$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bf0d8f5a-37be-31d2-bc71-22237b74a3e6.roa File: bf0d8f5a-37be-31d2-bc71-22237b74a3e6.roa (raw, json) Hash identifier: jfo9na61rhWs9SzW/4mb4ivL+2kTVfBrMyAI885ORRI= Subject key identifier: 40:A1:ED:3B:9D:F9:F1:48:19:0B:D0:75:AF:68:6D:D2:A2:73:58:F8 Certificate issuer: /CN=bc3bcc6d-6679-419c-8300-bdebdffc8ffd Certificate serial: 010D0C9F4328584EFE1224195B41DF1CE44ECAC0 Authority key identifier: CC:59:79:C9:D5:F2:E0:6A:F8:9F:25:4F:78:84:1B:76:E3:65:E4:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bf0d8f5a-37be-31d2-bc71-22237b74a3e6.roa Signing time: Sat 29 Aug 2026 01:00:12 +0000 ROA not before: Sat 29 Aug 2026 01:00:12 +0000 ROA not after: Fri 27 Nov 2026 02:00:12 +0000 asID: 398698 IP address blocks: 2605:eac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fe:12:24:19:5b:41:df:1c:e4:4e:ca:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc3bcc6d-6679-419c-8300-bdebdffc8ffd Validity Not Before: Aug 29 01:00:12 2026 GMT Not After : Nov 27 02:00:12 2026 GMT Subject: CN=48f246ca-e270-4a39-9060-09cdfa89f1a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:e0:0d:ab:f9:b8:9e:59:bb:1c:18:98:25:ee: fb:e5:5f:3d:b3:c5:4b:c2:54:69:cf:a3:66:ca:f1: a8:93:3a:9c:35:39:59:02:9a:c1:ea:0f:31:0a:1c: c3:98:4b:49:fc:5e:9d:c0:b8:f5:e8:ef:2b:b7:51: 01:24:d7:d3:c8:f9:bf:59:65:d9:72:f9:9a:df:c4: db:56:da:00:a4:7a:97:84:44:fb:20:0f:94:1d:c1: 01:2c:3d:fd:7e:34:be:bd:f4:5b:e0:6f:b6:07:84: f1:19:1c:04:fb:5f:c6:2b:9a:6a:33:5e:85:d9:49: 0c:c8:b0:d3:32:e6:a4:41:33:63:64:33:01:cd:b0: d1:58:44:e4:cd:20:65:d6:02:43:ef:40:88:5c:1f: 12:24:e3:94:90:d2:88:30:f0:c4:87:bb:70:2c:58: 06:ba:f3:3d:1a:30:88:9f:b5:28:30:ed:a5:20:4a: 90:78:3d:98:39:0c:56:ff:0a:10:d8:1f:f3:26:5b: b6:4b:08:dc:55:32:e3:5c:13:c2:79:a7:aa:92:c1: c7:19:e7:64:ba:af:98:f1:3a:43:d2:93:d6:f0:15: b1:24:ac:24:f0:73:13:4f:bb:2c:d6:f4:57:c0:0d: 78:0a:6d:eb:c7:bb:ea:d2:c1:a2:4a:c7:b1:9d:a7: ce:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A1:ED:3B:9D:F9:F1:48:19:0B:D0:75:AF:68:6D:D2:A2:73:58:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bf0d8f5a-37be-31d2-bc71-22237b74a3e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.crl X509v3 Authority Key Identifier: keyid:CC:59:79:C9:D5:F2:E0:6A:F8:9F:25:4F:78:84:1B:76:E3:65:E4:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.cer sbgp-ipAddrBlock: critical IPv6: 2605:eac0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:f2:da:3f:07:e0:55:10:71:71:29:d5:77:2b:49:2f:a1:10: 