
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/bf8f855d-79d9-359a-b716-f369f7368f3d.roa
File: bf8f855d-79d9-359a-b716-f369f7368f3d.roa (raw, json)
Hash identifier: eCN+fEFI+rwjQVLH4shkPK/htwTh+svTEazh0OpGSHE=
Subject key identifier: CE:A2:E4:10:30:6D:19:7D:D4:75:F0:F0:07:58:18:84:AD:34:CF:44
Certificate issuer: /CN=8baf6f06-4472-4c79-8a01-5c338d64c402
Certificate serial: 010D0C9F4328584D237A2E93AA49064FF8C8BA00
Authority key identifier: 95:D3:B5:8C:0D:5D:5F:85:19:CD:8F:FA:39:F4:82:C2:33:BB:9D:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/bf8f855d-79d9-359a-b716-f369f7368f3d.roa
Signing time: Thu 12 Mar 2026 01:00:32 +0000
ROA not before: Thu 12 Mar 2026 01:00:32 +0000
ROA not after: Wed 10 Jun 2026 01:00:32 +0000
asID: 401082
IP address blocks: 2602:f8b4::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 16 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:23:7a:2e:93:aa:49:06:4f:f8:c8:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8baf6f06-4472-4c79-8a01-5c338d64c402
Validity
Not Before: Mar 12 01:00:32 2026 GMT
Not After : Jun 10 01:00:32 2026 GMT
Subject: CN=94afe465-1fc0-43af-93bb-d14df5eb3185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ce:02:8b:0c:4c:25:60:ce:44:08:03:4c:ba:
73:90:4b:58:e1:be:c9:56:86:cc:ef:a2:ab:06:43:
db:0c:9f:05:77:b9:0c:11:8f:17:88:e7:78:d2:c4:
35:46:3e:fe:db:42:06:da:fc:fc:d3:fe:88:58:a1:
e7:27:ba:2c:c8:74:b1:4d:f3:ba:91:4d:29:a4:87:
99:b5:a7:c1:39:23:0e:c9:3e:24:39:de:ab:2d:c5:
06:6d:81:57:69:10:7c:19:72:74:75:04:36:7e:ee:
cb:ea:cb:37:85:87:2c:1f:df:0c:75:be:c2:cf:f1:
38:fa:9b:03:9e:f4:03:5f:61:de:ce:6b:1a:2b:f2:
74:9b:cc:01:c7:d2:9b:42:97:86:95:98:ce:5d:3a:
fd:4e:13:59:cb:f8:91:13:63:3c:de:af:13:aa:50:
4b:eb:7b:82:1e:e4:0f:2f:42:16:d6:93:7f:ec:43:
d6:83:bb:dd:cc:66:17:3d:6c:f9:75:e4:83:d1:64:
2b:0e:3d:94:e4:bf:47:c4:ce:5b:35:d1:c3:bb:43:
44:a5:0e:da:ea:d1:da:16:04:3a:6e:0d:8f:8b:c6:
db:3e:e9:88:27:f4:a0:ea:85:b0:f5:d4:98:d6:91:
04:45:56:3e:52:4e:ba:a9:ea:58:f9:a5:d3:8d:98:
60:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A2:E4:10:30:6D:19:7D:D4:75:F0:F0:07:58:18:84:AD:34:CF:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/bf8f855d-79d9-359a-b716-f369f7368f3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.crl
X509v3 Authority Key Identifier:
keyid:95:D3:B5:8C:0D:5D:5F:85:19:CD:8F:FA:39:F4:82:C2:33:BB:9D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f8b4::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:9f:42:5e:61:c6:a0:4c:c0:ff:1a:55:5a:8b:0a:16:7d:7b:
99:1a:42:75:3c:ee:bb:9c:70:9f:3e:7f:69:c6:87:0f:40:d1:
cf:17:85:ad:7f:44:d3:c5:7d:0a:ed:d4:ee:9b:4d:5d:61:fb:
5c:e0:28:0a:41:18:2a:53:33:58:d5:3a:72:aa:11:0d:e6:fb:
f7:05:30:fe:7b:4e:b3:57:84:c4:bf:9b:ef:4e:35:dc:e4:19:
37:41:c8:d3:44:8f:f4:8c:b8:ae:d1:93:d1:a0:e6:28:c5:c7:
c8:3b:1e:d4:a2:15:b3:3b:13:60:56:2d:4e:0b:d1:bb:39:4e:
df:15:8e:95:98:7f:2c:0e:70:79:4e:90:38:82:f6:75:15:af:
e2:ad:24:3d:d5:08:cf:0d:d3:2f:4f:f4:04:26:39:8d:e1:25:
df:43:35:33:b7:4e:23:b3:05:a7:67:4e:4d:60:71:37:f9:94:
11:84:97:09:46:73:59:1f:a0:fc:2a:a6:0c:d1:02:12:bd:4f:
f8:06:a4:5d:e3:da:9d:2a:e9:da:fa:dd:ee:02:66:44:30:78:
e6:b3:7a:a8:20:d3:3a:a9:5a:94:1b:f9:9e:00:f1:a0:58:24:
df:7a:96:30:fb:8c:c7:98:11:be:89:fa:c6:e2:28:7b:a3:31:
7d:0c:e4:4a
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0jei6TqkkGT/jIugAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGJhZjZmMDYtNDQ3Mi00Yzc5LThhMDEtNWMzMzhkNjRj
NDAyMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk
OTRhZmU0NjUtMWZjMC00M2FmLTkzYmItZDE0ZGY1ZWIzMTg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM4CiwxMJWDORAgDTLpzkEtY4b7JVobM76Kr
BkPbDJ8Fd7kMEY8XiOd40sQ1Rj7+20IG2vz80/6IWKHnJ7osyHSxTfO6kU0ppIeZ
tafBOSMOyT4kOd6rLcUGbYFXaRB8GXJ0dQQ2fu7L6ss3hYcsH98Mdb7Cz/E4+psD
nvQDX2HezmsaK/J0m8wBx9KbQpeGlZjOXTr9ThNZy/iRE2M83q8TqlBL63uCHuQP
L0IW1pN/7EPWg7vdzGYXPWz5deSD0WQrDj2U5L9HxM5bNdHDu0NEpQ7a6tHaFgQ6
bg2Pi8bbPumIJ/Sg6oWw9dSY1pEERVY+Uk66qepY+aXTjZhg0QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFM6i5BAwbRl91HXw8AdYGIStNM9EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YmFm
NmYwNi00NDcyLTRjNzktOGEwMS01YzMzOGQ2NGM0MDIvYmY4Zjg1NWQtNzlkOS0z
NTlhLWI3MTYtZjM2OWY3MzY4ZjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGJhZjZmMDYtNDQ3Mi00Yzc5LThh
MDEtNWMzMzhkNjRjNDAyLzhiYWY2ZjA2LTQ0NzItNGM3OS04YTAxLTVjMzM4ZDY0
YzQwMi5jcmwwHwYDVR0jBBgwFoAUldO1jA1dX4UZzY/6OfSCwjO7nRYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84YmFmNmYwNi00NDcyLTRjNzktOGEwMS01YzMz
OGQ2NGM0MDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4tAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAlZ9CXmHGoEzA/xpVWosKFn17mRpCdTzuu5xwnz5/acaHD0DRzxeF
rX9E08V9Cu3U7ptNXWH7XOAoCkEYKlMzWNU6cqoRDeb79wUw/ntOs1eExL+b7041
3OQZN0HI00SP9Iy4rtGT0aDmKMXHyDse1KIVszsTYFYtTgvRuzlO3xWOlZh/LA5w
eU6QOIL2dRWv4q0kPdUIzw3TL0/0BCY5jeEl30M1M7dOI7MFp2dOTWBxN/mUEYSX
CUZzWR+g/CqmDNECEr1P+AakXePanSrp2vrd7gJmRDB45rN6qCDTOqlalBv5ngDx
oFgk33qWMPuMx5gRvon6xuIoe6MxfQzkSg==
-----END CERTIFICATE-----
Generated at Sun Mar 15 05:52:00 2026 by rpki-client