$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a2acb878-6cfd-4407-9620-cc328f43d1be/bc6d8576-49c9-3f25-a119-c10eeac0a805.roa File: bc6d8576-49c9-3f25-a119-c10eeac0a805.roa (raw, json) Hash identifier: /3uzCZQw/zm3svDma+7JArh4j/1lPOkr98xRoFeLaS4= Subject key identifier: 93:6B:C5:BE:EE:20:CD:DB:7A:FF:00:C6:87:7E:25:9F:A8:4D:83:6D Certificate issuer: /CN=a2acb878-6cfd-4407-9620-cc328f43d1be Certificate serial: 010D0C9F4328584D0EA7B718A3318240C6151C00 Authority key identifier: E5:E9:07:D8:5E:BA:1A:4A:AC:31:99:45:DF:0D:5B:30:28:9A:16:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a2acb878-6cfd-4407-9620-cc328f43d1be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a2acb878-6cfd-4407-9620-cc328f43d1be/bc6d8576-49c9-3f25-a119-c10eeac0a805.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 3450 IP address blocks: 2620:120:5000::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a2acb878-6cfd-4407-9620-cc328f43d1be/a2acb878-6cfd-4407-9620-cc328f43d1be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a2acb878-6cfd-4407-9620-cc328f43d1be/a2acb878-6cfd-4407-9620-cc328f43d1be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a2acb878-6cfd-4407-9620-cc328f43d1be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:b7:18:a3:31:82:40:c6:15:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2acb878-6cfd-4407-9620-cc328f43d1be Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=42a30e5c-6fde-46c6-8e25-77ca572bf552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f4:3e:fe:d5:b0:91:19:66:29:6c:e8:db:33: d1:54:76:cd:da:69:e6:da:3c:10:c0:a1:e7:13:72: b3:e7:f9:d0:2e:f9:1e:9e:f2:94:a7:bb:9d:e0:a6: fa:fa:f7:e9:69:62:52:08:50:4a:0d:ae:da:35:20: c7:36:4d:05:ab:93:cc:8c:3e:b0:3d:e2:c9:ec:30: e5:fb:95:fb:36:77:3c:79:75:09:c4:dc:4e:8b:7c: 86:19:5d:ee:1c:7c:30:f8:08:3d:bf:d7:4a:48:64: 9b:44:93:a8:a0:98:7b:58:a5:27:90:7c:f3:8a:18: 85:de:7f:99:0b:81:99:8e:c7:89:27:8c:0b:5d:b4: 17:86:68:31:cc:28:70:ad:40:64:10:15:be:6c:24: e9:0b:29:39:2a:74:9b:e4:69:c9:70:a6:35:d1:67: 72:bc:39:c5:01:76:0a:8a:a4:23:b3:dc:5a:01:21: f2:18:50:c8:cc:cc:a5:75:7e:60:59:03:92:bf:db: ff:b2:59:1b:65:e1:c9:0b:95:96:8e:a3:17:d4:91: 0a:7b:bf:7a:23:08:7a:1d:d3:3a:1d:f3:5d:52:f2: aa:8a:2d:0e:0e:1d:21:83:ce:db:9e:8f:07:d3:bb: 74:a2:44:63:30:70:1d:87:e0:18:f3:98:dd:de:64: fb:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:6B:C5:BE:EE:20:CD:DB:7A:FF:00:C6:87:7E:25:9F:A8:4D:83:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a2acb878-6cfd-4407-9620-cc328f43d1be/bc6d8576-49c9-3f25-a119-c10eeac0a805.