$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7115dbdf-c5dc-4cad-b25b-497eb629bafa/bf849cbd-eb7d-3ee3-bbed-3fa51438f244.roa File: bf849cbd-eb7d-3ee3-bbed-3fa51438f244.roa (raw, json) Hash identifier: +d0h+/m1kQBQ1ivB5eAwiWQJcMiDEo/iThGpsHNCDew= Subject key identifier: E1:1A:53:42:0B:68:13:49:9A:46:30:DA:F0:CC:93:87:C4:E0:EC:87 Certificate issuer: /CN=7115dbdf-c5dc-4cad-b25b-497eb629bafa Certificate serial: 010D0C9F4328584D2A74E4D2D7AC32F24BA1BE80 Authority key identifier: 21:07:61:A4:9A:C1:D5:7D:06:C6:97:91:39:CA:63:6C:9B:C7:83:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7115dbdf-c5dc-4cad-b25b-497eb629bafa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7115dbdf-c5dc-4cad-b25b-497eb629bafa/bf849cbd-eb7d-3ee3-bbed-3fa51438f244.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 33218 IP address blocks: 2606:4780::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7115dbdf-c5dc-4cad-b25b-497eb629bafa/7115dbdf-c5dc-4cad-b25b-497eb629bafa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7115dbdf-c5dc-4cad-b25b-497eb629bafa/7115dbdf-c5dc-4cad-b25b-497eb629bafa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7115dbdf-c5dc-4cad-b25b-497eb629bafa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:e4:d2:d7:ac:32:f2:4b:a1:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7115dbdf-c5dc-4cad-b25b-497eb629bafa Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=1257f38e-31e9-44aa-87ae-22060d388951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:32:54:bc:f9:56:b0:cf:42:e4:ed:a6:b4:6f: b9:d9:09:85:b9:7a:06:20:21:bb:e6:bb:e4:5f:36: 85:80:4c:93:11:98:70:58:b1:90:1d:3a:be:2d:15: 05:26:c9:c4:07:92:f1:dc:69:be:28:63:4c:f1:79: d1:b1:36:0f:fd:e5:2b:10:23:1b:fb:00:07:40:4f: 72:61:a0:b2:e2:e3:14:57:d8:e5:6a:5f:4f:82:98: 24:cd:ea:97:ad:5b:f3:db:da:7d:96:f9:70:b2:93: c3:4f:1b:fc:fc:f4:ed:b6:f4:91:3a:83:f7:73:7b: 11:dd:a8:ae:47:d8:0c:73:1e:8d:d3:f2:9c:ea:7b: 30:68:ef:75:cd:84:f0:a7:0d:eb:f2:15:50:7e:1d: 13:9d:79:12:be:56:57:e7:a7:b7:c8:bf:24:b4:0e: ed:e5:27:88:e0:fe:ec:7c:7b:85:e4:66:37:c7:56: bf:e4:70:22:bb:9b:90:6c:be:9b:b6:71:31:90:97: fa:93:8c:39:ab:23:05:eb:46:78:41:5c:81:d4:7c: 71:cb:7a:ea:13:af:4e:1b:13:7e:a1:d5:d3:72:5e: c9:3e:d9:9a:89:55:7d:49:a6:43:9b:f6:17:33:fe: c9:18:1c:fd:07:bc:fd:1a:8b:b8:be:ae:80:f5:03: a3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:1A:53:42:0B:68:13:49:9A:46:30:DA:F0:CC:93:87:C4:E0:EC:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7115dbdf-c5dc-4cad-b25b-497eb629bafa/bf849cbd-eb7d-3ee3-bbed-3fa51438f244.