$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/bf1ea0d0-c6c3-3bdf-a20c-a8a939551a91.roa File: bf1ea0d0-c6c3-3bdf-a20c-a8a939551a91.roa (raw, json) Hash identifier: en0/X5+za7gejkRcaDarBLHJKgi9Cq33zhJiCezEmzU= Subject key identifier: 08:04:63:2D:B2:8C:3B:81:84:8F:2B:DC:8C:48:BA:53:B1:4C:8D:23 Certificate issuer: /CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Certificate serial: 010D0C9F4328584D19B4AA5C3C7BB68A86EA1D80 Authority key identifier: 41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/bf1ea0d0-c6c3-3bdf-a20c-a8a939551a91.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 400679 IP address blocks: 206.168.92.0/24 maxlen: 24 2602:fb82::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:aa:5c:3c:7b:b6:8a:86:ea:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=e745bde6-89b8-4d1a-8592-ed17dea0e3cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d4:47:c1:d5:49:dc:64:4d:bb:35:82:35:9b: 50:07:3d:cf:96:6d:66:8c:a0:11:15:a6:f8:31:8c: f3:cb:69:84:6f:f9:d9:0d:e8:22:c4:59:83:28:8c: 8b:95:a7:3c:26:c2:73:c0:88:30:85:ea:a5:fc:f3: a3:2e:42:16:58:40:1c:20:94:96:8d:e4:a7:95:9a: 33:73:18:89:ff:90:62:b0:69:aa:dc:54:ed:ca:7e: 97:ce:eb:0c:e9:f6:96:39:2a:86:f3:c7:03:1b:d0: 55:8c:bd:73:45:fe:d6:42:85:9a:cc:ce:98:d8:15: 95:37:2d:8f:ef:30:63:25:26:ec:5a:10:24:76:be: d7:9f:3e:44:b0:e6:2b:4f:db:8c:e2:da:50:b9:f5: df:9e:bf:b2:35:1f:e0:48:81:0e:a3:29:b2:c7:55: 5b:3a:93:a9:4a:e8:15:de:14:7b:19:b4:dd:db:27: 43:56:25:94:40:c3:d3:cd:34:bf:e4:e0:67:88:b6: 15:cb:3e:ce:96:4b:a7:a4:2d:9a:8b:78:a8:73:2a: 3e:e9:b4:70:f3:a3:bd:8f:47:e9:76:8c:13:75:38: 0c:af:f5:00:05:fb:54:26:9d:1e:99:48:d3:8b:c3: f9:40:a6:e5:18:92:9a:00:e5:ea:9f:f0:db:65:b1: 1f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:04:63:2D:B2:8C:3B:81:84:8F:2B:DC:8C:48:BA:53:B1:4C:8D:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/bf1ea0d0-c6c3-3bdf-a20c-a8a939551a91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl X509v3 Authority Key Identifier: keyid:41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer sbgp-ipAddrBlock: critical IPv4: 206.168.92.0/24 IPv6: 2602:fb82::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:ff:92:cf:65:e0:55:25:29:d5:59:71:fb:46:7d:f2:3e:cf: b8:1b:75:1c:cf:a1:15:15:91:33:6d:f2:88:23:1e:81:d6:38: c0:41:19:fe:e1:c6:d1:1a:c3:d8:01:ce:42:1c:83:54:c8:4e: f0:64:73:97:31:9e:05:2e:13:87:ac:7a:42:d8:70:93:b5:9b: 5b:b3:8b:00:1b:0e:54:99:10:ba:2b:6c:e8:d4:dd:01:01:aa: 08:c9:5f:09:7e:67:e7:93:9e:5a:b7:0c:0b:d7:f4:f4:9f:22: 72:63:ef:a0:d6:2c:b0:8e:69:84:13:52:42:94:56:f7:02:d0: 11:59:d5:29:63:bf:ce:a0:a3:1c:bb:7d:2e:f9:53:68:ac:d5: 6a:c7:c6:a3:00:9a:6e:27:59:7c:5e:2c:09:cd:5b:1d:ba:45: 4a:ad:48:ab:c9:c2:f7:56:97:00:5b:9b:48:f1:13:56:26:1e: e8:bd:59:6a:9c:d0:7b:d6:d9:f1:ea:9e:42:e8:2c:23:0e:61: 8a:9d:9b:9e:34:93:2c:19:b5:59:91:0b:a2:d0:fe:e1:ab:f4: ad:66:0b:1f:f6:c7:3c:ce:a0:4d:6b:22:a4:d6:56:16:a4:61: f8:d5:d0:96:f0:3f:6a:69:60:a6:79:d4:b4:95:37:cd:5b:c1: 1e:2e:18:19 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE0ZtKpcPHu2iobqHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU4OWYzZTQtMjcwMS00OGY1LTljNmItN2VhOGQwNzFl Y2U3MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk ZTc0NWJkZTYtODliOC00ZDFhLTg1OTItZWQxN2RlYTBlM2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtRHwdVJ3GRNuzWCNZtQBz3Plm1mjKARFab4 MYzzy2mEb/nZDegixFmDKIyLlac8JsJzwIgwheql/POjLkIWWEAcIJSWjeSnlZoz cxiJ/5BisGmq3FTtyn6XzusM6faWOSqG88cDG9BVjL1zRf7WQoWazM6Y2BWVNy2P 7zBjJSbsWhAkdr7Xnz5EsOYrT9uM4tpQufXfnr+yNR/gSIEOoymyx1VbOpOpSugV 3hR7GbTd2ydDViWUQMPTzTS/5OBniLYVyz7OlkunpC2ai3iocyo+6bRw86O9j0fp dowTdTgMr/UABftUJp0emUjTi8P5QKblGJKaAOXqn/DbZbEffwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFAgEYy2yjDuBhI8r3IxIulOxTI0jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5 ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4ZDA3MWVjZTcvYmYxZWEwZDAtYzZjMy0z YmRmLWEyMGMtYThhOTM5NTUxYTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDU4OWYzZTQtMjcwMS00OGY1LTlj NmItN2VhOGQwNzFlY2U3L2Q1ODlmM2U0LTI3MDEtNDhmNS05YzZiLTdlYThkMDcx ZWNlNy5jcmwwHwYDVR0jBBgwFoAUQbmkG8YihK7ly7p7M2I7+iT7/yIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4 ZDA3MWVjZTcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAzqhcMA4E AgACMAgDBgQmAvuCADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBO/5LPZeBVJSnVWXH7Rn3yPs+4G3Ucz6EV FZEzbfKIIx6B1jjAQRn+4cbRGsPYAc5CHINUyE7wZHOXMZ4FLhOHrHpC2HCTtZtb s4sAGw5UmRC6K2zo1N0BAaoIyV8Jfmfnk55atwwL1/T0nyJyY++g1iywjmmEE1JC lFb3AtARWdUpY7/OoKMcu30u+VNorNVqx8ajAJpuJ1l8XiwJzVsdukVKrUirycL3 VpcAW5tI8RNWJh7ovVlqnNB71tnx6p5C6CwjDmGKnZueNJMsGbVZkQui0P7hq/St Zgsf9sc8zqBNayKk1lYWpGH41dCW8D9qaWCmedS0lTfNW8EeLhgZ -----END CERTIFICATE-----Generated at Thu Mar 26 07:25:03 2026 by rpki-client