$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/69811a7d-82d5-3fd5-bd79-2fe1964ad712.roa File: 69811a7d-82d5-3fd5-bd79-2fe1964ad712.roa (raw, json) Hash identifier: /KY0llHSBHx03f/L71UgBYnOHUVy4ODci+Zxb8sV+x4= Subject key identifier: E3:3C:97:24:1A:8D:6D:53:FF:10:C0:DC:92:1F:81:BB:4E:67:90:E4 Certificate issuer: /CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5 Certificate serial: 010D0C9F4328584D343A1D36C277256B6208EA00 Authority key identifier: 95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/69811a7d-82d5-3fd5-bd79-2fe1964ad712.roa Signing time: Wed 18 Mar 2026 01:00:33 +0000 ROA not before: Wed 18 Mar 2026 01:00:33 +0000 ROA not after: Tue 16 Jun 2026 01:00:33 +0000 asID: 1206 IP address blocks: 2001:5e8:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:3a:1d:36:c2:77:25:6b:62:08:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5 Validity Not Before: Mar 18 01:00:33 2026 GMT Not After : Jun 16 01:00:33 2026 GMT Subject: CN=c8e98e2b-5851-4e04-bf71-fc90ce103421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:02:26:59:4b:31:57:bc:36:e4:c5:48:97:94: ac:d9:64:39:e8:f0:d0:d6:dc:84:12:1a:53:75:fd: 77:9a:dd:7b:86:43:09:db:4d:3c:07:66:6d:36:2f: 0c:c2:62:a6:17:71:7a:5b:71:19:2a:5d:e0:0d:bc: b1:07:74:a8:9e:01:3c:06:5a:72:98:ff:31:02:57: a9:f5:78:5c:f7:5f:26:82:9f:5b:fb:a8:0f:09:4f: ab:5b:80:61:77:43:4d:9a:72:fb:6f:69:6d:70:2a: 44:32:dd:ea:d3:1e:99:11:ea:b3:48:e3:49:1a:57: e4:32:8a:3a:33:e6:96:c9:66:97:ba:19:ac:9e:60: 3d:b6:ed:9d:b3:21:de:06:1f:13:94:3a:1b:d3:5f: b4:d3:7d:03:3d:5d:5d:73:1a:96:61:d6:20:90:5f: 14:1e:00:8d:53:49:61:98:c9:00:69:1f:84:76:83: b6:53:19:3f:c9:02:52:46:02:cf:42:8c:00:05:22: 09:42:3f:51:05:e5:55:44:63:95:1b:a5:aa:aa:c7: 39:57:e8:c8:c6:3f:48:c6:a3:13:77:b9:a5:07:a6: 6d:6e:db:f1:15:ee:df:e5:cd:0f:72:59:4e:57:f0: cb:48:ee:0a:4e:15:d5:e0:1c:9f:de:f5:c5:7e:ed: dd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:3C:97:24:1A:8D:6D:53:FF:10:C0:DC:92:1F:81:BB:4E:67:90:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/69811a7d-82d5-3fd5-bd79-2fe1964ad712.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl X509v3 Authority Key Identifier: keyid:95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer sbgp-ipAddrBlock: critical IPv6: 2001:5e8:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:6b:b5:ba:c6:1e:6f:92:7a:44:c0:7e:c7:8e:05:a5:00:a2: 90:d6:c1:1a:55:c5:c3:93:66:61:39:2d:03:bc:12:76:48:94: 