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7115dbdf-c5dc-4cad-b25b-497eb629bafa/7115dbdf-c5dc-4cad-b25b-497eb629bafa.crl X509v3 Authority Key Identifier: keyid:21:07:61:A4:9A:C1:D5:7D:06:C6:97:91:39:CA:63:6C:9B:C7:83:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7115dbdf-c5dc-4cad-b25b-497eb629bafa.cer sbgp-ipAddrBlock: critical IPv6: 2606:4780::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:7d:1e:83:91:50:17:e0:30:c3:f7:88:bf:63:9b:01:8a:aa: 49:26:c6:d5:80:b5:88:9d:4b:50:c6:49:9a:fe:44:38:57:a5: 87:93:6a:1b:d5:b2:20:c7:ec:d3:a9:e9:53:c5:8c:68:3d:b4: ec:6c:b9:27:31:fc:36:c2:95:40:b3:73:88:0e:c6:f7:7e:97: 19:40:77:53:00:d8:49:a3:e0:43:9d:10:35:e8:6c:a5:84:9b: ff:60:06:96:f3:fd:06:a2:f9:c7:56:32:8d:bb:ea:bd:7f:f0: f4:a2:3d:e3:04:b6:09:ee:db:2e:33:a8:14:ba:db:80:0d:a3: cc:33:c4:b8:81:fe:4a:fd:04:15:4c:bd:9b:7e:99:c1:52:aa: 1b:cd:19:25:df:3a:ba:ce:02:fc:12:ec:14:03:5d:ce:e8:2f: cf:e3:22:89:86:d5:63:83:6d:a3:38:69:4c:0a:bb:bf:c6:65: e0:08:b9:16:c4:d7:c9:df:20:ea:20:46:48:3f:4a:1d:56:be: 2b:f4:b6:a2:21:fa:41:b2:8d:48:51:4e:26:b1:95:9f:71:0d: 2e:a5:d0:86:16:a8:6d:ec:30:23:1e:2d:1d:78:f5:89:51:2d: 4f:5a:7d:57:2f:4b:e6:4f:e0:26:8e:06:87:02:c6:f7:47:6c: 8f:33:4c:43 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0qdOTS16wy8kuhvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzExNWRiZGYtYzVkYy00Y2FkLWIyNWItNDk3ZWI2Mjli YWZhMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk MTI1N2YzOGUtMzFlOS00NGFhLTg3YWUtMjIwNjBkMzg4OTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjJUvPlWsM9C5O2mtG+52QmFuXoGICG75rvk XzaFgEyTEZhwWLGQHTq+LRUFJsnEB5Lx3Gm+KGNM8XnRsTYP/eUrECMb+wAHQE9y YaCy4uMUV9jlal9PgpgkzeqXrVvz29p9lvlwspPDTxv8/PTttvSROoP3c3sR3aiu R9gMcx6N0/Kc6nswaO91zYTwpw3r8hVQfh0TnXkSvlZX56e3yL8ktA7t5SeI4P7s fHuF5GY3x1a/5HAiu5uQbL6btnExkJf6k4w5qyMF60Z4QVyB1Hxxy3rqE69OGxN+ odXTcl7JPtmaiVV9SaZDm/YXM/7JGBz9B7z9Gou4vq6A9QOjvwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOEaU0ILaBNJmkYw2vDMk4fE4OyHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83MTE1 ZGJkZi1jNWRjLTRjYWQtYjI1Yi00OTdlYjYyOWJhZmEvYmY4NDljYmQtZWI3ZC0z ZWUzLWJiZWQtM2ZhNTE0MzhmMjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzExNWRiZGYtYzVkYy00Y2FkLWIy NWItNDk3ZWI2MjliYWZhLzcxMTVkYmRmLWM1ZGMtNGNhZC1iMjViLTQ5N2ViNjI5 YmFmYS5jcmwwHwYDVR0jBBgwFoAUIQdhpJrB1X0GxpeROcpjbJvHg8kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83MTE1ZGJkZi1jNWRjLTRjYWQtYjI1Yi00OTdl YjYyOWJhZmEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZHgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAUfR6DkVAX4DDD94i/Y5sBiqpJJsbVgLWInUtQxkma/kQ4V6WHk2ob 1bIgx+zTqelTxYxoPbTsbLknMfw2wpVAs3OIDsb3fpcZQHdTANhJo+BDnRA16Gyl hJv/YAaW8/0GovnHVjKNu+q9f/D0oj3jBLYJ7tsuM6gUutuADaPMM8S4gf5K/QQV TL2bfpnBUqobzRkl3zq6zgL8EuwUA13O6C/P4yKJhtVjg22jOGlMCru/xmXgCLkW xNfJ3yDqIEZIP0odVr4r9LaiIfpBso1IUU4msZWfcQ0updCGFqht7DAjHi0dePWJ US1PWn1XL0vmT+AmjgaHAsb3R2yPM0xD -----END CERTIFICATE-----Generated at Thu Mar 26 19:25:28 2026 by rpki-client