$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfba4492-cea7-36ca-857c-9eebf3df4cdd.roa File: bfba4492-cea7-36ca-857c-9eebf3df4cdd.roa (raw, json) Hash identifier: a9/8RhYVlvbDs8hK8PymZLjABS86CwvJCPV48qvpkdg= Subject key identifier: 4D:B5:25:0E:80:38:DE:D9:B5:B7:57:2E:B4:CF:3D:8C:AB:DC:95:62 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F5E62D322F6C3FB7F1AAF1890 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfba4492-cea7-36ca-857c-9eebf3df4cdd.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 32651 IP address blocks: 2001:500:127::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:d3:22:f6:c3:fb:7f:1a:af:18:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=502be295-7adc-41b3-a4f2-5ceed93d0c15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9f:4c:d0:ba:ba:3d:32:76:78:ba:72:38:6a: bd:db:25:8a:a1:2e:97:d0:e8:5a:32:d6:61:13:e9: 35:03:aa:ff:d2:43:32:26:f1:0c:78:97:34:6e:f8: 73:c1:f6:2a:76:41:69:7d:de:6b:6b:00:72:ab:67: d4:b7:40:5e:5e:3b:de:21:b4:f3:a3:6d:3a:2c:d8: 85:71:d5:2f:c7:cd:6b:18:53:e5:04:29:c8:2c:21: a2:a1:88:78:d0:d5:14:4c:34:09:02:67:ec:7b:60: b9:0a:29:de:8f:b9:2e:46:55:dc:81:0b:df:69:84: 88:7e:de:40:dd:d5:56:6e:62:1c:30:e3:33:18:c3: 32:7a:47:77:cb:84:32:42:4c:72:fc:ed:68:db:9e: 90:65:f6:e2:a7:33:a9:0c:eb:82:f8:7f:6c:3b:aa: 39:fc:2f:bb:8e:e5:16:4e:48:84:1e:e8:f1:e8:b9: 64:0b:a4:6a:84:97:dd:da:ea:34:86:88:88:35:54: 6f:1e:8a:94:e3:30:f4:62:06:d3:78:17:5a:ab:c7: 74:f6:db:06:03:c9:f9:2a:90:15:f8:30:ab:44:b1: 53:54:a8:25:a9:18:32:24:e1:48:d7:e6:69:f8:2c: 08:50:c2:b2:b2:a8:6e:d7:e0:98:7a:48:87:eb:24: 47:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B5:25:0E:80:38:DE:D9:B5:B7:57:2E:B4:CF:3D:8C:AB:DC:95:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfba4492-cea7-36ca-857c-9eebf3df4cdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:64:f6:8c:6c:7d:47:37:9a:dc:c7:f5:a7:85:5c:7a:33:fb: 74:d2:a1:d8:af:92:25:5a:50:d2:6d:ce:8e:b3:7c:ad:78:16: 99:95:4a:b5:91:44:7e:30:6b:8b:7d:c1:5c:14:b9:16:ad:ea: d5:cb:5b:3f:08:34:36:83:66:92:be:50:46:4c:40:1a:bf:be: ea:86:2f:c7:c7:98:7c:93:92:74:88:bd:59:77:4d:34:e6:42: ff:64:47:5c:15:bc:11:6b:2b:d5:63:b2:c0:5c:da:50:91:5c: 84:54:3b:21:1e:b4:69:91:9f:2e:90:27:7f:1a:92:58:c5:6a: ea:79:6d:35:ff:2e:cd:4e:cd:c8:54:1e:63:4b:4b:c6:4b:fc: fd:42:73:de:37:e4:0c:6e:fe:40:a5:c2:1e:4a:ba:24:dd:34: 33:c1:ff:5f:92:63:38:4f:73:69:52:bd:06:40:6a:65:76:d0: a8:b7:8a:87:97:b6:2b:b0:62:44:ba:7b:42:c8:98:54:3d:3c: 14:e6:3f:fa:7c:76:10:e5:87:14:df:7b:b9:f1:c3:80:5d:72: a1:ff:a7:e6:cf:0f:dc:db:2d:1c:f8:06:c7:10:36:71:71:fb: 8f:04:c9:a0:5d:53:66:fe:49:e5:80:90:1c:c9:17:ed:0d:ae: d8:89:c3:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9eYtMi9sP7fxqvGJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk NTAyYmUyOTUtN2FkYy00MWIzLWE0ZjItNWNlZWQ5M2QwYzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp59M0Lq6PTJ2eLpyOGq92yWKoS6X0OhaMtZh E+k1A6r/0kMyJvEMeJc0bvhzwfYqdkFpfd5rawByq2fUt0BeXjveIbTzo206LNiF cdUvx81rGFPlBCnILCGioYh40NUUTDQJAmfse2C5Cinej7kuRlXcgQvfaYSIft5A 3dVWbmIcMOMzGMMyekd3y4QyQkxy/O1o256QZfbipzOpDOuC+H9sO6o5/C+7juUW TkiEHujx6LlkC6RqhJfd2uo0hoiINVRvHoqU4zD0YgbTeBdaq8d09tsGA8n5KpAV +DCrRLFTVKglqRgyJOFI1+Zp+CwIUMKysqhu1+CYekiH6yRHLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE21JQ6AON7ZtbdXLrTPPYyr3JViMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmZiYTQ0OTItY2VhNy0z NmNhLTg1N2MtOWVlYmYzZGY0Y2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKFk9oxsfUc3mtzH9aeFXHoz+3TSodivkiVaUNJtzo6zfK14FpmV SrWRRH4wa4t9wVwUuRat6tXLWz8INDaDZpK+UEZMQBq/vuqGL8fHmHyTknSIvVl3 TTTmQv9kR1wVvBFrK9VjssBc2lCRXIRUOyEetGmRny6QJ38akljFaup5bTX/Ls1O zchUHmNLS8ZL/P1Cc9435Axu/kClwh5KuiTdNDPB/1+SYzhPc2lSvQZAamV20Ki3 ioeXtiuwYkS6e0LImFQ9PBTmP/p8dhDlhxTfe7nxw4BdcqH/p+bPD9zbLRz4BscQ NnFx+48EyaBdU2b+SeWAkBzJF+0NrtiJw2k= -----END CERTIFICATE-----Generated at Thu Oct 8 05:35:28 2026 by rpki-client