$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/bf1005be-5cb9-378b-855b-1b065d341dbd.roa File: bf1005be-5cb9-378b-855b-1b065d341dbd.roa (raw, json) Hash identifier: vdIeQcIvaE0zS3MDapfNjeTJoeaY/KG1IuBjLXPcx5w= Subject key identifier: 44:4F:2D:02:59:3E:31:28:46:0A:A4:87:6C:C3:7F:92:82:80:26:B8 Certificate issuer: /CN=cbf89b78-1e86-4629-abdd-682f04ffb165 Certificate serial: 010D0C9F4328584FA2C86E354274CFEB21F82AC4 Authority key identifier: 84:7F:A2:E1:13:B7:DC:E8:49:19:47:08:83:0D:CA:2B:DA:A1:6D:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/bf1005be-5cb9-378b-855b-1b065d341dbd.roa Signing time: Tue 27 Oct 2026 01:00:14 +0000 ROA not before: Tue 27 Oct 2026 01:00:14 +0000 ROA not after: Mon 25 Jan 2027 02:00:14 +0000 asID: 13737 IP address blocks: 2602:f989::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/cbf89b78-1e86-4629-abdd-682f04ffb165.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/cbf89b78-1e86-4629-abdd-682f04ffb165.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a2:c8:6e:35:42:74:cf:eb:21:f8:2a:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbf89b78-1e86-4629-abdd-682f04ffb165 Validity Not Before: Oct 27 01:00:14 2026 GMT Not After : Jan 25 02:00:14 2027 GMT Subject: CN=517a65fd-0b3e-4b29-b38f-b899c8cb1a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:55:83:44:62:36:29:b1:0b:0d:13:e0:0e:1e: 15:06:a2:47:67:e4:5a:c1:b1:d0:dc:6a:6d:4b:10: 17:4b:77:5a:13:cf:ff:81:5f:be:08:cb:69:00:fc: d5:fc:6b:ec:f1:34:51:ea:97:ad:a9:45:f5:46:6b: 05:25:0c:8d:80:b8:31:ed:14:bb:6f:c8:d4:55:17: 1f:1d:bb:26:34:5e:b9:28:79:09:ca:5d:e1:47:ca: 64:92:b2:8e:96:fb:dd:06:98:3e:26:ae:cf:a0:7d: b1:59:a8:ed:15:e4:a6:04:1e:54:b7:45:0c:20:9c: 39:c6:c4:a9:d7:6f:fe:fd:75:74:ce:c9:49:e9:79: 32:bc:51:0c:13:43:dd:4e:af:d9:f9:8f:02:0c:e3: 5e:04:5c:81:e6:cb:57:ff:57:0b:ba:d8:59:e8:82: 35:e2:d7:c5:f4:b0:a1:ce:c7:c3:ab:1c:a0:a4:46: 91:f9:36:18:4a:5b:a8:59:bb:f0:0b:c5:1b:c9:42: 61:0c:54:03:0d:0b:fd:e1:50:a2:2f:d1:d8:c0:2e: b5:1f:55:89:96:3d:10:bc:cd:b1:14:44:a9:8e:7e: 6a:96:3b:c8:e9:a9:92:7b:25:74:b7:68:a0:72:66: 08:31:cc:a6:c3:cf:c1:c8:34:ae:e0:6c:c0:fc:d6: 4b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:4F:2D:02:59:3E:31:28:46:0A:A4:87:6C:C3:7F:92:82:80:26:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/bf1005be-5cb9-378b-855b-1b065d341dbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/cbf89b78-1e86-4629-abdd-682f04ffb165.crl X509v3 Authority Key Identifier: keyid:84:7F:A2:E1:13:B7:DC:E8:49:19:47:08:83:0D:CA:2B:DA:A1:6D:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165.cer sbgp-ipAddrBlock: critical IPv6: 