$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/bf431732-9b31-372e-9197-04e13d9230ef.roa File: bf431732-9b31-372e-9197-04e13d9230ef.roa (raw, json) Hash identifier: YVLRHPkG7gqcn3AvKkzOIjnoYyxC6haqcHxLPdouMWk= Subject key identifier: AE:AB:C0:49:FF:93:20:8E:7E:CD:F4:74:AC:ED:72:52:C5:4E:10:BC Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584FA42DDDE3476A723016556F40 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/bf431732-9b31-372e-9197-04e13d9230ef.roa Signing time: Tue 27 Oct 2026 13:00:13 +0000 ROA not before: Tue 27 Oct 2026 13:00:13 +0000 ROA not after: Mon 25 Jan 2027 14:00:13 +0000 asID: 11404 IP address blocks: 2607:fa40:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a4:2d:dd:e3:47:6a:72:30:16:55:6f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Oct 27 13:00:13 2026 GMT Not After : Jan 25 14:00:13 2027 GMT Subject: CN=4ae2f8fd-22b0-47d7-9c99-8422db2a663c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:72:76:fe:b7:6e:f7:d2:50:d5:d3:cc:b4:41: 04:5d:32:89:6d:56:a2:17:1c:aa:05:0b:6d:dd:c9: ab:01:17:80:64:77:09:4e:35:ff:11:5d:8d:b1:2a: fd:11:a8:c5:c5:06:fe:ed:72:a8:ff:92:14:0f:ba: cc:f8:72:8a:8c:61:52:fc:75:0b:29:cd:8c:41:28: 28:15:43:58:a5:8f:c5:f1:d9:a7:f9:c4:b7:f8:c9: 6a:0b:24:22:a8:46:d0:b4:cc:10:0a:e1:3f:28:62: 18:2e:77:fe:81:1f:66:15:d1:fc:30:f3:36:36:3d: 7e:64:9c:4f:4c:e2:7b:6c:f3:30:66:61:d8:4f:fa: c3:1f:fe:8b:86:1b:5d:19:d1:5b:d4:53:7b:01:70: c2:1b:01:83:67:0d:1d:1e:9a:49:c0:05:b3:d8:33: 29:24:d1:79:1b:21:37:9a:e7:ea:4b:e4:b0:38:3e: a0:cf:42:55:a1:6b:35:10:9b:78:8d:77:7e:7e:19: de:83:17:64:75:26:29:b1:80:c2:d6:4c:7c:fe:9e: b0:12:d5:05:d1:2c:70:22:43:99:44:dc:e4:7d:f6: 15:3a:47:1b:0d:82:c2:d6:5a:a1:f6:d7:be:53:cf: b4:4d:6a:14:ce:37:08:2c:84:b6:ef:e5:a6:ca:8a: 6d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:AB:C0:49:FF:93:20:8E:7E:CD:F4:74:AC:ED:72:52:C5:4E:10:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/bf431732-9b31-372e-9197-04e13d9230ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv6: 2607:fa40:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:38:a1:58:d7:e9:9b:7a:fe:53:fd:8a:32:49:89:62:fb:58: b2:42:d6:71:2b:39:94:53:e9:4c:65:e7:da:c9:54:47:ef:24: 86:9b:8f:5f:d0:08:fe:c9:c6:0c:6d:ef:fd:c3:34:77:d7:0f: ab:92:33:85:bd:bb:b1:1b:48:96:31:37:47:a9:7d:ae:9b:1e: b6:79:e9:e3:ee:0e:78:75:d7:4c:d2:a1:1b:b0:5c:de:39:23: a3:eb:f5:b5:d1:8b:45:0e:24:89:4f:f1:15:63:d4:5b:7a:00: d9:8e:c9:4b:2e:2f:26:f1:d7:d2:4c:ac:a1:9e:ba:25:2a:0d: 94:97:ed:f0:8b:ac:d3:87:be:3e:f6:21:c0:bb:00:cd:c2:d1: b0:5b:9c:81:77:35:e9:73:a7:a7:45:f3:e8:3c:b0:a8:ee:d8: ba:83:60:cc:ab:32:33:ff:02:5f:0e:8a:42:9c:65:c2:2e:e2: 7f:7c:d4:f1:3a:c4:b4:b6:8a:20:47:1d:53:08:a2:d4:58:f2: 8c:03:e0:d3:0e:8b:f7:16:d7:6b:9e:d6:f7:73:d7:54:b6:b6: 21:96:86:16:55:e9:73:07:4d:89:d4:9f:a1:18:af:75:0c:ce: 05:7f:ac:b2:0f:3d:a7:81:90:bc:d0:4a:6c:78:26:a5:1b:8b: fb:f7:04:3b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+kLd3jR2pyMBZVb0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI2MTAyNzEzMDAxM1oXDTI3MDEyNTE0MDAxM1owLzEtMCsGA1UEAxMk NGFlMmY4ZmQtMjJiMC00N2Q3LTljOTktODQyMmRiMmE2NjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnJ2/rdu99JQ1dPMtEEEXTKJbVaiFxyqBQtt 3cmrAReAZHcJTjX/EV2NsSr9EajFxQb+7XKo/5IUD7rM+HKKjGFS/HULKc2MQSgo FUNYpY/F8dmn+cS3+MlqCyQiqEbQtMwQCuE/KGIYLnf+gR9mFdH8MPM2Nj1+ZJxP TOJ7bPMwZmHYT/rDH/6LhhtdGdFb1FN7AXDCGwGDZw0dHppJwAWz2DMpJNF5GyE3 mufqS+SwOD6gz0JVoWs1EJt4jXd+fhnegxdkdSYpsYDC1kx8/p6wEtUF0SxwIkOZ RNzkffYVOkcbDYLC1lqh9te+U8+0TWoUzjcILIS27+WmyoptzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK6rwEn/kyCOfs30dKztclLFThC8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvYmY0MzE3MzItOWIzMS0z NzJlLTkxOTctMDRlMTNkOTIzMGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf6QAAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIU4oVjX6Zt6/lP9ijJJiWL7WLJC1nErOZRT6Uxl59rJVEfvJIab j1/QCP7Jxgxt7/3DNHfXD6uSM4W9u7EbSJYxN0epfa6bHrZ56ePuDnh110zSoRuw XN45I6Pr9bXRi0UOJIlP8RVj1Ft6ANmOyUsuLybx19JMrKGeuiUqDZSX7fCLrNOH vj72IcC7AM3C0bBbnIF3Nelzp6dF8+g8sKju2LqDYMyrMjP/Al8OikKcZcIu4n98 1PE6xLS2iiBHHVMIotRY8owD4NMOi/cW12ue1vdz11S2tiGWhhZV6XMHTYnUn6EY r3UMzgV/rLIPPaeBkLzQSmx4JqUbi/v3BDs= -----END CERTIFICATE-----Generated at Sun Nov 15 13:39:13 2026 by rpki-client