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a2acb878-6cfd-4407-9620-cc328f43d1be/a2acb878-6cfd-4407-9620-cc328f43d1be.crl X509v3 Authority Key Identifier: keyid:E5:E9:07:D8:5E:BA:1A:4A:AC:31:99:45:DF:0D:5B:30:28:9A:16:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a2acb878-6cfd-4407-9620-cc328f43d1be.cer sbgp-ipAddrBlock: critical IPv6: 2620:120:5000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:18:3f:13:89:9b:e1:97:60:7a:ef:3d:db:2c:38:86:d9:92: c2:30:71:cc:6f:d1:a1:7b:09:ad:96:ef:88:05:34:19:0f:bf: f7:77:ee:ab:d6:a9:58:4b:b4:30:80:89:f5:3b:a4:9e:54:d9: bb:30:3e:3a:9c:63:21:bb:57:04:36:5f:99:f9:b2:04:74:36: 60:bf:d9:74:42:88:a0:1a:b5:fa:61:19:01:18:e3:41:e6:7a: 23:27:22:c2:89:45:e7:54:81:ac:59:8f:29:ff:16:84:63:d5: 16:bc:e1:4c:d0:22:ef:b3:f1:5d:1f:ba:0b:a6:1e:e9:57:49: cc:45:f9:7a:e7:72:7a:e3:50:34:dc:30:5b:1a:af:37:25:f7: 0b:af:1c:72:5c:bc:23:52:66:40:ef:76:60:55:9a:c6:5d:d6: d1:ef:27:df:39:ab:fb:93:6b:bb:3f:38:01:36:8b:e0:99:e1: 8d:3a:53:06:48:6d:5e:eb:03:0a:db:fc:82:09:9f:8a:ef:77: 6e:fe:96:6a:04:d9:52:e3:d1:f8:e1:4b:f1:b3:c9:1b:e0:38: 5f:1c:99:65:e4:71:a1:b0:9b:65:c2:e9:36:00:c1:1f:0a:f7: e9:c6:48:2b:46:ce:f2:f9:b2:aa:99:30:14:c3:88:70:19:bb: d7:55:f2:53 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0Op7cYozGCQMYVHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJhY2I4NzgtNmNmZC00NDA3LTk2MjAtY2MzMjhmNDNk MWJlMB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk NDJhMzBlNWMtNmZkZS00NmM2LThlMjUtNzdjYTU3MmJmNTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPQ+/tWwkRlmKWzo2zPRVHbN2mnm2jwQwKHn E3Kz5/nQLvkenvKUp7ud4Kb6+vfpaWJSCFBKDa7aNSDHNk0Fq5PMjD6wPeLJ7DDl +5X7Nnc8eXUJxNxOi3yGGV3uHHww+Ag9v9dKSGSbRJOooJh7WKUnkHzzihiF3n+Z C4GZjseJJ4wLXbQXhmgxzChwrUBkEBW+bCTpCyk5KnSb5GnJcKY10WdyvDnFAXYK iqQjs9xaASHyGFDIzMyldX5gWQOSv9v/slkbZeHJC5WWjqMX1JEKe796Iwh6HdM6 HfNdUvKqii0ODh0hg87bno8H07t0okRjMHAdh+AY85jd3mT7nQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJNrxb7uIM3bev8Axod+JZ+oTYNtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hMmFj Yjg3OC02Y2ZkLTQ0MDctOTYyMC1jYzMyOGY0M2QxYmUvYmM2ZDg1NzYtNDljOS0z ZjI1LWExMTktYzEwZWVhYzBhODA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYTJhY2I4NzgtNmNmZC00NDA3LTk2 MjAtY2MzMjhmNDNkMWJlL2EyYWNiODc4LTZjZmQtNDQwNy05NjIwLWNjMzI4ZjQz ZDFiZS5jcmwwHwYDVR0jBBgwFoAU5ekH2F66GkqsMZlF3w1bMCiaFnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hMmFjYjg3OC02Y2ZkLTQ0MDctOTYyMC1jYzMy OGY0M2QxYmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABIFAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAAhg/E4mb4Zdgeu892yw4htmSwjBxzG/RoXsJrZbviAU0GQ+/93fu q9apWEu0MICJ9TuknlTZuzA+OpxjIbtXBDZfmfmyBHQ2YL/ZdEKIoBq1+mEZARjj QeZ6IyciwolF51SBrFmPKf8WhGPVFrzhTNAi77PxXR+6C6Ye6VdJzEX5eudyeuNQ NNwwWxqvNyX3C68ccly8I1JmQO92YFWaxl3W0e8n3zmr+5Nruz84ATaL4JnhjTpT BkhtXusDCtv8ggmfiu93bv6WagTZUuPR+OFL8bPJG+A4XxyZZeRxobCbZcLpNgDB Hwr36cZIK0bO8vmyqpkwFMOIcBm711XyUw== -----END CERTIFICATE-----Generated at Thu Mar 26 23:51:47 2026 by rpki-client