$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/bf3c3ef3-fc5f-3d6f-9748-06d51a46617e.roa File: bf3c3ef3-fc5f-3d6f-9748-06d51a46617e.roa (raw, json) Hash identifier: 3SOEbcBDx9ZFFCP4UAbQgkzbFcECkJgpdjTkhiZIGss= Subject key identifier: C3:B7:B5:89:48:B5:F7:71:99:E2:94:DE:90:89:F6:F2:F1:24:75:0B Certificate issuer: /CN=932105b1-ce56-44a7-9670-6f4e56578ef8 Certificate serial: 010D0C9F4328584F067224C5E67C4C8DE5F27540 Authority key identifier: DA:85:D7:87:30:4F:B5:0F:C3:7A:12:C4:6E:32:82:EE:26:BD:42:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/bf3c3ef3-fc5f-3d6f-9748-06d51a46617e.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 23470 IP address blocks: 2602:f7f8:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/932105b1-ce56-44a7-9670-6f4e56578ef8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/932105b1-ce56-44a7-9670-6f4e56578ef8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:24:c5:e6:7c:4c:8d:e5:f2:75:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=932105b1-ce56-44a7-9670-6f4e56578ef8 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=9851fd1b-42fa-4763-a410-0de0a7652ab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7a:a4:84:a2:dc:b8:f3:8c:17:25:ad:59:e9: 90:89:22:0f:63:7d:3e:33:51:7a:cd:bd:ca:c5:ed: 53:59:a3:bd:66:b2:60:53:18:3b:a6:6f:52:41:1c: 7f:cc:66:1e:91:04:55:99:8a:d0:71:04:7c:5b:d3: 74:95:f5:01:33:a4:27:0a:f0:d5:54:72:0f:61:63: 56:71:0e:6c:fa:42:65:0d:79:ac:e6:17:42:ea:a8: 12:23:9a:f2:28:bc:61:77:f7:39:ea:0c:04:6f:c7: 9c:61:ae:02:e2:48:3a:7c:ee:db:bf:bc:fa:32:67: 15:31:9b:f1:77:f5:43:b2:6f:33:a2:97:b0:3b:94: a1:c9:6d:41:36:dc:ec:24:1a:b7:8a:10:5a:70:5f: 8c:83:de:bd:0d:80:e8:2b:d2:4d:0e:3e:db:dc:59: 69:72:2b:19:96:92:8a:6e:53:20:45:3d:57:f8:44: db:18:89:51:6d:46:d2:44:b1:49:a0:a9:b5:36:0e: 81:60:29:78:19:c5:61:96:1c:55:b3:d6:41:78:3a: 0c:1c:d0:d0:93:fa:1a:4e:ee:11:2c:c2:ac:ce:1f: 27:3b:03:59:1d:2a:86:01:98:fe:18:35:9d:e0:41: 80:8d:30:d7:2e:8a:32:0d:96:c8:61:ee:00:d8:b4: 91:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B7:B5:89:48:B5:F7:71:99:E2:94:DE:90:89:F6:F2:F1:24:75:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/bf3c3ef3-fc5f-3d6f-9748-06d51a46617e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/932105b1-ce56-44a7-9670-6f4e56578ef8.crl X509v3 Authority Key Identifier: keyid:DA:85:D7:87:30:4F:B5:0F:C3:7A:12:C4:6E:32:82:EE:26:BD:42:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8.cer sbgp-ipAddrBlock: critical IPv6: 2602:f7f8:6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:14:ae:a4:5b:43:55:1e:ba:83:e4:24:55:4f:68:f3:76:08: