$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/cbca4450-20f9-32e6-bc57-fc70588eee82.roa File: cbca4450-20f9-32e6-bc57-fc70588eee82.roa (raw, json) Hash identifier: 6ZwLbly7svij88Y4vU4SlSLPPUv4omENyw1GcZzNet0= Subject key identifier: 28:82:EC:A9:61:03:E8:EA:59:E7:EC:50:87:65:53:51:B7:12:5A:35 Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Certificate serial: 010D0C9F4328584F119D11EFFE3ADF252754F620 Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/cbca4450-20f9-32e6-bc57-fc70588eee82.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 27446 IP address blocks: 2001:4850::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:11:ef:fe:3a:df:25:27:54:f6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=a51b812b-9124-4541-a9cc-8b387c7cf154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ec:2f:06:1b:c8:c7:95:a2:be:fe:5f:e8:3d: ad:c3:94:b7:70:fb:ab:d6:1b:52:40:8d:52:78:9f: 80:45:76:5f:56:d9:2b:58:11:44:ee:37:42:3a:06: 4b:26:81:37:44:8e:a3:95:21:9c:9e:c2:15:8d:c8: f2:f0:cb:b6:6a:a1:a0:07:e2:33:87:80:76:05:df: c1:43:cf:a3:07:21:f4:85:e4:ab:19:ea:76:2c:fb: a6:a9:07:54:42:31:bc:67:02:a3:9d:79:61:4a:81: d7:e8:6d:b9:a5:dd:3c:ea:f7:e4:41:dd:84:b1:19: 96:ae:3f:b6:66:97:bf:6d:a7:99:31:8c:69:c5:83: 69:cb:02:10:95:e8:79:de:88:bd:a2:c8:f8:a0:72: be:d1:62:2e:cc:fb:3a:85:dc:d5:26:a8:07:0f:c1: a5:4d:89:79:70:52:34:65:10:64:f0:a4:e7:5d:12: 36:39:a8:63:40:4a:c9:64:b9:b5:dc:2a:7e:59:75: 6e:79:5d:5d:c8:2c:44:67:2f:0d:d1:20:22:16:29: 3a:83:c4:10:f2:7a:41:72:0e:5c:23:5a:c3:4e:2a: 20:2a:aa:a9:8e:b8:22:a7:7d:b6:dc:a2:1c:bf:dd: f5:36:cb:72:b2:3c:48:62:f7:2e:5b:56:29:44:01: ea:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:82:EC:A9:61:03:E8:EA:59:E7:EC:50:87:65:53:51:B7:12:5A:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/cbca4450-20f9-32e6-bc57-fc70588eee82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl X509v3 Authority Key Identifier: keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer sbgp-ipAddrBlock: critical IPv6: 2001:4850::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:d4:42:12:db:f8:7d:c3:12:13:99:f2:7f:72:b8:84:91:46: 0f:af:df:76:8a:c5:45:4a:8e:90:b9:e3:80:75:dd:b2:6e:fa: 27:0e:2b:44:e9:8e:fe:a0:58:87:84:c5:60:d1:20:c2:2e:2c: e5:a1:5a:5b:83:23:d5:d6:6f:d3:77:eb:d7:63:85:d3:4b:65: 1f:a2:59:22:3c:83:fd:e2:2e:03:46:84:0d:a4:6a:50:51:90: 5e:8f:52:2a:9c:ec:2c:90:ab:21:51:e2:38:9c:ff:26:73:d4: 1c:e1:bd:a6:ba:aa:18:62:39:b0:31:a6:32:32:4f:d7:20:0b: 4e:be:42:22:6c:56:89:5d:7d:c9:31:ca:cf:2a:3d:c0:d8:bb: 79:44:76:bf:7c:13:37:28:33:04:74:1b:69:cd:a0:c3:3b:ed: 3c:3e:de:a1:2d:88:d3:e2:e8:18:3e:59:d9:6f:c3:f0:9e:04: 5d:b0:1f:ea:31:cc:a1:a9:7b:ba:e3:85:93:c5:cb:8f:ac:8e: 47:30:29:c8:8c:21:06:db:07:ee:ea:6c:78:b3:5c:29:62:5c: f7:5e:fe:ea:a7:42:d6:a7:07:4b:e3:22:8d:b1:e5:e3:0d:dc: 61:28:e8:87:9c:38:cf:6f:1d:16:4b:e3:82:3f:a6:69:2f:8f: 07:12:e7:92 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8RnRHv/jrfJSdU9iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzMDdlNWQtY2ZhNC00MzA0LThiMjktZWYyODlkNGEz ODdkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YTUxYjgxMmItOTEyNC00NTQxLWE5Y2MtOGIzODdjN2NmMTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOwvBhvIx5Wivv5f6D2tw5S3cPur1htSQI1S eJ+ARXZfVtkrWBFE7jdCOgZLJoE3RI6jlSGcnsIVjcjy8Mu2aqGgB+Izh4B2Bd/B Q8+jByH0heSrGep2LPumqQdUQjG8ZwKjnXlhSoHX6G25pd086vfkQd2EsRmWrj+2 Zpe/baeZMYxpxYNpywIQleh53oi9osj4oHK+0WIuzPs6hdzVJqgHD8GlTYl5cFI0 ZRBk8KTnXRI2OahjQErJZLm13Cp+WXVueV1dyCxEZy8N0SAiFik6g8QQ8npBcg5c I1rDTiogKqqpjrgip3223KIcv931NstysjxIYvcuW1YpRAHqdwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCiC7KlhA+jqWefsUIdlU1G3Elo1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMw N2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4OWQ0YTM4N2QvY2JjYTQ0NTAtMjBmOS0z MmU2LWJjNTctZmM3MDU4OGVlZTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmMzMDdlNWQtY2ZhNC00MzA0LThi MjktZWYyODlkNGEzODdkL2JjMzA3ZTVkLWNmYTQtNDMwNC04YjI5LWVmMjg5ZDRh Mzg3ZC5jcmwwHwYDVR0jBBgwFoAU62IHpERFM2GPZDoMLR26uW9u0TwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMwN2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4 OWQ0YTM4N2QuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAFIUDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB01EIS2/h9wxITmfJ/criEkUYPr992isVFSo6QueOAdd2ybvonDitE 6Y7+oFiHhMVg0SDCLizloVpbgyPV1m/Td+vXY4XTS2UfolkiPIP94i4DRoQNpGpQ UZBej1IqnOwskKshUeI4nP8mc9Qc4b2muqoYYjmwMaYyMk/XIAtOvkIibFaJXX3J McrPKj3A2Lt5RHa/fBM3KDMEdBtpzaDDO+08Pt6hLYjT4ugYPlnZb8PwngRdsB/q McyhqXu644WTxcuPrI5HMCnIjCEG2wfu6mx4s1wpYlz3Xv7qp0LWpwdL4yKNseXj DdxhKOiHnDjPbx0WS+OCP6ZpL48HEueS -----END CERTIFICATE-----Generated at Sat Oct 3 22:42:04 2026 by rpki-client