$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2/bfe8deb0-ffe3-382d-a1f6-219f1d86885e.roa File: bfe8deb0-ffe3-382d-a1f6-219f1d86885e.roa (raw, json) Hash identifier: s1ZkH/bex3gmXbkZzDu+KoAY72ckoXtRdG0X5SXklaY= Subject key identifier: FB:D6:5F:B4:B8:9C:E0:F5:16:CF:3E:3C:51:FC:61:9D:0A:AB:10:82 Certificate issuer: /CN=8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2 Certificate serial: 010D0C9F4328584DD281740A440CB1326BE1A780 Authority key identifier: EE:A8:51:D9:D7:46:DC:F5:E4:A9:09:F5:FD:09:55:80:9E:83:40:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2/bfe8deb0-ffe3-382d-a1f6-219f1d86885e.roa Signing time: Wed 13 May 2026 17:42:10 +0000 ROA not before: Wed 13 May 2026 17:42:10 +0000 ROA not after: Tue 11 Aug 2026 17:42:10 +0000 asID: 11623 IP address blocks: 2607:8540::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d2:81:74:0a:44:0c:b1:32:6b:e1:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2 Validity Not Before: May 13 17:42:10 2026 GMT Not After : Aug 11 17:42:10 2026 GMT Subject: CN=797584fe-8bb4-4960-84b5-c42dcf0dc578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ac:90:da:85:9d:0b:29:b1:dc:41:fa:cc:fc: e7:68:ce:ec:cd:1e:31:79:d3:49:83:4a:8d:90:08: 71:88:0c:56:f7:ed:c5:ff:88:6c:e2:c7:a1:b6:ed: 9a:c9:c6:9f:9d:af:a6:1e:db:17:ae:02:fd:7a:c0: 75:df:4c:8f:21:70:51:ab:d1:97:85:b5:32:f4:d8: 0c:fd:ee:58:4f:d7:d5:84:c3:84:96:f4:f4:3d:fc: fe:0a:4c:d3:e4:32:c4:ec:05:cf:bf:42:8d:fe:a2: e4:4f:4b:5c:2e:82:3f:55:1a:47:71:d8:01:70:2b: 9f:a7:0f:5d:99:50:1d:7e:fb:1f:15:12:dd:76:27: e4:b3:50:76:cd:b7:01:95:08:fe:4a:89:d2:b0:dc: c0:fc:c1:cc:b9:11:58:20:53:05:d8:b0:47:cd:e7: e0:8e:96:4a:d6:bc:d8:6e:05:4d:81:72:04:bf:a7: 51:80:c9:e3:a7:a7:ba:42:bc:78:76:79:fc:ba:94: 8d:92:b9:99:34:f1:f6:10:cb:a5:35:d9:d2:91:b0: 59:cd:15:33:94:1c:9b:ad:94:d8:70:ec:0c:77:7a: a1:32:9f:2d:29:f0:25:4a:77:03:36:10:9b:2a:89: 8a:ac:15:aa:cc:d3:68:8b:1b:8a:c2:93:a5:a3:b1: ef:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D6:5F:B4:B8:9C:E0:F5:16:CF:3E:3C:51:FC:61:9D:0A:AB:10:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2/bfe8deb0-ffe3-382d-a1f6-219f1d86885e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2.crl X509v3 Authority Key Identifier: keyid:EE:A8:51:D9:D7:46:DC:F5:E4:A9:09:F5:FD:09:55:80:9E:83:40:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8c1dbd8b-adf6-49fb-b650-6eaceb1e29b2.cer sbgp-ipAddrBlock: critical IPv6: 2607:8540::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:0b:31:bf:6d:81:c5:47:dc:34:d3:ae:3e:38:23:66:cb:ea: