$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/bd0731b8-b4cf-32f2-9183-9252be89bfab.roa File: bd0731b8-b4cf-32f2-9183-9252be89bfab.roa (raw, json) Hash identifier: As6pb5VB+wc39amb0S3oDtW2hxB9nIaQUg0scNGqZWU= Subject key identifier: B5:E6:D3:0F:4D:0B:5B:16:8C:77:FD:40:D3:88:36:E2:C3:D7:0D:1F Certificate issuer: /CN=2ce98e57-da60-49a3-b167-e6998e0d2945 Certificate serial: 010D0C9F4328584E070084A19E5C44C750E160C0 Authority key identifier: 41:BA:59:99:07:6F:1E:07:D0:EF:E6:D8:C8:88:A0:DB:40:B5:3D:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/bd0731b8-b4cf-32f2-9183-9252be89bfab.roa Signing time: Mon 01 Jun 2026 13:00:10 +0000 ROA not before: Mon 01 Jun 2026 13:00:10 +0000 ROA not after: Sun 30 Aug 2026 13:00:10 +0000 asID: 16509 IP address blocks: 2604:29a0:f000::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:07:00:84:a1:9e:5c:44:c7:50:e1:60:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ce98e57-da60-49a3-b167-e6998e0d2945 Validity Not Before: Jun 1 13:00:10 2026 GMT Not After : Aug 30 13:00:10 2026 GMT Subject: CN=c419e303-6e14-493d-b65a-93b1866e7ae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1c:7a:72:68:12:84:9e:67:36:c5:8b:d7:15: fe:d3:d9:fd:93:c9:a3:ac:17:8f:ca:af:d0:68:38: 07:cc:94:d2:d4:b7:97:06:30:57:25:d4:ad:1e:4e: 44:7c:f0:9b:48:7d:c2:59:0d:d3:e8:4d:50:ae:3b: 0e:17:ea:60:0f:ad:93:12:b8:fc:bf:01:68:95:85: 2d:5e:3d:95:c6:4c:af:7a:28:df:db:a6:d8:c1:83: fc:7e:b7:20:6e:aa:36:e5:31:97:5c:69:dd:c1:31: d1:c6:1c:50:1e:32:b4:1d:e2:61:0e:07:b3:82:5b: fa:9a:d3:5d:a9:a0:52:68:f7:5e:cd:3a:2c:c2:79: 60:db:f3:f4:17:7f:2b:89:04:57:c9:85:16:54:26: 81:78:5a:9d:87:a5:66:8a:9e:53:cb:45:f2:d3:bc: ab:3a:dd:bb:d6:c9:d9:18:3e:cb:7c:8e:3b:71:59: e7:31:82:39:ca:1a:95:01:04:98:c7:0e:fe:b4:d6: 1f:48:c1:5f:cf:1e:0b:58:2c:34:a4:4b:6a:ff:46: 83:bf:47:00:95:4a:7c:40:b4:db:78:03:ef:bf:1a: 9b:9b:5b:c5:54:84:63:20:2b:a8:c1:92:af:98:eb: 74:22:68:4c:a6:c8:a3:58:8f:8e:dc:c2:08:ee:28: 0b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E6:D3:0F:4D:0B:5B:16:8C:77:FD:40:D3:88:36:E2:C3:D7:0D:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/bd0731b8-b4cf-32f2-9183-9252be89bfab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.crl X509v3 Authority Key Identifier: keyid:41:BA:59:99:07:6F:1E:07:D0:EF:E6:D8:C8:88:A0:DB:40:B5:3D:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer sbgp-ipAddrBlock: critical IPv6: 2604:29a0:f000::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:be:4c:d3:f1:f0:71:ce:ef:c4:bb:6b:e3:29:d9:81:b2:9e: 