$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/1ac5cf66-a393-364b-9969-db0bf2eba445.roa File: 1ac5cf66-a393-364b-9969-db0bf2eba445.roa (raw, json) Hash identifier: M5X3AWjuWkYxUOMWt+7mXTDqXTdpEElxcgdfGwa+mx4= Subject key identifier: 80:51:02:0E:8A:36:82:18:A6:CD:F5:BD:DE:CE:7E:48:99:46:D7:07 Certificate issuer: /CN=badf1586-901d-41a7-b0f3-521998d53931 Certificate serial: 010D0C9F4328584DB8C6883119E0B30880BD8F00 Authority key identifier: 17:DD:BE:D5:1B:27:91:56:B0:48:C7:7E:3D:0E:D9:4F:FA:37:AB:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/1ac5cf66-a393-364b-9969-db0bf2eba445.roa Signing time: Mon 04 May 2026 12:30:20 +0000 ROA not before: Mon 04 May 2026 12:30:20 +0000 ROA not after: Sun 02 Aug 2026 12:30:20 +0000 asID: 213438 IP address blocks: 2604:be0:ffe3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/badf1586-901d-41a7-b0f3-521998d53931.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/badf1586-901d-41a7-b0f3-521998d53931.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b8:c6:88:31:19:e0:b3:08:80:bd:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=badf1586-901d-41a7-b0f3-521998d53931 Validity Not Before: May 4 12:30:20 2026 GMT Not After : Aug 2 12:30:20 2026 GMT Subject: CN=f24164ba-dd34-4ed8-a300-327e1482a526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:34:bf:5c:9f:26:05:1f:7a:49:d2:6e:b8:22: f0:87:0e:b4:eb:3f:b3:16:26:81:cb:78:8c:ac:c8: 63:41:61:d9:4e:74:bf:04:49:9f:4a:bb:af:40:a9: d6:eb:72:c4:4c:b8:f8:c3:de:25:f9:77:fe:67:40: 24:c2:9c:55:a6:4d:1d:c4:d9:9e:57:bc:7c:69:ba: c9:b7:9c:3b:91:eb:fc:8a:37:92:f6:95:18:33:71: f4:05:89:ba:5d:4f:64:a9:f4:89:de:f2:ef:95:ec: 2e:42:ca:c4:95:59:66:3e:f8:f0:12:19:9e:7f:be: c7:5c:60:c6:15:eb:34:4d:5e:96:1f:f6:4f:5c:12: 01:e2:4f:8d:2a:5a:68:99:2c:1f:b1:af:2a:98:21: 78:6a:3e:54:f3:03:94:4b:13:65:f0:51:53:b0:df: 45:be:15:01:64:2f:fc:96:a3:e4:e9:7e:93:9d:69: 75:36:39:68:00:25:d6:49:0a:85:34:cf:25:2b:a6: 52:4c:a7:d7:7e:f2:00:fa:20:d0:41:87:cc:48:5c: 72:3c:d4:8c:d7:67:ab:fe:b0:15:40:41:1c:ff:c7: a6:8d:3b:f8:3d:8b:6e:b1:3b:d9:38:0f:f6:17:06: 71:57:7b:41:18:b1:cc:9f:3b:9b:ca:84:c6:0d:5f: 2d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:51:02:0E:8A:36:82:18:A6:CD:F5:BD:DE:CE:7E:48:99:46:D7:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/1ac5cf66-a393-364b-9969-db0bf2eba445.