$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bf16245c-ee02-43a5-8f72-89ffd5b7bc6b/18edc0f7-e3d3-38a7-857a-545ee33cf29c.roa File: 18edc0f7-e3d3-38a7-857a-545ee33cf29c.roa (raw, json) Hash identifier: YWb2+YfW21SIr0eMST/WcANkR6NYQPHaTcZXrQN//7o= Subject key identifier: 7D:24:C8:F9:1E:9D:DE:14:40:10:91:1E:2F:74:05:97:CA:C0:3F:F7 Certificate issuer: /CN=bf16245c-ee02-43a5-8f72-89ffd5b7bc6b Certificate serial: 010D0C9F4328584F3317808F1F9216514C212050 Authority key identifier: 73:EF:11:6B:E9:B5:45:9F:F6:3F:C4:DF:61:F8:26:D1:32:10:DB:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bf16245c-ee02-43a5-8f72-89ffd5b7bc6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bf16245c-ee02-43a5-8f72-89ffd5b7bc6b/18edc0f7-e3d3-38a7-857a-545ee33cf29c.roa Signing time: Thu 17 Sep 2026 00:49:02 +0000 ROA not before: Thu 17 Sep 2026 00:49:02 +0000 ROA not after: Wed 16 Dec 2026 01:49:02 +0000 asID: 396144 IP address blocks: 2604:6340:301::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bf16245c-ee02-43a5-8f72-89ffd5b7bc6b/bf16245c-ee02-43a5-8f72-89ffd5b7bc6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bf16245c-ee02-43a5-8f72-89ffd5b7bc6b/bf16245c-ee02-43a5-8f72-89ffd5b7bc6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bf16245c-ee02-43a5-8f72-89ffd5b7bc6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:17:80:8f:1f:92:16:51:4c:21:20:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf16245c-ee02-43a5-8f72-89ffd5b7bc6b Validity Not Before: Sep 17 00:49:02 2026 GMT Not After : Dec 16 01:49:02 2026 GMT Subject: CN=f4daad0e-9a50-4327-906c-e00da686fc06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:89:1a:df:e6:2b:6b:c0:e6:33:58:df:92:09: f5:e4:ab:33:3d:9d:0b:8b:58:eb:f1:7e:b4:b7:4e: 72:66:45:dc:78:64:aa:c2:ff:42:23:27:19:8f:15: 1d:0e:ce:e7:72:46:d4:01:ef:c6:1c:ab:ee:e0:1c: de:ea:e0:30:9a:53:3d:4e:ba:8a:95:9c:73:dc:01: 23:81:c4:86:78:b3:ed:4b:13:92:b3:2f:6e:59:90: 85:46:bf:65:2b:92:60:55:5a:cb:41:12:93:b2:7e: dc:92:25:86:39:75:a2:9b:0f:5a:ff:9b:bd:8e:4e: fa:d3:86:31:e9:19:b7:1e:b7:dc:b6:f7:50:2e:81: 57:a7:99:82:c2:d9:33:6f:b6:a6:34:9f:27:cc:fd: 36:c6:ed:ef:25:31:28:7a:87:c6:1d:d9:bf:9f:bb: 26:f3:a8:16:9a:23:db:1b:64:d8:f8:ba:4a:9e:46: f9:db:a7:d0:1e:e4:a0:84:0b:89:d2:4a:e4:df:14: 84:60:f1:d8:3c:13:09:2b:e1:1d:50:b1:e3:60:49: 1d:78:63:87:d4:9f:18:45:04:a5:62:83:9d:0b:84: 47:cc:6a:78:38:ee:c1:b3:a5:4a:31:07:c3:0e:e1: f5:75:54:55:84:73:5c:46:31:e6:f4:ff:03:ac:11: 37:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:24:C8:F9:1E:9D:DE:14:40:10:91:1E:2F:74:05:97:CA:C0:3F:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bf16245c-ee02-43a5-8f72-89ffd5b7bc6b/18edc0f7-e3d3-38a7-857a-545ee33cf29c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bf16245c-ee02-43a5-8f72-89ffd5b7bc6b/bf16245c-ee02-43a5-8f72-89ffd5b7bc6b.crl X509v3 Authority