25:68:6b:8e:f6:30:d3:3d:46:b4:a3:3b:52:84:7f:42:66:c9: 6d:8a:ee:de:6a:55:88:44:fe:f4:e5:27:6f:7e:dd:04:4f:bf: a5:21:5f:a7:e1:ff:19:07:2e:ee:a3:f5:02:0a:e0:86:54:eb: bc:5b:f5:1f:60:6b:d5:b9:2d:36:12:ac:76:55:91:ba:a9:b0: 2e:64:e8:db:70:cb:ff:3a:a1:6e:9f:b1:f3:ba:c7:5d:c4:4d: d2:be:56:48:cc:eb:95:0d:f0:d8:0b:fb:c0:0b:ce:6b:86:79: 04:4b:08:33:da:26:d4:3f:ce:3a:b6:72:79:67:1e:70:fd:63: 9f:f3:f6:42:96:39:60:57:cc:79:eb:4d:4f:ce:01:d0:aa:0c: dd:9b:01:09:71:6a:17:9a:eb:d1:0c:85:22:50:0e:74:2b:72: a1:19:f5:99:da:62:74:b8:3f:a4:fc:69:a6:ce:da:b2:7c:76: 9e:64:ae:c9:bb:40:70:17:99:04:ed:34:bc:b6:a3:4f:cd:0d: ad:0b:cb:20:30:f8:b9:75:46:a0:48:c3:2e:24:a1:71:dd:d1: 9e:59:f1:94:4e:3c:78:d7:14:f2:93:b5:2a:e8:d0:96:7b:ee: fe:6a:09:60 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4HAIShnlxEx1DhYMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNlOThlNTctZGE2MC00OWEzLWIxNjctZTY5OThlMGQy OTQ1MB4XDTI2MDYwMTEzMDAxMFoXDTI2MDgzMDEzMDAxMFowLzEtMCsGA1UEAxMk YzQxOWUzMDMtNmUxNC00OTNkLWI2NWEtOTNiMTg2NmU3YWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBx6cmgShJ5nNsWL1xX+09n9k8mjrBePyq/Q aDgHzJTS1LeXBjBXJdStHk5EfPCbSH3CWQ3T6E1QrjsOF+pgD62TErj8vwFolYUt Xj2Vxkyveijf26bYwYP8frcgbqo25TGXXGndwTHRxhxQHjK0HeJhDgezglv6mtNd qaBSaPdezToswnlg2/P0F38riQRXyYUWVCaBeFqdh6Vmip5Ty0Xy07yrOt271snZ GD7LfI47cVnnMYI5yhqVAQSYxw7+tNYfSMFfzx4LWCw0pEtq/0aDv0cAlUp8QLTb eAPvvxqbm1vFVIRjICuowZKvmOt0ImhMpsijWI+O3MII7igLJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLXm0w9NC1sWjHf9QNOINuLD1w0fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yY2U5 OGU1Ny1kYTYwLTQ5YTMtYjE2Ny1lNjk5OGUwZDI5NDUvYmQwNzMxYjgtYjRjZi0z MmYyLTkxODMtOTI1MmJlODliZmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmNlOThlNTctZGE2MC00OWEzLWIx NjctZTY5OThlMGQyOTQ1LzJjZTk4ZTU3LWRhNjAtNDlhMy1iMTY3LWU2OTk4ZTBk Mjk0NS5jcmwwHwYDVR0jBBgwFoAUQbpZmQdvHgfQ7+bYyIig20C1PXkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yY2U5OGU1Ny1kYTYwLTQ5YTMtYjE2Ny1lNjk5 OGUwZDI5NDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgQpoPAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFm+TNPx8HHO78S7a+Mp2YGyniVoa472MNM9RrSjO1KEf0JmyW2K 7t5qVYhE/vTlJ29+3QRPv6UhX6fh/xkHLu6j9QIK4IZU67xb9R9ga9W5LTYSrHZV kbqpsC5k6Ntwy/86oW6fsfO6x13ETdK+VkjM65UN8NgL+8ALzmuGeQRLCDPaJtQ/ zjq2cnlnHnD9Y5/z9kKWOWBXzHnrTU/OAdCqDN2bAQlxahea69EMhSJQDnQrcqEZ 9ZnaYnS4P6T8aabO2rJ8dp5krsm7QHAXmQTtNLy2o0/NDa0LyyAw+Ll1RqBIwy4k oXHd0Z5Z8ZROPHjXFPKTtSro0JZ77v5qCWA= -----END CERTIFICATE-----Generated at Sat Jun 13 10:01:38 2026 by rpki-client