2602:f989::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:f8:b7:35:d5:48:96:ea:7d:42:a5:7b:51:ab:52:27:a7:97: 7e:ed:1e:66:91:8d:a5:89:00:92:17:ab:19:31:38:fa:38:7a: fe:89:f5:f2:f3:56:c9:b0:f2:ab:ae:52:f5:43:7d:c0:c1:64: ef:30:50:dc:a9:0e:7c:4c:d4:ff:b8:52:4f:e1:aa:b1:15:82: 50:21:3c:72:1d:9b:4e:60:36:60:dd:ce:86:47:7d:98:ba:93: 20:87:75:f4:b0:b1:bc:6f:95:42:9b:3d:c2:25:89:42:0b:05: fd:33:84:34:ef:b6:5a:65:9d:71:a8:c8:c1:b6:79:91:75:06: b9:65:9f:f5:44:b3:94:08:2f:a8:be:ca:7c:11:11:55:14:0c: 81:e5:00:11:7b:96:7e:3e:84:b5:22:14:6c:de:b2:28:1f:93: 08:69:42:09:65:3a:e8:e1:62:7a:cc:3f:80:e4:8b:d3:a3:44: ca:0a:9a:8e:84:dc:4a:5c:93:fb:e1:e2:69:2a:54:42:5c:77: f4:87:a9:0f:c9:b5:f5:18:11:85:e7:ef:8d:d0:f0:f1:c1:7d: a6:0b:13:d1:0c:39:c3:eb:36:d4:0a:55:2b:24:e1:82:98:36: 86:d3:3a:a2:a1:c7:38:ed:32:05:cc:06:a5:a0:d5:d2:6a:eb: bf:5c:05:dd -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE+iyG41QnTP6yH4KsQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JmODliNzgtMWU4Ni00NjI5LWFiZGQtNjgyZjA0ZmZi MTY1MB4XDTI2MTAyNzAxMDAxNFoXDTI3MDEyNTAyMDAxNFowLzEtMCsGA1UEAxMk NTE3YTY1ZmQtMGIzZS00YjI5LWIzOGYtYjg5OWM4Y2IxYTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8VWDRGI2KbELDRPgDh4VBqJHZ+RawbHQ3Gpt SxAXS3daE8//gV++CMtpAPzV/Gvs8TRR6petqUX1RmsFJQyNgLgx7RS7b8jUVRcf HbsmNF65KHkJyl3hR8pkkrKOlvvdBpg+Jq7PoH2xWajtFeSmBB5Ut0UMIJw5xsSp 12/+/XV0zslJ6XkyvFEME0PdTq/Z+Y8CDONeBFyB5stX/1cLuthZ6II14tfF9LCh zsfDqxygpEaR+TYYSluoWbvwC8UbyUJhDFQDDQv94VCiL9HYwC61H1WJlj0QvM2x FESpjn5qljvI6amSeyV0t2igcmYIMcymw8/ByDSu4GzA/NZLcQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFERPLQJZPjEoRgqkh2zDf5KCgCa4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jYmY4 OWI3OC0xZTg2LTQ2MjktYWJkZC02ODJmMDRmZmIxNjUvYmYxMDA1YmUtNWNiOS0z NzhiLTg1NWItMWIwNjVkMzQxZGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2JmODliNzgtMWU4Ni00NjI5LWFi ZGQtNjgyZjA0ZmZiMTY1L2NiZjg5Yjc4LTFlODYtNDYyOS1hYmRkLTY4MmYwNGZm YjE2NS5jcmwwHwYDVR0jBBgwFoAUhH+i4RO33OhJGUcIgw3KK9qhbd8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jYmY4OWI3OC0xZTg2LTQ2MjktYWJkZC02ODJm MDRmZmIxNjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5iQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAUfi3NdVIlup9QqV7UatSJ6eXfu0eZpGNpYkAkherGTE4+jh6/on1 8vNWybDyq65S9UN9wMFk7zBQ3KkOfEzU/7hST+GqsRWCUCE8ch2bTmA2YN3Ohkd9 mLqTIId19LCxvG+VQps9wiWJQgsF/TOENO+2WmWdcajIwbZ5kXUGuWWf9USzlAgv qL7KfBERVRQMgeUAEXuWfj6EtSIUbN6yKB+TCGlCCWU66OFiesw/gOSL06NEygqa joTcSlyT++HiaSpUQlx39IepD8m19RgRhefvjdDw8cF9pgsT0Qw5w+s21ApVKyTh gpg2htM6oqHHOO0yBcwGpaDV0mrrv1wF3Q== -----END CERTIFICATE-----Generated at Wed Oct 28 05:26:58 2026 by rpki-client