$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bb760eff-5d50-348f-809c-0dc1a1c253a5.roa File: bb760eff-5d50-348f-809c-0dc1a1c253a5.roa (raw, json) Hash identifier: NvbHU7tEdAe9tNlGtDMBGTb/2dLMv1Hz4pZsWVKJTT8= Subject key identifier: 04:50:25:1C:51:41:9E:B8:8D:3E:07:8C:59:C5:48:24:B7:0F:86:42 Certificate issuer: /CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Certificate serial: 010D0C9F4328584F03A790C632EF9756830AAA00 Authority key identifier: BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bb760eff-5d50-348f-809c-0dc1a1c253a5.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 40867 IP address blocks: 2605:3240::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:90:c6:32:ef:97:56:83:0a:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=3e9f7a7d-dead-413d-bd76-2779577e9aed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3d:9a:03:a8:f0:e8:37:b1:ab:84:2b:e0:58: df:f2:2e:8e:8d:5b:5a:fd:1b:7a:73:94:6f:16:36: 8d:e1:c9:1b:28:ac:95:c7:8d:27:2f:a5:49:9d:10: 8a:52:a7:d9:00:63:81:9e:61:b2:aa:5e:87:b7:ff: 8b:4b:c6:a7:fc:3f:dc:f7:79:f7:55:27:21:b9:26: 40:e3:4e:01:dd:c6:c0:3a:1f:9d:61:57:3f:4e:e5: 61:02:97:66:d6:1b:ee:e5:d1:95:26:0c:71:b0:db: de:c6:3e:9b:fb:39:6b:c1:fe:41:d5:38:26:05:9f: 01:d1:ac:ae:19:c9:9c:ea:c6:01:e4:47:f3:07:8f: 89:35:2d:d4:4b:1a:a7:5d:f8:95:ba:22:07:17:33: 2e:b7:60:cb:b5:ba:d3:09:ec:fa:21:12:cf:94:30: 40:f0:4a:4a:1b:77:41:f2:d8:1b:ad:42:e1:e5:99: 9e:21:f7:70:b9:93:34:c5:06:ee:63:fa:ef:b0:07: 3e:ea:8c:b3:8b:4c:25:22:82:b3:b5:53:52:a2:7c: e7:67:9c:f5:3d:cb:37:15:6d:0e:9c:6a:6f:80:b8: 2d:9d:1d:1b:7c:13:53:18:ea:49:04:bf:4d:87:d4: d3:b2:b2:3c:5f:f5:8a:0f:2f:22:a9:89:ab:69:22: af:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:50:25:1C:51:41:9E:B8:8D:3E:07:8C:59:C5:48:24:B7:0F:86:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bb760eff-5d50-348f-809c-0dc1a1c253a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl X509v3 Authority Key Identifier: keyid:BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer sbgp-ipAddrBlock: critical IPv6: 2605:3240::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:9a:73:0c:01:ae:28:29:67:27:fc:15:2d:0f:56:fc:7e:0d: e7:47:87:13:62:f4:83:a0:7c:33:57:ee:9b:e8:a8:ee:5b:8e: fc:90:0a:ad:c0:2d:57:b6:8a:b1:a6:1a:a9:a4:45:b5:69:8c: e5:2a:bc:35:76:a7:95:f3:0a:c3:e2:59:40:ed:ea:0d:12:db: 92:18:03:fd:d2:c3:f8:34:1a:e7:31:96:54:d5:c9:af:ba:6e: c2:8a:be:09:49:24:64:2c:36:6d:3e:d7:0a:88:c5:c0:79:4d: 0a:00:4b:42:56:64:ee:80:ae:c8:f4:a9:cd:56:ef:74:ff:df: 0a:21:97:7f:10:9f:29:b3:22:e5:5f:12:15:3e:ce:61:1d:88: 79:40:41:33:3d:b8:d6:e6:b1:bb:7e:c3:94:91:89:80:32:3d: d9:e9:b3:fa:58:8e:fb:9c:8d:1b:78:3d:af:24:09:c9:7f:33: c5:89:11:99:2f:83:f9:11:a4:d0:fb:9a:2d:c7:37:38:b7:f0: d3:4d:e2:9c:0e:e8:f1:96:f3:df:65:22:76:ae:47:be:cc:05: ae:e4:15:5c:57:5e:09:01:85:27:81:5d:63:5a:99:cd:d5:67: 66:8f:aa:aa:d9:ae:b7:42:57:b3:d3:18:5f:16:7a:32:eb:81: fc:98:ba:cf -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8Dp5DGMu+XVoMKqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYzYzNiZDUtM2I5NC00N2UyLTgxZmMtZjQ5MDA4MTRl NDk0MB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk M2U5ZjdhN2QtZGVhZC00MTNkLWJkNzYtMjc3OTU3N2U5YWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj2aA6jw6Dexq4Qr4Fjf8i6OjVta/Rt6c5Rv FjaN4ckbKKyVx40nL6VJnRCKUqfZAGOBnmGyql6Ht/+LS8an/D/c93n3VSchuSZA 404B3cbAOh+dYVc/TuVhApdm1hvu5dGVJgxxsNvexj6b+zlrwf5B1TgmBZ8B0ayu Gcmc6sYB5EfzB4+JNS3USxqnXfiVuiIHFzMut2DLtbrTCez6IRLPlDBA8EpKG3dB 8tgbrULh5ZmeIfdwuZM0xQbuY/rvsAc+6oyzi0wlIoKztVNSonznZ5z1Pcs3FW0O nGpvgLgtnR0bfBNTGOpJBL9Nh9TTsrI8X/WKDy8iqYmraSKvuQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFARQJRxRQZ64jT4HjFnFSCS3D4ZCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNj M2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkwMDgxNGU0OTQvYmI3NjBlZmYtNWQ1MC0z NDhmLTgwOWMtMGRjMWExYzI1M2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmYzYzNiZDUtM2I5NC00N2UyLTgx ZmMtZjQ5MDA4MTRlNDk0L2JmM2MzYmQ1LTNiOTQtNDdlMi04MWZjLWY0OTAwODE0 ZTQ5NC5jcmwwHwYDVR0jBBgwFoAUv27gzbQvdJZGDC7Ndgx/FlpcgW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNjM2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkw MDgxNGU0OTQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUyQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAJmnMMAa4oKWcn/BUtD1b8fg3nR4cTYvSDoHwzV+6b6KjuW478kAqt wC1XtoqxphqppEW1aYzlKrw1dqeV8wrD4llA7eoNEtuSGAP90sP4NBrnMZZU1cmv um7Cir4JSSRkLDZtPtcKiMXAeU0KAEtCVmTugK7I9KnNVu90/98KIZd/EJ8psyLl XxIVPs5hHYh5QEEzPbjW5rG7fsOUkYmAMj3Z6bP6WI77nI0beD2vJAnJfzPFiRGZ L4P5EaTQ+5otxzc4t/DTTeKcDujxlvPfZSJ2rke+zAWu5BVcV14JAYUngV1jWpnN 1Wdmj6qq2a63Qlez0xhfFnoy64H8mLrP -----END CERTIFICATE-----Generated at Sun Oct 11 08:12:42 2026 by rpki-client