$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/bf3d6c30-fa23-3d6b-8695-4d3554136f00.roa File: bf3d6c30-fa23-3d6b-8695-4d3554136f00.roa (raw, json) Hash identifier: n+Gzgy6jFzTkfEMN5jN6q6XskkH8O4N6dfz8BKA0s2U= Subject key identifier: D4:91:86:AB:50:A8:03:FF:32:6E:48:2D:E4:8F:DB:1E:8D:41:E1:77 Certificate issuer: /CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8 Certificate serial: 010D0C9F4328584F35E7C64377A08AD9A073F280 Authority key identifier: 7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/bf3d6c30-fa23-3d6b-8695-4d3554136f00.roa Signing time: Fri 18 Sep 2026 01:00:12 +0000 ROA not before: Fri 18 Sep 2026 01:00:12 +0000 ROA not after: Thu 17 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 2602:faca:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:35:e7:c6:43:77:a0:8a:d9:a0:73:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8 Validity Not Before: Sep 18 01:00:12 2026 GMT Not After : Dec 17 02:00:12 2026 GMT Subject: CN=60bc4d84-f1d0-45af-8aab-37d849e47037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e2:38:32:d8:40:9f:d9:bf:bd:9f:04:2c:de: 2b:99:0d:00:de:80:ed:0b:96:bf:8b:84:ba:c3:5d: 8f:a7:fa:29:60:5d:2a:b8:e2:47:58:62:a7:7b:e6: b8:72:32:a5:04:18:6e:c7:56:db:f7:46:83:26:c3: 57:78:4a:10:a6:25:75:88:c8:37:98:06:bd:78:77: 6a:14:a9:9b:19:37:6a:19:d2:41:ff:b4:4e:d6:e5: 02:a4:27:cf:08:48:05:ce:86:0b:b9:99:19:02:01: 69:d2:c3:f2:6e:e3:40:b8:dc:ef:48:98:99:f9:7b: 45:b5:6c:7c:c2:38:51:0d:36:ba:e6:4e:1d:83:04: 0a:99:1d:23:9f:d1:46:98:8b:af:f7:8a:00:01:7c: 95:6c:22:eb:44:ca:e2:55:38:5c:4d:ea:78:f6:e9: fc:b6:d3:88:bb:ba:ae:89:5d:cf:e7:f5:dd:72:14: 55:95:c7:66:f0:43:8c:db:0d:e5:65:7a:c2:94:33: 00:93:dc:85:e3:f2:5e:3d:76:23:d3:99:b4:ec:2f: 1c:ff:d6:9b:0c:cb:b7:9b:82:13:57:d8:85:c6:c4: 14:6e:c8:b1:ae:be:ff:08:df:92:e6:4b:06:9f:16: 99:4b:19:5e:7d:27:11:52:27:68:f1:98:6a:32:40: 34:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:91:86:AB:50:A8:03:FF:32:6E:48:2D:E4:8F:DB:1E:8D:41:E1:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/bf3d6c30-fa23-3d6b-8695-4d3554136f00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl X509v3 Authority Key Identifier: keyid:7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer sbgp-ipAddrBlock: critical IPv6: 2602:faca:100::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:ac:2a:40:52:a7:26:ca:42:82:ee:a7:fe:f1:19:0b:32:92: 62:c6:46:f9:62:de:8e:c9:bf:eb:e3:1f:e6:4e:12:01:2f:2b: ab:1d:93:d6:30:10:4b:1d:47:53:b9:88:ba:b3:c5:cb:a8:d7: 39:bd:03:b6:40:36:0c:ca:17:15:4c:f7:5d:0e:63:25:c4:92: 3c:ea:07:6f:92:45:00:f3:57:23:c3:ef:94:39:9b:70:ca:41: a5:17:7a:8e:34:37:08:43:db:76:92:dc:f0:07:88:41:60:d8: 72:a5:68:1f:fe:1e:ed:2e:97:f1:ec:d8:f5:dd:3a:69:f1:da: 30:c5:bd:f3:26:9d:cd:e5:a3:64:f4:49:7d:ff:b5:5a:82:a8: b3:38:18:33:29:5e:5c:b5:38:8d:1f:ea:0b:b5:b0:2a:47:22: 90:aa:fc:5d:52:85:87:a7:af:48:f8:07:01:66:bd:ec:e5:68: 46:bc:08:7c:4d:8c:a2:41:2a:56:57:63:6d:22:34:a7:01:ba: 0d:89:12:ef:83:57:1c:a7:11:56:c0:aa:f6:1f:22:a7:a5:77: c6:d0:5e:63:cb:4b:0f:d6:82:0b:46:9c:9d:ef:d5:5e:78:0f: 63:c4:14:41:49:a2:60:f5:a9:4b:8c:75:a1:78:73:66:4b:b0: f0:9f:fb:4d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8158ZDd6CK2aBz8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU0MzNjMWYtYTA3Mi00ZGZkLTgwOTYtYzZjODYzNGE0 OWY4MB4XDTI2MDkxODAxMDAxMloXDTI2MTIxNzAyMDAxMlowLzEtMCsGA1UEAxMk NjBiYzRkODQtZjFkMC00NWFmLThhYWItMzdkODQ5ZTQ3MDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuI4MthAn9m/vZ8ELN4rmQ0A3oDtC5a/i4S6 w12Pp/opYF0quOJHWGKne+a4cjKlBBhux1bb90aDJsNXeEoQpiV1iMg3mAa9eHdq FKmbGTdqGdJB/7RO1uUCpCfPCEgFzoYLuZkZAgFp0sPybuNAuNzvSJiZ+XtFtWx8 wjhRDTa65k4dgwQKmR0jn9FGmIuv94oAAXyVbCLrRMriVThcTep49un8ttOIu7qu iV3P5/XdchRVlcdm8EOM2w3lZXrClDMAk9yF4/JePXYj05m07C8c/9abDMu3m4IT V9iFxsQUbsixrr7/CN+S5ksGnxaZSxlefScRUido8ZhqMkA0/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNSRhqtQqAP/Mm5ILeSP2x6NQeF3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZTQz M2MxZi1hMDcyLTRkZmQtODA5Ni1jNmM4NjM0YTQ5ZjgvYmYzZDZjMzAtZmEyMy0z ZDZiLTg2OTUtNGQzNTU0MTM2ZjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGU0MzNjMWYtYTA3Mi00ZGZkLTgw OTYtYzZjODYzNGE0OWY4LzhlNDMzYzFmLWEwNzItNGRmZC04MDk2LWM2Yzg2MzRh NDlmOC5jcmwwHwYDVR0jBBgwFoAUf5Rf3H0zcSnURH4cJ0ZvWGrU4icwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZTQzM2MxZi1hMDcyLTRkZmQtODA5Ni1jNmM4 NjM0YTQ5ZjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6ygEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFGsKkBSpybKQoLup/7xGQsykmLGRvli3o7Jv+vjH+ZOEgEvK6sd k9YwEEsdR1O5iLqzxcuo1zm9A7ZANgzKFxVM910OYyXEkjzqB2+SRQDzVyPD75Q5 m3DKQaUXeo40NwhD23aS3PAHiEFg2HKlaB/+Hu0ul/Hs2PXdOmnx2jDFvfMmnc3l o2T0SX3/tVqCqLM4GDMpXly1OI0f6gu1sCpHIpCq/F1ShYenr0j4BwFmvezlaEa8 CHxNjKJBKlZXY20iNKcBug2JEu+DVxynEVbAqvYfIqeld8bQXmPLSw/WggtGnJ3v 1V54D2PEFEFJomD1qUuMdaF4c2ZLsPCf+00= -----END CERTIFICATE-----Generated at Sun Sep 20 17:28:33 2026 by rpki-client