
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/bf8f855d-79d9-359a-b716-f369f7368f3d.roa
File: bf8f855d-79d9-359a-b716-f369f7368f3d.roa (raw, json)
Hash identifier: BtcC8zbfvQBfS4olk8AdKVn1dzjdnjSSaM/sw8TL3zo=
Subject key identifier: 39:F6:52:14:01:F1:A7:13:60:56:16:93:FC:BA:64:3D:CE:6C:95:A6
Certificate issuer: /CN=8baf6f06-4472-4c79-8a01-5c338d64c402
Certificate serial: 010D0C9F4328584F4975AE2E84F0124CC20004E0
Authority key identifier: 95:D3:B5:8C:0D:5D:5F:85:19:CD:8F:FA:39:F4:82:C2:33:BB:9D:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/bf8f855d-79d9-359a-b716-f369f7368f3d.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 401082
IP address blocks: 2602:f8b4::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:75:ae:2e:84:f0:12:4c:c2:00:04:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8baf6f06-4472-4c79-8a01-5c338d64c402
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=ce496cfd-7440-42ee-bf84-2a2f0146f31f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c8:32:8f:d2:95:e8:db:65:41:c2:2c:ad:34:
3c:c7:a0:91:3e:c5:2c:8a:92:2f:e1:92:a2:3b:7d:
dd:45:c7:32:1e:92:fe:a4:53:f7:36:c9:d9:c2:94:
c8:bf:ec:74:be:9f:18:18:bb:16:91:8c:79:d7:dd:
db:c7:b0:be:a1:3b:70:0f:57:31:48:07:fe:aa:c6:
49:be:a7:4f:5c:53:d3:9e:96:99:b1:5d:9f:60:7e:
2b:44:73:9f:90:9b:4d:d4:ef:d6:c8:e5:d7:e6:eb:
ae:ca:f0:11:81:3e:f9:ec:2a:d5:02:e4:13:83:c1:
76:7a:dd:66:6e:43:4a:ee:fc:1f:77:df:56:bf:05:
de:89:6c:f9:09:86:df:60:0d:64:3d:6e:15:ad:b0:
e1:0a:80:b2:90:25:b2:1b:9a:25:3d:40:a3:f5:cf:
48:b7:45:22:87:bc:c0:85:fa:e2:c6:af:76:89:12:
c1:28:a8:2a:fe:0e:8b:21:65:74:f2:7a:cb:b9:24:
be:3b:6b:91:1a:f8:5b:8b:a5:31:19:94:4b:0d:e1:
2f:45:0e:57:1d:6f:80:a2:22:31:8c:0c:55:07:cc:
1d:f8:24:1f:26:f8:50:70:c4:48:a6:70:60:d6:ac:
93:37:f5:6a:2d:51:92:24:51:d7:f7:4d:12:dd:6b:
c3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F6:52:14:01:F1:A7:13:60:56:16:93:FC:BA:64:3D:CE:6C:95:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/bf8f855d-79d9-359a-b716-f369f7368f3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.crl
X509v3 Authority Key Identifier:
keyid:95:D3:B5:8C:0D:5D:5F:85:19:CD:8F:FA:39:F4:82:C2:33:BB:9D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f8b4::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:a3:56:90:b1:eb:d0:1b:04:3f:47:d4:57:f7:0d:be:3c:d9:
a1:74:74:7d:8f:dc:f8:06:34:ca:46:a9:74:de:77:61:13:1d:
f9:aa:84:d9:33:99:34:96:71:c7:1f:31:ab:13:9b:d2:99:b7:
