$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bfb16251-8a46-41ea-abc1-b785c8d4dc90/b2371025-cb5d-3d7b-a14c-acc0a9bdf41b.roa File: b2371025-cb5d-3d7b-a14c-acc0a9bdf41b.roa (raw, json) Hash identifier: j1XK4PnXm9mvuXZ3ETCuZ7D6TZjPccrQ+zH9FF2TUI4= Subject key identifier: E3:18:BA:46:2F:A0:D6:4B:49:2E:00:60:30:94:EF:F3:96:4C:29:4F Certificate issuer: /CN=bfb16251-8a46-41ea-abc1-b785c8d4dc90 Certificate serial: 010D0C9F4328584DBFD0BA23CC18F9D054B11700 Authority key identifier: 34:5F:46:B2:98:49:F4:7A:2B:C2:45:64:40:80:B3:A6:48:37:1A:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bfb16251-8a46-41ea-abc1-b785c8d4dc90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bfb16251-8a46-41ea-abc1-b785c8d4dc90/b2371025-cb5d-3d7b-a14c-acc0a9bdf41b.roa Signing time: Thu 07 May 2026 01:00:23 +0000 ROA not before: Thu 07 May 2026 01:00:23 +0000 ROA not after: Wed 05 Aug 2026 01:00:23 +0000 asID: 402162 IP address blocks: 2604:b2c0::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bfb16251-8a46-41ea-abc1-b785c8d4dc90/bfb16251-8a46-41ea-abc1-b785c8d4dc90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bfb16251-8a46-41ea-abc1-b785c8d4dc90/bfb16251-8a46-41ea-abc1-b785c8d4dc90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bfb16251-8a46-41ea-abc1-b785c8d4dc90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bf:d0:ba:23:cc:18:f9:d0:54:b1:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfb16251-8a46-41ea-abc1-b785c8d4dc90 Validity Not Before: May 7 01:00:23 2026 GMT Not After : Aug 5 01:00:23 2026 GMT Subject: CN=61ccb1a9-891f-48ed-9bb6-f2ddb8ad1636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:79:e2:22:b3:87:b1:59:51:2a:52:0e:97:39: 46:fc:b9:3a:85:8f:47:11:22:37:d2:67:77:5f:5c: 45:5f:8d:26:99:6b:27:81:68:8a:cd:86:f4:53:19: dc:e3:d5:8d:2c:46:b2:57:de:38:3a:21:d9:29:af: 05:7d:d1:b5:0b:d2:5a:26:d6:88:39:27:52:a7:21: 70:91:97:0d:59:85:78:ba:dd:97:fe:ff:f5:8b:4b: 7a:39:ed:3b:a0:7a:d8:a2:e3:f7:19:60:d0:69:1f: eb:87:64:78:f1:64:e7:77:07:a5:33:91:3d:69:bc: 26:38:2c:83:5b:c8:3f:dd:ea:2b:e6:98:e5:d1:ad: b5:04:ff:9e:1f:de:1f:cf:ce:ed:72:6a:b1:4f:bc: 7c:6d:5e:55:e9:dc:e6:26:f6:49:ef:da:ff:13:41: fb:8b:4b:74:57:aa:22:11:aa:60:5a:7b:46:aa:48: 57:f1:38:c1:73:be:99:f1:ca:d7:4c:75:b4:31:91: db:4d:21:f5:85:bf:1e:94:f6:96:d0:35:66:6f:98: de:1e:00:50:30:ed:ea:2c:26:18:09:c1:2c:6a:ba: fc:8b:34:b0:d7:ed:65:dc:cb:78:87:c0:6b:ad:78: 89:27:94:cd:02:e6:ca:ec:c2:70:94:d8:e9:ce:83: 58:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:18:BA:46:2F:A0:D6:4B:49:2E:00:60:30:94:EF:F3:96:4C:29:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bfb16251-8a46-41ea-abc1-b785c8d4dc90/b2371025-cb5d-3d7b-a14c-acc0a9bdf41b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bfb16251-8a46-41ea-abc1-b785c8d4dc90/bfb16251-8a46-41ea-abc1-b785c8d4dc90.crl X509v3 Authority