$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/bf7ea552-db98-377d-8cc3-9a06a9e6ca01.roa File: bf7ea552-db98-377d-8cc3-9a06a9e6ca01.roa (raw, json) Hash identifier: AGILMpF3delHI8aoOs4W04VD9tU2zyV9QmkwtABqsBY= Subject key identifier: 53:6E:91:8E:5C:4D:20:D1:13:5F:E3:1C:E1:03:15:DB:67:82:6C:22 Certificate issuer: /CN=9eed61a4-093d-432f-9466-2001995b9535 Certificate serial: 010D0C9F4328584DB60AD5A0DAD0FE507A115800 Authority key identifier: AF:FD:FF:4A:EE:43:85:68:1E:9F:C7:AD:E0:E3:E8:A9:A0:ED:A8:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/bf7ea552-db98-377d-8cc3-9a06a9e6ca01.roa Signing time: Sun 03 May 2026 13:00:31 +0000 ROA not before: Sun 03 May 2026 13:00:31 +0000 ROA not after: Sat 01 Aug 2026 13:00:31 +0000 asID: 30307 IP address blocks: 2602:f9b1:20::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/9eed61a4-093d-432f-9466-2001995b9535.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/9eed61a4-093d-432f-9466-2001995b9535.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b6:0a:d5:a0:da:d0:fe:50:7a:11:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9eed61a4-093d-432f-9466-2001995b9535 Validity Not Before: May 3 13:00:31 2026 GMT Not After : Aug 1 13:00:31 2026 GMT Subject: CN=145fd9a0-050e-4b2f-b32b-061dd4346c1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:73:cc:aa:6e:0f:17:ef:ff:b0:e4:cb:46:68: 15:77:09:e1:b5:67:c7:9a:d4:61:2f:f7:1c:ac:99: 3d:f7:c4:3e:56:97:31:45:74:7b:3b:f1:0d:9d:32: 2b:38:c5:47:b0:7b:69:e2:d6:e3:38:19:e2:f8:35: 16:21:de:b1:fc:7c:1e:1d:a2:33:d0:46:8e:cb:6c: f9:e4:4b:89:e6:65:a4:c0:56:7d:b7:09:f6:e6:28: 5e:be:f4:56:55:8e:13:a3:a5:12:ca:2d:86:83:f3: b2:fd:cb:39:5e:3f:42:64:0f:8d:f8:d3:86:92:ec: 90:ec:f7:ea:40:3f:77:ed:55:89:e0:93:e6:38:e6: e0:e7:41:4b:79:bc:ca:6b:2f:a1:5d:bc:7f:14:e4: 24:fb:f6:35:1c:fc:fc:49:c7:14:a4:e1:4f:bb:19: 56:26:35:40:36:25:3d:ed:78:93:3c:78:49:18:d5: ad:58:3d:d6:02:98:f7:e7:b5:ce:c0:c1:0f:07:e5: bc:58:47:ff:6e:05:28:12:b8:37:72:b6:77:d5:e5: 7b:57:15:45:ee:bc:f2:2c:d7:31:cd:3e:79:ff:14: 48:7b:22:06:09:a8:f9:8e:1a:e4:8a:a2:61:d4:03: e4:29:4c:21:ac:3a:11:64:0f:08:38:61:d9:db:4a: 40:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:6E:91:8E:5C:4D:20:D1:13:5F:E3:1C:E1:03:15:DB:67:82:6C:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/bf7ea552-db98-377d-8cc3-9a06a9e6ca01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/9eed61a4-093d-432f-9466-2001995b9535.crl X509v3 Authority Key Identifier: keyid:AF:FD:FF:4A:EE:43:85:68:1E:9F:C7:AD:E0:E3:E8:A9:A0:ED:A8:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9b1:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:32:30:3c:a3:e6:3d:97:d7:68:ad:25:eb:87:2b:16:a7:aa: 