$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf3b000b-ea01-3f08-8a26-5590941ab671.roa File: bf3b000b-ea01-3f08-8a26-5590941ab671.roa (raw, json) Hash identifier: kU4DQkmG4BBqQKzav5YSrraXZowj72lyrL0MxVDinBc= Subject key identifier: BA:75:5E:BD:0F:7E:46:6C:A9:DD:BC:9C:50:8A:8D:69:C8:21:84:5B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584DADCEFC0DB0C5B1817D1E8880 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf3b000b-ea01-3f08-8a26-5590941ab671.roa Signing time: Thu 30 Apr 2026 14:13:28 +0000 ROA not before: Thu 30 Apr 2026 14:13:28 +0000 ROA not after: Wed 29 Jul 2026 14:13:28 +0000 asID: 36628 IP address blocks: 2001:503:83eb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:ce:fc:0d:b0:c5:b1:81:7d:1e:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 30 14:13:28 2026 GMT Not After : Jul 29 14:13:28 2026 GMT Subject: CN=5b22181d-a1b9-46fc-82ca-27dfb37d83cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e4:51:25:f5:ee:68:5a:d6:0a:97:e5:1e:15: b3:9e:07:d6:1d:10:7c:e5:6a:a7:ae:8f:41:a0:bf: 12:f7:8c:64:1a:ed:1b:d7:ab:3a:ac:ff:ee:cc:33: 41:f0:28:0f:68:21:a6:82:d2:aa:ed:73:e3:4b:7f: cf:af:10:ef:8e:4d:24:d3:ce:49:2c:68:7c:4a:1c: a9:59:20:05:b1:f2:9a:19:88:bc:f5:ba:ae:5a:3b: ad:7a:de:8a:9c:30:ac:c5:d1:47:c8:f7:19:79:85: b8:a9:68:0f:f7:0d:90:9c:7e:06:44:a4:8e:cc:bc: 62:9f:65:a9:cf:5b:dd:e5:d3:5a:5b:c5:f7:61:fb: e7:89:27:87:65:ec:70:dd:c0:8e:af:ec:07:36:86: 00:f1:e8:72:62:94:cf:f9:aa:c8:1e:96:08:e0:96: 12:b7:8c:dd:a3:22:c7:92:d1:d8:34:b4:09:ce:52: 2d:69:b1:62:be:98:73:3a:fe:b8:95:14:c3:a4:ab: 29:39:6d:92:d0:18:ae:e0:5b:60:72:44:6b:5a:05: 7d:da:a5:b2:60:35:21:6a:ee:b8:df:cb:18:7a:f5: e0:6f:41:1d:90:7d:cb:45:c4:05:79:24:b7:53:96: db:0b:c8:0c:9f:4b:23:83:2a:32:31:26:2c:1b:ce: 26:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:75:5E:BD:0F:7E:46:6C:A9:DD:BC:9C:50:8A:8D:69:C8:21:84:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf3b000b-ea01-3f08-8a26-5590941ab671.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:83eb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:bd:aa:d0:dc:14:74:d6:e2:c7:29:61:1f:d2:b0:e6:45:63: 2d:26:86:00:9f:28:bd:4d:8d:ce:20:f8:e0:06:19:65:bf:d2: 6d:67:f0:db:8a:69:11:fa:d1:dd:2a:ec:df:5d:87:9b:53:07: 74:36:14:41:f7:a9:14:2b:4a:47:86:a5:cf:16:eb:9c:af:97: c8:3c:f7:f3:1b:f6:0c:e0:40:5b:41:be:c9:7b:fe:c1:c0:23: 3a:0c:71:21:84:36:eb:f1:9b:90:da:51:27:72:83:dc:ce:0e: 32:a2:4a:58:11:d3:d6:27:76:e9:fc:a5:3e:ee:71:e9:0b:b0: 71:fe:c3:84:ed:06:6a:27:f5:5a:df:87:c7:10:c1:f9:4e:70: 4e:4a:d5:20:2a:0c:84:30:87:77:07:77:7a:47:c9:fa:4a:85: 28:e6:f5:5f:11:0a:03:d0:18:c4:a0:c8:df:5d:98:d8:5d:c1: 61:d7:5f:c9:6d:55:ce:0e:d4:a3:62:5f:52:79:a9:cf:93:56: 61:4c:5b:ca:b1:7c:b0:6c:13:e2:7e:5b:81:ed:9e:4b:93:28: 14:a2:dc:73:6b:75:c8:cd:31:55:83:97:dd:d7:c7:25:b8:ab: e4:68:35:1c:1d:ec:b7:9e:bc:dd:94:e4:4b:4b:1b:27:16:b1: 31:b4:33:1c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2tzvwNsMWxgX0eiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQzMDE0MTMyOFoXDTI2MDcyOTE0MTMyOFowLzEtMCsGA1UEAxMk NWIyMjE4MWQtYTFiOS00NmZjLTgyY2EtMjdkZmIzN2Q4M2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuRRJfXuaFrWCpflHhWzngfWHRB85Wqnro9B oL8S94xkGu0b16s6rP/uzDNB8CgPaCGmgtKq7XPjS3/PrxDvjk0k085JLGh8Shyp WSAFsfKaGYi89bquWjutet6KnDCsxdFHyPcZeYW4qWgP9w2QnH4GRKSOzLxin2Wp z1vd5dNaW8X3YfvniSeHZexw3cCOr+wHNoYA8ehyYpTP+arIHpYI4JYSt4zdoyLH ktHYNLQJzlItabFivphzOv64lRTDpKspOW2S0Biu4FtgckRrWgV92qWyYDUhau64 38sYevXgb0EdkH3LRcQFeSS3U5bbC8gMn0sjgyoyMSYsG84mgwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLp1Xr0PfkZsqd28nFCKjWnIIYRbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmYzYjAwMGItZWEwMS0z ZjA4LThhMjYtNTU5MDk0MWFiNjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA4Pr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFa9qtDcFHTW4scpYR/SsOZFYy0mhgCfKL1Njc4g+OAGGWW/0m1n 8NuKaRH60d0q7N9dh5tTB3Q2FEH3qRQrSkeGpc8W65yvl8g89/Mb9gzgQFtBvsl7 /sHAIzoMcSGENuvxm5DaUSdyg9zODjKiSlgR09Yndun8pT7ucekLsHH+w4TtBmon 9Vrfh8cQwflOcE5K1SAqDIQwh3cHd3pHyfpKhSjm9V8RCgPQGMSgyN9dmNhdwWHX X8ltVc4O1KNiX1J5qc+TVmFMW8qxfLBsE+J+W4HtnkuTKBSi3HNrdcjNMVWDl93X xyW4q+RoNRwd7LeevN2U5EtLGycWsTG0Mxw= -----END CERTIFICATE-----Generated at Wed May 13 07:45:23 2026 by rpki-client