$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bdb91cba-d0e7-3f3d-950d-2a5cf6144c25.roa File: bdb91cba-d0e7-3f3d-950d-2a5cf6144c25.roa (raw, json) Hash identifier: bFKxrJBeTbTBVcs2cmUwMQf+J/soV9snjgK2/vNxBiA= Subject key identifier: C2:AB:97:7B:28:7C:6F:30:4E:88:38:D5:D4:D3:29:71:CA:DC:B4:E1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D250C38E815DDA1F1C617C600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bdb91cba-d0e7-3f3d-950d-2a5cf6144c25.roa Signing time: Thu 12 Mar 2026 14:31:07 +0000 ROA not before: Thu 12 Mar 2026 14:31:07 +0000 ROA not after: Wed 10 Jun 2026 14:31:07 +0000 asID: 396582 IP address blocks: 2001:500:134::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:25:0c:38:e8:15:dd:a1:f1:c6:17:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 12 14:31:07 2026 GMT Not After : Jun 10 14:31:07 2026 GMT Subject: CN=d9d1ecf4-c8cd-4149-9411-1eaebf75f263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:29:f0:b3:c6:60:0b:ac:b1:0d:e4:3f:70:cf: bb:6d:fb:3c:52:46:98:3c:87:b9:53:4c:14:59:e5: 95:94:21:40:71:21:9c:4f:30:c9:76:d6:24:33:5a: 87:78:74:5c:fd:c6:e9:2f:68:0b:b6:47:8f:5c:14: 57:30:37:db:f1:65:e3:25:8a:27:7c:a6:f2:f6:39: 7f:71:a3:41:43:49:b7:87:c0:8c:d3:55:3a:64:70: 7d:72:53:06:3b:9e:97:5d:d0:b5:46:22:cb:b0:c8: 98:26:64:67:ad:aa:d1:28:00:bf:ec:3c:0c:55:26: 99:f7:f2:3c:82:e0:bd:02:24:48:93:ae:85:e3:eb: c9:9b:6c:7a:2b:e4:d8:40:00:39:87:41:6d:2d:bf: 2a:a7:13:fc:b0:ee:48:37:2d:b4:09:10:47:ef:95: 4e:89:17:93:7b:f4:af:5c:77:f2:46:a8:88:52:9c: c4:6c:a7:6e:25:1c:26:e2:1e:07:d3:d5:d7:76:3b: b3:87:5f:3d:75:cb:7e:05:3a:ca:51:9f:c0:56:94: 2b:8d:82:6b:c1:8d:fc:92:6d:d9:59:1d:3e:dc:b2: 73:49:9e:54:ad:51:81:b7:4c:ca:e3:05:97:73:da: 70:6a:f4:05:ca:fa:40:7b:51:02:46:1a:37:d2:58: f9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:AB:97:7B:28:7C:6F:30:4E:88:38:D5:D4:D3:29:71:CA:DC:B4:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bdb91cba-d0e7-3f3d-950d-2a5cf6144c25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:134::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:ff:4c:e9:4a:25:05:37:99:4f:13:d7:06:28:9c:f0:0b:41: 3b:ab:d0:01:b3:c8:4e:05:02:c2:5e:d0:a3:be:96:03:e5:83: bb:99:e0:30:79:1e:56:19:76:6c:0e:f4:6c:24:97:1f:78:28: 08:49:52:84:6d:ce:4b:67:98:8e:d8:b3:93:ae:82:b0:47:56: b7:38:01:6c:fd:aa:b0:d3:84:71:97:73:46:3d:5b:57:fd:3b: 55:bb:39:1e:24:41:c5:8b:fd:d1:1b:97:ac:e6:3f:76:33:33: 34:98:16:f1:be:50:3a:18:a6:fb:77:e7:42:e2:df:7a:2d:db: 23:56:08:65:ae:df:6f:03:c9:e5:3f:f7:b3:87:7b:3e:b9:fe: 3e:42:87:97:80:ab:65:e0:4b:f3:56:3c:27:b9:41:af:6e:16: 1b:04:b9:a1:72:95:f5:17:60:9f:f8:2c:d8:98:ea:cc:0e:81: 60:53:63:76:29:1d:f6:27:6f:07:ec:a2:65:d6:f2:fd:50:5c: cd:6d:5f:44:dc:94:78:05:7e:d5:ed:1e:e7:d9:f3:c8:07:32: e8:71:42:44:e3:7b:c1:17:9e:37:7e:15:5d:31:61:1d:32:32: 53:2e:b5:b5:c4:76:59:d8:1f:2e:2c:90:ab:72:3b:e5:1c:bf: 55:52:d4:1f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0lDDjoFd2h8cYXxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMjE0MzEwN1oXDTI2MDYxMDE0MzEwN1owLzEtMCsGA1UEAxMk ZDlkMWVjZjQtYzhjZC00MTQ5LTk0MTEtMWVhZWJmNzVmMjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArynws8ZgC6yxDeQ/cM+7bfs8UkaYPIe5U0wU WeWVlCFAcSGcTzDJdtYkM1qHeHRc/cbpL2gLtkePXBRXMDfb8WXjJYonfKby9jl/ caNBQ0m3h8CM01U6ZHB9clMGO56XXdC1RiLLsMiYJmRnrarRKAC/7DwMVSaZ9/I8 guC9AiRIk66F4+vJm2x6K+TYQAA5h0FtLb8qpxP8sO5INy20CRBH75VOiReTe/Sv XHfyRqiIUpzEbKduJRwm4h4H09XXdjuzh189dct+BTrKUZ/AVpQrjYJrwY38km3Z WR0+3LJzSZ5UrVGBt0zK4wWXc9pwavQFyvpAe1ECRho30lj5JwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMKrl3sofG8wTog41dTTKXHK3LThMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmRiOTFjYmEtZDBlNy0z ZjNkLTk1MGQtMmE1Y2Y2MTQ0YzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKP/TOlKJQU3mU8T1wYonPALQTur0AGzyE4FAsJe0KO+lgPlg7uZ 4DB5HlYZdmwO9Gwklx94KAhJUoRtzktnmI7Ys5OugrBHVrc4AWz9qrDThHGXc0Y9 W1f9O1W7OR4kQcWL/dEbl6zmP3YzMzSYFvG+UDoYpvt350Li33ot2yNWCGWu328D yeU/97OHez65/j5Ch5eAq2XgS/NWPCe5Qa9uFhsEuaFylfUXYJ/4LNiY6swOgWBT Y3YpHfYnbwfsomXW8v1QXM1tX0TclHgFftXtHufZ88gHMuhxQkTje8EXnjd+FV0x YR0yMlMutbXEdlnYHy4skKtyO+Ucv1VS1B8= -----END CERTIFICATE-----Generated at Thu Mar 26 08:36:49 2026 by rpki-client