04:69:b0:b1:b8:ba:b8:6c:b6:1f:c1:3b:f2:37:16:33:f6:4e: 10:73:8d:45:e2:66:8e:54:52:e7:f9:fc:2c:4c:30:a6:72:dd: a0:cb:ef:1a:90:36:19:5a:7a:e3:1c:b6:4a:9d:60:cc:26:d9: 46:68:1d:10:1c:33:86:9a:48:c9:6f:50:60:ab:aa:c1:91:bf: 79:ec:76:5d:f2:99:79:ee:2d:43:0a:4d:aa:6f:52:a0:dd:09: 98:31:e4:ac:be:42:b4:c6:25:0a:b7:b2:4a:c7:07:5d:ab:61: 76:87:0b:dc:7e:63:2b:cc:c8:33:47:a2:e6:89:6c:70:48:d0: 42:e3:bd:e1:86:35:0e:d7:58:5b:e8:67:99:75:59:6f:c1:e6: f6:b8:7a:d3:64:bd:6a:b1:63:21:6e:6f:9d:1b:4b:f4:67:18: 4a:ef:e6:ca:02:2b:ae:36:7c:e2:ed:ba:fb:47:9e:75:2e:a4: 84:12:b2:7a:e9:5d:63:f8:a3:77:b0:fb:00:20:4d:4a:38:5f: 4c:d7:5c:72:0d:ea:d9:06:4f:9a:20:64:10:0d:e0:c5:38:3c: 10:9e:a3:3d:9d:58:da:bc:98:68:73:ea:80:d6:7d:12:4d:81: e5:70:09:e0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7+EiQZW0HfHOROysAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzYmNjNmQtNjY3OS00MTljLTgzMDAtYmRlYmRmZmM4 ZmZkMB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk NDhmMjQ2Y2EtZTI3MC00YTM5LTkwNjAtMDljZGZhODlmMWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8OANq/m4nlm7HBiYJe775V89s8VLwlRpz6Nm yvGokzqcNTlZAprB6g8xChzDmEtJ/F6dwLj16O8rt1EBJNfTyPm/WWXZcvma38Tb VtoApHqXhET7IA+UHcEBLD39fjS+vfRb4G+2B4TxGRwE+1/GK5pqM16F2UkMyLDT MuakQTNjZDMBzbDRWETkzSBl1gJD70CIXB8SJOOUkNKIMPDEh7twLFgGuvM9GjCI n7UoMO2lIEqQeD2YOQxW/woQ2B/zJlu2SwjcVTLjXBPCeaeqksHHGedkuq+Y8TpD 0pPW8BWxJKwk8HMTT7ss1vRXwA14Cm3rx7vq0sGiSsexnafOTwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFECh7Tud+fFIGQvQda9obdKic1j4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iYzNi Y2M2ZC02Njc5LTQxOWMtODMwMC1iZGViZGZmYzhmZmQvYmYwZDhmNWEtMzdiZS0z MWQyLWJjNzEtMjIyMzdiNzRhM2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYmMzYmNjNmQtNjY3OS00MTljLTgz MDAtYmRlYmRmZmM4ZmZkL2JjM2JjYzZkLTY2NzktNDE5Yy04MzAwLWJkZWJkZmZj OGZmZC5jcmwwHwYDVR0jBBgwFoAUzFl5ydXy4Gr4nyVPeIQbduNl5EkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iYzNiY2M2ZC02Njc5LTQxOWMtODMwMC1iZGVi ZGZmYzhmZmQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXqwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCj8to/B+BVEHFxKdV3K0kvoRAEabCxuLq4bLYfwTvyNxYz9k4Qc41F 4maOVFLn+fwsTDCmct2gy+8akDYZWnrjHLZKnWDMJtlGaB0QHDOGmkjJb1Bgq6rB kb957HZd8pl57i1DCk2qb1Kg3QmYMeSsvkK0xiUKt7JKxwddq2F2hwvcfmMrzMgz R6LmiWxwSNBC473hhjUO11hb6GeZdVlvweb2uHrTZL1qsWMhbm+dG0v0ZxhK7+bK AiuuNnzi7br7R551LqSEErJ66V1j+KN3sPsAIE1KOF9M11xyDerZBk+aIGQQDeDF ODwQnqM9nVjavJhoc+qA1n0STYHlcAng -----END CERTIFICATE-----Generated at Mon Sep 21 14:24:58 2026 by rpki-client