$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfbc87c6-c6e5-38f1-a77a-2f2223749730.roa File: bfbc87c6-c6e5-38f1-a77a-2f2223749730.roa (raw, json) Hash identifier: 9t2/2qj9b+CDR+pvwzG0bEXEEHZgf2oFqn1/C2KgWgQ= Subject key identifier: A5:86:BC:D2:A1:F8:A6:C8:56:EF:ED:DA:EB:3E:43:F7:B0:2C:1B:17 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EA8EC4DE5255AB5A7115A6680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfbc87c6-c6e5-38f1-a77a-2f2223749730.roa Signing time: Wed 29 Jul 2026 13:00:12 +0000 ROA not before: Wed 29 Jul 2026 13:00:12 +0000 ROA not after: Tue 27 Oct 2026 13:00:12 +0000 asID: 397196 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a8:ec:4d:e5:25:5a:b5:a7:11:5a:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 29 13:00:12 2026 GMT Not After : Oct 27 13:00:12 2026 GMT Subject: CN=bd788327-9804-4865-bcfe-a19e7628cbc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9e:83:49:b8:f7:73:fb:06:64:4d:a3:d3:4a: c9:e0:70:44:ae:5f:57:75:52:35:d7:8e:17:f8:a3: 21:0c:4d:ca:b0:ce:5d:b5:54:fa:9a:bb:0d:56:d5: 93:e7:74:b5:b2:b8:87:51:4a:2a:2b:ab:f6:a6:aa: 95:76:68:23:86:fa:e4:ce:9c:bd:1b:9e:ab:ec:91: 05:29:4a:92:10:a2:f4:09:65:8a:54:df:30:f7:51: 5c:bb:fe:64:62:98:a1:d9:ca:c0:85:d7:d1:89:24: a5:52:5b:09:69:0f:80:53:a7:45:6d:98:08:76:42: 44:23:db:09:49:86:04:cf:e0:2c:a2:61:de:a7:74: 54:6f:f7:b8:e8:df:b2:35:bb:57:c0:d3:d9:65:f5: 6c:1f:cc:55:e8:c0:69:1d:d8:38:ae:30:0e:9f:2e: 4e:af:bc:46:8a:ec:6f:89:a3:07:6b:ee:c6:fe:6c: 7f:ca:58:9d:1e:33:2e:98:a1:10:61:69:01:e3:59: 16:b6:25:98:34:8f:36:bb:e8:24:a2:64:29:10:9d: dc:21:c1:a4:f1:79:70:9f:6c:69:6b:51:ca:67:5d: ed:46:8e:9d:a4:ae:33:0c:2c:03:5a:33:f6:da:67: 95:60:6c:d6:4a:0d:bf:12:35:6c:ad:d1:0b:f5:90: 5e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:86:BC:D2:A1:F8:A6:C8:56:EF:ED:DA:EB:3E:43:F7:B0:2C:1B:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfbc87c6-c6e5-38f1-a77a-2f2223749730.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:07:8b:db:8b:9d:fc:00:64:41:d0:14:5b:3d:72:a5:1d:cd: c5:9f:e0:67:11:d8:97:f0:15:be:85:8a:d7:a6:4c:53:5c:ee: 9a:49:af:c6:6b:0d:5f:2b:43:c2:2b:ee:0c:bd:a3:73:cc:d6: e5:5b:19:cd:e0:1e:1b:7e:df:12:de:95:39:aa:02:76:61:6f: ad:8c:d4:05:29:33:8d:25:48:4c:e7:95:f7:0a:9c:b1:8f:ee: 02:b6:b1:a8:e1:6c:23:77:48:ef:f2:e3:ce:ab:54:13:de:24: 25:b4:e3:98:28:bc:7d:f8:76:2e:e8:d8:83:c9:52:d8:fd:d7: 15:0a:da:fd:12:ce:4a:1a:c4:9f:4a:e2:30:fa:51:c3:b1:9c: 14:aa:f8:c7:65:72:78:a9:ad:d7:f0:aa:f3:30:cb:df:f1:e8: bf:c4:b4:b2:61:0d:bc:c9:4e:2e:41:11:4a:9c:39:9f:79:bf: 1c:d8:46:8f:69:5c:db:7e:4f:6d:78:7e:90:79:40:0a:8e:f3: dd:61:1d:55:8f:09:2d:d5:61:80:e1:7c:d7:e3:c1:b4:00:cc: 23:fc:a2:6e:3b:31:9f:76:d1:be:34:df:0b:61:b7:9b:30:27: d1:d8:8f:7b:c9:62:fc:29:da:a7:33:cc:85:00:aa:bc:b5:df: 26:8d:e5:25 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6o7E3lJVq1pxFaZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcyOTEzMDAxMloXDTI2MTAyNzEzMDAxMlowLzEtMCsGA1UEAxMk YmQ3ODgzMjctOTgwNC00ODY1LWJjZmUtYTE5ZTc2MjhjYmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkp6DSbj3c/sGZE2j00rJ4HBErl9XdVI1144X +KMhDE3KsM5dtVT6mrsNVtWT53S1sriHUUoqK6v2pqqVdmgjhvrkzpy9G56r7JEF KUqSEKL0CWWKVN8w91Fcu/5kYpih2crAhdfRiSSlUlsJaQ+AU6dFbZgIdkJEI9sJ SYYEz+AsomHep3RUb/e46N+yNbtXwNPZZfVsH8xV6MBpHdg4rjAOny5Or7xGiuxv iaMHa+7G/mx/ylidHjMumKEQYWkB41kWtiWYNI82u+gkomQpEJ3cIcGk8Xlwn2xp a1HKZ13tRo6dpK4zDCwDWjP22meVYGzWSg2/EjVsrdEL9ZBeAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKWGvNKh+KbIVu/t2us+Q/ewLBsXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmZiYzg3YzYtYzZlNS0z OGYxLWE3N2EtMmYyMjIzNzQ5NzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIgHi9uLnfwAZEHQFFs9cqUdzcWf4GcR2JfwFb6FitemTFNc7ppJ r8ZrDV8rQ8Ir7gy9o3PM1uVbGc3gHht+3xLelTmqAnZhb62M1AUpM40lSEznlfcK nLGP7gK2sajhbCN3SO/y486rVBPeJCW045govH34di7o2IPJUtj91xUK2v0Szkoa xJ9K4jD6UcOxnBSq+MdlcniprdfwqvMwy9/x6L/EtLJhDbzJTi5BEUqcOZ95vxzY Ro9pXNt+T214fpB5QAqO891hHVWPCS3VYYDhfNfjwbQAzCP8om47MZ920b403wth t5swJ9HYj3vJYvwp2qczzIUAqry13yaN5SU= -----END CERTIFICATE-----Generated at Wed Aug 19 20:24:41 2026 by rpki-client