$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/1ac5cf66-a393-364b-9969-db0bf2eba445.roa File: 1ac5cf66-a393-364b-9969-db0bf2eba445.roa (raw, json) Hash identifier: T/A9yii31XWZ22FHzU6CiIbz8KQLWTn/I8HxVJsQk0w= Subject key identifier: 55:59:D7:A3:58:6D:54:48:2D:A7:86:76:68:06:F8:44:D3:F5:D8:A7 Certificate issuer: /CN=badf1586-901d-41a7-b0f3-521998d53931 Certificate serial: 010D0C9F4328584E991A4F212B16796EE5002300 Authority key identifier: 17:DD:BE:D5:1B:27:91:56:B0:48:C7:7E:3D:0E:D9:4F:FA:37:AB:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/1ac5cf66-a393-364b-9969-db0bf2eba445.roa Signing time: Thu 23 Jul 2026 21:00:11 +0000 ROA not before: Thu 23 Jul 2026 21:00:11 +0000 ROA not after: Wed 21 Oct 2026 21:00:11 +0000 asID: 213438 IP address blocks: 2604:be0:ffe3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/badf1586-901d-41a7-b0f3-521998d53931.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/badf1586-901d-41a7-b0f3-521998d53931.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:99:1a:4f:21:2b:16:79:6e:e5:00:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=badf1586-901d-41a7-b0f3-521998d53931 Validity Not Before: Jul 23 21:00:11 2026 GMT Not After : Oct 21 21:00:11 2026 GMT Subject: CN=951da709-e47b-4291-bb6d-53607395f64b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3f:80:26:4b:f8:80:c3:39:bf:0e:c2:96:1c: 99:c3:eb:a9:66:b4:95:93:d3:37:40:44:62:dd:05: 39:2a:15:04:de:53:f9:6e:56:71:9c:17:e0:00:d8: 67:75:25:01:72:d0:7f:b8:eb:89:29:71:6a:e6:48: d6:04:9a:05:62:bd:b8:a4:80:44:c2:eb:3f:d0:ca: 75:96:64:66:7b:00:da:5c:8d:4c:16:28:e9:b3:30: b1:b8:bf:42:24:49:08:4c:77:f2:6c:91:8d:0a:c2: 32:f2:98:0a:52:3a:99:8f:1c:94:ef:eb:e9:e8:9d: 9a:0b:ec:5f:4c:ae:4b:86:fe:ad:47:9d:f5:74:a1: 9b:6e:56:b9:8b:96:30:e6:e9:f7:1b:2f:9a:6b:35: 2d:f0:4f:85:e3:53:07:d1:5a:b5:ff:ae:00:21:a3: 99:f9:fd:21:06:20:e8:70:16:93:11:0c:b0:10:77: f3:4b:89:c7:d2:e6:27:34:59:79:4b:c5:1b:f0:ba: 36:02:3e:51:5d:b0:11:0e:75:20:40:e8:fa:62:79: 2d:80:46:e0:15:47:84:1e:1c:10:b4:f5:da:f6:19: e1:a3:ed:1c:39:97:08:61:0c:10:c3:80:85:e5:a0: 6c:42:bd:b4:ae:47:79:5e:34:6b:64:f4:04:98:57: 70:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:59:D7:A3:58:6D:54:48:2D:A7:86:76:68:06:F8:44:D3:F5:D8:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/1ac5cf66-a393-364b-9969-db0bf2eba445.