$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/bafe04ea-3968-3a6d-8d6c-6832299af21e.roa File: bafe04ea-3968-3a6d-8d6c-6832299af21e.roa (raw, json) Hash identifier: 1nwSsdz6noI+IKE1kaV4wzHdWEG8VQ5VBg08fDUVBIA= Subject key identifier: 1F:43:BE:62:94:CE:56:BD:A1:F9:3A:9F:55:56:85:F7:63:62:D0:FF Certificate issuer: /CN=f375140c-52cc-401f-b3a0-476ffa367076 Certificate serial: 010D0C9F4328584D95EFFD6F5C9EB8A67F40B100 Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/bafe04ea-3968-3a6d-8d6c-6832299af21e.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 399976 IP address blocks: 2602:80c:202c::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:ef:fd:6f:5c:9e:b8:a6:7f:40:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=ad7ab215-82ee-4400-9da1-9094f16ca869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:40:ec:aa:35:79:d5:3e:94:5d:35:1e:0c:c3: 6b:98:44:c5:1e:95:c1:03:ae:fc:be:e7:46:1b:09: 43:5c:8c:7e:21:89:b8:64:1e:28:52:7c:4b:a1:7c: 0b:36:83:16:15:25:47:95:27:34:74:12:a2:5e:94: 55:60:f8:01:51:a4:ad:2f:55:4f:d6:f3:fa:4c:1c: 46:b1:ff:5c:73:83:b1:00:ed:0e:67:57:f7:ae:09: a5:e8:a9:e5:cb:fb:02:1b:4e:3f:27:7b:c2:50:71: 7a:41:48:24:78:27:20:55:77:ed:57:e3:f0:e8:91: 2c:5b:a1:41:96:02:19:ab:1d:d0:b0:5a:94:12:57: bc:3e:07:da:fe:fa:91:a6:00:d7:72:5c:49:54:38: 95:00:1c:a4:6b:de:e5:b6:a0:64:57:b9:d2:56:50: 55:63:d7:26:df:92:a6:8e:51:51:23:8e:a5:44:5d: 2b:39:03:6b:55:56:76:8b:63:f9:a2:f4:68:ad:5e: b7:86:d2:1f:9f:da:65:e7:24:64:b9:fe:90:40:9c: a1:20:ef:72:6d:eb:99:3a:cc:68:33:6b:89:d5:b1: 61:04:b8:79:cb:57:8d:a7:c0:6a:8c:eb:94:e7:29: db:e6:b4:50:2e:dd:b9:a9:53:44:f1:f0:5c:68:6e: 72:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:43:BE:62:94:CE:56:BD:A1:F9:3A:9F:55:56:85:F7:63:62:D0:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/bafe04ea-3968-3a6d-8d6c-6832299af21e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl X509v3 Authority Key Identifier: keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer sbgp-ipAddrBlock: critical IPv6: 2602:80c:202c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:ba:f3:3a:d5:b4:03:28:7e:52:33:19:bf:3b:a1:24:ef:c4: ca:99:32:fd:07:9a:28:50:56:de:71:dd:86:5c:14:6e:f3:ed: c2:5e:26:3d:b1:01:5c:ca:bf:48:c1:65:94:be:d5:6a:88:b5: 41:11:e1:b9:52:68:4c:81:ad:50:81:b7:df:cb:49:15:18:33: f8:70:56:c5:c9:69:60:67:96:ba:1b:31:58:27:a2:92:00:ae: 43:9b:d2:43:b0:f4:e7:57:d1:7f:80:8b:6c:b5:e2:78:07:8e: 22:d1:f8:92:3f:cc:62:9b:d6:c1:36:95:07:96:2e:bc:11:48: d9:95:da:87:b5:6e:7a:84:59:94:c1:fb:1c:0f:77:46:1d:a5: 3a:49:46:3e:f2:76:e5:31:15:84:3c:05:8b:71:7f:1b:89:dc: d1:bf:64:2c:2d:c5:3d:a8:72:21:98:74:6b:1b:94:da:c4:02: 37:6c:de:9c:23:f2:c7:d5:5d:61:89:25:50:85:a5:91:9a:e5: a9:1b:5e:ee:db:b5:9b:73:7a:af:5b:03:3c:dc:d9:05:20:c8: 1e:8f:b2:ea:cc:d0:61:be:ee:58:79:be:e3:04:c7:e4:08:62: 4e:00:fa:14:01:f1:44:6f:80:c5:62:6d:d4:6d:71:d0:2f:8d: 8b:4e:1e:a1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2V7/1vXJ64pn9AsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjM3NTE0MGMtNTJjYy00MDFmLWIzYTAtNDc2ZmZhMzY3 MDc2MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk YWQ3YWIyMTUtODJlZS00NDAwLTlkYTEtOTA5NGYxNmNhODY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEDsqjV51T6UXTUeDMNrmETFHpXBA678vudG GwlDXIx+IYm4ZB4oUnxLoXwLNoMWFSVHlSc0dBKiXpRVYPgBUaStL1VP1vP6TBxG sf9cc4OxAO0OZ1f3rgml6Knly/sCG04/J3vCUHF6QUgkeCcgVXftV+Pw6JEsW6FB lgIZqx3QsFqUEle8Pgfa/vqRpgDXclxJVDiVAByka97ltqBkV7nSVlBVY9cm35Km jlFRI46lRF0rOQNrVVZ2i2P5ovRorV63htIfn9pl5yRkuf6QQJyhIO9ybeuZOsxo M2uJ1bFhBLh5y1eNp8BqjOuU5ynb5rRQLt25qVNE8fBcaG5yKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB9DvmKUzla9ofk6n1VWhfdjYtD/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1 MTQwYy01MmNjLTQwMWYtYjNhMC00NzZmZmEzNjcwNzYvYmFmZTA0ZWEtMzk2OC0z YTZkLThkNmMtNjgzMjI5OWFmMjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM3NTE0MGMtNTJjYy00MDFmLWIz YTAtNDc2ZmZhMzY3MDc2L2YzNzUxNDBjLTUyY2MtNDAxZi1iM2EwLTQ3NmZmYTM2 NzA3Ni5jcmwwHwYDVR0jBBgwFoAUROoAp6wNg47spRDusUL/C5heBvMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1MTQwYy01MmNjLTQwMWYtYjNhMC00NzZm ZmEzNjcwNzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIDCAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAe68zrVtAMoflIzGb87oSTvxMqZMv0HmihQVt5x3YZcFG7z7cJe Jj2xAVzKv0jBZZS+1WqItUER4blSaEyBrVCBt9/LSRUYM/hwVsXJaWBnlrobMVgn opIArkOb0kOw9OdX0X+Ai2y14ngHjiLR+JI/zGKb1sE2lQeWLrwRSNmV2oe1bnqE WZTB+xwPd0YdpTpJRj7yduUxFYQ8BYtxfxuJ3NG/ZCwtxT2ociGYdGsblNrEAjds 3pwj8sfVXWGJJVCFpZGa5akbXu7btZtzeq9bAzzc2QUgyB6PsurM0GG+7lh5vuME x+QIYk4A+hQB8URvgMVibdRtcdAvjYtOHqE= -----END CERTIFICATE-----Generated at Wed May 13 11:47:48 2026 by rpki-client