$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/e955d497-3567-35ca-af2a-62ffdc30b1c1.roa File: e955d497-3567-35ca-af2a-62ffdc30b1c1.roa (raw, json) Hash identifier: UQm9rJHvx2EyBf/fqJeTHncb7YgGqlKBHOI+lGWe4MI= Subject key identifier: 21:E8:16:FF:F5:DC:2B:B1:00:8D:56:04:38:C2:E4:8F:65:41:80:CA Certificate issuer: /CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5 Certificate serial: 010D0C9F4328584D4A8F9E2E509FA43E6E0A0100 Authority key identifier: 95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/e955d497-3567-35ca-af2a-62ffdc30b1c1.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 5050 IP address blocks: 2001:5e8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:9e:2e:50:9f:a4:3e:6e:0a:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=c4d42c1c-c6b8-4d15-a6ec-3eb3ea1a2ad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:14:43:7d:07:f5:9f:6e:02:55:ea:ef:15:ee: 37:35:dc:74:a6:30:25:4f:b5:da:c7:17:38:5d:0a: 98:40:a6:4e:fe:25:a4:d4:81:f3:86:c8:4a:5e:c8: 97:83:df:a3:5a:e0:d7:e3:c2:ef:0e:0f:28:82:5e: 8a:f1:74:32:b9:b9:01:ff:7c:17:c3:6d:1b:a5:b3: 1f:a4:04:91:b1:16:cb:26:92:8f:97:55:ae:7e:6e: 96:d3:00:7d:3e:cf:5a:f4:cc:92:b9:e0:13:2f:a5: 19:3b:59:dc:78:cf:9a:b0:e6:1a:c4:62:af:2f:5c: c0:e4:59:9b:8b:2b:55:3c:f9:34:00:f3:d7:a6:d4: 58:53:b7:5a:3b:a7:e1:96:f0:dc:fb:04:c3:33:53: 46:c1:66:ed:d5:4e:b1:58:91:be:3d:77:99:25:80: 6e:d8:08:29:8d:33:b5:4f:4b:89:ab:1b:e7:98:93: 26:d7:18:16:5e:a3:b5:5f:25:62:58:7c:71:ce:fd: 76:3a:76:e5:82:5d:dc:d9:3a:97:f0:66:0c:c8:13: b5:7d:7c:1a:6b:ca:46:65:99:d7:0f:34:65:10:aa: 40:e1:7f:72:bd:0e:b2:36:5f:e1:07:d8:47:4a:ec: d1:49:22:e6:74:f1:51:92:64:b1:db:66:ba:05:1c: 45:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E8:16:FF:F5:DC:2B:B1:00:8D:56:04:38:C2:E4:8F:65:41:80:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/e955d497-3567-35ca-af2a-62ffdc30b1c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl X509v3 Authority Key Identifier: keyid:95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer sbgp-ipAddrBlock: critical IPv6: 2001:5e8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:ec:0e:20:cf:82:eb:d5:43:71:fa:f6:13:fe:05:ac:69:1e: f7:a3:67:87:d5:76:7f:d7:b6:64:d8:06:99:90:47:a2:59:69: dc:7f:09:32:bc:43:b3:20:00:16:c0:27:0b:51:bc:ef:74:b5: ff:6c:21:94:1f:aa:cc:d2:90:3b:5b:ae:e2:ec:b6:97:f4:45: b2:5b:a3:20:b9:4d:97:3c:9d:e4:a0:c8:f3:a3:b0:72:e0:d7: 7d:30:b0:18:1e:f3:25:f9:8c:55:40:82:6e:e1:25:5e:bc:77: 78:9b:a4:1f:30:49:c7:66:46:67:13:6f:27:15:ae:a1:89:c4: d4:2b:d6:b2:5a:bd:79:bc:2d:52:8a:0d:ef:37:22:72:e1:2f: aa:41:d2:ba:56:18:45:8d:4d:d9:66:91:a6:7b:c4:c8:b6:c5: 9a:08:95:83:a5:47:16:97:28:a3:71:32:12:5d:ec:40:bd:f7: e1:01:10:2e:b9:ec:6f:33:0d:75:ed:45:1d:15:90:11:9d:65: af:bd:93:eb:41:7c:8c:9b:6b:5b:d9:a3:84:e1:28:6a:f4:37: f0:2e:49:90:42:56:8a:39:d5:d8:db:8c:4a:e1:b0:2a:9b:bd: 42:e2:97:76:97:47:ce:0e:94:73:bf:3c:08:aa:07:e7:a8:c8: 44:c7:d6:59 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1Kj54uUJ+kPm4KAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzZDhjZjAtZThjNS00YmZlLWE4YTctMjhlYTYxOGJj YWY1MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk YzRkNDJjMWMtYzZiOC00ZDE1LWE2ZWMtM2ViM2VhMWEyYWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxRDfQf1n24CVervFe43Ndx0pjAlT7Xaxxc4 XQqYQKZO/iWk1IHzhshKXsiXg9+jWuDX48LvDg8ogl6K8XQyubkB/3wXw20bpbMf pASRsRbLJpKPl1Wufm6W0wB9Ps9a9MySueATL6UZO1nceM+asOYaxGKvL1zA5Fmb iytVPPk0APPXptRYU7daO6fhlvDc+wTDM1NGwWbt1U6xWJG+PXeZJYBu2AgpjTO1 T0uJqxvnmJMm1xgWXqO1XyViWHxxzv12Onblgl3c2TqX8GYMyBO1fXwaa8pGZZnX DzRlEKpA4X9yvQ6yNl/hB9hHSuzRSSLmdPFRkmSx22a6BRxFUwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCHoFv/13CuxAI1WBDjC5I9lQYDKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iYzNk OGNmMC1lOGM1LTRiZmUtYThhNy0yOGVhNjE4YmNhZjUvZTk1NWQ0OTctMzU2Ny0z NWNhLWFmMmEtNjJmZmRjMzBiMWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmMzZDhjZjAtZThjNS00YmZlLWE4 YTctMjhlYTYxOGJjYWY1L2JjM2Q4Y2YwLWU4YzUtNGJmZS1hOGE3LTI4ZWE2MThi Y2FmNS5jcmwwHwYDVR0jBBgwFoAUla16vo9wLw2EVMgJKfVXK3GdClcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iYzNkOGNmMC1lOGM1LTRiZmUtYThhNy0yOGVh NjE4YmNhZjUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEF6DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAK7A4gz4Lr1UNx+vYT/gWsaR73o2eH1XZ/17Zk2AaZkEeiWWncfwky vEOzIAAWwCcLUbzvdLX/bCGUH6rM0pA7W67i7LaX9EWyW6MguU2XPJ3koMjzo7By 4Nd9MLAYHvMl+YxVQIJu4SVevHd4m6QfMEnHZkZnE28nFa6hicTUK9ayWr15vC1S ig3vNyJy4S+qQdK6VhhFjU3ZZpGme8TItsWaCJWDpUcWlyijcTISXexAvffhARAu uexvMw117UUdFZARnWWvvZPrQXyMm2tb2aOE4Shq9DfwLkmQQlaKOdXY24xK4bAq m71C4pd2l0fODpRzvzwIqgfnqMhEx9ZZ -----END CERTIFICATE-----Generated at Thu Mar 26 11:14:07 2026 by rpki-client