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/badf1586-901d-41a7-b0f3-521998d53931.crl X509v3 Authority Key Identifier: keyid:17:DD:BE:D5:1B:27:91:56:B0:48:C7:7E:3D:0E:D9:4F:FA:37:AB:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931.cer sbgp-ipAddrBlock: critical IPv6: 2604:be0:ffe3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:27:ac:45:9a:d0:94:0b:f7:28:0e:78:d2:29:a1:a3:96:96: 0e:0e:1c:1a:64:97:c3:a4:c5:55:0e:22:77:b6:e8:bf:3d:47: 5b:25:d9:6d:f1:e1:88:17:9e:72:7b:8c:77:96:dc:e3:59:8d: e7:f6:8e:7b:9a:bf:75:21:5c:54:0f:28:86:ec:9a:c8:6a:7c: f9:20:ab:36:65:83:92:66:d1:8e:22:27:73:ac:6a:ae:bf:1b: 23:d5:b7:51:85:59:26:d6:4c:49:eb:83:6a:4d:37:a2:0a:ac: 63:af:72:ea:a7:71:10:8d:91:d8:9e:4a:90:dc:0b:b6:bc:cc: 3a:b2:35:02:44:a3:f1:18:b4:02:5d:cd:d4:6f:7c:b3:bd:6d: 74:42:5c:cb:0a:59:55:ac:1b:11:5c:fc:b8:79:c4:78:58:c9: 97:f1:12:00:0f:e2:67:d7:08:2f:2c:47:62:c4:9c:73:43:c7: 2d:a0:86:36:9d:0c:ea:7c:61:14:c3:3e:00:85:ac:c5:d0:0e: 85:6d:c3:34:2e:46:0d:fb:5a:f6:6d:f9:3c:0f:a7:1a:ee:aa: 09:7c:7e:97:4f:01:a7:5a:ab:64:89:48:84:f2:10:83:99:7f: df:4b:7b:36:34:1f:e9:f8:b6:7d:c8:ba:88:23:94:dc:b3:98: ab:ff:78:8a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6ZGk8hKxZ5buUAIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFkZjE1ODYtOTAxZC00MWE3LWIwZjMtNTIxOTk4ZDUz OTMxMB4XDTI2MDcyMzIxMDAxMVoXDTI2MTAyMTIxMDAxMVowLzEtMCsGA1UEAxMk OTUxZGE3MDktZTQ3Yi00MjkxLWJiNmQtNTM2MDczOTVmNjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgj+AJkv4gMM5vw7ClhyZw+upZrSVk9M3QERi 3QU5KhUE3lP5blZxnBfgANhndSUBctB/uOuJKXFq5kjWBJoFYr24pIBEwus/0Mp1 lmRmewDaXI1MFijpszCxuL9CJEkITHfybJGNCsIy8pgKUjqZjxyU7+vp6J2aC+xf TK5Lhv6tR531dKGbbla5i5Yw5un3Gy+aazUt8E+F41MH0Vq1/64AIaOZ+f0hBiDo cBaTEQywEHfzS4nH0uYnNFl5S8Ub8Lo2Aj5RXbARDnUgQOj6YnktgEbgFUeEHhwQ tPXa9hnho+0cOZcIYQwQw4CF5aBsQr20rkd5XjRrZPQEmFdwewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFVZ16NYbVRILaeGdmgG+ETT9dinMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYWRm MTU4Ni05MDFkLTQxYTctYjBmMy01MjE5OThkNTM5MzEvMWFjNWNmNjYtYTM5My0z NjRiLTk5NjktZGIwYmYyZWJhNDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmFkZjE1ODYtOTAxZC00MWE3LWIw ZjMtNTIxOTk4ZDUzOTMxL2JhZGYxNTg2LTkwMWQtNDFhNy1iMGYzLTUyMTk5OGQ1 MzkzMS5jcmwwHwYDVR0jBBgwFoAUF92+1RsnkVawSMd+PQ7ZT/o3q54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYWRmMTU4Ni05MDFkLTQxYTctYjBmMy01MjE5 OThkNTM5MzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQL4P/j MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEwnrEWa0JQL9ygOeNIpoaOWlg4OHBpkl8OkxVUOIne26L89R1sl 2W3x4YgXnnJ7jHeW3ONZjef2jnuav3UhXFQPKIbsmshqfPkgqzZlg5Jm0Y4iJ3Os aq6/GyPVt1GFWSbWTEnrg2pNN6IKrGOvcuqncRCNkdieSpDcC7a8zDqyNQJEo/EY tAJdzdRvfLO9bXRCXMsKWVWsGxFc/Lh5xHhYyZfxEgAP4mfXCC8sR2LEnHNDxy2g hjadDOp8YRTDPgCFrMXQDoVtwzQuRg37WvZt+TwPpxruqgl8fpdPAadaq2SJSITy EIOZf99LezY0H+n4tn3IuogjlNyzmKv/eIo= -----END CERTIFICATE-----Generated at Wed Jul 29 16:36:46 2026 by rpki-client