$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bfa9a509-e5a4-34cf-aaae-696a8851a4b0.roa File: bfa9a509-e5a4-34cf-aaae-696a8851a4b0.roa (raw, json) Hash identifier: rQrBqhVNes+JcteHjSFQfq9brUBK+NKA979iuZyAHcQ= Subject key identifier: 65:AB:CA:28:AB:32:64:AC:0A:CC:54:85:8D:96:4B:8C:1C:3B:F5:A2 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584DBD05DC7CBBA14343BCE66C80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bfa9a509-e5a4-34cf-aaae-696a8851a4b0.roa Signing time: Wed 06 May 2026 01:00:24 +0000 ROA not before: Wed 06 May 2026 01:00:24 +0000 ROA not after: Tue 04 Aug 2026 01:00:24 +0000 asID: 6167 IP address blocks: 2600:1008:b1c0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bd:05:dc:7c:bb:a1:43:43:bc:e6:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 6 01:00:24 2026 GMT Not After : Aug 4 01:00:24 2026 GMT Subject: CN=81a8c842-78d9-4df0-b288-8cf3fdcd318a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d9:0e:50:cf:80:6d:ec:7b:cd:2d:fd:75:5a: 28:ac:ce:e5:07:84:8c:03:7c:c6:6e:53:04:d3:9c: 70:4f:da:1d:39:df:41:56:16:d1:56:68:4b:75:be: 38:df:ae:19:3d:cc:c2:47:43:8b:14:32:8b:90:7b: e0:db:4e:68:bb:33:1c:81:5b:a6:50:5f:27:3e:89: 09:83:e1:7e:04:68:62:cc:81:06:e2:22:02:c5:e6: 14:14:55:4a:cb:d7:21:bb:d1:e1:fe:c9:28:96:d2: 03:f1:38:73:c7:45:9d:90:fd:79:27:67:c7:28:10: 12:8f:8c:9c:c3:72:9d:a4:bf:c8:00:00:49:f7:23: 54:e5:4e:58:22:65:b6:e4:59:ac:17:75:38:c2:fc: cf:08:a5:66:d1:7a:b0:a3:c7:44:48:62:14:cf:49: 91:44:39:cc:f2:6d:ac:b7:95:b0:4c:83:c7:3c:7e: fa:11:b5:3b:b9:1e:bf:00:a1:4b:8b:37:6a:45:35: 5b:00:37:18:ee:9b:48:c1:28:84:44:45:a3:22:9f: 6b:fb:96:bf:a6:1e:6e:cf:fe:53:82:53:35:1f:3d: d1:a1:e9:ee:cd:3e:a8:df:15:7c:ae:25:1c:08:7a: eb:2b:80:d2:1f:99:d8:c7:25:1a:be:88:9e:dc:0a: 60:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:AB:CA:28:AB:32:64:AC:0A:CC:54:85:8D:96:4B:8C:1C:3B:F5:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bfa9a509-e5a4-34cf-aaae-696a8851a4b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1008:b1c0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:a2:2f:d2:46:5d:36:63:ab:2f:f1:d1:56:65:d5:58:e4:bd: e2:63:8f:46:f8:6b:41:9b:39:4a:e8:51:35:ca:49:2b:5e:cc: 53:b6:88:c0:ef:e2:0d:97:6c:d3:f5:ed:9c:e9:c0:04:d1:99: 06:a0:b6:6a:95:01:db:a6:fa:21:4b:9d:a8:33:91:98:a7:6e: a7:f4:e5:2d:85:74:0d:b3:3f:4b:bd:93:f1:da:6a:92:fa:5c: 16:c4:d9:46:53:3d:8b:ca:78:d2:2d:fc:ff:ca:5b:c9:99:9c: 8e:8a:36:f8:28:43:ab:8f:d5:32:4a:28:79:15:f3:14:6f:0e: 89:00:b3:81:f8:3a:83:da:96:b3:88:8e:f4:c4:8b:a9:d3:c8: 16:4e:a9:f4:6d:2f:c5:68:54:70:16:b3:32:1a:61:27:c7:7b: bf:49:2c:9a:06:40:b5:58:81:e3:7f:05:07:63:99:7c:24:85: b1:b1:b7:7a:3c:8d:7a:00:c7:fd:21:58:e4:0d:95:41:ee:12: 6f:3a:42:79:24:fc:05:cf:0c:df:f0:27:91:ee:9c:12:f6:6c: d9:23:46:6d:ce:6a:3d:4f:fd:15:09:c0:07:26:af:f8:ab:89: d8:ee:a3:a5:e6:6c:31:27:09:44:fe:a6:bf:77:36:0b:7f:b9: 73:cd:13:a0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE29Bdx8u6FDQ7zmbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk ODFhOGM4NDItNzhkOS00ZGYwLWIyODgtOGNmM2ZkY2QzMThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNkOUM+Abex7zS39dVoorM7lB4SMA3zGblME 05xwT9odOd9BVhbRVmhLdb44364ZPczCR0OLFDKLkHvg205ouzMcgVumUF8nPokJ g+F+BGhizIEG4iICxeYUFFVKy9chu9Hh/skoltID8Thzx0WdkP15J2fHKBASj4yc w3KdpL/IAABJ9yNU5U5YImW25FmsF3U4wvzPCKVm0Xqwo8dESGIUz0mRRDnM8m2s t5WwTIPHPH76EbU7uR6/AKFLizdqRTVbADcY7ptIwSiEREWjIp9r+5a/ph5uz/5T glM1Hz3RoenuzT6o3xV8riUcCHrrK4DSH5nYxyUavoie3Apg1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGWryiirMmSsCsxUhY2WS4wcO/WiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmZhOWE1MDktZTVhNC0z NGNmLWFhYWUtNjk2YTg4NTFhNGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQCLHA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADiiL9JGXTZjqy/x0VZl1VjkveJjj0b4a0GbOUroUTXKSStezFO2 iMDv4g2XbNP17ZzpwATRmQagtmqVAdum+iFLnagzkZinbqf05S2FdA2zP0u9k/Ha apL6XBbE2UZTPYvKeNIt/P/KW8mZnI6KNvgoQ6uP1TJKKHkV8xRvDokAs4H4OoPa lrOIjvTEi6nTyBZOqfRtL8VoVHAWszIaYSfHe79JLJoGQLVYgeN/BQdjmXwkhbGx t3o8jXoAx/0hWOQNlUHuEm86Qnkk/AXPDN/wJ5HunBL2bNkjRm3Oaj1P/RUJwAcm r/iridjuo6XmbDEnCUT+pr93Ngt/uXPNE6A= -----END CERTIFICATE-----Generated at Wed May 13 09:05:18 2026 by rpki-client