:31:5c:df: ec:87:e7:44:34:62:da:9e:2d:30:b6:ac:7a:c5:6b:3d:2b:25: 97:d8:c8:8c:76:e4:6e:ac:7f:2f:e1:50:21:30:c6:73:fd:bc: 4d:0e:d7:c8:19:b9:4e:b2:19:18:f0:5b:6b:fc:1a:ca:08:f8: fa:d6:3a:07:8d:f9:18:d0:e4:25:db:41:30:7d:92:7e:81:83: 25:aa:6d:23:e5:65:b6:ee:ba:4b:ea:8b:02:72:c0:30:7d:bc: bf:7f:43:21:7b:b2:85:bd:51:1f:1b:84:a0:d3:50:3b:17:74: 9d:81:e6:f3:9c:03:09:96:b0:b4:08:e1:3d:f5:7c:d0:7d:fb: 76:ef:e3:a6:8d:82:e3:7d:de:6c:56:fb:5b:04:dd:b3:28:8a: dd:81:ba:67:f2:56:bc:d3:37:60:97:98:e5:69:56:7d:c6:fe: 75:c2:07:e8:e3:88:5d:de:04:70:ed:2b:ad:ef:41:61:7f:93: 31:b9:1d:4c:a1:24:6e:23:4d:bd:cf:63:c0:43:f5:78:71:6b: bf:11:d7:42 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1NWmfRZwMqzeSJk0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzBkOWU0NGUtOWEyZi00YWUzLWI4MGItNTUwZjkwZjE1 ZjY0MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk NmRkOGJlZDMtMGI4YS00N2FlLTg1M2QtZGQzZWM1YWJkOTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOKp0WxUO6irmx3hDT0RtXSPR2yNVqQ0ZhpI VDFBr7+NBkfaEyxm3qUnTSeyZqkr4Xwq9fdII9VvZUEex1TpwYidaKAG8n7L8Qhy 44H5Q15Ocf06RKQH8u7jW4wZKwb+D4ehArLEhbGz2E1zDNyhG5knOepTZo9JZ6u5 VRxFrxelolZGiDdhIvaol9nOqJlIrxSHEBJ1/9DdNHi6Lc+6XjIM0+ljxRC2eZ07 PiNezgSJSwvFMnVBUI50U1rbs7UzbIu7LFRtE9nEZvxbb32Lbs1lwobx+eMALN3Q DwnoKwPqpXxoJw4V/L4tppSQeXuRTUHB8mVtda07KZyolde2ZwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOXL6HxO1FIOjL4wkL/7IboJar52MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zMGQ5 ZTQ0ZS05YTJmLTRhZTMtYjgwYi01NTBmOTBmMTVmNjQvYmY3ZjNmMzItNzk3Ny0z MDIyLWFjZmUtNjMxNzZkMGI2MjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzBkOWU0NGUtOWEyZi00YWUzLWI4 MGItNTUwZjkwZjE1ZjY0LzMwZDllNDRlLTlhMmYtNGFlMy1iODBiLTU1MGY5MGYx NWY2NC5jcmwwHwYDVR0jBBgwFoAUK0zB0+E17IWkg8WIud8sdPkUMb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zMGQ5ZTQ0ZS05YTJmLTRhZTMtYjgwYi01NTBm OTBmMTVmNjQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXIgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAhUqikzC5rwNama6l/AGp2WuVrefWPrBGcVYhiAswPxxYlmY23ceQe rcKg5Q/7s8oaPPoxXN/sh+dENGLani0wtqx6xWs9KyWX2MiMduRurH8v4VAhMMZz /bxNDtfIGblOshkY8Ftr/BrKCPj61joHjfkY0OQl20EwfZJ+gYMlqm0j5WW27rpL 6osCcsAwfby/f0Mhe7KFvVEfG4Sg01A7F3SdgebznAMJlrC0COE99XzQfft27+Om jYLjfd5sVvtbBN2zKIrdgbpn8la80zdgl5jlaVZ9xv51wgfo44hd3gRw7Sut70Fh f5MxuR1MoSRuI029z2PAQ/V4cWu/EddC -----END CERTIFICATE-----Generated at Fri Apr 17 16:42:14 2026 by rpki-client