$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf5b2ba1-7a3f-3291-b3de-20f2462cbe88.roa File: bf5b2ba1-7a3f-3291-b3de-20f2462cbe88.roa (raw, json) Hash identifier: NumFg6FdkPcfZ7g/ypBcKSdjotEH/8X11j/5Vj/i85k= Subject key identifier: 0B:49:81:E4:66:39:EC:E1:FF:50:2D:01:0D:0D:92:5D:12:53:7E:39 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D143D56764D8766D9D617E300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf5b2ba1-7a3f-3291-b3de-20f2462cbe88.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 396617 IP address blocks: 2001:503:ba3e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:56:76:4d:87:66:d9:d6:17:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=e9917c53-8c8d-4ffa-a191-4c2b4a1f9a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:65:f4:0c:08:f0:6e:d5:a1:43:8c:c0:5c:3f: b8:09:09:0d:f5:9f:eb:98:38:00:7b:de:2b:a0:81: 61:b4:0b:3c:04:19:0e:89:c7:19:cc:78:d6:e1:3e: 26:ea:07:86:8c:a2:17:4d:05:dc:e9:58:fa:72:33: ae:3f:d7:ea:8e:90:0e:f6:bd:7a:cd:41:5c:a6:34: c6:b9:a2:46:ef:4d:68:d2:f0:88:fb:92:55:83:05: ba:fb:cb:03:87:a0:c1:92:d3:d8:eb:84:03:2a:28: 35:ba:6f:a7:54:39:c8:f8:c5:8b:fb:37:56:fd:60: 03:48:21:9d:04:05:fd:93:13:ca:e9:1b:43:1b:e5: 52:93:de:47:9c:ac:fb:cd:54:3f:b7:5c:46:c4:f0: 79:03:d5:ec:30:03:35:dc:e3:83:c3:d6:5e:f2:69: b4:5a:e7:61:43:79:2d:75:f6:a2:a9:6f:a7:9a:ed: 59:b5:fd:19:90:8a:68:eb:e0:29:ca:b9:38:f7:38: 10:85:83:8e:cc:b3:55:18:77:1e:89:ed:dc:74:26: 3a:a8:dd:3b:55:e1:1f:8f:0c:0a:e6:11:d0:18:c9: ad:5a:48:1a:e0:ad:29:c1:a4:35:02:8d:61:67:ab: 0f:c4:8e:41:d3:46:7a:d1:02:68:e1:7a:8d:98:ea: 33:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:49:81:E4:66:39:EC:E1:FF:50:2D:01:0D:0D:92:5D:12:53:7E:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf5b2ba1-7a3f-3291-b3de-20f2462cbe88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:4a:08:71:e9:05:36:1f:d9:cd:18:e2:c1:9c:de:6c:cc:4d: 84:67:1e:0c:1b:ee:b0:10:7b:1c:03:8f:98:cb:58:bd:46:e8: d1:cf:cf:8a:ef:ff:3f:b5:6a:61:89:c5:09:f5:00:b1:09:0a: 38:78:1b:79:9e:74:7f:5b:61:34:b2:37:4f:e2:99:d3:72:a1: 7a:6a:74:d5:71:54:e1:56:70:8c:5f:1e:10:6a:27:39:fa:00: c6:45:2f:c9:33:c8:f5:8b:ba:3e:85:d7:63:34:a0:2a:e6:19: 19:5c:16:44:89:a4:42:10:6d:61:de:42:6f:2d:40:db:b2:a7: d4:95:e5:57:b7:1c:6e:e0:2e:3d:e6:7f:62:d0:1a:33:9d:d4: 1e:be:62:f5:33:88:e0:ee:18:7c:bd:3e:63:cf:27:fd:cf:71: e6:59:b8:bc:fc:de:aa:7b:cb:b5:2e:b6:aa:88:76:5c:8f:25: 29:01:8e:15:b5:c3:13:18:2f:87:7d:67:c1:20:de:a5:89:64: 9d:1d:f6:fd:e6:c0:b4:dc:d9:a1:ed:5e:08:86:24:b0:e8:8f: 83:57:5f:1f:0e:44:cd:f5:92:3b:cb:82:34:ec:93:02:2a:05: f9:15:13:5c:e0:a8:3d:57:16:bc:26:7c:0c:3a:ae:c0:9d:a7: c6:6b:54:e7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0UPVZ2TYdm2dYX4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ZTk5MTdjNTMtOGM4ZC00ZmZhLWExOTEtNGMyYjRhMWY5YTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mX0DAjwbtWhQ4zAXD+4CQkN9Z/rmDgAe94r oIFhtAs8BBkOiccZzHjW4T4m6geGjKIXTQXc6Vj6cjOuP9fqjpAO9r16zUFcpjTG uaJG701o0vCI+5JVgwW6+8sDh6DBktPY64QDKig1um+nVDnI+MWL+zdW/WADSCGd BAX9kxPK6RtDG+VSk95HnKz7zVQ/t1xGxPB5A9XsMAM13OODw9Ze8mm0WudhQ3kt dfaiqW+nmu1Ztf0ZkIpo6+Apyrk49zgQhYOOzLNVGHceie3cdCY6qN07VeEfjwwK 5hHQGMmtWkga4K0pwaQ1Ao1hZ6sPxI5B00Z60QJo4XqNmOozQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAtJgeRmOezh/1AtAQ0Nkl0SU345MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmY1YjJiYTEtN2EzZi0z MjkxLWIzZGUtMjBmMjQ2MmNiZTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA7o+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAARKCHHpBTYf2c0Y4sGc3mzMTYRnHgwb7rAQexwDj5jLWL1G6NHP z4rv/z+1amGJxQn1ALEJCjh4G3medH9bYTSyN0/imdNyoXpqdNVxVOFWcIxfHhBq Jzn6AMZFL8kzyPWLuj6F12M0oCrmGRlcFkSJpEIQbWHeQm8tQNuyp9SV5Ve3HG7g Lj3mf2LQGjOd1B6+YvUziODuGHy9PmPPJ/3PceZZuLz83qp7y7UutqqIdlyPJSkB jhW1wxMYL4d9Z8Eg3qWJZJ0d9v3mwLTc2aHtXgiGJLDoj4NXXx8ORM31kjvLgjTs kwIqBfkVE1zgqD1XFrwmfAw6rsCdp8ZrVOc= -----END CERTIFICATE-----Generated at Thu Mar 26 10:56:13 2026 by rpki-client