$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/bf4b32fa-63bc-30f2-9e56-2aff7b193d4b.roa File: bf4b32fa-63bc-30f2-9e56-2aff7b193d4b.roa (raw, json) Hash identifier: 8sb3oHHbKoxytMD1AEs9ERnLKIrueOkY69BcmAfTews= Subject key identifier: D0:CC:CF:D5:F3:07:86:4A:D7:27:89:0D:19:21:FB:82:1F:A2:D6:A4 Certificate issuer: /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078 Certificate serial: 010D0C9F4328584F497408C8F745D5E2F2BC2800 Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/bf4b32fa-63bc-30f2-9e56-2aff7b193d4b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 2152 IP address blocks: 2607:cc80:3000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:08:c8:f7:45:d5:e2:f2:bc:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9023aac4-ac07-4d40-9ce4-166c4a5d50e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:58:ce:73:c4:dd:fd:37:5c:76:92:d0:55:07: 03:3b:4e:54:be:a5:d5:cf:17:47:db:b5:2e:11:1b: 8c:18:e2:1e:78:4a:6a:e5:d9:a2:f0:fd:f0:30:68: f3:6c:1a:b7:80:ae:2a:ed:ec:d3:ee:85:17:33:5d: 2f:d4:bd:c8:1d:1d:2e:e3:84:f6:a9:fb:af:59:14: 03:fa:58:c6:17:a3:85:76:11:84:62:6e:e4:4e:23: 04:4e:eb:a5:a7:51:d4:29:ef:92:fb:98:77:e7:f3: 3f:8d:68:88:b6:e7:e1:29:68:64:68:7f:d0:8a:1d: 64:f6:5c:86:b3:3a:5b:2b:f3:a7:79:e9:f4:e8:0a: b7:89:44:a2:fe:11:36:2d:21:94:b2:31:da:bb:1c: bb:19:7b:d9:ef:f6:d3:5b:74:0f:a5:e2:2e:42:02: ef:60:b6:03:96:9a:b1:df:f1:f8:e1:30:6d:07:e7: af:40:d1:11:ab:7b:ae:44:5c:3d:60:12:b5:f2:cb: bd:ab:8c:39:0d:a5:73:fc:08:be:f4:76:3b:e9:2a: 31:23:40:cd:ae:b6:40:cc:c9:2a:23:a2:b5:e4:ea: 53:ec:21:63:c4:6a:4d:16:96:90:bf:02:5d:b4:2d: a4:22:56:b1:a7:21:e7:25:e2:59:da:34:6a:f1:92: 84:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:CC:CF:D5:F3:07:86:4A:D7:27:89:0D:19:21:FB:82:1F:A2:D6:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/bf4b32fa-63bc-30f2-9e56-2aff7b193d4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl X509v3 Authority Key Identifier: keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer sbgp-ipAddrBlock: critical IPv6: 2607:cc80:3000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:17:b0:e8:04:a3:7a:1b:7c:fd:0c:42:5f:10:9e:6c:39:fa: 35:b6:78:67:69:0c:7a:cd:02:40:98:4a:d6:a2:a6:fc:47:97: ca:f1:c4:3c:a3:8e:f2:fb:83:34:d8:7a:e3:73:b8:53:8d:5c: 70:8a:6e:52:9e:a8:6e:d2:27:35:99:3f:54:70:97:1a:b2:92: 0f:02:8c:11:54:6c:01:a0:5f:c5:8a:d3:39:9c:75:01:b6:ec: 39:34:54:dc:53:d7:14:c4:05:37:e9:fd:09:68:6f:d7:c2:76: 07:02:17:1d:24:37:5f:1b:fc:61:31:36:8f:d3:ec:3c:f0:87: 72:c9:4c:2f:4e:eb:13:31:1b:4b:8f:83:c1:78:c5:da:28:ee: 00:19:dd:68:67:18:17:b9:09:93:04:e5:f8:84:59:65:65:86: 4b:ab:1b:fe:e0:49:5c:a0:66:aa:ca:93:44:15:e1:28:d1:09: 7a:aa:eb:29:7e:f8:e2:fd:7b:a2:33:46:d6:65:da:a3:37:0c: b1:46:96:b5:d9:8a:f9:e7:eb:d0:3f:fc:d5:e5:a2:94:81:fb: b6:f8:39:e9:2f:c5:f2:0d:ee:09:59:d3:b8:b3:89:ca:47:ad: 37:76:6b:5c:c0:98:d4:c9:a8:ca:21:4d:63:fb:63:d3:02:b6: bd:62:46:d8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdAjI90XV4vK8KAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE1ZDNmZGItN2MyZC00MzkwLWE3MmYtZmE0NmYwMmY0 MDc4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTAyM2FhYzQtYWMwNy00ZDQwLTljZTQtMTY2YzRhNWQ1MGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjljOc8Td/TdcdpLQVQcDO05UvqXVzxdH27Uu ERuMGOIeeEpq5dmi8P3wMGjzbBq3gK4q7ezT7oUXM10v1L3IHR0u44T2qfuvWRQD +ljGF6OFdhGEYm7kTiMETuulp1HUKe+S+5h35/M/jWiItufhKWhkaH/Qih1k9lyG szpbK/Oneen06Aq3iUSi/hE2LSGUsjHauxy7GXvZ7/bTW3QPpeIuQgLvYLYDlpqx 3/H44TBtB+evQNERq3uuRFw9YBK18su9q4w5DaVz/Ai+9HY76SoxI0DNrrZAzMkq I6K15OpT7CFjxGpNFpaQvwJdtC2kIlaxpyHnJeJZ2jRq8ZKEhQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNDMz9XzB4ZK1yeJDRkh+4IfotakMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMTVk M2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2ZjAyZjQwNzgvYmY0YjMyZmEtNjNiYy0z MGYyLTllNTYtMmFmZjdiMTkzZDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTE1ZDNmZGItN2MyZC00MzkwLWE3 MmYtZmE0NmYwMmY0MDc4L2UxNWQzZmRiLTdjMmQtNDM5MC1hNzJmLWZhNDZmMDJm NDA3OC5jcmwwHwYDVR0jBBgwFoAUEMqrDaYVw2cS3TXs0nMj95zDq7AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMTVkM2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2 ZjAyZjQwNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfMgDAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADsXsOgEo3obfP0MQl8Qnmw5+jW2eGdpDHrNAkCYStaipvxHl8rx xDyjjvL7gzTYeuNzuFONXHCKblKeqG7SJzWZP1Rwlxqykg8CjBFUbAGgX8WK0zmc dQG27Dk0VNxT1xTEBTfp/Qlob9fCdgcCFx0kN18b/GExNo/T7Dzwh3LJTC9O6xMx G0uPg8F4xdoo7gAZ3WhnGBe5CZME5fiEWWVlhkurG/7gSVygZqrKk0QV4SjRCXqq 6yl++OL9e6IzRtZl2qM3DLFGlrXZivnn69A//NXlopSB+7b4OekvxfIN7glZ07iz icpHrTd2a1zAmNTJqMohTWP7Y9MCtr1iRtg= -----END CERTIFICATE-----Generated at Fri Sep 25 21:29:02 2026 by rpki-client