$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/61f2599d-7e89-3c7f-9b2c-1d8ee37cb6b0.roa File: 61f2599d-7e89-3c7f-9b2c-1d8ee37cb6b0.roa (raw, json) Hash identifier: qXHcQeBBGLki/ju88ONFPOTN8F8KM5vJ4X9HmWJK5wo= Subject key identifier: 91:09:52:FE:1B:7F:D9:78:72:E1:2B:4C:C7:F9:1C:02:65:88:E6:A2 Certificate issuer: /CN=bfb32325-5962-452d-81bb-2eb68992a5df Certificate serial: 010D0C9F4328584DD4C06FD77C6EE7BABACB4400 Authority key identifier: 8C:1D:C1:63:FA:85:9E:01:60:50:F0:C0:86:FF:F2:F4:3E:3B:24:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/61f2599d-7e89-3c7f-9b2c-1d8ee37cb6b0.roa Signing time: Thu 14 May 2026 13:00:31 +0000 ROA not before: Thu 14 May 2026 13:00:31 +0000 ROA not after: Wed 12 Aug 2026 13:00:31 +0000 asID: 399272 IP address blocks: 2602:f4a8:40::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/bfb32325-5962-452d-81bb-2eb68992a5df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/bfb32325-5962-452d-81bb-2eb68992a5df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d4:c0:6f:d7:7c:6e:e7:ba:ba:cb:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfb32325-5962-452d-81bb-2eb68992a5df Validity Not Before: May 14 13:00:31 2026 GMT Not After : Aug 12 13:00:31 2026 GMT Subject: CN=007af4b7-2540-4427-86fe-3c26bdeb9440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e6:82:8d:73:35:69:20:e5:8a:e5:3e:74:61: f0:4a:16:27:10:df:df:32:fa:a1:d2:6d:ce:5e:2f: fc:24:2d:57:e9:e5:89:52:53:0c:ca:e8:90:85:d7: 2f:f9:63:d2:1b:ea:a4:21:67:a6:44:c0:5e:73:83: 0f:7d:17:7e:2e:1e:f6:5c:49:df:8f:f3:cc:e2:a3: 42:8a:9a:9c:fd:cc:c9:b6:5a:99:db:4c:a8:41:6e: 6b:e9:ac:46:dd:0d:4b:4f:3e:86:d7:ad:4c:71:73: d4:c0:e5:d0:78:a8:cc:d1:24:d6:4b:3c:a5:97:37: 32:8e:2e:4b:45:99:63:dd:d6:6e:a7:ed:97:62:62: 86:d1:ef:23:7f:34:ce:0e:0f:45:6b:f1:f1:cc:48: 1e:a2:3b:7b:12:66:55:94:6e:1b:5e:7e:f3:24:85: e4:b2:1f:0e:b3:b1:e8:c6:47:af:ad:66:55:98:c0: 1c:0b:c4:49:84:e0:c1:f6:96:e9:26:01:4b:c6:0f: f6:9c:c5:0b:54:63:01:a3:67:0b:56:39:7e:84:53: fa:ad:98:db:66:ea:e2:9c:dc:09:61:ce:d6:0f:93: fe:f4:f6:d8:11:5a:73:79:cd:d3:de:de:e0:ea:75: 14:5f:09:e4:09:40:1c:5a:1b:dd:f4:8f:58:83:b7: 6c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:09:52:FE:1B:7F:D9:78:72:E1:2B:4C:C7:F9:1C:02:65:88:E6:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/61f2599d-7e89-3c7f-9b2c-1d8ee37cb6b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/bfb32325-5962-452d-81bb-2eb68992a5df.crl X509v3 Authority Key Identifier: keyid:8C:1D:C1:63:FA:85:9E:01:60:50:F0:C0:86:FF:F2:F4:3E:3B:24:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df.cer sbgp-ipAddrBlock: critical IPv6: 