$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/bf1bb498-b8a1-3b19-876e-423f0df6df1b.roa File: bf1bb498-b8a1-3b19-876e-423f0df6df1b.roa (raw, json) Hash identifier: 8y4mqrwRMQ7Y8YyEXo8p0BJSu6fRtLXx16utl6ZE/SE= Subject key identifier: 98:2A:4D:F0:A1:8A:76:46:46:81:B7:AE:7E:01:19:77:41:CB:20:7F Certificate issuer: /CN=253c1f46-e2ad-4547-8b1c-5935addeddb5 Certificate serial: 010D0C9F4328584F698D818D88AE1C0B455E99E0 Authority key identifier: 80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/bf1bb498-b8a1-3b19-876e-423f0df6df1b.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 54113 IP address blocks: 2607:71c0:fff0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:81:8d:88:ae:1c:0b:45:5e:99:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253c1f46-e2ad-4547-8b1c-5935addeddb5 Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=ff3189e3-b04c-4aa8-893e-00773c885131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3c:26:72:0e:81:df:22:47:0c:89:49:f3:c5: 67:6c:27:a9:b2:fd:c5:a4:db:00:4f:ae:4b:fb:18: 95:04:40:40:c1:62:35:b6:3c:22:8e:90:8b:51:93: 12:ef:64:98:f4:69:35:68:09:92:1b:69:c2:d9:81: d7:cc:9c:94:ea:8e:a4:55:d6:f6:d2:5d:7b:f6:9d: 97:a2:9d:d2:b0:51:44:6b:d9:b6:86:e1:82:df:04: 81:dd:64:84:7b:c4:23:87:05:d2:4b:6e:ec:17:4f: f6:66:f2:93:cf:87:89:54:7b:bd:bc:2b:14:d3:43: aa:47:65:4e:bd:66:96:08:a1:c9:c3:65:33:db:52: ac:20:0c:1e:9b:09:a6:7c:4e:ee:c4:8e:7a:bc:2e: 46:98:e7:fd:47:79:00:ab:5d:e6:50:04:b6:eb:41: 5c:7f:0f:18:63:c0:08:8b:85:0e:b0:f0:7d:6c:d0: b8:af:eb:14:33:5e:3d:cc:80:ee:a7:46:30:8e:0f: 84:ab:88:26:da:7c:f5:6b:61:8e:5a:fb:24:71:2d: f4:c9:6e:88:a2:b2:7d:37:b0:19:21:e1:de:81:42: db:38:e0:97:2a:7b:3c:da:4d:88:f2:ab:33:23:2a: ad:89:2d:d4:6a:35:dd:79:79:b4:f0:d2:34:3c:52: ed:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:2A:4D:F0:A1:8A:76:46:46:81:B7:AE:7E:01:19:77:41:CB:20:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/bf1bb498-b8a1-3b19-876e-423f0df6df1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl X509v3 Authority Key Identifier: keyid:80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer sbgp-ipAddrBlock: critical IPv6: 2607:71c0:fff0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:87:af:74:32:d5:8d:84:12:da:68:c5:c2:f3:59:73:4f:ce: 7e:a1:e9:5e:d1:c2:40:3a:dc:46:c2:60:0c:58:6c:30:14:66: 33:08:ce:e3:90:5c:3b:4a:86:2a:7d:2d:4a:85:2a:2e:c7:db: 31:f2:61:55:23:07:87:23:89:de:e7:26:6d:49:66:42:56:af: d6:49:e3:d6:e9:bd:36:a2:85:af:15:98:2c:30:75:a4:81:df: 28:da:f4:12:aa:d4:1a:34:3b:45:fc:fe:c9:d8:29:67:8a:cb: 91:6d:aa:50:cf:f4:2d:93:46:c6:2a:3d:ae:e2:75:85:b5:6d: 74:93:79:a5:6f:71:15:06:7f:ca:22:89:80:97:69:f8:85:8e: 30:c0:92:b5:63:3a:c0:6a:8a:54:bd:8c:c9:60:4d:59:32:bf: eb:0b:87:f1:f0:3e:6a:2e:18:97:b8:4f:9f:b2:c8:d4:4e:79: 21:90:ed:d3:84:77:4f:96:9f:e6:cd:37:15:13:ec:8b:9b:6c: e8:8d:f0:9c:1a:57:20:69:13:f7:87:c5:58:75:3f:02:58:4f: 89:69:76:94:c1:5e:f6:22:ed:4e:f1:df:78:83:9b:2d:df:91: ae:b5:39:5e:64:60:58:9c:8e:4f:33:cd:af:a1:05:ae:91:cc: be:86:c5:7e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9pjYGNiK4cC0VemeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUzYzFmNDYtZTJhZC00NTQ3LThiMWMtNTkzNWFkZGVk ZGI1MB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk ZmYzMTg5ZTMtYjA0Yy00YWE4LTg5M2UtMDA3NzNjODg1MTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTwmcg6B3yJHDIlJ88VnbCepsv3FpNsAT65L +xiVBEBAwWI1tjwijpCLUZMS72SY9Gk1aAmSG2nC2YHXzJyU6o6kVdb20l179p2X op3SsFFEa9m2huGC3wSB3WSEe8QjhwXSS27sF0/2ZvKTz4eJVHu9vCsU00OqR2VO vWaWCKHJw2Uz21KsIAwemwmmfE7uxI56vC5GmOf9R3kAq13mUAS260Fcfw8YY8AI i4UOsPB9bNC4r+sUM149zIDup0Ywjg+Eq4gm2nz1a2GOWvskcS30yW6IorJ9N7AZ IeHegULbOOCXKns82k2I8qszIyqtiS3UajXdeXm08NI0PFLtiQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJgqTfChinZGRoG3rn4BGXdByyB/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTNj MWY0Ni1lMmFkLTQ1NDctOGIxYy01OTM1YWRkZWRkYjUvYmYxYmI0OTgtYjhhMS0z YjE5LTg3NmUtNDIzZjBkZjZkZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjUzYzFmNDYtZTJhZC00NTQ3LThi MWMtNTkzNWFkZGVkZGI1LzI1M2MxZjQ2LWUyYWQtNDU0Ny04YjFjLTU5MzVhZGRl ZGRiNS5jcmwwHwYDVR0jBBgwFoAUgB1D2PcXFrBpqwhHsqkVE0AyaWYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTNjMWY0Ni1lMmFkLTQ1NDctOGIxYy01OTM1 YWRkZWRkYjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgdxwP/w MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKaHr3Qy1Y2EEtpoxcLzWXNPzn6h6V7RwkA63EbCYAxYbDAUZjMI zuOQXDtKhip9LUqFKi7H2zHyYVUjB4cjid7nJm1JZkJWr9ZJ49bpvTaiha8VmCww daSB3yja9BKq1Bo0O0X8/snYKWeKy5FtqlDP9C2TRsYqPa7idYW1bXSTeaVvcRUG f8oiiYCXafiFjjDAkrVjOsBqilS9jMlgTVkyv+sLh/HwPmouGJe4T5+yyNROeSGQ 7dOEd0+Wn+bNNxUT7IubbOiN8JwaVyBpE/eHxVh1PwJYT4lpdpTBXvYi7U7x33iD my3fka61OV5kYFicjk8zza+hBa6RzL6GxX4= -----END CERTIFICATE-----Generated at Sun Nov 15 19:30:35 2026 by rpki-client