a4:36:38:8e:72:c6:bb:4c:18:da:50:28:6e:12:f3:5a:24:0c: c4:99:de:59:e8:c6:78:96:41:08:f6:78:7e:da:5d:26:18:fd: a2:44:d3:6d:57:02:31:74:06:dc:c9:52:0d:80:eb:60:c8:17: 08:19:0f:8e:4b:29:aa:0d:72:fc:88:a8:48:5d:04:00:9c:c5: 06:ac:82:db:54:cc:3d:60:28:68:30:35:76:42:ca:e7:a0:a0: 2c:f8:96:cf:30:86:d2:97:bc:d9:69:4b:a6:25:d2:a8:d6:20: 71:75:c0:9c:74:34:12:43:48:f9:92:46:e4:16:a1:84:16:95: e9:fd:5c:17:43:86:4b:36:01:80:58:04:a3:20:b5:d8:75:3a: 44:72:fc:f5:da:66:d9:f4:90:d0:15:09:6c:75:7b:86:1c:94: 6a:93:6a:c4:3a:b6:4c:2d:f3:5e:ec:52:c0:91:1a:c1:54:4c: d6:85:95:9c:60:d5:c5:06:1f:2c:92:a7:2c:69:0f:55:a1:1a: f1:e6:ae:7e:0f:df:da:9a:00:e5:11:74:33:80:a1:1f:62:37: f1:75:e3:d6:48:0b:d9:bf:66:b0:d2:98:52:36:84:17:b1:19: 46:a7:f0:4c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8GciTF5nxMjeXydUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTMyMTA1YjEtY2U1Ni00NGE3LTk2NzAtNmY0ZTU2NTc4 ZWY4MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk OTg1MWZkMWItNDJmYS00NzYzLWE0MTAtMGRlMGE3NjUyYWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHqkhKLcuPOMFyWtWemQiSIPY30+M1F6zb3K xe1TWaO9ZrJgUxg7pm9SQRx/zGYekQRVmYrQcQR8W9N0lfUBM6QnCvDVVHIPYWNW cQ5s+kJlDXms5hdC6qgSI5ryKLxhd/c56gwEb8ecYa4C4kg6fO7bv7z6MmcVMZvx d/VDsm8zopewO5ShyW1BNtzsJBq3ihBacF+Mg969DYDoK9JNDj7b3FlpcisZlpKK blMgRT1X+ETbGIlRbUbSRLFJoKm1Ng6BYCl4GcVhlhxVs9ZBeDoMHNDQk/oaTu4R LMKszh8nOwNZHSqGAZj+GDWd4EGAjTDXLooyDZbIYe4A2LSRZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMO3tYlItfdxmeKU3pCJ9vLxJHULMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MzIx MDViMS1jZTU2LTQ0YTctOTY3MC02ZjRlNTY1NzhlZjgvYmYzYzNlZjMtZmM1Zi0z ZDZmLTk3NDgtMDZkNTFhNDY2MTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTMyMTA1YjEtY2U1Ni00NGE3LTk2 NzAtNmY0ZTU2NTc4ZWY4LzkzMjEwNWIxLWNlNTYtNDRhNy05NjcwLTZmNGU1NjU3 OGVmOC5jcmwwHwYDVR0jBBgwFoAU2oXXhzBPtQ/DehLEbjKC7ia9QuYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MzIxMDViMS1jZTU2LTQ0YTctOTY3MC02ZjRl NTY1NzhlZjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3+AAG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEoUrqRbQ1UeuoPkJFVPaPN2CKQ2OI5yxrtMGNpQKG4S81okDMSZ 3lnoxniWQQj2eH7aXSYY/aJE021XAjF0BtzJUg2A62DIFwgZD45LKaoNcvyIqEhd BACcxQasgttUzD1gKGgwNXZCyuegoCz4ls8whtKXvNlpS6Yl0qjWIHF1wJx0NBJD SPmSRuQWoYQWlen9XBdDhks2AYBYBKMgtdh1OkRy/PXaZtn0kNAVCWx1e4YclGqT asQ6tkwt817sUsCRGsFUTNaFlZxg1cUGHyySpyxpD1WhGvHmrn4P39qaAOURdDOA oR9iN/F149ZIC9m/ZrDSmFI2hBexGUan8Ew= -----END CERTIFICATE-----Generated at Sat Sep 5 02:28:49 2026 by rpki-client