$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/bd9c14b4-5a46-3e9b-ba20-d7dbd5543840.roa File: bd9c14b4-5a46-3e9b-ba20-d7dbd5543840.roa (raw, json) Hash identifier: l/QLU3rwRbSbL+jsMbzIB5gb84cK4cx4JVSZIa8gvGc= Subject key identifier: 29:A0:3E:C5:B1:22:E7:71:68:69:6A:67:F0:E3:06:EA:A7:5B:79:05 Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Certificate serial: 010D0C9F4328584DA6B005FDB3A05728EAEB4C00 Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/bd9c14b4-5a46-3e9b-ba20-d7dbd5543840.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 16509 IP address blocks: 2620:147:c13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:05:fd:b3:a0:57:28:ea:eb:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=3481bcc1-bc28-412b-8fde-f1db2361c074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4c:43:ab:72:d6:01:e6:70:0d:85:88:7b:be: dd:65:d6:71:7b:d6:1f:58:ec:c6:7d:ff:75:83:b2: 4c:0b:c5:6e:2d:d4:bf:fd:57:6b:b6:55:04:70:07: b4:83:20:75:f9:12:c3:05:49:dd:1b:ca:5f:8e:83: 41:dc:b6:19:ae:58:8d:e2:cd:b9:59:03:f1:c5:bd: 40:89:d5:a1:54:dc:dd:04:71:93:0f:79:96:6f:ce: aa:ac:4e:6f:8c:e7:1b:96:dd:25:87:ff:aa:33:d3: 65:b8:09:2d:fa:53:70:3e:eb:7b:5b:95:d3:c8:75: fb:d3:36:ce:6b:84:3f:4e:9a:9b:fd:42:e0:82:78: 2a:77:7b:96:f0:85:a2:0d:b4:63:d2:65:58:b9:be: b5:88:19:c4:8c:d1:f5:4c:2c:73:2f:ac:55:af:c9: 24:81:5f:16:c6:64:c5:35:7e:3a:ac:12:e5:e7:55: f2:2e:04:2d:c9:c6:99:fa:0e:18:c8:7b:95:a1:ad: 4a:b3:0f:bf:da:70:16:d3:9e:fc:be:27:64:94:15: 24:60:d7:44:97:05:06:89:d5:4b:ea:9f:2f:c0:48: 83:db:a0:07:de:24:ce:a1:46:01:c8:87:dd:8b:f9: 04:3b:42:ba:6e:72:f2:8a:4d:49:cf:70:5a:13:66: 6b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A0:3E:C5:B1:22:E7:71:68:69:6A:67:F0:E3:06:EA:A7:5B:79:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/bd9c14b4-5a46-3e9b-ba20-d7dbd5543840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl X509v3 Authority Key Identifier: keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer sbgp-ipAddrBlock: critical IPv6: 2620:147:c13::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:68:5f:6d:8b:9f:23:53:6f:8c:28:4c:66:92:67:54:99:13: 81:26:2f:fc:b9:e1:77:60:ee:12:95:31:09:5f:c7:6f:d1:05: 2e:3e:9f:65:af:07:b7:84:48:da:89:03:7e:71:60:43:e2:c0: 28:80:8c:dd:63:1e:c9:64:bf:86:1a:91:16:ec:61:e0:05:f2: 12:6d:bc:96:50:79:33:69:d1:0c:3e:07:8c:ab:bf:97:15:e7: f0:a6:22:1e:f2:79:2b:75:6d:56:6c:bc:d0:2d:b4:27:a4:2a: e7:54:5d:08:f6:b4:e3:e3:c2:f1:fd:5c:b6:22:05:3d:f8:2a: 15:16:c0:6b:ed:42:d5:6c:12:a9:0e:a5:1b:71:c4:da:93:46: a8:e0:26:de:21:fd:df:57:8a:af:3d:f8:87:34:e5:3b:e3:4b: f2:93:77:b7:c1:1e:a4:4f:f8:03:1d:05:f5:ed:f4:cd:b4:37: e1:6c:df:c8:88:91:02:92:85:01:c2:cc:4b:24:01:f3:85:5b: 13:76:62:0b:17:2b:a3:62:ee:c5:0e:e7:a7:8d:cd:16:03:95: e5:f6:73:87:6c:21:b3:d0:44:5e:58:18:62:43:6c:0d:29:5e: 14:43:e2:1b:61:f4:14:2b:ab:7e:92:b1:47:ac:42:6b:5a:42: ef:c1:3d:f8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2msAX9s6BXKOrrTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl NzUxMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk MzQ4MWJjYzEtYmMyOC00MTJiLThmZGUtZjFkYjIzNjFjMDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0xDq3LWAeZwDYWIe77dZdZxe9YfWOzGff91 g7JMC8VuLdS//VdrtlUEcAe0gyB1+RLDBUndG8pfjoNB3LYZrliN4s25WQPxxb1A idWhVNzdBHGTD3mWb86qrE5vjOcblt0lh/+qM9NluAkt+lNwPut7W5XTyHX70zbO a4Q/Tpqb/ULggngqd3uW8IWiDbRj0mVYub61iBnEjNH1TCxzL6xVr8kkgV8WxmTF NX46rBLl51XyLgQtycaZ+g4YyHuVoa1Ksw+/2nAW0578vidklBUkYNdElwUGidVL 6p8vwEiD26AH3iTOoUYByIfdi/kEO0K6bnLyik1Jz3BaE2ZrPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCmgPsWxIudxaGlqZ/DjBuqnW3kFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2 NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvYmQ5YzE0YjQtNWE0Ni0z ZTliLWJhMjAtZDdkYmQ1NTQzODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj NjlhM2U3NTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABRwwT MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEpoX22LnyNTb4woTGaSZ1SZE4EmL/y54Xdg7hKVMQlfx2/RBS4+ n2WvB7eESNqJA35xYEPiwCiAjN1jHslkv4YakRbsYeAF8hJtvJZQeTNp0Qw+B4yr v5cV5/CmIh7yeSt1bVZsvNAttCekKudUXQj2tOPjwvH9XLYiBT34KhUWwGvtQtVs EqkOpRtxxNqTRqjgJt4h/d9Xiq89+Ic05TvjS/KTd7fBHqRP+AMdBfXt9M20N+Fs 38iIkQKShQHCzEskAfOFWxN2YgsXK6Ni7sUO56eNzRYDleX2c4dsIbPQRF5YGGJD bA0pXhRD4hth9BQrq36SsUesQmtaQu/BPfg= -----END CERTIFICATE-----Generated at Wed May 13 16:45:18 2026 by rpki-client