9b:46:72:b1:76:b6:8b:df:8a:e2:63:8d:28:74:98:bf:a8:00: e9:f2:43:61:b0:f3:a6:31:b6:10:94:b4:5a:c8:00:a4:43:27: ab:81:41:e8:f6:30:a7:0f:5a:d0:db:14:da:3e:68:24:af:8e: 55:62:84:3b:b7:c9:30:84:fd:6e:a5:11:55:e1:a7:fd:fa:4d: a6:0b:c1:97:35:4f:c2:54:a9:c8:21:c9:98:92:29:5d:43:9f: ba:9f:02:ae:21:03:a1:3a:81:f7:26:40:ca:b2:78:11:e6:f4: a7:fd:86:c3:95:69:b8:fe:ef:a3:f9:c6:a9:df:64:94:46:7d: 05:53:e9:17:a7:a9:49:69:e5:91:62:bb:e4:10:5a:e8:a5:d4: f6:67:d8:bb:6d:d1:8b:2a:1a:d4:68:6c:99:f4:fd:8a:4e:91: 9b:74:76:e3:2d:01:96:58:60:f1:8e:4a:d5:32:f4:d4:c9:70: 1d:bc:01:39:1e:cb:37:7f:82:aa:81:ad:f3:e2:be:c2:5a:d9: 5c:1e:1f:ae:1e:71:73:74:c5:fa:7f:63:5e:e8:80:45:5a:1e: 1f:a3:03:c6:9f:96:aa:c4:09:37:13:c1:29:ad:ae:b5:bf:2c: 1e:c7:a3:0b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE22CtWg2tD+UHoRWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWVlZDYxYTQtMDkzZC00MzJmLTk0NjYtMjAwMTk5NWI5 NTM1MB4XDTI2MDUwMzEzMDAzMVoXDTI2MDgwMTEzMDAzMVowLzEtMCsGA1UEAxMk MTQ1ZmQ5YTAtMDUwZS00YjJmLWIzMmItMDYxZGQ0MzQ2YzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHPMqm4PF+//sOTLRmgVdwnhtWfHmtRhL/cc rJk998Q+VpcxRXR7O/ENnTIrOMVHsHtp4tbjOBni+DUWId6x/HweHaIz0EaOy2z5 5EuJ5mWkwFZ9twn25ihevvRWVY4To6USyi2Gg/Oy/cs5Xj9CZA+N+NOGkuyQ7Pfq QD937VWJ4JPmOObg50FLebzKay+hXbx/FOQk+/Y1HPz8SccUpOFPuxlWJjVANiU9 7XiTPHhJGNWtWD3WApj357XOwMEPB+W8WEf/bgUoErg3crZ31eV7VxVF7rzyLNcx zT55/xRIeyIGCaj5jhrkiqJh1APkKUwhrDoRZA8IOGHZ20pA+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFNukY5cTSDRE1/jHOEDFdtngmwiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85ZWVk NjFhNC0wOTNkLTQzMmYtOTQ2Ni0yMDAxOTk1Yjk1MzUvYmY3ZWE1NTItZGI5OC0z NzdkLThjYzMtOWEwNmE5ZTZjYTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWVlZDYxYTQtMDkzZC00MzJmLTk0 NjYtMjAwMTk5NWI5NTM1LzllZWQ2MWE0LTA5M2QtNDMyZi05NDY2LTIwMDE5OTVi OTUzNS5jcmwwHwYDVR0jBBgwFoAUr/3/Su5DhWgen8et4OPoqaDtqJAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85ZWVkNjFhNC0wOTNkLTQzMmYtOTQ2Ni0yMDAx OTk1Yjk1MzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5sQAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH4yMDyj5j2X12itJeuHKxanqptGcrF2tovfiuJjjSh0mL+oAOny Q2Gw86YxthCUtFrIAKRDJ6uBQej2MKcPWtDbFNo+aCSvjlVihDu3yTCE/W6lEVXh p/36TaYLwZc1T8JUqcghyZiSKV1Dn7qfAq4hA6E6gfcmQMqyeBHm9Kf9hsOVabj+ 76P5xqnfZJRGfQVT6RenqUlp5ZFiu+QQWuil1PZn2Ltt0YsqGtRobJn0/YpOkZt0 duMtAZZYYPGOStUy9NTJcB28ATkeyzd/gqqBrfPivsJa2VweH64ecXN0xfp/Y17o gEVaHh+jA8aflqrECTcTwSmtrrW/LB7Hows= -----END CERTIFICATE-----Generated at Wed May 13 19:04:43 2026 by rpki-client