$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/bc669675-4f09-3100-852b-f89b8e4fa0ee.roa File: bc669675-4f09-3100-852b-f89b8e4fa0ee.roa (raw, json) Hash identifier: rIK79roXdr5cv0jX6GHJ1z7ks/nxYj2oDcgV/9BtSs0= Subject key identifier: BB:46:FC:1C:12:A9:20:92:48:78:EF:D9:63:B7:94:32:4B:38:CE:62 Certificate issuer: /CN=da61f786-99c2-4468-90f7-0b35abd168e5 Certificate serial: 010D0C9F4328584DB4A57508C3DF252A9E7799C0 Authority key identifier: 9B:B2:56:DD:8E:8C:E4:13:02:1F:AC:BA:4D:EB:C0:52:A2:E5:05:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/bc669675-4f09-3100-852b-f89b8e4fa0ee.roa Signing time: Sun 03 May 2026 01:00:23 +0000 ROA not before: Sun 03 May 2026 01:00:23 +0000 ROA not after: Sat 01 Aug 2026 01:00:23 +0000 asID: 54650 IP address blocks: 2604:bb40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:a5:75:08:c3:df:25:2a:9e:77:99:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da61f786-99c2-4468-90f7-0b35abd168e5 Validity Not Before: May 3 01:00:23 2026 GMT Not After : Aug 1 01:00:23 2026 GMT Subject: CN=df40e7e9-c79a-4020-8216-1408b33982c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fd:e8:73:35:b1:00:00:d8:f0:75:ce:1b:8d: 2d:22:51:a3:3d:5c:30:52:ff:1e:56:60:6e:d1:fe: 08:68:e5:bd:4a:89:07:b0:01:c4:ef:27:18:b2:29: bb:ee:59:65:56:cf:ff:d3:24:4a:59:d4:40:82:c9: 64:61:ea:4f:70:c0:bd:fc:dc:8d:50:44:b6:04:1b: 61:43:ba:09:2c:3a:08:20:37:76:51:e4:dc:6f:59: ef:1c:22:55:68:0c:83:7c:6a:35:33:4d:30:5a:74: 41:38:ff:f3:3e:cb:f5:b7:9c:0e:2f:b6:26:82:81: b0:b6:6d:b4:a8:4c:68:8a:39:3a:ac:9a:bf:ff:07: c5:24:5d:fa:9b:51:9d:2a:66:8f:3a:c9:7a:04:ab: 0c:11:bd:86:4f:f6:c2:dd:2c:a9:57:99:9c:69:11: 6e:24:28:61:4f:e8:e9:75:e1:1f:ef:22:c9:78:ae: 1e:58:7a:76:9b:4e:de:ad:bd:90:fc:f8:f5:b9:4e: cd:75:57:15:b4:70:59:6a:53:6b:f6:ac:44:05:3d: 09:16:a7:d6:6a:9e:e5:b9:ff:8c:f9:e9:16:1b:82: df:63:af:6c:1a:8b:ce:d4:c2:06:48:48:0a:06:30: 7b:9f:33:7c:0b:59:31:09:e6:cb:2e:49:72:fc:e8: 7a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:46:FC:1C:12:A9:20:92:48:78:EF:D9:63:B7:94:32:4B:38:CE:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/bc669675-4f09-3100-852b-f89b8e4fa0ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.crl X509v3 Authority Key Identifier: keyid:9B:B2:56:DD:8E:8C:E4:13:02:1F:AC:BA:4D:EB:C0:52:A2:E5:05:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer sbgp-ipAddrBlock: critical IPv6: 2604:bb40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:68:1a:8d:c3:01:06:55:d9:32:9e:85:78:4a:3c:53:df:42: 