$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2/bfe8deb0-ffe3-382d-a1f6-219f1d86885e.roa File: bfe8deb0-ffe3-382d-a1f6-219f1d86885e.roa (raw, json) Hash identifier: mokQuPH0Dm0vhjkJwiYodIkmkIUPouatzJljH0lWovA= Subject key identifier: 02:CF:50:90:35:D9:01:D2:35:9A:9E:EB:B3:AE:1C:19:EF:43:D5:BE Certificate issuer: /CN=8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2 Certificate serial: 010D0C9F4328584EA787FD3A75B744E59B462780 Authority key identifier: EE:A8:51:D9:D7:46:DC:F5:E4:A9:09:F5:FD:09:55:80:9E:83:40:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2/bfe8deb0-ffe3-382d-a1f6-219f1d86885e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 11623 IP address blocks: 2607:8540::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:fd:3a:75:b7:44:e5:9b:46:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c9d4d91c-8303-4edd-b8c4-c1be42c456b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c1:01:d8:22:6f:1a:98:43:5e:84:9c:e7:76: d9:5c:3a:24:77:55:42:1c:dc:48:4a:71:d8:1e:a2: 2b:a2:de:18:30:be:14:b9:ed:fc:0b:65:19:04:23: ed:0f:69:c7:d7:87:b8:f1:60:28:3e:44:b7:25:3e: b3:42:ea:85:b2:59:2a:0c:33:3c:5e:09:1d:78:02: c5:ea:c7:93:ec:54:ac:5c:0b:2a:a6:f0:62:2e:9d: 46:96:a7:b8:8f:57:24:4c:50:d1:f0:2b:3d:9f:1f: 43:f4:c0:dd:a6:aa:dc:e4:3b:48:97:ed:60:1c:55: 9c:b2:d6:5c:fc:26:86:81:ed:45:9d:21:ac:fe:7f: ff:88:72:f1:e6:1c:a2:4b:39:36:08:84:20:65:ac: 49:34:f6:d4:f1:1f:20:79:cc:c7:b2:ba:70:f9:8c: a1:61:ee:97:82:6e:32:8c:a0:90:52:ee:36:1d:c1: e8:9b:f7:57:6e:19:b3:07:74:a7:f8:3b:e9:56:fd: 63:9a:76:ff:96:98:ef:e2:7d:13:a6:53:61:fa:08: e0:9f:87:7d:5d:66:90:5d:22:38:b2:f0:c9:3c:5a: e0:6b:73:87:ff:5e:9a:3a:9e:e0:6d:6d:d9:d8:6c: dd:49:d1:58:69:d8:64:11:7b:12:fc:e9:d8:42:20: 82:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:CF:50:90:35:D9:01:D2:35:9A:9E:EB:B3:AE:1C:19:EF:43:D5:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2/bfe8deb0-ffe3-382d-a1f6-219f1d86885e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2.crl X509v3 Authority Key Identifier: keyid:EE:A8:51:D9:D7:46:DC:F5:E4:A9:09:F5:FD:09:55:80:9E:83:40:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2.cer sbgp-ipAddrBlock: critical IPv6: 2607:8540::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:f4:65:76:98:b2:8e:82:48:95:1d:10:26:9c:d9:ca:24:63: 4e:d0:51:f1:e5:8d:26:70:ad:7c:ac:55:66:d1:b2:4b:cb:cf: 82:07:af:22:55:77:af:15:6f:78:87:45:28:c9:3f:47:4b:32: 73:53:07:97:97:6d:60:7b:4c:71:b4:e3:d2:a2:e2:16:ba:65: c0:74:6b:cf:90:d4:c0:c9:db:20:f6:4b:1b:df:b0:be:df:dd: 40:d7:d9:a3:82:77:34:30:de:a8:77:ae:05:4b:9f:26:71:81: 9a:b4:44:ed:a8:f8:95:1e:7e:db:94:f3:fa:99:e2:e8:3e:0b: 01:a8:d9:2e:f7:12:cc:59:24:a5:80:02:9f:ca:35:0a:4b:45: a5:e3:ef:50:e8:ab:d0:b0:65:2a:a2:69:ef:03:a4:a3:12:c7: 31:88:5e:37:01:22:9b:de:7a:cf:1c:a0:5d:0d:0a:82:5a:e9: 20:51:7b:bc:56:82:50:1b:8f:b2:64:8e:3b:df:5e:4f:dd:52: df:ab:8c:26:4e:cf:df:ef:b0:d1:12:7c:c7:f1:cc:99:c1:c8: d5:43:91:c6:d7:ee:de:b6:71:43:f6:92:ff:08:d7:bd:f3:de: 88:8a:c7:3f:fb:e8:51:97:7c:f0:1c:09:d2:b5:8e:4e:2f:b5: 1f:bb:ba:f3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nh/06dbdE5ZtGJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMxZGJkOGItYWRmNi00OWZiLWI2NTAtNmVhY2ViMWUy OWIyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzlkNGQ5MWMtODMwMy00ZWRkLWI4YzQtYzFiZTQyYzQ1NmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8EB2CJvGphDXoSc53bZXDokd1VCHNxISnHY HqIrot4YML4Uue38C2UZBCPtD2nH14e48WAoPkS3JT6zQuqFslkqDDM8XgkdeALF 6seT7FSsXAsqpvBiLp1Glqe4j1ckTFDR8Cs9nx9D9MDdpqrc5DtIl+1gHFWcstZc /CaGge1FnSGs/n//iHLx5hyiSzk2CIQgZaxJNPbU8R8geczHsrpw+YyhYe6Xgm4y jKCQUu42HcHom/dXbhmzB3Sn+DvpVv1jmnb/lpjv4n0TplNh+gjgn4d9XWaQXSI4 svDJPFrga3OH/16aOp7gbW3Z2GzdSdFYadhkEXsS/OnYQiCCmwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFALPUJA12QHSNZqe67OuHBnvQ9W+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84YzFk YmQ4Yi1hZGY2LTQ5ZmItYjY1MC02ZWFjZWIxZTI5YjIvYmZlOGRlYjAtZmZlMy0z ODJkLWExZjYtMjE5ZjFkODY4ODVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGMxZGJkOGItYWRmNi00OWZiLWI2 NTAtNmVhY2ViMWUyOWIyLzhjMWRiZDhiLWFkZjYtNDlmYi1iNjUwLTZlYWNlYjFl MjliMi5jcmwwHwYDVR0jBBgwFoAU7qhR2ddG3PXkqQn1/QlVgJ6DQIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84YzFkYmQ4Yi1hZGY2LTQ5ZmItYjY1MC02ZWFj ZWIxZTI5YjIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgeFQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAr9GV2mLKOgkiVHRAmnNnKJGNO0FHx5Y0mcK18rFVm0bJLy8+CB68i VXevFW94h0UoyT9HSzJzUweXl21ge0xxtOPSouIWumXAdGvPkNTAydsg9ksb37C+ 391A19mjgnc0MN6od64FS58mcYGatETtqPiVHn7blPP6meLoPgsBqNku9xLMWSSl gAKfyjUKS0Wl4+9Q6KvQsGUqomnvA6SjEscxiF43ASKb3nrPHKBdDQqCWukgUXu8 VoJQG4+yZI47315P3VLfq4wmTs/f77DREnzH8cyZwcjVQ5HG1+7etnFD9pL/CNe9 896Iisc/++hRl3zwHAnStY5OL7Ufu7rz -----END CERTIFICATE-----Generated at Wed Jul 29 03:35:37 2026 by rpki-client