$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/baf67ca6-4645-3e8c-b1f1-8b1cc93cfc8b.roa File: baf67ca6-4645-3e8c-b1f1-8b1cc93cfc8b.roa (raw, json) Hash identifier: 0qMevfWbFxs6Vy4SPH4Zly6SaafU+ZPBijw/eNfzfKI= Subject key identifier: E3:4B:40:37:52:54:05:E4:4D:F6:60:19:82:0F:34:FA:EB:E1:77:FF Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F7BB3018B22F732028B5A6580 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/baf67ca6-4645-3e8c-b1f1-8b1cc93cfc8b.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 394380 IP address blocks: 2607:f5b5:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b3:01:8b:22:f7:32:02:8b:5a:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=7ad587a0-cf9e-4ce4-9f10-d7645a364cd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:09:e2:37:95:90:46:e1:ec:dd:21:4c:cb:78: 07:63:e4:8b:f6:e4:68:bb:6c:4c:37:c2:74:37:5a: a7:55:6e:65:58:d6:95:da:8e:21:eb:21:40:32:13: 95:1d:58:69:f8:4f:df:16:59:d5:cb:7d:bd:88:cf: 4e:6e:c0:3f:27:23:db:23:17:49:55:40:28:5b:9a: 97:ae:60:0c:73:c6:48:3f:7a:df:69:d0:69:70:cd: ff:b2:c3:14:2f:57:a2:66:71:dd:a6:7c:b5:89:21: d4:65:b0:43:36:d0:34:15:00:4e:38:e5:42:35:08: d2:8d:62:00:8c:a0:cc:16:b1:56:5a:88:eb:99:ac: da:aa:51:ea:ec:56:14:ed:1c:7d:64:3d:d7:d6:18: 84:71:78:d7:9d:b3:3c:ed:f0:bd:26:1e:73:05:96: c3:a0:42:b7:0d:0b:5c:c5:15:41:e7:ed:d3:19:3b: b5:47:dc:c9:a2:15:2e:b3:ea:75:51:04:e9:c0:e2: 87:fb:9b:0e:c0:a2:ca:9e:18:bc:06:97:43:d4:6d: e4:aa:78:78:b9:84:60:77:dd:75:65:4f:32:9c:28: 27:ec:90:ac:ad:a4:7d:95:66:c8:46:1e:c2:c0:53: f2:3a:c3:73:23:f9:f8:66:55:5e:bf:91:a4:8a:0e: d9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:4B:40:37:52:54:05:E4:4D:F6:60:19:82:0F:34:FA:EB:E1:77:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/baf67ca6-4645-3e8c-b1f1-8b1cc93cfc8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv6: 2607:f5b5:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:c1:e5:83:b8:7e:a8:37:f5:f6:45:c4:c8:66:9e:2e:eb:b0: 4b:26:4f:26:81:76:33:6f:6f:11:bc:ea:3e:5f:9f:62:f5:72: aa:17:89:e6:e6:d0:c4:ca:6f:7b:11:3f:9b:92:c6:2a:fe:dd: 34:93:9b:4a:e9:9e:03:88:88:5f:b7:5d:b6:c4:ca:a1:da:79: e8:9a:87:50:16:39:44:36:1e:42:6e:a8:e4:25:f7:6e:59:00: f3:24:bd:69:17:12:2c:16:3f:43:7d:57:a7:b3:85:90:6c:5b: 3f:42:77:f3:2d:4f:a3:b1:e5:85:d0:3e:f3:92:50:58:b2:f1: 37:d3:0f:7d:b2:42:4b:ca:ed:72:91:1f:3c:07:3e:73:7a:4c: 05:cd:ff:96:a5:5d:df:f3:3a:59:44:bf:fa:b5:25:0e:90:eb: f2:ce:31:ce:f0:53:44:ab:12:17:20:c1:dd:cd:29:b9:48:92: 87:4c:de:03:36:37:0b:c8:44:e1:a3:f3:3d:af:a9:66:8a:8e: 94:66:a8:6e:30:1c:a9:71:0e:32:61:c8:0a:cb:a9:d6:72:e2: 6f:1b:86:4d:83:af:de:e3:15:0b:a6:c6:d1:d3:d6:0e:33:a2: bf:9c:bd:2a:de:5f:d6:50:26:f0:b7:de:28:4b:c4:ee:06:3c: 9c:93:c0:01 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE97swGLIvcyAotaZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk N2FkNTg3YTAtY2Y5ZS00Y2U0LTlmMTAtZDc2NDVhMzY0Y2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AniN5WQRuHs3SFMy3gHY+SL9uRou2xMN8J0 N1qnVW5lWNaV2o4h6yFAMhOVHVhp+E/fFlnVy329iM9ObsA/JyPbIxdJVUAoW5qX rmAMc8ZIP3rfadBpcM3/ssMUL1eiZnHdpny1iSHUZbBDNtA0FQBOOOVCNQjSjWIA jKDMFrFWWojrmazaqlHq7FYU7Rx9ZD3X1hiEcXjXnbM87fC9Jh5zBZbDoEK3DQtc xRVB5+3TGTu1R9zJohUus+p1UQTpwOKH+5sOwKLKnhi8BpdD1G3kqnh4uYRgd911 ZU8ynCgn7JCsraR9lWbIRh7CwFPyOsNzI/n4ZlVev5Gkig7ZXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFONLQDdSVAXkTfZgGYIPNPrr4Xf/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYmFmNjdjYTYtNDY0NS0z ZThjLWIxZjEtOGIxY2M5M2NmYzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf1tQAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADHB5YO4fqg39fZFxMhmni7rsEsmTyaBdjNvbxG86j5fn2L1cqoX iebm0MTKb3sRP5uSxir+3TSTm0rpngOIiF+3XbbEyqHaeeiah1AWOUQ2HkJuqOQl 925ZAPMkvWkXEiwWP0N9V6ezhZBsWz9Cd/MtT6Ox5YXQPvOSUFiy8TfTD32yQkvK 7XKRHzwHPnN6TAXN/5alXd/zOllEv/q1JQ6Q6/LOMc7wU0SrEhcgwd3NKblIkodM 3gM2NwvIROGj8z2vqWaKjpRmqG4wHKlxDjJhyArLqdZy4m8bhk2Dr97jFQumxtHT 1g4zor+cvSreX9ZQJvC33ihLxO4GPJyTwAE= -----END CERTIFICATE-----Generated at Wed Oct 14 01:59:47 2026 by rpki-client