$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfaf6d25-2951-3a13-9688-8b35f867d1bb.roa File: bfaf6d25-2951-3a13-9688-8b35f867d1bb.roa (raw, json) Hash identifier: gUqIVPV6/zlXMKJhjQWBYTeRHH6681vdt5Y4VUkrNNI= Subject key identifier: 14:77:0D:8D:D5:CE:99:D8:F1:58:18:09:5F:D6:FF:51:CE:6C:65:1C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F06727B814BDD1A7B4E1B6800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfaf6d25-2951-3a13-9688-8b35f867d1bb.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 396599 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:7b:81:4b:dd:1a:7b:4e:1b:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=719d5da7-8e0e-4f38-ae93-6434b4deb6d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7f:9f:fe:51:88:1c:53:ec:f8:05:d1:a4:11: 58:08:3e:36:8f:d4:b7:e7:c2:73:48:83:48:98:f2: 69:37:bf:e3:18:44:e4:9a:57:46:1e:c6:82:12:3a: 36:85:65:65:96:1b:19:b7:59:f2:db:51:03:81:12: 44:79:f1:fa:8d:3c:82:28:7b:98:4b:34:25:5e:d6: 83:69:3e:35:54:e1:58:9e:10:35:7b:d1:6e:a7:63: be:c7:e1:84:91:f6:cd:41:48:60:c8:12:cd:08:4d: b4:e4:9f:4e:77:a9:ed:67:86:66:ee:e5:6e:a1:71: 84:9f:25:ea:ca:c5:a1:28:dc:e2:97:29:48:b7:d5: 1b:ea:7c:ee:7a:96:49:df:f1:e7:09:a0:e3:e7:c2: 8d:0e:24:0b:f4:ca:b1:f7:77:41:82:b8:2c:b4:c6: ff:d4:33:85:86:69:02:65:1a:c3:0c:85:d8:56:97: eb:88:00:8d:b4:b3:1c:d8:2d:4d:17:ae:e4:ed:0c: b8:ff:2f:1c:51:c2:5b:09:94:ea:6b:20:69:e4:20: d7:65:20:04:9b:ea:9a:78:5d:93:b3:3e:1a:c3:01: 3f:91:73:75:7b:10:6f:af:3b:80:5b:f5:4a:d2:1a: 8e:b2:92:6f:33:8b:28:f5:63:46:31:a3:40:d1:95: 87:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:77:0D:8D:D5:CE:99:D8:F1:58:18:09:5F:D6:FF:51:CE:6C:65:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfaf6d25-2951-3a13-9688-8b35f867d1bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:57:bc:17:1e:d5:3e:b9:a1:7f:1d:e9:cb:fa:cd:7e:1d:da: 24:64:59:a4:0f:f4:86:dd:45:0e:ae:5b:63:68:a3:4c:47:73: 5c:42:05:95:79:bf:32:7a:ac:b7:b0:9d:df:45:dd:78:18:85: 94:4f:7e:48:e4:c0:9d:54:62:73:f3:ab:7d:ac:0c:82:9b:4a: 77:20:76:3a:c9:66:69:c8:6e:30:e5:76:46:ac:0b:3b:67:42: 65:3e:6b:0e:ba:61:af:f9:d7:3e:12:5d:7f:cb:7f:d1:d6:d8: db:24:18:d8:e9:70:d2:8f:cf:01:51:9c:e2:c2:cf:3f:e2:38: 7d:60:00:e7:4e:bc:e5:7e:b0:49:fa:87:23:db:33:9e:ae:71: 86:23:ce:72:af:86:f1:62:4a:a9:40:7e:a7:1b:56:1c:4a:36: 19:7e:90:d3:ae:45:af:d7:fc:69:99:28:30:90:51:62:cf:8a: 15:2b:42:ba:7d:fc:32:e2:cb:5d:e3:34:b5:a8:e4:e1:79:93: 28:78:5c:03:0a:2a:74:6b:cf:fc:12:8d:3e:68:b7:d6:30:5f: 2c:b2:73:d6:91:d4:28:73:15:3b:70:00:02:c2:d0:5b:ba:f5: 9f:54:d0:81:bf:86:7d:40:6a:ce:d2:eb:61:f9:1a:94:b3:f9: 8e:0a:c9:b5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8GcnuBS90ae04baAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk NzE5ZDVkYTctOGUwZS00ZjM4LWFlOTMtNjQzNGI0ZGViNmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX+f/lGIHFPs+AXRpBFYCD42j9S358JzSINI mPJpN7/jGETkmldGHsaCEjo2hWVllhsZt1ny21EDgRJEefH6jTyCKHuYSzQlXtaD aT41VOFYnhA1e9Fup2O+x+GEkfbNQUhgyBLNCE205J9Od6ntZ4Zm7uVuoXGEnyXq ysWhKNzilylIt9Ub6nzuepZJ3/HnCaDj58KNDiQL9Mqx93dBgrgstMb/1DOFhmkC ZRrDDIXYVpfriACNtLMc2C1NF67k7Qy4/y8cUcJbCZTqayBp5CDXZSAEm+qaeF2T sz4awwE/kXN1exBvrzuAW/VK0hqOspJvM4so9WNGMaNA0ZWH1wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBR3DY3VzpnY8VgYCV/W/1HObGUcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmZhZjZkMjUtMjk1MS0z YTEzLTk2ODgtOGIzNWY4NjdkMWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBlV7wXHtU+uaF/HenL+s1+HdokZFmkD/SG3UUO rltjaKNMR3NcQgWVeb8yeqy3sJ3fRd14GIWUT35I5MCdVGJz86t9rAyCm0p3IHY6 yWZpyG4w5XZGrAs7Z0JlPmsOumGv+dc+El1/y3/R1tjbJBjY6XDSj88BUZziws8/ 4jh9YADnTrzlfrBJ+ocj2zOernGGI85yr4bxYkqpQH6nG1YcSjYZfpDTrkWv1/xp mSgwkFFiz4oVK0K6ffwy4std4zS1qOTheZMoeFwDCip0a8/8Eo0+aLfWMF8ssnPW kdQocxU7cAACwtBbuvWfVNCBv4Z9QGrO0uth+RqUs/mOCsm1 -----END CERTIFICATE-----Generated at Sat Sep 26 14:50:35 2026 by rpki-client