$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2/bfe8deb0-ffe3-382d-a1f6-219f1d86885e.roa File: bfe8deb0-ffe3-382d-a1f6-219f1d86885e.roa (raw, json) Hash identifier: x/p7MgvmJTp0L800u2CrjOJ5nGx6TKN4vE3IiA5SMSg= Subject key identifier: 7C:90:1B:86:A7:E2:31:AF:F4:C0:87:18:05:73:BD:F4:1C:15:35:55 Certificate issuer: /CN=8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2 Certificate serial: 010D0C9F4328584F49745C17CA091F69D1D36D80 Authority key identifier: EE:A8:51:D9:D7:46:DC:F5:E4:A9:09:F5:FD:09:55:80:9E:83:40:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2/bfe8deb0-ffe3-382d-a1f6-219f1d86885e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11623 IP address blocks: 2607:8540::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:5c:17:ca:09:1f:69:d1:d3:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=10fc80a6-2887-4b4e-9714-8d3deb454f7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4b:ac:93:52:9e:00:49:43:22:93:c1:7c:26: a4:bf:f2:24:57:f8:4d:88:c5:5b:03:b3:51:40:4d: 3c:2a:a6:b2:4f:03:48:38:64:31:df:0d:01:83:e2: 2b:9a:91:85:97:14:72:c8:89:df:87:1c:13:8e:5b: d2:e9:d4:81:05:cd:75:72:2f:26:73:e0:b4:56:35: 82:0d:81:a1:df:9e:46:b8:0e:02:24:66:30:d5:5b: ee:e8:5e:6f:11:2c:3b:c8:58:c3:52:f3:81:41:8a: 2e:97:6d:ff:8a:3c:e5:9c:a6:08:f6:c3:d4:d3:50: 3e:19:8f:5b:77:7c:86:db:54:4e:13:30:3c:67:bc: 0b:44:ce:99:aa:e0:25:9c:4d:f1:44:0b:73:2b:57: 20:20:e0:15:8b:09:c7:d3:b4:6f:f0:05:74:98:84: 0f:10:ed:b2:97:02:7e:5d:2c:cf:d2:c8:6e:8a:23: 95:96:33:b7:f7:ec:41:b1:cc:1c:7d:54:91:5d:f3: 0c:dd:05:4c:3d:b2:bf:0a:6a:34:7c:1f:50:95:71: 11:a3:5e:dc:fb:05:95:58:4a:b5:bc:f5:49:4b:cd: 72:44:d6:66:30:89:47:00:49:37:8d:68:96:f9:08: 63:7c:5d:db:fc:2c:1e:17:d9:e0:f7:3b:30:21:c7: b5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:90:1B:86:A7:E2:31:AF:F4:C0:87:18:05:73:BD:F4:1C:15:35:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2/bfe8deb0-ffe3-382d-a1f6-219f1d86885e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2.crl X509v3 Authority Key Identifier: keyid:EE:A8:51:D9:D7:46:DC:F5:E4:A9:09:F5:FD:09:55:80:9E:83:40:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2.cer sbgp-ipAddrBlock: critical IPv6: 2607:8540::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:36:81:43:8e:b3:58:10:7e:23:4c:2b:e9:be:8a:06:de:44: 2d:ff:75:f0:90:9b:89:93:99:33:be:87:e6:18:30:cf:61:73: bd:b3:40:85:a9:a3:c2:60:68:5c:7a:86:ee:44:a4:e6:cf:aa: 93:ac:6c:d8:a9:e3:35:c5:e8:f4:73:04:72:68:5f:53:b9:09: d5:91:c3:f4:2d:bd:22:52:82:b0:75:a0:3f:10:27:16:57:97: e3:7c:0e:8c:df:13:13:46:11:d3:df:ee:aa:1c:d2:a4:d6:9f: d6:65:1a:dd:2c:bd:b1:f8:97:2c:e2:ef:70:63:41:63:24:e3: ee:c0:bd:03:ac:51:18:28:86:e9:71:9c:e5:2b:f7:c2:13:f1: 63:8f:19:5b:18:00:c0:8a:94:e5:a5:7c:14:d4:5e:19:0b:46: 5a:1b:9a:f0:1a:bf:dd:c5:e1:35:f0:2b:8e:88:f9:50:0f:b0: 90:85:ef:d9:b8:66:08:ae:aa:36:28:0f:d5:0c:08:3b:20:16: 21:42:6d:d1:42:a4:25:d7:fa:23:6b:dd:79:3c:f7:4b:54:7f: 8d:6e:4e:f6:c7:4a:80:e8:9c:5f:75:1e:16:53:1f:d6:fc:da: f6:07:88:55:cc:58:38:a5:01:36:81:72:03:b1:50:7b:32:7f: d9:ec:4c:2e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JdFwXygkfadHTbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMxZGJkOGItYWRmNi00OWZiLWI2NTAtNmVhY2ViMWUy OWIyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTBmYzgwYTYtMjg4Ny00YjRlLTk3MTQtOGQzZGViNDU0ZjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUusk1KeAElDIpPBfCakv/IkV/hNiMVbA7NR QE08KqayTwNIOGQx3w0Bg+IrmpGFlxRyyInfhxwTjlvS6dSBBc11ci8mc+C0VjWC DYGh355GuA4CJGYw1Vvu6F5vESw7yFjDUvOBQYoul23/ijzlnKYI9sPU01A+GY9b d3yG21ROEzA8Z7wLRM6ZquAlnE3xRAtzK1cgIOAViwnH07Rv8AV0mIQPEO2ylwJ+ XSzP0shuiiOVljO39+xBscwcfVSRXfMM3QVMPbK/Cmo0fB9QlXERo17c+wWVWEq1 vPVJS81yRNZmMIlHAEk3jWiW+QhjfF3b/CweF9ng9zswIce18QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHyQG4an4jGv9MCHGAVzvfQcFTVVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84YzFk YmQ4Yi1hZGY2LTQ5ZmItYjY1MC02ZWFjZWIxZTI5YjIvYmZlOGRlYjAtZmZlMy0z ODJkLWExZjYtMjE5ZjFkODY4ODVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGMxZGJkOGItYWRmNi00OWZiLWI2 NTAtNmVhY2ViMWUyOWIyLzhjMWRiZDhiLWFkZjYtNDlmYi1iNjUwLTZlYWNlYjFl MjliMi5jcmwwHwYDVR0jBBgwFoAU7qhR2ddG3PXkqQn1/QlVgJ6DQIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84YzFkYmQ4Yi1hZGY2LTQ5ZmItYjY1MC02ZWFj ZWIxZTI5YjIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgeFQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBHNoFDjrNYEH4jTCvpvooG3kQt/3XwkJuJk5kzvofmGDDPYXO9s0CF qaPCYGhceobuRKTmz6qTrGzYqeM1xej0cwRyaF9TuQnVkcP0Lb0iUoKwdaA/ECcW V5fjfA6M3xMTRhHT3+6qHNKk1p/WZRrdLL2x+Jcs4u9wY0FjJOPuwL0DrFEYKIbp cZzlK/fCE/FjjxlbGADAipTlpXwU1F4ZC0ZaG5rwGr/dxeE18CuOiPlQD7CQhe/Z uGYIrqo2KA/VDAg7IBYhQm3RQqQl1/oja915PPdLVH+Nbk72x0qA6JxfdR4WUx/W /Nr2B4hVzFg4pQE2gXIDsVB7Mn/Z7Ewu -----END CERTIFICATE-----Generated at Fri Sep 25 23:39:02 2026 by rpki-client