$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfc41708-a005-3546-b072-89e8b9890306.roa File: bfc41708-a005-3546-b072-89e8b9890306.roa (raw, json) Hash identifier: b3+yHNrMd9ZO25JbbudaZihsUZyeGrM/Pt9E1ExDKfc= Subject key identifier: 42:6A:FD:10:E1:57:31:5F:9A:C7:20:98:8F:9E:07:D9:AE:7B:05:15 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F498C384ED4C6AFF18BBB6B80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfc41708-a005-3546-b072-89e8b9890306.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 2600:1902:2b0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8c:38:4e:d4:c6:af:f1:8b:bb:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=33cb5fcf-020b-40e3-9acb-26051237bdd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:9c:ad:fb:d3:f0:72:05:48:8e:da:28:d7:af: fc:95:4d:67:ec:00:dc:9b:39:57:8e:34:eb:bb:36: fd:6d:51:d1:7b:fc:87:01:03:46:7c:28:5c:cd:74: 57:45:07:99:89:8d:4b:8e:b1:d2:d0:c2:fe:6b:c1: 8c:1e:3e:10:6d:eb:d0:2d:e8:6f:b2:5f:e0:51:9c: 80:78:22:da:d2:a4:7c:0d:2a:41:7d:d3:5a:f1:e5: cf:a8:6d:05:ab:ca:b0:94:3f:1e:e5:32:31:29:54: 0d:14:fd:09:12:f1:7b:83:7b:aa:06:da:4d:f6:63: 06:ec:a6:a8:53:d1:35:3a:39:56:89:4b:18:f9:42: 6b:4b:f0:bf:b1:a7:16:bc:4f:53:a0:0d:e9:6e:d2: 83:aa:f7:3d:45:26:5b:42:48:f9:7e:70:48:02:cc: 66:ca:d2:34:d9:84:a1:8d:b7:93:a7:d4:08:6d:e7: 81:42:3d:27:a7:af:2e:5a:ee:5d:7c:ec:58:69:07: c5:c8:d7:f3:e1:de:64:53:91:ab:3e:9d:13:9a:6f: 25:8f:c1:ec:0e:65:9e:d5:37:f7:fc:a7:e6:b6:8c: a2:e1:36:0b:8d:95:6d:ee:83:a8:31:c6:85:b4:4f: 7a:6c:39:04:a7:e0:52:e4:73:41:7c:30:80:83:ab: 2f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6A:FD:10:E1:57:31:5F:9A:C7:20:98:8F:9E:07:D9:AE:7B:05:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bfc41708-a005-3546-b072-89e8b9890306.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv6: 2600:1902:2b0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:d1:09:03:58:67:f2:30:b1:ed:69:c8:c3:9e:cf:c8:5e:b3: 07:60:64:8a:fe:89:26:10:7e:80:51:de:d3:45:b6:e8:2e:52: 56:89:a1:51:7f:67:53:48:21:73:c8:74:c5:a8:d7:99:b6:41: 89:01:86:11:0c:99:76:16:22:3e:a5:20:e1:fb:88:93:3d:b9: f6:9e:4e:ff:94:72:29:f5:50:58:c7:02:3b:fe:e5:75:16:a9: 07:da:29:05:a7:a1:f2:11:05:10:eb:2c:6b:f2:32:52:f7:03: e2:9c:a4:f0:55:b8:80:f5:1e:97:bc:1c:34:3a:27:b7:10:be: 64:18:06:61:09:7b:d5:ae:3c:f5:ea:86:6d:af:f9:b3:79:a8: 05:7a:d1:95:b3:65:93:3e:67:bb:0b:5d:f9:45:1e:8e:f8:08: e5:40:86:fe:16:c1:48:89:57:c9:08:98:3b:df:4c:a1:b0:d9: d4:95:93:87:44:bf:fb:fa:47:ae:f4:8f:b1:8a:b0:f3:c6:e8: 31:97:cb:23:2f:7f:e9:d2:af:29:4a:18:3a:29:f4:57:1b:47: d0:44:f8:67:e1:25:14:50:57:a6:94:61:48:2f:5d:de:7b:cd: b0:86:4f:85:6a:2d:3f:57:07:a2:29:e0:12:74:92:3b:35:45: b6:ab:61:21 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JjDhO1Mav8Yu7a4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzNjYjVmY2YtMDIwYi00MGUzLTlhY2ItMjYwNTEyMzdiZGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJyt+9PwcgVIjtoo16/8lU1n7ADcmzlXjjTr uzb9bVHRe/yHAQNGfChczXRXRQeZiY1LjrHS0ML+a8GMHj4QbevQLehvsl/gUZyA eCLa0qR8DSpBfdNa8eXPqG0Fq8qwlD8e5TIxKVQNFP0JEvF7g3uqBtpN9mMG7Kao U9E1OjlWiUsY+UJrS/C/sacWvE9ToA3pbtKDqvc9RSZbQkj5fnBIAsxmytI02YSh jbeTp9QIbeeBQj0np68uWu5dfOxYaQfFyNfz4d5kU5GrPp0Tmm8lj8HsDmWe1Tf3 /Kfmtoyi4TYLjZVt7oOoMcaFtE96bDkEp+BS5HNBfDCAg6svQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEJq/RDhVzFfmscgmI+eB9muewUVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmZjNDE3MDgtYTAwNS0z NTQ2LWIwNzItODllOGI5ODkwMzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAZAgKw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFnRCQNYZ/Iwse1pyMOez8heswdgZIr+iSYQfoBR3tNFtuguUlaJ oVF/Z1NIIXPIdMWo15m2QYkBhhEMmXYWIj6lIOH7iJM9ufaeTv+Ucin1UFjHAjv+ 5XUWqQfaKQWnofIRBRDrLGvyMlL3A+KcpPBVuID1Hpe8HDQ6J7cQvmQYBmEJe9Wu PPXqhm2v+bN5qAV60ZWzZZM+Z7sLXflFHo74COVAhv4WwUiJV8kImDvfTKGw2dSV k4dEv/v6R670j7GKsPPG6DGXyyMvf+nSrylKGDop9FcbR9BE+GfhJRRQV6aUYUgv Xd57zbCGT4VqLT9XB6Ip4BJ0kjs1RbarYSE= -----END CERTIFICATE-----Generated at Tue Oct 13 19:09:58 2026 by rpki-client