$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bfb16251-8a46-41ea-abc1-b785c8d4dc90/b2371025-cb5d-3d7b-a14c-acc0a9bdf41b.roa File: b2371025-cb5d-3d7b-a14c-acc0a9bdf41b.roa (raw, json) Hash identifier: XywSCiwW5IrIVzLpZoBRwMjmms/g9CVxGpQ9KyNMgvI= Subject key identifier: 17:BD:2C:9E:74:3F:E3:C0:49:2D:E7:5F:00:CA:19:71:F7:4C:68:DB Certificate issuer: /CN=bfb16251-8a46-41ea-abc1-b785c8d4dc90 Certificate serial: 010D0C9F4328584EA0155D4E853A8E56A25CD4A0 Authority key identifier: 34:5F:46:B2:98:49:F4:7A:2B:C2:45:64:40:80:B3:A6:48:37:1A:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bfb16251-8a46-41ea-abc1-b785c8d4dc90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bfb16251-8a46-41ea-abc1-b785c8d4dc90/b2371025-cb5d-3d7b-a14c-acc0a9bdf41b.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 402162 IP address blocks: 2604:b2c0::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bfb16251-8a46-41ea-abc1-b785c8d4dc90/bfb16251-8a46-41ea-abc1-b785c8d4dc90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bfb16251-8a46-41ea-abc1-b785c8d4dc90/bfb16251-8a46-41ea-abc1-b785c8d4dc90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bfb16251-8a46-41ea-abc1-b785c8d4dc90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:5d:4e:85:3a:8e:56:a2:5c:d4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfb16251-8a46-41ea-abc1-b785c8d4dc90 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=28f0f9fe-5376-4d1c-84cf-ecb5ba2692cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:87:f9:2c:37:80:2f:fd:a7:ff:57:29:90:df: 1c:1d:61:59:43:22:c3:71:ab:39:29:2a:dc:3a:69: 70:dc:ca:4c:21:92:e3:a1:21:99:f0:54:6b:2f:7b: 6c:aa:af:4e:8a:f2:26:1d:e5:1c:6a:84:2f:c2:12: 38:78:c4:d6:26:2a:98:9a:81:30:e1:9e:23:13:3f: 63:e4:fc:63:fe:40:fd:5b:3b:80:2b:1a:3c:98:78: da:77:87:14:c0:d3:f4:85:30:76:eb:91:05:6a:a7: 76:0c:11:8a:5a:b5:37:e6:1f:29:de:d3:13:67:63: d7:c6:f6:e0:e2:e2:a5:7f:f7:57:12:cb:de:26:91: 6a:1f:93:46:9d:9a:d2:41:0f:df:69:ad:53:4a:aa: 37:83:50:02:26:50:2b:57:8e:68:51:ca:3e:d2:ff: 40:37:00:63:c0:5f:d4:e8:5b:32:fb:b2:5f:33:f3: 8a:d4:24:18:56:81:13:6b:13:88:ec:c9:1b:31:39: 39:59:e1:66:05:ee:46:5f:b7:a0:c7:d6:c4:99:9c: f1:1f:59:26:40:9b:f3:5f:54:38:78:56:9f:c4:44: fc:46:74:cd:50:ae:51:2d:84:ff:02:c1:66:ce:a1: 16:d4:0c:2d:b2:15:84:9e:70:3d:d6:73:fa:2f:8a: 2a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:BD:2C:9E:74:3F:E3:C0:49:2D:E7:5F:00:CA:19:71:F7:4C:68:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bfb16251-8a46-41ea-abc1-b785c8d4dc90/b2371025-cb5d-3d7b-a14c-acc0a9bdf41b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bfb16251-8a46-41ea-abc1-b785c8d4dc90/bfb16251-8a46-41ea-abc1-b785c8d4dc90.crl X509v3 Authority Key Identifier: