$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/cbca4450-20f9-32e6-bc57-fc70588eee82.roa File: cbca4450-20f9-32e6-bc57-fc70588eee82.roa (raw, json) Hash identifier: Ids5h8JCP54VST7YwT8eKjDpeMeDi6oFkm6gyvJ6Hz0= Subject key identifier: EA:8F:E6:2D:85:AA:B2:38:A4:47:7C:5D:73:BF:97:FF:17:86:A0:D9 Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Certificate serial: 010D0C9F4328584E6F3A430BB20C5E5100E42E50 Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/cbca4450-20f9-32e6-bc57-fc70588eee82.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 27446 IP address blocks: 2001:4850::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:43:0b:b2:0c:5e:51:00:e4:2e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=f1eee590-c9ec-4239-b287-2406c8023fcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8e:32:c0:c9:4b:19:84:f3:11:e6:4d:1c:1c: 6a:83:2a:75:8a:b2:30:c9:33:31:25:ac:d1:7a:55: 20:10:2c:25:22:a0:3e:19:da:d0:50:fa:ff:cf:c1: 94:d7:f4:5f:11:c9:a2:ec:6d:c7:d4:45:b4:27:a2: a9:ca:46:04:7e:ec:7c:cf:f0:d9:1d:73:19:ba:a1: f8:5b:12:f1:9d:22:db:fd:3e:ea:94:ae:9b:b4:02: 1a:65:ed:70:9d:7d:e0:b7:ff:55:18:51:77:8f:f9: a1:a4:8e:96:7e:b0:c1:4f:d3:5e:42:0d:44:3b:32: d9:88:e4:8f:24:85:d6:a7:4e:e4:2b:f4:16:26:84: 20:5c:68:e8:19:a3:68:5f:ab:46:86:99:d9:5c:52: 9a:9d:cd:3a:fa:38:9a:01:8c:32:66:67:1c:a8:d9: da:02:46:94:19:a9:f7:ef:11:af:4e:0a:93:85:ff: 18:ac:ea:5d:c0:38:05:e1:01:fa:81:0a:20:6b:7c: 8d:29:0b:6b:f2:36:40:44:c4:0b:7c:30:d1:45:22: d4:b6:0f:a7:e4:54:29:44:7e:0c:d8:23:71:e3:3b: 56:67:99:4e:ad:8f:50:42:95:e1:59:e8:9f:f2:21: 07:a1:51:d3:cd:c5:d4:ad:94:54:b2:da:8d:f2:77: 2a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:8F:E6:2D:85:AA:B2:38:A4:47:7C:5D:73:BF:97:FF:17:86:A0:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/cbca4450-20f9-32e6-bc57-fc70588eee82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl X509v3 Authority Key Identifier: keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer sbgp-ipAddrBlock: critical IPv6: 2001:4850::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:ea:fd:26:01:02:9e:0f:27:ad:26:ef:6f:1b:f9:99:b4:4d: b8:f5:a2:4c:a6:04:4e:62:2b:07:82:35:18:af:11:6c:34:34: 9f:da:a2:14:43:55:90:f7:22:43:4a:8b:09:58:6a:a3:e8:a9: 2f:03:0b:c9:fc:5c:ac:45:f2:9f:60:80:79:50:35:ed:57:50: f4:24:08:52:83:fc:59:83:cf:54:7d:ab:16:cb:2e:7c:1e:06: be:df:90:22:db:fe:eb:21:76:40:ed:b4:e8:06:bb:ed:b9:bc: d5:5c:6e:01:5b:36:96:2e:7c:a8:9f:b3:f7:c6:0b:e8:1a:37: 19:fe:57:d3:63:7a:0a:e3:97:5a:95:90:57:f3:68:71:ca:a5: df:a1:cc:3a:43:d1:25:d5:8e:cb:26:d5:61:c6:c9:a7:89:96: 7c:95:b7:07:f6:71:38:69:5f:1f:80:14:ae:0d:d3:5e:d8:84: 65:96:50:84:d0:ec:2e:6b:8a:9e:f4:31:01:e5:25:96:fd:7f: 58:df:60:45:d0:d1:2f:34:74:ce:af:3b:15:af:b6:b6:74:bd: cc:73:ad:d4:81:dd:4f:68:50:63:f9:49:a5:10:3d:be:19:5a: e1:fe:7a:d2:2e:c4:5c:03:14:cd:38:b0:ad:95:b8:86:b1:66: 5c:48:3f:d5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5vOkMLsgxeUQDkLlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzMDdlNWQtY2ZhNC00MzA0LThiMjktZWYyODlkNGEz ODdkMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk ZjFlZWU1OTAtYzllYy00MjM5LWIyODctMjQwNmM4MDIzZmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmo4ywMlLGYTzEeZNHBxqgyp1irIwyTMxJazR elUgECwlIqA+GdrQUPr/z8GU1/RfEcmi7G3H1EW0J6KpykYEfux8z/DZHXMZuqH4 WxLxnSLb/T7qlK6btAIaZe1wnX3gt/9VGFF3j/mhpI6WfrDBT9NeQg1EOzLZiOSP JIXWp07kK/QWJoQgXGjoGaNoX6tGhpnZXFKanc06+jiaAYwyZmccqNnaAkaUGan3 7xGvTgqThf8YrOpdwDgF4QH6gQoga3yNKQtr8jZARMQLfDDRRSLUtg+n5FQpRH4M 2CNx4ztWZ5lOrY9QQpXhWeif8iEHoVHTzcXUrZRUstqN8ncqKQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOqP5i2FqrI4pEd8XXO/l/8XhqDZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMw N2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4OWQ0YTM4N2QvY2JjYTQ0NTAtMjBmOS0z MmU2LWJjNTctZmM3MDU4OGVlZTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmMzMDdlNWQtY2ZhNC00MzA0LThi MjktZWYyODlkNGEzODdkL2JjMzA3ZTVkLWNmYTQtNDMwNC04YjI5LWVmMjg5ZDRh Mzg3ZC5jcmwwHwYDVR0jBBgwFoAU62IHpERFM2GPZDoMLR26uW9u0TwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMwN2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4 OWQ0YTM4N2QuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAFIUDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBa6v0mAQKeDyetJu9vG/mZtE249aJMpgROYisHgjUYrxFsNDSf2qIU Q1WQ9yJDSosJWGqj6KkvAwvJ/FysRfKfYIB5UDXtV1D0JAhSg/xZg89UfasWyy58 Hga+35Ai2/7rIXZA7bToBrvtubzVXG4BWzaWLnyon7P3xgvoGjcZ/lfTY3oK45da lZBX82hxyqXfocw6Q9El1Y7LJtVhxsmniZZ8lbcH9nE4aV8fgBSuDdNe2IRlllCE 0Owua4qe9DEB5SWW/X9Y32BF0NEvNHTOrzsVr7a2dL3Mc63Ugd1PaFBj+UmlED2+ GVrh/nrSLsRcAxTNOLCtlbiGsWZcSD/V -----END CERTIFICATE-----Generated at Thu Jul 9 14:17:10 2026 by rpki-client