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/badf1586-901d-41a7-b0f3-521998d53931.crl X509v3 Authority Key Identifier: keyid:17:DD:BE:D5:1B:27:91:56:B0:48:C7:7E:3D:0E:D9:4F:FA:37:AB:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931.cer sbgp-ipAddrBlock: critical IPv6: 2604:be0:ffe3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:b0:6d:e9:0c:29:70:b2:1c:ed:eb:a9:87:e3:f2:2b:52:fa: e3:1c:46:c9:88:05:f6:b3:58:92:5f:d9:2f:37:d6:3c:dd:d7: c3:e2:b6:ba:78:1c:af:d3:72:5b:06:b9:f4:02:bd:15:fc:df: 6e:ac:20:ce:bf:4a:0a:8d:0c:bf:42:51:10:55:76:07:e6:a4: a7:dc:61:97:39:df:5d:e5:08:5d:22:34:7d:85:81:0c:d0:06: 0f:0c:7d:f2:c4:ad:be:07:65:1a:06:b9:cb:77:b1:db:fd:fb: f0:aa:29:56:66:69:3c:1a:8f:e2:e0:8a:94:67:5f:76:b5:3c: 5f:75:33:11:7a:1d:55:17:c1:e0:65:be:c2:c8:8e:9e:c9:98: 2d:6f:d2:9b:46:90:9d:22:5b:19:fc:21:6a:15:c6:22:94:65: e0:05:65:78:62:41:f9:8b:94:24:da:23:cc:46:dd:44:e2:52: 84:ba:3f:9d:73:4e:55:e3:61:98:3c:13:61:b9:6c:f5:a5:d0: f1:6c:7c:7b:f2:d5:7e:3e:a3:28:f1:1f:3e:47:b2:2e:99:50: d1:fc:09:59:4b:8e:9e:ad:d5:88:86:5e:90:31:25:86:19:b8: d6:4e:80:77:f0:6c:73:cc:dd:80:63:0b:c1:fc:4d:0f:ce:8d: 0e:89:bd:c0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE24xogxGeCzCIC9jwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFkZjE1ODYtOTAxZC00MWE3LWIwZjMtNTIxOTk4ZDUz OTMxMB4XDTI2MDUwNDEyMzAyMFoXDTI2MDgwMjEyMzAyMFowLzEtMCsGA1UEAxMk ZjI0MTY0YmEtZGQzNC00ZWQ4LWEzMDAtMzI3ZTE0ODJhNTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTS/XJ8mBR96SdJuuCLwhw606z+zFiaBy3iM rMhjQWHZTnS/BEmfSruvQKnW63LETLj4w94l+Xf+Z0AkwpxVpk0dxNmeV7x8abrJ t5w7kev8ijeS9pUYM3H0BYm6XU9kqfSJ3vLvlewuQsrElVlmPvjwEhmef77HXGDG Fes0TV6WH/ZPXBIB4k+NKlpomSwfsa8qmCF4aj5U8wOUSxNl8FFTsN9FvhUBZC/8 lqPk6X6TnWl1NjloACXWSQqFNM8lK6ZSTKfXfvIA+iDQQYfMSFxyPNSM12er/rAV QEEc/8emjTv4PYtusTvZOA/2FwZxV3tBGLHMnzubyoTGDV8tJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIBRAg6KNoIYps31vd7OfkiZRtcHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYWRm MTU4Ni05MDFkLTQxYTctYjBmMy01MjE5OThkNTM5MzEvMWFjNWNmNjYtYTM5My0z NjRiLTk5NjktZGIwYmYyZWJhNDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmFkZjE1ODYtOTAxZC00MWE3LWIw ZjMtNTIxOTk4ZDUzOTMxL2JhZGYxNTg2LTkwMWQtNDFhNy1iMGYzLTUyMTk5OGQ1 MzkzMS5jcmwwHwYDVR0jBBgwFoAUF92+1RsnkVawSMd+PQ7ZT/o3q54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYWRmMTU4Ni05MDFkLTQxYTctYjBmMy01MjE5 OThkNTM5MzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQL4P/j MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADawbekMKXCyHO3rqYfj8itS+uMcRsmIBfazWJJf2S831jzd18Pi trp4HK/TclsGufQCvRX8326sIM6/SgqNDL9CURBVdgfmpKfcYZc5313lCF0iNH2F gQzQBg8MffLErb4HZRoGuct3sdv9+/CqKVZmaTwaj+LgipRnX3a1PF91MxF6HVUX weBlvsLIjp7JmC1v0ptGkJ0iWxn8IWoVxiKUZeAFZXhiQfmLlCTaI8xG3UTiUoS6 P51zTlXjYZg8E2G5bPWl0PFsfHvy1X4+oyjxHz5Hsi6ZUNH8CVlLjp6t1YiGXpAx JYYZuNZOgHfwbHPM3YBjC8H8TQ/OjQ6JvcA= -----END CERTIFICATE-----Generated at Wed May 13 14:43:21 2026 by rpki-client