2e:45:fe:06:b8:1f:72:57:90:b6:44:4e:a1:54:0f:17:4a:e5: 48:47:dd:51:84:d0:64:a6:1a:9c:c7:22:34:5b:4b:48:10:5b: d7:82:19:82:04:fe:1f:73:bb:62:21:f0:8e:2a:c0:6d:1c:e1: a6:77:43:38:1e:c8:df:53:84:e6:d9:80:f9:1d:75:f5:17:50: 6f:60:a6:1c:53:06:99:5e:91:0e:cf:64:8d:f2:19:9e:65:54: f8:e4:51:99:06:7d:c0:74:db:ea:4a:9d:8d:15:8d:a6:8d:af: b4:3f:d4:2c:b6:2a:07:fc:5b:13:13:d0:d7:15:6e:e1:50:61: 6f:28:cf:5b:12:08:f0:16:1c:c0:cf:e0:c6:f5:e9:e3:6f:d9: 19:76:17:1e:73:c7:a3:37:08:df:ad:5d:57:ca:32:d0:ba:d4: 39:4e:51:15:16:4c:66:35:92:e9:ef:13:95:7d:e7:b8:2b:01: 79:60:b4:01:ff:34:8d:eb:d2:e0:75:a1:9e:23:34:b4:5b:12: 85:87:b6:61:ad:4b:7a:3f:58:32:4a:c3:6c:6d:f7:c2:2b:7f: fa:4a:76:ae:a1:17:f9:43:83:ec:03:65:b0:27:08:91:cc:99: 33:3a:f6:11 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE20pXUIw98lKp53mcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE2MWY3ODYtOTljMi00NDY4LTkwZjctMGIzNWFiZDE2 OGU1MB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk ZGY0MGU3ZTktYzc5YS00MDIwLTgyMTYtMTQwOGIzMzk4MmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1P3oczWxAADY8HXOG40tIlGjPVwwUv8eVmBu 0f4IaOW9SokHsAHE7ycYsim77lllVs//0yRKWdRAgslkYepPcMC9/NyNUES2BBth Q7oJLDoIIDd2UeTcb1nvHCJVaAyDfGo1M00wWnRBOP/zPsv1t5wOL7YmgoGwtm20 qExoijk6rJq//wfFJF36m1GdKmaPOsl6BKsMEb2GT/bC3SypV5mcaRFuJChhT+jp deEf7yLJeK4eWHp2m07erb2Q/Pj1uU7NdVcVtHBZalNr9qxEBT0JFqfWap7luf+M +ekWG4LfY69sGovO1MIGSEgKBjB7nzN8C1kxCebLLkly/Oh6nwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLtG/BwSqSCSSHjv2WO3lDJLOM5iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYTYx Zjc4Ni05OWMyLTQ0NjgtOTBmNy0wYjM1YWJkMTY4ZTUvYmM2Njk2NzUtNGYwOS0z MTAwLTg1MmItZjg5YjhlNGZhMGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGE2MWY3ODYtOTljMi00NDY4LTkw ZjctMGIzNWFiZDE2OGU1L2RhNjFmNzg2LTk5YzItNDQ2OC05MGY3LTBiMzVhYmQx NjhlNS5jcmwwHwYDVR0jBBgwFoAUm7JW3Y6M5BMCH6y6TevAUqLlBVkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYTYxZjc4Ni05OWMyLTQ0NjgtOTBmNy0wYjM1 YWJkMTY4ZTUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgS7QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAJaBqNwwEGVdkynoV4SjxT30IuRf4GuB9yV5C2RE6hVA8XSuVIR91R hNBkphqcxyI0W0tIEFvXghmCBP4fc7tiIfCOKsBtHOGmd0M4HsjfU4Tm2YD5HXX1 F1BvYKYcUwaZXpEOz2SN8hmeZVT45FGZBn3AdNvqSp2NFY2mja+0P9QstioH/FsT E9DXFW7hUGFvKM9bEgjwFhzAz+DG9enjb9kZdhcec8ejNwjfrV1XyjLQutQ5TlEV FkxmNZLp7xOVfee4KwF5YLQB/zSN69LgdaGeIzS0WxKFh7ZhrUt6P1gySsNsbffC K3/6SnauoRf5Q4PsA2WwJwiRzJkzOvYR -----END CERTIFICATE-----Generated at Wed May 13 15:54:48 2026 by rpki-client