$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf113947-4790-3b5e-b1e4-8f8c2d505b9e.roa File: bf113947-4790-3b5e-b1e4-8f8c2d505b9e.roa (raw, json) Hash identifier: mR0B8UQkMZGjAHHtt2805FHRqc/Iy8v9UdhgHGZOz+g= Subject key identifier: B2:2E:56:A7:11:EB:13:46:8E:6D:91:F3:DE:34:30:AA:A9:57:10:8E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F06727E38432F30C9CE494300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf113947-4790-3b5e-b1e4-8f8c2d505b9e.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 396586 IP address blocks: 2001:500:124::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:7e:38:43:2f:30:c9:ce:49:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=b00802ae-88f1-483c-ab48-13816fb714cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:5b:6c:b2:cc:5b:89:9e:1e:3a:d5:1b:a9:e6: 62:f5:64:97:cc:2f:29:7d:68:8c:ef:d5:f3:ab:c0: 07:f0:a8:bd:5b:9b:31:f4:9d:74:26:b4:70:11:b5: a9:0e:23:21:33:17:05:1e:43:6d:d6:c5:b6:6f:3a: 4e:be:34:91:f2:66:01:80:92:53:f2:74:12:bc:1d: ef:6d:9b:4c:0b:7e:e2:ce:c2:ed:7f:bc:3c:9e:f1: a9:5f:87:d2:14:f3:cf:ea:a7:15:d5:e4:3f:bb:c4: 07:86:99:1e:35:21:3f:73:f2:09:df:71:fd:dd:45: b7:65:45:c3:c2:00:0d:26:14:6a:b6:fe:78:8b:14: e6:60:d4:4f:62:dc:5c:63:e0:8d:a2:d3:e6:12:9c: 64:95:7b:0d:76:39:74:e4:59:bd:31:79:63:04:7f: 52:30:3d:d7:ef:39:c4:d0:08:37:cc:b4:c1:ec:77: ca:9d:d7:4f:6c:ab:d9:0a:ec:72:b1:76:24:e8:09: ba:8b:c9:92:ae:27:b0:f6:72:12:03:44:56:78:44: 42:47:02:a9:b9:e5:ab:8b:d4:5a:f9:e3:82:17:a3: 6a:42:4f:91:7b:e5:8a:64:94:86:c8:66:3b:3c:8a: b2:64:c9:63:ef:81:ad:ea:ae:a7:c9:54:fb:de:76: 5a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:2E:56:A7:11:EB:13:46:8E:6D:91:F3:DE:34:30:AA:A9:57:10:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf113947-4790-3b5e-b1e4-8f8c2d505b9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:124:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:2d:fd:2e:73:a1:17:16:e2:22:0c:15:ce:12:39:8b:00:df: c6:6c:01:33:c6:30:44:99:3c:49:bb:69:bc:5c:ca:8c:6b:84: 8a:b2:85:14:17:07:d8:69:05:07:cd:de:a6:db:e2:99:38:80: 40:78:f6:c6:a2:51:0e:87:62:7b:68:ea:48:88:94:c1:ad:45: c2:65:79:33:e3:7d:20:aa:e5:c0:3e:de:15:98:1e:28:0b:75: 7e:63:b5:98:43:c3:7f:92:96:9b:e6:73:18:19:df:dc:d3:6b: 83:7f:3e:cb:f7:7c:0e:42:47:25:56:71:06:17:f2:63:70:cf: 02:52:2c:5c:8a:0e:e2:f0:f0:44:6a:45:1f:c4:04:11:8f:7b: 27:32:e9:77:0e:7d:8c:02:93:be:95:a0:73:1a:dd:78:fb:80: af:13:ba:d5:6d:64:01:38:ef:0a:9c:5b:1d:48:75:6b:97:0c: 55:c1:e9:51:34:9c:25:5b:2e:93:33:0a:1b:e4:80:88:88:1c: 64:de:3e:41:82:e0:5e:cb:b8:d1:4d:43:09:a3:df:42:26:32: 10:f8:c0:a1:d9:74:74:5f:f5:ac:24:1e:42:e4:9a:3e:f3:a2: 39:04:2b:70:66:53:67:9a:a9:2d:5c:29:f4:c4:0d:c1:f3:60: 5c:eb:60:88 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8Gcn44Qy8wyc5JQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk YjAwODAyYWUtODhmMS00ODNjLWFiNDgtMTM4MTZmYjcxNGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVtsssxbiZ4eOtUbqeZi9WSXzC8pfWiM79Xz q8AH8Ki9W5sx9J10JrRwEbWpDiMhMxcFHkNt1sW2bzpOvjSR8mYBgJJT8nQSvB3v bZtMC37izsLtf7w8nvGpX4fSFPPP6qcV1eQ/u8QHhpkeNSE/c/IJ33H93UW3ZUXD wgANJhRqtv54ixTmYNRPYtxcY+CNotPmEpxklXsNdjl05Fm9MXljBH9SMD3X7znE 0Ag3zLTB7HfKnddPbKvZCuxysXYk6Am6i8mSriew9nISA0RWeERCRwKpueWri9Ra +eOCF6NqQk+Re+WKZJSGyGY7PIqyZMlj74Gt6q6nyVT73nZaKwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLIuVqcR6xNGjm2R8940MKqpVxCOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmYxMTM5NDctNDc5MC0z YjVlLWIxZTQtOGY4YzJkNTA1YjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEk AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCoLf0uc6EXFuIiDBXOEjmLAN/GbAEzxjBEmTxJ u2m8XMqMa4SKsoUUFwfYaQUHzd6m2+KZOIBAePbGolEOh2J7aOpIiJTBrUXCZXkz 430gquXAPt4VmB4oC3V+Y7WYQ8N/kpab5nMYGd/c02uDfz7L93wOQkclVnEGF/Jj cM8CUixcig7i8PBEakUfxAQRj3snMul3Dn2MApO+laBzGt14+4CvE7rVbWQBOO8K nFsdSHVrlwxVwelRNJwlWy6TMwob5ICIiBxk3j5BguBey7jRTUMJo99CJjIQ+MCh 2XR0X/WsJB5C5Jo+86I5BCtwZlNnmqktXCn0xA3B82Bc62CI -----END CERTIFICATE-----Generated at Sat Oct 3 15:50:23 2026 by rpki-client