$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfbc87c6-c6e5-38f1-a77a-2f2223749730.roa File: bfbc87c6-c6e5-38f1-a77a-2f2223749730.roa (raw, json) Hash identifier: ySYiAlR2absv2ooaTvv88reQABt9EKXth6ZyoRqhoFs= Subject key identifier: 55:56:5F:0B:9A:8C:3C:AD:C6:C0:06:FA:B4:D1:87:07:0C:33:C6:C3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4C3D5A0B0A7BA83EE21AFB40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfbc87c6-c6e5-38f1-a77a-2f2223749730.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 397196 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:5a:0b:0a:7b:a8:3e:e2:1a:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=80aced1c-6d3c-4094-9d8d-7e25e88ec39e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:55:19:bf:d5:79:c5:e5:fa:61:ee:6b:1c:28: dc:9c:99:0c:26:17:5f:9e:0d:8c:a4:ad:06:4b:f2: 98:89:eb:f6:97:cd:35:e1:6e:ac:8c:8b:0f:7f:5d: 62:56:d1:d9:53:44:ca:55:17:cc:8e:e9:5d:2a:7a: d4:ed:d3:c9:e4:05:7a:15:d7:fa:8b:ad:45:eb:13: 56:bc:8f:d2:f8:71:12:ce:fd:22:2a:d3:ab:db:db: 9b:4e:62:4e:17:34:85:38:1a:34:61:89:d6:de:ee: e1:81:46:5b:aa:80:25:f3:a0:f0:c6:e4:c4:58:73: 77:3e:03:34:27:de:45:53:87:fb:5e:f6:58:c3:16: 42:93:35:3c:8a:3f:e5:dd:23:a2:f3:c2:a4:9e:a2: 79:24:e0:99:22:47:12:79:91:c2:6d:28:ad:24:d6: e3:e1:3c:86:21:81:ba:9d:31:7a:85:de:be:69:af: 59:38:3a:d7:23:c4:6c:79:40:65:b6:26:ae:cf:9c: f1:b3:34:64:d0:5e:af:f8:4d:ba:30:f3:4f:4e:c7: f6:43:70:24:26:08:5d:a6:94:f9:25:46:fc:aa:4a: 3d:bd:7a:3a:bd:29:a6:6d:81:b5:53:f0:a4:02:04: 10:a9:77:fe:23:40:59:d6:7e:82:14:59:22:55:e5: fc:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:56:5F:0B:9A:8C:3C:AD:C6:C0:06:FA:B4:D1:87:07:0C:33:C6:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfbc87c6-c6e5-38f1-a77a-2f2223749730.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:7b:78:8d:87:4c:6c:65:96:87:ea:4f:6e:63:02:18:18:46: cd:6f:65:9b:d5:5d:e0:40:e8:68:97:27:43:29:74:91:fe:f6: 87:0a:4e:31:39:42:fd:d7:12:43:d1:38:be:17:2a:4b:91:b2: 5d:cf:f3:c7:d9:e1:a3:ba:e8:70:33:ba:f5:be:77:94:7d:f4: f4:15:d3:4f:46:31:15:33:55:c7:90:0e:85:72:4b:f8:2d:8b: fe:8d:3e:8f:86:2d:1b:59:62:29:52:ae:10:08:d5:f7:89:92: 7f:0b:b0:4d:79:ac:4b:6b:c9:f7:da:a6:30:81:3b:dc:15:a5: 46:3b:4d:73:f6:fc:f2:70:e2:34:93:c6:41:d3:0f:be:90:4f: f9:3a:83:24:1f:76:dd:15:ff:9a:d8:0d:2a:b1:7f:f9:02:60: 77:79:9c:4d:26:28:de:84:3e:4f:5a:40:ea:ee:ed:cb:b1:3e: 59:ac:54:72:bf:4e:9f:0a:dc:a8:69:98:ab:2c:4c:cf:c8:f8: 74:42:89:34:dc:8e:b8:ae:9a:f2:a5:ac:a1:30:45:d4:7f:37: 76:e2:78:d6:09:1d:27:82:d2:2b:e9:3a:d9:3c:fd:ce:8a:48: 88:a1:00:54:0e:cd:0e:cc:c4:b6:d0:4f:48:d4:1f:a8:c7:2e: 21:aa:e7:99 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9MPVoLCnuoPuIa+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ODBhY2VkMWMtNmQzYy00MDk0LTlkOGQtN2UyNWU4OGVjMzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11UZv9V5xeX6Ye5rHCjcnJkMJhdfng2MpK0G S/KYiev2l8014W6sjIsPf11iVtHZU0TKVRfMjuldKnrU7dPJ5AV6Fdf6i61F6xNW vI/S+HESzv0iKtOr29ubTmJOFzSFOBo0YYnW3u7hgUZbqoAl86DwxuTEWHN3PgM0 J95FU4f7XvZYwxZCkzU8ij/l3SOi88KknqJ5JOCZIkcSeZHCbSitJNbj4TyGIYG6 nTF6hd6+aa9ZODrXI8RseUBltiauz5zxszRk0F6v+E26MPNPTsf2Q3AkJghdppT5 JUb8qko9vXo6vSmmbYG1U/CkAgQQqXf+I0BZ1n6CFFkiVeX80QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFVWXwuajDytxsAG+rTRhwcMM8bDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmZiYzg3YzYtYzZlNS0z OGYxLWE3N2EtMmYyMjIzNzQ5NzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGl7eI2HTGxllofqT25jAhgYRs1vZZvVXeBA6GiXJ0MpdJH+9ocK TjE5Qv3XEkPROL4XKkuRsl3P88fZ4aO66HAzuvW+d5R99PQV009GMRUzVceQDoVy S/gti/6NPo+GLRtZYilSrhAI1feJkn8LsE15rEtryffapjCBO9wVpUY7TXP2/PJw 4jSTxkHTD76QT/k6gyQfdt0V/5rYDSqxf/kCYHd5nE0mKN6EPk9aQOru7cuxPlms VHK/Tp8K3KhpmKssTM/I+HRCiTTcjriumvKlrKEwRdR/N3bieNYJHSeC0ivpOtk8 /c6KSIihAFQOzQ7MxLbQT0jUH6jHLiGq55k= -----END CERTIFICATE-----Generated at Sat Sep 26 09:56:32 2026 by rpki-client