$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/bcb62d91-1aa3-38f0-aace-721070e9f8a6.roa File: bcb62d91-1aa3-38f0-aace-721070e9f8a6.roa (raw, json) Hash identifier: qDbObD6/ied6srJncNJfSql5HKOCA5mMwgvv/CN9YbM= Subject key identifier: 22:0A:1A:61:F3:F9:C8:32:D3:54:15:8C:8D:A3:EA:40:33:C7:FB:4A Certificate issuer: /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Certificate serial: 010D0C9F4328584DC29ADF58C10E906A680E6C20 Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/bcb62d91-1aa3-38f0-aace-721070e9f8a6.roa Signing time: Fri 08 May 2026 01:00:24 +0000 ROA not before: Fri 08 May 2026 01:00:24 +0000 ROA not after: Thu 06 Aug 2026 01:00:24 +0000 asID: 64249 IP address blocks: 2001:4830:c900::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c2:9a:df:58:c1:0e:90:6a:68:0e:6c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Validity Not Before: May 8 01:00:24 2026 GMT Not After : Aug 6 01:00:24 2026 GMT Subject: CN=2bb73497-4b87-48e9-a28b-bba5f87ce067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:eb:38:f8:44:28:1f:cc:08:4e:73:51:08:bd: ac:84:6a:cc:ab:88:3e:9c:e5:f8:77:dc:35:5b:d9: ca:ae:3c:11:65:2c:27:95:97:f2:8e:48:ac:d8:08: 99:d9:81:2f:21:0a:7b:f3:1f:f8:49:65:35:c8:bc: 25:6a:47:9c:55:84:fc:6c:6b:2c:51:a2:d6:90:0d: c9:57:dc:79:51:0e:29:19:b1:c9:50:3b:a0:97:8a: 2a:32:d3:49:36:dd:e8:56:ae:21:63:b0:fe:6f:13: 49:7d:53:82:fa:9d:b7:67:1f:3b:28:f0:ec:6c:3b: 59:b2:9f:cd:aa:3a:f9:75:a0:0b:8a:da:81:28:fe: ec:96:c3:3c:bd:32:4f:f5:ff:09:36:8c:90:97:8a: b1:dd:5b:50:80:8d:19:fc:a9:bf:68:52:24:f8:45: 18:20:47:d9:a6:b8:96:ef:60:46:90:f7:d2:d9:f3: e7:65:62:4a:40:26:67:15:ab:b4:d6:8d:0e:63:1c: 8b:18:8f:a9:e5:0f:73:82:f1:ce:fa:e1:49:58:3d: 41:a8:d7:ec:ed:d0:19:67:91:5a:8e:c8:69:01:16: 5f:7e:ee:da:40:94:31:2b:aa:52:23:53:7f:f0:85: ad:ab:1e:b5:07:fe:77:78:f4:3d:a0:d7:0d:0a:27: f2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:0A:1A:61:F3:F9:C8:32:D3:54:15:8C:8D:A3:EA:40:33:C7:FB:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/bcb62d91-1aa3-38f0-aace-721070e9f8a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl X509v3 Authority Key Identifier: keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer sbgp-ipAddrBlock: critical IPv6: 2001:4830:c900::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:68:36:13:17:d4:5a:d6:2c:82:dd:72:35:2a:d1:96:26:7a: d8:26:d7:cd:94:7a:a5:84:a8:37:e5:27:05:63:39:59:01:87: ac:7d:6d:f1:1d:e8:d1:5f:62:f1:24:ee:86:2d:f8:53:ce:0f: 41:da:c6:9f:b7:cb:89:2a:5a:c6:2a:cb:5e:9f:51:3d:25:56: 90:8d:f1:1c:36:17:1e:aa:a6:9e:a8:10:3e:07:a7:cb:d0:08: 88:67:dc:a1:8c:53:df:b4:8f:2f:e8:54:b0:15:89:61:69:66: 3b:6e:ce:aa:25:5f:9b:c8:5a:b3:35:2a:09:79:e4:c2:03:60: df:0a:9c:1d:0a:2d:5b:41:f8:f1:20:48:3a:74:fd:9e:20:ab: 1f:f6:58:1b:09:8c:30:f0:e1:ef:ed:e4:9c:ce:80:be:67:65: 68:d1:f8:0d:bf:4e:73:e6:d2:c7:73:56:8b:a4:76:46:03:0f: 31:fa:de:86:cc:bd:90:e4:4b:7d:01:47:92:1d:79:67:57:48: 0f:16:df:85:50:2c:70:a5:c5:c2:4c:68:9b:21:24:28:22:40: b9:b1:b3:83:0b:20:32:43:39:2c:90:06:b1:25:1b:3c:7c:96: 9d:27:0d:3a:77:8e:7e:18:23:02:0d:f7:3f:47:86:65:95:98: eb:2d:e3:64 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE3Cmt9YwQ6QamgObCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5 MWRkMB4XDTI2MDUwODAxMDAyNFoXDTI2MDgwNjAxMDAyNFowLzEtMCsGA1UEAxMk MmJiNzM0OTctNGI4Ny00OGU5LWEyOGItYmJhNWY4N2NlMDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhes4+EQoH8wITnNRCL2shGrMq4g+nOX4d9w1 W9nKrjwRZSwnlZfyjkis2AiZ2YEvIQp78x/4SWU1yLwlakecVYT8bGssUaLWkA3J V9x5UQ4pGbHJUDugl4oqMtNJNt3oVq4hY7D+bxNJfVOC+p23Zx87KPDsbDtZsp/N qjr5daALitqBKP7slsM8vTJP9f8JNoyQl4qx3VtQgI0Z/Km/aFIk+EUYIEfZpriW 72BGkPfS2fPnZWJKQCZnFau01o0OYxyLGI+p5Q9zgvHO+uFJWD1BqNfs7dAZZ5Fa jshpARZffu7aQJQxK6pSI1N/8IWtqx61B/53ePQ9oNcNCify4QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCIKGmHz+cgy01QVjI2j6kAzx/tKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2 MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvYmNiNjJkOTEtMWFhMy0z OGYwLWFhY2UtNzIxMDcwZTlmOGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1 NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl ZGQ4MTkxZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAIAFIMMkw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAbGg2ExfUWtYsgt1yNSrRliZ62CbXzZR6pYSoN+UnBWM5WQGHrH1t 8R3o0V9i8STuhi34U84PQdrGn7fLiSpaxirLXp9RPSVWkI3xHDYXHqqmnqgQPgen y9AIiGfcoYxT37SPL+hUsBWJYWlmO27OqiVfm8haszUqCXnkwgNg3wqcHQotW0H4 8SBIOnT9niCrH/ZYGwmMMPDh7+3knM6AvmdlaNH4Db9Oc+bSx3NWi6R2RgMPMfre hsy9kORLfQFHkh15Z1dIDxbfhVAscKXFwkxomyEkKCJAubGzgwsgMkM5LJAGsSUb PHyWnScNOneOfhgjAg33P0eGZZWY6y3jZA== -----END CERTIFICATE-----Generated at Wed May 13 10:46:43 2026 by rpki-client