d4:90:58:73:42:b4:88:54:8b:f0:6d:c1:f8:1f:6e:af:fa:b9:
49:91:02:70:ec:ed:f2:f4:1b:11:70:f5:fe:83:e5:1b:40:58:
26:4f:e6:07:e4:b8:44:52:da:4b:26:5d:e2:5e:96:a8:50:3b:
06:e9:53:0d:a7:cc:69:5f:aa:48:40:52:98:1f:37:73:8d:e0:
b8:fc:88:de:6e:91:3a:98:6b:c7:06:6c:54:2d:3b:31:07:f9:
be:65:1e:1f:18:2f:ba:d4:6d:39:b9:e9:d3:f9:df:33:ee:8e:
43:81:d0:1b:bc:75:56:57:f9:9f:b8:a1:bc:84:1e:94:02:52:
4a:80:cc:cc:c7:de:c4:18:50:d7:b2:b3:d7:fa:44:87:ad:f1:
5c:af:7a:a9:88:4c:b5:e8:42:63:06:76:c6:d1:1c:98:92:6c:
52:be:37:a2:a2:4e:53:3e:e8:5a:3d:c7:92:97:df:03:76:a7:
78:ce:4e:cc:fd:bb:14:ae:bd:81:1f:e6:1c:c6:fa:33:df:e9:
38:1a:5f:86
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9Jda4uhPASTMIABOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGJhZjZmMDYtNDQ3Mi00Yzc5LThhMDEtNWMzMzhkNjRj
NDAyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
Y2U0OTZjZmQtNzQ0MC00MmVlLWJmODQtMmEyZjAxNDZmMzFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucgyj9KV6NtlQcIsrTQ8x6CRPsUsipIv4ZKi
O33dRccyHpL+pFP3NsnZwpTIv+x0vp8YGLsWkYx5193bx7C+oTtwD1cxSAf+qsZJ
vqdPXFPTnpaZsV2fYH4rRHOfkJtN1O/WyOXX5uuuyvARgT757CrVAuQTg8F2et1m
bkNK7vwfd99WvwXeiWz5CYbfYA1kPW4VrbDhCoCykCWyG5olPUCj9c9It0Uih7zA
hfrixq92iRLBKKgq/g6LIWV08nrLuSS+O2uRGvhbi6UxGZRLDeEvRQ5XHW+AoiIx
jAxVB8wd+CQfJvhQcMRIpnBg1qyTN/VqLVGSJFHX900S3WvDUQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDn2UhQB8acTYFYWk/y6ZD3ObJWmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YmFm
NmYwNi00NDcyLTRjNzktOGEwMS01YzMzOGQ2NGM0MDIvYmY4Zjg1NWQtNzlkOS0z
NTlhLWI3MTYtZjM2OWY3MzY4ZjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGJhZjZmMDYtNDQ3Mi00Yzc5LThh
MDEtNWMzMzhkNjRjNDAyLzhiYWY2ZjA2LTQ0NzItNGM3OS04YTAxLTVjMzM4ZDY0
YzQwMi5jcmwwHwYDVR0jBBgwFoAUldO1jA1dX4UZzY/6OfSCwjO7nRYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84YmFmNmYwNi00NDcyLTRjNzktOGEwMS01YzMz
OGQ2NGM0MDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4tAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEACKNWkLHr0BsEP0fUV/cNvjzZoXR0fY/c+AY0ykapdN53YRMd+aqE
2TOZNJZxxx8xqxOb0pm31JBYc0K0iFSL8G3B+B9ur/q5SZECcOzt8vQbEXD1/oPl
G0BYJk/mB+S4RFLaSyZd4l6WqFA7BulTDafMaV+qSEBSmB83c43guPyI3m6ROphr
xwZsVC07MQf5vmUeHxgvutRtObnp0/nfM+6OQ4HQG7x1Vlf5n7ihvIQelAJSSoDM
zMfexBhQ17Kz1/pEh63xXK96qYhMtehCYwZ2xtEcmJJsUr43oqJOUz7oWj3Hkpff
A3aneM5OzP27FK69gR/mHMb6M9/pOBpfhg==
-----END CERTIFICATE-----
Generated at Mon Sep 28 23:33:40 2026 by rpki-client