Key Identifier: keyid:34:5F:46:B2:98:49:F4:7A:2B:C2:45:64:40:80:B3:A6:48:37:1A:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bfb16251-8a46-41ea-abc1-b785c8d4dc90.cer sbgp-ipAddrBlock: critical IPv6: 2604:b2c0::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:e5:30:0b:18:17:f2:75:9f:c9:6b:c1:56:6b:1a:f6:2e:5a: aa:c0:72:7c:7d:a7:83:6b:b7:7f:4d:a3:3c:14:a5:cf:34:16: 40:3e:30:f4:62:fa:b9:2b:4f:d1:98:bb:4d:8e:ed:bb:49:33: 89:b5:a0:2d:dd:03:45:d4:20:c7:24:43:48:49:9d:25:7c:1e: 52:dd:46:99:37:23:20:10:24:d6:37:59:c4:9b:d7:75:32:0c: a3:ba:e0:49:72:ee:46:67:ef:ed:00:25:26:ef:3a:02:76:67: bb:26:2f:2b:6f:45:18:32:3a:d4:b2:5d:d1:7a:bc:d1:63:a4: 66:92:41:38:b1:c8:dc:54:ba:0b:85:10:b5:9c:5d:0f:78:9e: 70:9b:21:0e:c4:e3:ad:ee:0b:f4:9f:53:2e:ba:aa:3f:8b:09: 16:f0:7c:e2:f6:75:75:50:12:3e:ab:e7:f4:c8:c0:2a:c6:9d: e4:64:32:c3:1d:63:34:0a:7f:db:09:99:4e:aa:e5:dd:3d:03: 80:82:6b:af:51:fa:fe:5b:7d:48:e8:6b:e1:15:e2:b1:18:d1: b0:d7:18:cb:7a:06:9c:94:33:53:96:04:6f:fb:ce:d3:67:f9: 48:34:f4:5d:23:c0:76:57:dc:9c:52:32:bb:93:4f:b0:e9:26: 3d:eb:d9:2b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2/0LojzBj50FSxFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmZiMTYyNTEtOGE0Ni00MWVhLWFiYzEtYjc4NWM4ZDRk YzkwMB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk NjFjY2IxYTktODkxZi00OGVkLTliYjYtZjJkZGI4YWQxNjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinniIrOHsVlRKlIOlzlG/Lk6hY9HESI30md3 X1xFX40mmWsngWiKzYb0Uxnc49WNLEayV944OiHZKa8FfdG1C9JaJtaIOSdSpyFw kZcNWYV4ut2X/v/1i0t6Oe07oHrYouP3GWDQaR/rh2R48WTndwelM5E9abwmOCyD W8g/3eor5pjl0a21BP+eH94fz87tcmqxT7x8bV5V6dzmJvZJ79r/E0H7i0t0V6oi EapgWntGqkhX8TjBc76Z8crXTHW0MZHbTSH1hb8elPaW0DVmb5jeHgBQMO3qLCYY CcEsarr8izSw1+1l3Mt4h8BrrXiJJ5TNAubK7MJwlNjpzoNYKQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOMYukYvoNZLSS4AYDCU7/OWTClPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9iZmIx NjI1MS04YTQ2LTQxZWEtYWJjMS1iNzg1YzhkNGRjOTAvYjIzNzEwMjUtY2I1ZC0z ZDdiLWExNGMtYWNjMGE5YmRmNDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYmZiMTYyNTEtOGE0Ni00MWVhLWFi YzEtYjc4NWM4ZDRkYzkwL2JmYjE2MjUxLThhNDYtNDFlYS1hYmMxLWI3ODVjOGQ0 ZGM5MC5jcmwwHwYDVR0jBBgwFoAUNF9GsphJ9HorwkVkQICzpkg3GgcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9iZmIxNjI1MS04YTQ2LTQxZWEtYWJjMS1iNzg1 YzhkNGRjOTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgSywAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAFuUwCxgX8nWfyWvBVmsa9i5aqsByfH2ng2u3f02jPBSlzzQWQD4w 9GL6uStP0Zi7TY7tu0kzibWgLd0DRdQgxyRDSEmdJXweUt1GmTcjIBAk1jdZxJvX dTIMo7rgSXLuRmfv7QAlJu86AnZnuyYvK29FGDI61LJd0Xq80WOkZpJBOLHI3FS6 C4UQtZxdD3iecJshDsTjre4L9J9TLrqqP4sJFvB84vZ1dVASPqvn9MjAKsad5GQy wx1jNAp/2wmZTqrl3T0DgIJrr1H6/lt9SOhr4RXisRjRsNcYy3oGnJQzU5YEb/vO 02f5SDT0XSPAdlfcnFIyu5NPsOkmPevZKw== -----END CERTIFICATE-----Generated at Wed May 13 01:30:27 2026 by rpki-client