Key Identifier: keyid:73:EF:11:6B:E9:B5:45:9F:F6:3F:C4:DF:61:F8:26:D1:32:10:DB:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bf16245c-ee02-43a5-8f72-89ffd5b7bc6b.cer sbgp-ipAddrBlock: critical IPv6: 2604:6340:301::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:4f:fe:e4:68:09:6c:8b:47:21:7a:d0:e5:c9:1b:fc:78:25: 5b:0c:9f:ff:66:9d:d1:e7:8c:2c:ad:44:15:78:3e:9a:c8:e0: 99:aa:f4:50:e7:1a:ae:a7:3a:74:34:31:48:07:2e:87:5e:55: 4f:9c:24:0c:d2:c2:7b:e3:af:af:ee:67:1d:01:4f:2f:fc:f7: 0d:0c:10:ac:42:57:e9:9d:cd:8e:9e:9c:c3:b0:a5:83:20:ae: 90:f9:9c:44:dc:53:0d:58:86:d2:3d:07:29:b5:f9:14:48:2d: 4d:47:89:fe:92:8d:c0:a1:22:85:ea:ae:71:52:a5:4d:24:c9: 3e:35:6a:a5:d7:a8:90:9b:cd:8b:32:21:f8:dc:5c:67:e3:cd: 9a:22:28:05:15:ab:fe:d6:c9:c1:d9:32:b7:37:7b:3e:70:92: f5:41:7e:02:8f:07:fb:1f:7d:42:85:6b:0f:97:67:b1:53:cb: d1:01:cd:81:a7:5c:65:38:81:16:87:33:17:14:5c:a8:b0:58: 80:db:65:bb:f8:ae:09:46:aa:74:82:37:ae:35:1c:76:1c:0e: bc:88:ea:df:6b:4a:ff:02:92:be:81:de:4f:39:a6:17:55:a3: 1f:4e:df:68:d6:37:6e:5e:25:3e:97:46:c2:c9:9e:3c:ba:6b: 1c:9d:6f:43 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8zF4CPH5IWUUwhIFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxNjI0NWMtZWUwMi00M2E1LThmNzItODlmZmQ1Yjdi YzZiMB4XDTI2MDkxNzAwNDkwMloXDTI2MTIxNjAxNDkwMlowLzEtMCsGA1UEAxMk ZjRkYWFkMGUtOWE1MC00MzI3LTkwNmMtZTAwZGE2ODZmYzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIka3+Yra8DmM1jfkgn15KszPZ0Li1jr8X60 t05yZkXceGSqwv9CIycZjxUdDs7nckbUAe/GHKvu4Bze6uAwmlM9TrqKlZxz3AEj gcSGeLPtSxOSsy9uWZCFRr9lK5JgVVrLQRKTsn7ckiWGOXWimw9a/5u9jk7604Yx 6Rm3HrfctvdQLoFXp5mCwtkzb7amNJ8nzP02xu3vJTEoeofGHdm/n7sm86gWmiPb G2TY+LpKnkb526fQHuSghAuJ0krk3xSEYPHYPBMJK+EdULHjYEkdeGOH1J8YRQSl YoOdC4RHzGp4OO7Bs6VKMQfDDuH1dVRVhHNcRjHm9P8DrBE35wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH0kyPkend4UQBCRHi90BZfKwD/3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9iZjE2 MjQ1Yy1lZTAyLTQzYTUtOGY3Mi04OWZmZDViN2JjNmIvMThlZGMwZjctZTNkMy0z OGE3LTg1N2EtNTQ1ZWUzM2NmMjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvYmYxNjI0NWMtZWUwMi00M2E1LThm NzItODlmZmQ1YjdiYzZiL2JmMTYyNDVjLWVlMDItNDNhNS04ZjcyLTg5ZmZkNWI3 YmM2Yi5jcmwwHwYDVR0jBBgwFoAUc+8Ra+m1RZ/2P8TfYfgm0TIQ2/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9iZjE2MjQ1Yy1lZTAyLTQzYTUtOGY3Mi04OWZm ZDViN2JjNmIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgRjQAMB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACFP/uRoCWyLRyF60OXJG/x4JVsMn/9mndHnjCytRBV4PprI4Jmq 9FDnGq6nOnQ0MUgHLodeVU+cJAzSwnvjr6/uZx0BTy/89w0MEKxCV+mdzY6enMOw pYMgrpD5nETcUw1YhtI9Bym1+RRILU1Hif6SjcChIoXqrnFSpU0kyT41aqXXqJCb zYsyIfjcXGfjzZoiKAUVq/7WycHZMrc3ez5wkvVBfgKPB/sffUKFaw+XZ7FTy9EB zYGnXGU4gRaHMxcUXKiwWIDbZbv4rglGqnSCN641HHYcDryI6t9rSv8Ckr6B3k85 phdVox9O32jWN25eJT6XRsLJnjy6axydb0M= -----END CERTIFICATE-----Generated at Wed Sep 23 18:22:40 2026 by rpki-client