$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/bb9123bb-240f-3b53-a541-2ad27fca5e81.roa File: bb9123bb-240f-3b53-a541-2ad27fca5e81.roa (raw, json) Hash identifier: MDast4SjxphMRwiGkZNBzytY8osMPV54J9TXS1XbCHk= Subject key identifier: 64:BF:EC:88:AC:FF:A5:C8:50:07:F8:C0:05:8A:5E:B1:CA:7E:F9:79 Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Certificate serial: 010D0C9F4328584F49769CF77C30422C21870140 Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/bb9123bb-240f-3b53-a541-2ad27fca5e81.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397391 IP address blocks: 2604:7580:7f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:9c:f7:7c:30:42:2c:21:87:01:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bdc020a6-b479-4587-a964-925de92bc725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:7f:9b:ca:d4:96:5b:cc:73:fe:27:0c:82:04: e3:74:bd:92:11:56:bc:a7:da:6d:f1:a2:3a:ee:f4: 9e:a9:e3:d4:aa:3e:38:c3:c8:be:5c:df:3c:86:5f: 0f:80:a6:cb:8d:36:dd:a2:2e:42:98:cf:96:5f:3c: 5b:a8:0d:40:23:21:38:bf:03:2d:d4:c3:b1:5c:ea: 95:0e:d2:17:39:e2:f0:55:18:1f:a3:b2:d4:e3:28: 61:b1:d4:7a:50:02:f0:42:a2:3f:69:0d:98:7f:e6: 3b:bb:22:41:23:54:8c:36:2f:73:b7:41:cc:8f:17: ff:d9:26:e7:75:99:bd:31:26:9f:9e:37:01:4e:21: 76:01:95:0a:cd:68:e6:55:bc:2a:43:44:87:30:ad: 42:e0:71:a5:53:d1:80:b4:69:8c:3e:17:c1:f4:0f: b0:68:33:8f:44:b1:21:21:82:3f:1f:a4:e1:df:1b: 27:e2:34:33:81:c6:d1:52:15:7a:db:84:9d:f6:5b: b8:b0:fb:dd:32:1b:e2:eb:ba:39:1b:91:42:1a:18: 9f:b9:63:0f:ac:6d:5d:af:cd:32:fe:1d:94:f1:70: d2:61:4e:de:34:67:70:d0:d8:c0:33:b5:4c:8d:f6: c6:8e:3a:25:5e:04:5a:3e:cd:51:7c:30:e8:4a:6c: 95:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:BF:EC:88:AC:FF:A5:C8:50:07:F8:C0:05:8A:5E:B1:CA:7E:F9:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/bb9123bb-240f-3b53-a541-2ad27fca5e81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl X509v3 Authority Key Identifier: keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer sbgp-ipAddrBlock: critical IPv6: 2604:7580:7f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:9f:a9:d6:84:d1:de:91:1c:57:0e:d3:c0:ff:14:3b:03:a7: 25:2a:88:fd:7f:53:39:2e:3d:c6:f2:d7:0e:0d:f3:e4:d4:33: e8:35:25:c3:aa:75:bd:a4:3d:a2:3c:7a:2b:93:01:67:9f:62: 3c:9e:ad:73:65:98:04:26:b9:57:b4:50:59:cf:f0:01:ff:74: 99:9b:d0:79:2d:e8:0b:10:46:c2:72:8e:94:82:89:07:b5:37: af:e2:ee:07:59:5f:f9:fd:7a:6b:38:3d:25:c6:ef:7b:bd:a6: 88:78:51:ba:88:f0:bf:b0:5d:54:f6:47:2c:bb:ff:3b:d7:21: 52:19:70:90:cc:8d:e1:ef:73:be:63:c3:c7:68:9c:f0:2a:36: 27:75:9a:98:f6:33:ea:df:0e:84:f9:4b:3b:98:37:02:e2:17: af:c7:09:8d:f8:3c:e6:3b:ac:7c:d1:48:21:bb:e2:44:01:ff: 7d:59:03:b1:9c:84:e5:8f:d7:53:60:96:7a:fd:85:a6:9a:cc: 6e:01:f7:68:33:b9:73:4d:ba:a0:74:f7:82:e8:69:24:4a:55: 8c:ed:ad:8a:6b:21:3f:07:84:49:3f:0b:f0:41:b1:f0:f3:4f: 47:08:6b:d3:0f:bf:a0:84:67:18:96:f6:65:ef:4b:38:7a:12: f9:1d:fb:6a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jdpz3fDBCLCGHAUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4 N2ZmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmRjMDIwYTYtYjQ3OS00NTg3LWE5NjQtOTI1ZGU5MmJjNzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhX+bytSWW8xz/icMggTjdL2SEVa8p9pt8aI6 7vSeqePUqj44w8i+XN88hl8PgKbLjTbdoi5CmM+WXzxbqA1AIyE4vwMt1MOxXOqV DtIXOeLwVRgfo7LU4yhhsdR6UALwQqI/aQ2Yf+Y7uyJBI1SMNi9zt0HMjxf/2Sbn dZm9MSafnjcBTiF2AZUKzWjmVbwqQ0SHMK1C4HGlU9GAtGmMPhfB9A+waDOPRLEh IYI/H6Th3xsn4jQzgcbRUhV624Sd9lu4sPvdMhvi67o5G5FCGhifuWMPrG1dr80y /h2U8XDSYU7eNGdw0NjAM7VMjfbGjjolXgRaPs1RfDDoSmyV7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGS/7Iis/6XIUAf4wAWKXrHKfvl5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1 YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvYmI5MTIzYmItMjQwZi0z YjUzLWE1NDEtMmFkMjdmY2E1ZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5 NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi OGVjZTg3ZmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgR1gAB/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ+fqdaE0d6RHFcO08D/FDsDpyUqiP1/UzkuPcby1w4N8+TUM+g1 JcOqdb2kPaI8eiuTAWefYjyerXNlmAQmuVe0UFnP8AH/dJmb0Hkt6AsQRsJyjpSC iQe1N6/i7gdZX/n9ems4PSXG73u9poh4UbqI8L+wXVT2Ryy7/zvXIVIZcJDMjeHv c75jw8donPAqNid1mpj2M+rfDoT5SzuYNwLiF6/HCY34POY7rHzRSCG74kQB/31Z A7GchOWP11Nglnr9haaazG4B92gzuXNNuqB094LoaSRKVYztrYprIT8HhEk/C/BB sfDzT0cIa9MPv6CEZxiW9mXvSzh6Evkd+2o= -----END CERTIFICATE-----Generated at Sat Sep 26 16:46:58 2026 by rpki-client