67:f0:d4:8c:88:5c:85:ea:5c:16:65:b7:ea:eb:4a:f3:78:de: 94:d1:e3:fe:de:b0:d8:ef:55:f0:33:2a:24:46:0d:fc:25:1d: bc:0f:fe:c1:82:a6:28:1e:da:89:72:89:cd:c2:6d:2c:04:71: e8:2d:96:91:26:2e:cd:1f:4d:a4:f1:0b:37:f1:69:58:c3:15: 6a:54:97:6b:16:5b:60:e4:8a:0a:91:07:5e:66:73:06:1d:61: 17:c5:b0:3a:92:4c:8c:b5:a0:1d:c1:75:6f:77:f1:aa:b0:86: bc:c4:35:26:d8:de:9d:96:a0:84:ee:33:36:54:65:20:f1:9a: c1:00:ed:8f:f9:ce:77:0b:37:24:bf:91:a8:f3:c4:28:43:39: c0:f8:69:99:1b:de:2b:88:df:5a:e8:ef:95:1a:fe:2a:78:22: 60:7d:07:61:ed:cd:62:5b:c7:f3:8f:67:70:65:6f:9d:5b:db: b4:b2:cb:a3:1c:3e:c4:a0:8a:d2:1f:1a:55:9d:f2:04:d8:d0: 37:1b:29:4a:c9:ae:c9:57:b7:e9:22:f7:8a:df:64:93:b1:33: 33:d5:8d:6d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE00Oh02wncla2II6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzZDhjZjAtZThjNS00YmZlLWE4YTctMjhlYTYxOGJj YWY1MB4XDTI2MDMxODAxMDAzM1oXDTI2MDYxNjAxMDAzM1owLzEtMCsGA1UEAxMk YzhlOThlMmItNTg1MS00ZTA0LWJmNzEtZmM5MGNlMTAzNDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gImWUsxV7w25MVIl5Ss2WQ56PDQ1tyEEhpT df13mt17hkMJ2008B2ZtNi8MwmKmF3F6W3EZKl3gDbyxB3SongE8BlpymP8xAlep 9Xhc918mgp9b+6gPCU+rW4Bhd0NNmnL7b2ltcCpEMt3q0x6ZEeqzSONJGlfkMoo6 M+aWyWaXuhmsnmA9tu2dsyHeBh8TlDob01+0030DPV1dcxqWYdYgkF8UHgCNU0lh mMkAaR+EdoO2Uxk/yQJSRgLPQowABSIJQj9RBeVVRGOVG6Wqqsc5V+jIxj9IxqMT d7mlB6ZtbtvxFe7f5c0PcllOV/DLSO4KThXV4Byf3vXFfu3dbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOM8lyQajW1T/xDA3JIfgbtOZ5DkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iYzNk OGNmMC1lOGM1LTRiZmUtYThhNy0yOGVhNjE4YmNhZjUvNjk4MTFhN2QtODJkNS0z ZmQ1LWJkNzktMmZlMTk2NGFkNzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmMzZDhjZjAtZThjNS00YmZlLWE4 YTctMjhlYTYxOGJjYWY1L2JjM2Q4Y2YwLWU4YzUtNGJmZS1hOGE3LTI4ZWE2MThi Y2FmNS5jcmwwHwYDVR0jBBgwFoAUla16vo9wLw2EVMgJKfVXK3GdClcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iYzNkOGNmMC1lOGM1LTRiZmUtYThhNy0yOGVh NjE4YmNhZjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEF6AAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACFrtbrGHm+SekTAfseOBaUAopDWwRpVxcOTZmE5LQO8EnZIlGfw 1IyIXIXqXBZlt+rrSvN43pTR4/7esNjvVfAzKiRGDfwlHbwP/sGCpige2olyic3C bSwEcegtlpEmLs0fTaTxCzfxaVjDFWpUl2sWW2DkigqRB15mcwYdYRfFsDqSTIy1 oB3BdW938aqwhrzENSbY3p2WoITuMzZUZSDxmsEA7Y/5zncLNyS/kajzxChDOcD4 aZkb3iuI31ro75Ua/ip4ImB9B2HtzWJbx/OPZ3Blb51b27Syy6McPsSgitIfGlWd 8gTY0DcbKUrJrslXt+ki94rfZJOxMzPVjW0= -----END CERTIFICATE-----Generated at Thu Mar 26 08:30:02 2026 by rpki-client