$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bdb91cba-d0e7-3f3d-950d-2a5cf6144c25.roa File: bdb91cba-d0e7-3f3d-950d-2a5cf6144c25.roa (raw, json) Hash identifier: ywVtfQmHq56gPA2SOvCJ5s0egK1i0VEX9iL6ieFdcFI= Subject key identifier: 41:29:87:54:A2:51:77:79:FD:CC:DD:46:51:9D:8C:08:D2:C0:7F:06 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4974C8A57ACBB9CD7EE376E0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bdb91cba-d0e7-3f3d-950d-2a5cf6144c25.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396582 IP address blocks: 2001:500:134::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:c8:a5:7a:cb:b9:cd:7e:e3:76:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4c696ceb-8b03-47fc-a2c1-afb539a01c21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:21:e6:1a:7a:f7:f6:65:d5:4e:78:be:7e:b7: 3b:7e:18:27:a0:66:ec:7c:c0:33:f3:d7:2d:84:23: 33:8a:9f:da:e9:0d:16:c1:26:ca:69:eb:c5:1a:0e: 11:f9:64:c5:b1:43:39:ef:38:e8:0c:d8:3d:1a:04: 21:df:66:aa:46:5e:00:a8:d8:1c:62:cb:5d:e2:5f: 10:65:80:27:a5:29:55:ed:c2:07:c2:03:62:82:2c: 96:9f:b7:0c:41:ae:2b:a4:22:c9:78:e2:3a:57:55: 12:ce:e0:e1:1c:25:a7:a7:f8:22:68:b5:31:08:c1: 70:12:f2:65:cd:37:08:63:5d:b0:65:e9:e2:4a:83: 94:ca:5b:94:ba:62:f4:39:67:b1:10:b5:26:12:c5: c7:66:96:be:bf:45:04:af:85:ae:cc:28:3a:4b:aa: 80:33:5d:4a:5e:a4:95:f9:ff:6b:7c:cf:3b:bf:ed: 93:60:5c:bd:3b:82:fd:1b:19:fe:78:6a:73:9a:a7: df:e0:53:d4:1c:91:fa:7f:81:e4:20:9f:b1:71:03: 74:43:43:4a:89:c3:18:71:88:d1:9c:4b:0c:ab:e1: 91:5d:8f:5a:ae:e4:4f:bc:c5:a3:97:94:45:ba:a8: b7:cf:4e:a4:81:2d:9e:9d:17:fe:6b:58:d2:ee:9e: 88:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:29:87:54:A2:51:77:79:FD:CC:DD:46:51:9D:8C:08:D2:C0:7F:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bdb91cba-d0e7-3f3d-950d-2a5cf6144c25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:134::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:41:09:0b:90:a2:b3:41:da:60:80:97:30:41:db:fa:cd:5c: ab:45:85:6f:16:a1:e8:18:8e:23:4b:c6:7b:97:00:38:fa:83: 1a:ef:f1:8e:95:c5:83:5a:a9:d9:82:b4:aa:77:94:9e:83:70: df:13:8b:7a:45:38:ee:9c:0c:f4:5c:b4:a0:7f:e8:23:7c:47: 44:4b:e2:88:d2:0e:f8:75:f2:40:d1:a9:cb:d1:30:c5:d1:1b: 8e:b0:68:03:18:59:e1:23:e2:1d:2c:2b:99:cc:5f:4b:83:fc: 01:0a:dc:09:e2:61:31:3d:19:2d:f3:32:df:0b:6f:99:06:68: 4c:e9:95:1d:37:f5:a9:6e:b9:6a:c3:b0:0a:51:8a:31:28:68: 03:c8:5c:16:be:17:b7:a3:a2:ef:7b:b0:39:85:d1:2a:c7:ce: da:32:47:78:a0:3a:de:b4:91:c4:af:07:c8:47:9b:c8:ce:c8: ac:21:ed:38:18:46:37:e9:9d:83:63:f7:4c:4e:e9:76:c1:71: f7:de:8c:48:a1:6f:20:cb:6e:ee:6f:14:a5:af:9a:c3:f2:cf: 5c:94:fc:60:95:e6:84:ed:7c:09:87:06:2b:7c:4f:61:c3:81: b8:76:c9:70:20:c6:93:10:e7:88:b5:93:18:f3:a1:8d:73:5b: f8:f6:91:79 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdMilesu5zX7jduAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGM2OTZjZWItOGIwMy00N2ZjLWEyYzEtYWZiNTM5YTAxYzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCHmGnr39mXVTni+frc7fhgnoGbsfMAz89ct hCMzip/a6Q0WwSbKaevFGg4R+WTFsUM57zjoDNg9GgQh32aqRl4AqNgcYstd4l8Q ZYAnpSlV7cIHwgNigiyWn7cMQa4rpCLJeOI6V1USzuDhHCWnp/giaLUxCMFwEvJl zTcIY12wZeniSoOUyluUumL0OWexELUmEsXHZpa+v0UEr4WuzCg6S6qAM11KXqSV +f9rfM87v+2TYFy9O4L9Gxn+eGpzmqff4FPUHJH6f4HkIJ+xcQN0Q0NKicMYcYjR nEsMq+GRXY9aruRPvMWjl5RFuqi3z06kgS2enRf+a1jS7p6IowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEEph1SiUXd5/czdRlGdjAjSwH8GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmRiOTFjYmEtZDBlNy0z ZjNkLTk1MGQtMmE1Y2Y2MTQ0YzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFNBCQuQorNB2mCAlzBB2/rNXKtFhW8WoegYjiNLxnuXADj6gxrv 8Y6VxYNaqdmCtKp3lJ6DcN8Ti3pFOO6cDPRctKB/6CN8R0RL4ojSDvh18kDRqcvR MMXRG46waAMYWeEj4h0sK5nMX0uD/AEK3AniYTE9GS3zMt8Lb5kGaEzplR039alu uWrDsApRijEoaAPIXBa+F7ejou97sDmF0SrHztoyR3igOt60kcSvB8hHm8jOyKwh 7TgYRjfpnYNj90xO6XbBcffejEihbyDLbu5vFKWvmsPyz1yU/GCV5oTtfAmHBit8 T2HDgbh2yXAgxpMQ54i1kxjzoY1zW/j2kXk= -----END CERTIFICATE-----Generated at Fri Sep 25 06:43:41 2026 by rpki-client