$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfdd8a10-2318-32dc-80b9-a570e014aa61.roa File: bfdd8a10-2318-32dc-80b9-a570e014aa61.roa (raw, json) Hash identifier: 6NBo2zaUcaYB9Vo+P314emzv7RiDShcUZdK/bJdvv5g= Subject key identifier: B4:D8:03:1B:8D:98:36:03:D8:31:28:81:B8:31:69:62:81:0B:95:43 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F66C2BAEDD190DA08DA679D60 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfdd8a10-2318-32dc-80b9-a570e014aa61.roa Signing time: Mon 05 Oct 2026 13:00:13 +0000 ROA not before: Mon 05 Oct 2026 13:00:13 +0000 ROA not after: Sun 03 Jan 2027 14:00:13 +0000 asID: 396550 IP address blocks: 2001:502:cbe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:66:c2:ba:ed:d1:90:da:08:da:67:9d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 5 13:00:13 2026 GMT Not After : Jan 3 14:00:13 2027 GMT Subject: CN=3d328f97-0e5a-495b-af7e-b20a874596d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d9:8b:9c:ce:8a:ae:a0:e7:17:e7:c7:de:1f: 17:3a:33:91:cc:4e:be:d9:1f:3c:03:fd:44:4f:e7: 2e:55:08:66:84:b0:1a:72:f0:9f:6c:40:0d:2a:d5: 04:fc:b9:3e:78:df:63:70:07:84:83:38:20:c6:26: d5:6c:74:60:b3:78:71:72:4b:8a:c2:d0:8a:8a:dd: c1:fa:78:77:44:4b:4d:75:c2:8f:30:32:c1:c5:87: 03:ac:21:63:3c:94:e7:cd:3c:19:46:84:48:ed:75: bd:d0:e4:00:ad:ef:87:2a:77:e4:66:83:70:57:2e: c2:5a:95:5e:c6:70:25:a3:cd:ac:b0:f6:a5:62:c6: c0:3b:6b:0f:e0:1b:b2:bd:25:e5:af:76:b5:1b:5f: e5:dd:4a:77:22:9f:91:cc:e4:e5:7e:54:f8:f2:04: 3b:f6:d6:5d:10:be:22:a0:10:24:34:b8:48:b1:b5: e1:ca:02:ee:c3:1c:28:33:4c:52:b0:0b:67:c8:ea: 3e:f9:48:26:8b:c2:33:c7:22:29:e0:9b:44:66:fa: 95:64:b3:a7:f2:ea:a6:7a:b1:c7:05:3d:0a:23:59: ef:04:5f:00:70:98:a5:4f:54:05:2c:14:25:e1:bb: a1:55:d8:8f:79:45:fd:b2:3c:0c:3c:bf:0d:1d:19: 8f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D8:03:1B:8D:98:36:03:D8:31:28:81:B8:31:69:62:81:0B:95:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfdd8a10-2318-32dc-80b9-a570e014aa61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:22:8e:1d:bc:fe:dd:b5:89:54:e2:bb:01:3d:c4:c3:62:bf: 20:95:7e:5b:df:1e:e6:f9:43:d1:3d:57:89:59:41:55:c4:72: e6:94:2a:94:9e:29:d7:a2:60:2a:b6:7e:6f:25:46:a3:17:c5: e0:15:47:28:fb:ec:f4:5b:4c:75:da:55:27:ba:a4:11:2b:e7: 98:ec:56:85:21:49:b5:9d:08:7c:a3:7d:fb:4a:a4:43:44:42: 1e:1a:c9:11:4a:d6:61:9f:3b:5d:e8:de:26:c6:ad:54:da:8c: 3a:6a:ea:db:18:cf:82:86:ba:ec:61:d3:4b:da:d1:41:1a:17: 41:25:43:64:c7:00:a6:8a:9f:9d:1e:5c:e5:da:17:22:34:ac: ac:1b:6b:80:a3:58:79:3d:f4:b0:31:ee:96:65:5f:35:02:d3: 5d:64:61:d4:61:4b:0d:4f:83:75:f9:2c:8e:7f:76:3f:05:02: 34:9a:f8:04:5a:d6:7e:19:6b:5b:46:b3:df:b5:0c:c4:bf:ad: 0c:54:a6:b2:f1:9a:12:77:89:f8:69:84:35:d0:03:1a:31:9f: 3f:84:1f:7b:f8:6c:69:c2:aa:12:84:14:ae:5f:8c:93:27:68: 5b:4a:24:5c:49:fb:67:c4:49:fa:e1:3a:be:b4:12:7b:69:d6: 3a:bb:c5:9d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9mwrrt0ZDaCNpnnWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNTEzMDAxM1oXDTI3MDEwMzE0MDAxM1owLzEtMCsGA1UEAxMk M2QzMjhmOTctMGU1YS00OTViLWFmN2UtYjIwYTg3NDU5NmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtmLnM6KrqDnF+fH3h8XOjORzE6+2R88A/1E T+cuVQhmhLAacvCfbEANKtUE/Lk+eN9jcAeEgzggxibVbHRgs3hxckuKwtCKit3B +nh3REtNdcKPMDLBxYcDrCFjPJTnzTwZRoRI7XW90OQAre+HKnfkZoNwVy7CWpVe xnAlo82ssPalYsbAO2sP4BuyvSXlr3a1G1/l3Up3Ip+RzOTlflT48gQ79tZdEL4i oBAkNLhIsbXhygLuwxwoM0xSsAtnyOo++Ugmi8IzxyIp4JtEZvqVZLOn8uqmerHH BT0KI1nvBF8AcJilT1QFLBQl4buhVdiPeUX9sjwMPL8NHRmPowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLTYAxuNmDYD2DEogbgxaWKBC5VDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmZkZDhhMTAtMjMxOC0z MmRjLTgwYjktYTU3MGUwMTRhYTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHEijh28/t21iVTiuwE9xMNivyCVflvfHub5Q9E9V4lZQVXEcuaU KpSeKdeiYCq2fm8lRqMXxeAVRyj77PRbTHXaVSe6pBEr55jsVoUhSbWdCHyjfftK pENEQh4ayRFK1mGfO13o3ibGrVTajDpq6tsYz4KGuuxh00va0UEaF0ElQ2THAKaK n50eXOXaFyI0rKwba4CjWHk99LAx7pZlXzUC011kYdRhSw1Pg3X5LI5/dj8FAjSa +ARa1n4Za1tGs9+1DMS/rQxUprLxmhJ3ifhphDXQAxoxnz+EH3v4bGnCqhKEFK5f jJMnaFtKJFxJ+2fESfrhOr60Entp1jq7xZ0= -----END CERTIFICATE-----Generated at Tue Oct 6 17:58:20 2026 by rpki-client