c3:d1:fe:f0:01:5f:07:b6:d6:15:1a:ca:6b:4c:a2:4b:c7:f5: 4c:7c:e6:2b:8b:8b:99:3c:1d:4b:c1:4e:37:9c:55:1b:e2:4b: 83:6a:1b:2d:95:e6:28:71:77:a3:2e:3b:f6:45:f6:05:bb:21: 73:11:e5:8c:27:d6:ab:d3:08:b7:47:5d:00:e7:09:88:68:13: eb:77:78:a7:36:aa:81:26:49:ba:5d:ae:06:65:c8:35:21:fc: 32:e5:60:0d:e4:d9:9b:27:d7:93:9f:d2:de:44:32:79:b9:f4: 1b:9d:9c:37:ff:4d:35:bd:b1:e8:1f:b9:3e:10:4a:51:77:7a: 15:b4:d8:f7:66:30:7a:5c:6f:1b:ea:7b:18:b2:92:e2:a8:6d: 29:a5:db:e0:51:68:d3:0a:b9:83:cb:8c:a3:f4:9f:28:e8:20: 29:bb:22:20:d6:d0:5e:77:57:4a:2d:bf:c8:da:dc:28:e8:92: 06:a3:92:19:43:ae:4e:84:87:cd:a0:75:f9:51:b9:2f:25:2f: 59:39:0f:5b:5d:5e:bd:69:65:ad:52:d5:60:9d:56:18:f8:c8: 3d:c3:fe:93:24:ae:2e:45:b9:2d:9f:3e:b3:e7:c4:b4:30:0e: 8a:5a:26:8e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3SgXQKRAyxMmvhp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMxZGJkOGItYWRmNi00OWZiLWI2NTAtNmVhY2ViMWUy OWIyMB4XDTI2MDUxMzE3NDIxMFoXDTI2MDgxMTE3NDIxMFowLzEtMCsGA1UEAxMk Nzk3NTg0ZmUtOGJiNC00OTYwLTg0YjUtYzQyZGNmMGRjNTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqyQ2oWdCymx3EH6zPznaM7szR4xedNJg0qN kAhxiAxW9+3F/4hs4sehtu2aycafna+mHtsXrgL9esB130yPIXBRq9GXhbUy9NgM /e5YT9fVhMOElvT0Pfz+CkzT5DLE7AXPv0KN/qLkT0tcLoI/VRpHcdgBcCufpw9d mVAdfvsfFRLddifks1B2zbcBlQj+SonSsNzA/MHMuRFYIFMF2LBHzefgjpZK1rzY bgVNgXIEv6dRgMnjp6e6Qrx4dnn8upSNkrmZNPH2EMulNdnSkbBZzRUzlBybrZTY cOwMd3qhMp8tKfAlSncDNhCbKomKrBWqzNNoixuKwpOlo7HvZwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPvWX7S4nOD1Fs8+PFH8YZ0KqxCCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84YzFk YmQ4Yi1hZGY2LTQ5ZmItYjY1MC02ZWFjZWIxZTI5YjIvYmZlOGRlYjAtZmZlMy0z ODJkLWExZjYtMjE5ZjFkODY4ODVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGMxZGJkOGItYWRmNi00OWZiLWI2 NTAtNmVhY2ViMWUyOWIyLzhjMWRiZDhiLWFkZjYtNDlmYi1iNjUwLTZlYWNlYjFl MjliMi5jcmwwHwYDVR0jBBgwFoAU7qhR2ddG3PXkqQn1/QlVgJ6DQIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84YzFkYmQ4Yi1hZGY2LTQ5ZmItYjY1MC02ZWFj ZWIxZTI5YjIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgeFQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBeCzG/bYHFR9w0064+OCNmy+rD0f7wAV8HttYVGsprTKJLx/VMfOYr i4uZPB1LwU43nFUb4kuDahstleYocXejLjv2RfYFuyFzEeWMJ9ar0wi3R10A5wmI aBPrd3inNqqBJkm6Xa4GZcg1Ifwy5WAN5NmbJ9eTn9LeRDJ5ufQbnZw3/001vbHo H7k+EEpRd3oVtNj3ZjB6XG8b6nsYspLiqG0ppdvgUWjTCrmDy4yj9J8o6CApuyIg 1tBed1dKLb/I2two6JIGo5IZQ65OhIfNoHX5UbkvJS9ZOQ9bXV69aWWtUtVgnVYY +Mg9w/6TJK4uRbktnz6z58S0MA6KWiaO -----END CERTIFICATE-----Generated at Sat Jun 6 12:04:32 2026 by rpki-client