2602:f4a8:40::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:1f:c7:d8:f0:dd:f1:a2:5e:a3:41:4d:60:ab:ee:d2:97:88: be:4d:87:c3:0b:31:8b:1a:58:03:d1:d8:ef:f6:d8:bf:ef:34: 07:25:01:62:bd:e7:63:e2:d7:76:e4:7b:64:74:05:4a:46:62: 5c:68:6a:13:56:2f:84:d1:65:1c:90:d0:eb:0f:ea:44:cd:0a: c6:d8:68:1f:8f:cc:f4:bd:2f:0a:ee:38:73:91:dd:14:49:07: d0:27:27:4b:20:31:5d:65:4c:e5:2a:01:35:2e:73:92:2a:be: e7:b1:f0:19:c5:e4:f4:04:1e:15:15:12:7a:59:1a:e1:93:2f: 03:a3:89:c0:49:38:df:17:0d:af:d5:67:1e:00:d5:5d:e5:b4: 58:30:c5:c4:a4:89:63:09:df:c5:ad:b6:3e:2e:4a:96:53:cb: 46:df:47:43:95:0e:0f:81:e6:fa:25:70:6c:c3:30:cf:0e:dd: 95:53:cd:37:e9:59:41:c9:99:26:69:08:16:bf:ff:8f:5f:6b: 90:b2:9a:47:14:b2:61:38:1d:71:59:cc:d5:48:e8:c6:bf:cd: b7:29:7c:92:e9:0a:e0:a5:8c:53:ca:de:d1:1e:eb:2d:e1:f7: 5a:d0:66:ea:75:e9:a9:e5:e6:23:ef:e8:69:81:da:c6:05:08: 9c:ab:b0:c0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3UwG/XfG7nurrLRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmZiMzIzMjUtNTk2Mi00NTJkLTgxYmItMmViNjg5OTJh NWRmMB4XDTI2MDUxNDEzMDAzMVoXDTI2MDgxMjEzMDAzMVowLzEtMCsGA1UEAxMk MDA3YWY0YjctMjU0MC00NDI3LTg2ZmUtM2MyNmJkZWI5NDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOaCjXM1aSDliuU+dGHwShYnEN/fMvqh0m3O Xi/8JC1X6eWJUlMMyuiQhdcv+WPSG+qkIWemRMBec4MPfRd+Lh72XEnfj/PM4qNC ipqc/czJtlqZ20yoQW5r6axG3Q1LTz6G161McXPUwOXQeKjM0STWSzyllzcyji5L RZlj3dZup+2XYmKG0e8jfzTODg9Fa/HxzEgeojt7EmZVlG4bXn7zJIXksh8Os7Ho xkevrWZVmMAcC8RJhODB9pbpJgFLxg/2nMULVGMBo2cLVjl+hFP6rZjbZurinNwJ Yc7WD5P+9PbYEVpzec3T3t7g6nUUXwnkCUAcWhvd9I9Yg7dsKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJEJUv4bf9l4cuErTMf5HAJliOaiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZmIz MjMyNS01OTYyLTQ1MmQtODFiYi0yZWI2ODk5MmE1ZGYvNjFmMjU5OWQtN2U4OS0z YzdmLTliMmMtMWQ4ZWUzN2NiNmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYmZiMzIzMjUtNTk2Mi00NTJkLTgx YmItMmViNjg5OTJhNWRmL2JmYjMyMzI1LTU5NjItNDUyZC04MWJiLTJlYjY4OTky YTVkZi5jcmwwHwYDVR0jBBgwFoAUjB3BY/qFngFgUPDAhv/y9D47JLIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZmIzMjMyNS01OTYyLTQ1MmQtODFiYi0yZWI2 ODk5MmE1ZGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL0qABA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADIfx9jw3fGiXqNBTWCr7tKXiL5Nh8MLMYsaWAPR2O/22L/vNAcl AWK952Pi13bke2R0BUpGYlxoahNWL4TRZRyQ0OsP6kTNCsbYaB+PzPS9LwruOHOR 3RRJB9AnJ0sgMV1lTOUqATUuc5Iqvuex8BnF5PQEHhUVEnpZGuGTLwOjicBJON8X Da/VZx4A1V3ltFgwxcSkiWMJ38Wttj4uSpZTy0bfR0OVDg+B5volcGzDMM8O3ZVT zTfpWUHJmSZpCBa//49fa5CymkcUsmE4HXFZzNVI6Ma/zbcpfJLpCuCljFPK3tEe 6y3h91rQZup16anl5iPv6GmB2sYFCJyrsMA= -----END CERTIFICATE-----Generated at Thu May 28 13:40:16 2026 by rpki-client