keyid:34:5F:46:B2:98:49:F4:7A:2B:C2:45:64:40:80:B3:A6:48:37:1A:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bfb16251-8a46-41ea-abc1-b785c8d4dc90.cer sbgp-ipAddrBlock: critical IPv6: 2604:b2c0::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:30:7b:13:d4:5e:1d:eb:6e:a9:97:ce:38:62:e8:eb:86:a2: 2c:78:da:93:bf:6f:5b:91:af:fb:0d:43:82:71:ba:99:a5:3e: 7e:5f:84:e8:c8:cf:6e:28:97:c8:eb:eb:f0:4e:e2:fd:aa:bd: 82:74:7e:9f:7a:d6:11:48:59:61:78:ca:97:f2:a9:92:ee:22: 07:48:f8:40:b5:bd:f7:b7:a3:9f:b5:b1:fe:2e:55:c0:b9:c9: c1:69:2e:a8:3b:28:4f:24:c9:98:e7:16:a7:5a:0a:17:79:9e: c8:99:dc:a9:8d:cb:08:a9:e2:32:0a:27:13:8c:dd:8a:b7:e7: 97:b0:43:8e:08:02:32:3f:36:fc:b1:e5:e1:61:44:12:ec:13: df:f6:f5:68:6b:32:1c:65:d1:a2:bb:f0:56:26:78:0d:d0:f6: 9e:dd:7c:70:e7:27:be:67:1d:c8:ca:41:64:6c:52:f7:79:75: ca:60:ca:aa:f1:32:ef:8c:6f:c2:4e:8e:6e:7d:ac:71:90:dd: cf:a1:24:0b:80:21:62:93:85:85:43:cc:1c:48:f3:23:41:21: 48:9e:e2:c2:f7:38:74:cd:7b:aa:45:3d:47:ad:24:75:dc:d1: a1:e8:88:c1:de:7c:be:e9:38:4f:7e:a7:f4:1d:60:2f:52:a7: 66:af:77:af -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6gFV1OhTqOVqJc1KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmZiMTYyNTEtOGE0Ni00MWVhLWFiYzEtYjc4NWM4ZDRk YzkwMB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk MjhmMGY5ZmUtNTM3Ni00ZDFjLTg0Y2YtZWNiNWJhMjY5MmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYf5LDeAL/2n/1cpkN8cHWFZQyLDcas5KSrc Omlw3MpMIZLjoSGZ8FRrL3tsqq9OivImHeUcaoQvwhI4eMTWJiqYmoEw4Z4jEz9j 5Pxj/kD9WzuAKxo8mHjad4cUwNP0hTB265EFaqd2DBGKWrU35h8p3tMTZ2PXxvbg 4uKlf/dXEsveJpFqH5NGnZrSQQ/faa1TSqo3g1ACJlArV45oUco+0v9ANwBjwF/U 6Fsy+7JfM/OK1CQYVoETaxOI7MkbMTk5WeFmBe5GX7egx9bEmZzxH1kmQJvzX1Q4 eFafxET8RnTNUK5RLYT/AsFmzqEW1AwtshWEnnA91nP6L4oqpQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBe9LJ50P+PASS3nXwDKGXH3TGjbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9iZmIx NjI1MS04YTQ2LTQxZWEtYWJjMS1iNzg1YzhkNGRjOTAvYjIzNzEwMjUtY2I1ZC0z ZDdiLWExNGMtYWNjMGE5YmRmNDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYmZiMTYyNTEtOGE0Ni00MWVhLWFi YzEtYjc4NWM4ZDRkYzkwL2JmYjE2MjUxLThhNDYtNDFlYS1hYmMxLWI3ODVjOGQ0 ZGM5MC5jcmwwHwYDVR0jBBgwFoAUNF9GsphJ9HorwkVkQICzpkg3GgcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9iZmIxNjI1MS04YTQ2LTQxZWEtYWJjMS1iNzg1 YzhkNGRjOTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgSywAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAxjB7E9ReHetuqZfOOGLo64aiLHjak79vW5Gv+w1DgnG6maU+fl+E 6MjPbiiXyOvr8E7i/aq9gnR+n3rWEUhZYXjKl/Kpku4iB0j4QLW997ejn7Wx/i5V wLnJwWkuqDsoTyTJmOcWp1oKF3meyJncqY3LCKniMgonE4zdirfnl7BDjggCMj82 /LHl4WFEEuwT3/b1aGsyHGXRorvwViZ4DdD2nt18cOcnvmcdyMpBZGxS93l1ymDK qvEy74xvwk6Obn2scZDdz6EkC4AhYpOFhUPMHEjzI0EhSJ7iwvc4dM17qkU9R60k ddzRoeiIwd58vuk4T36n9B1gL1KnZq93rw== -----END CERTIFICATE-----Generated at Tue Jul 28 22:49:15 2026 by rpki-client