$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf3651dd-0dfd-3e5f-9d03-d02dea2a2043.roa File: bf3651dd-0dfd-3e5f-9d03-d02dea2a2043.roa (raw, json) Hash identifier: 0v9jngCyVRX17sbloHuYLAz2vDl6RKs83PVfElhe3Ws= Subject key identifier: 46:F8:75:21:CC:C1:7C:3F:43:E0:84:47:CE:2E:0F:19:4C:B7:50:4A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584DE2D89DAF05A0DEE68D291000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf3651dd-0dfd-3e5f-9d03-d02dea2a2043.roa Signing time: Tue 19 May 2026 14:10:43 +0000 ROA not before: Tue 19 May 2026 14:10:43 +0000 ROA not after: Mon 17 Aug 2026 14:10:43 +0000 asID: 396591 IP address blocks: 2001:503:d414::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:d8:9d:af:05:a0:de:e6:8d:29:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 19 14:10:43 2026 GMT Not After : Aug 17 14:10:43 2026 GMT Subject: CN=e23d7652-bb04-4b9e-afe3-529119c55edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:90:b6:39:44:4b:cd:42:30:5a:c5:66:c3:ca: fa:fa:c8:af:b7:7a:c9:37:e3:2d:1c:5e:c4:13:47: df:2b:f9:6e:99:97:94:32:07:74:24:61:8a:84:3c: c4:29:42:75:39:b1:b7:3e:3b:02:62:b0:d0:00:2e: 73:2f:01:72:4f:de:6b:56:d2:92:96:70:de:ae:58: 6a:0d:37:3a:3a:a9:ca:a2:b4:d5:20:e3:b7:c2:ed: bc:75:b3:b6:6e:67:05:5c:9d:9e:2e:5f:3c:58:e4: d8:b6:82:c9:9e:32:b1:59:24:17:62:41:f5:65:2f: 1c:c8:9a:5c:52:2a:5b:d2:4f:d7:2a:5f:82:c6:13: 5b:35:5d:36:d4:dd:0b:b1:49:2e:36:67:94:15:ba: 8a:af:37:b5:c8:d8:1a:c6:37:19:5a:fe:74:bd:26: 1b:18:62:21:ff:1e:5b:5a:e2:f7:78:69:78:65:d6: 19:0a:a8:36:d6:03:9d:e1:1f:69:70:6a:1c:67:96: 90:de:47:99:4a:2f:82:02:58:f6:e7:40:96:b0:4e: 2e:8b:a5:59:a2:86:04:1e:39:70:12:52:9c:e1:c6: ac:d9:e6:f9:7a:a6:dc:2c:79:9c:ff:1e:c7:a2:c9: c6:63:59:05:ab:b5:5d:81:d1:8d:d3:09:5d:75:cd: 0f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F8:75:21:CC:C1:7C:3F:43:E0:84:47:CE:2E:0F:19:4C:B7:50:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf3651dd-0dfd-3e5f-9d03-d02dea2a2043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:d414::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:6b:57:dd:5e:e1:4e:3f:79:d8:7d:31:d5:3b:39:9a:07:37: 73:6a:c3:bb:70:d1:24:a8:a4:ad:ed:23:eb:7f:37:a1:f9:aa: 24:6c:ab:0a:28:15:2c:21:62:82:6f:5e:de:de:08:d3:a8:a6: 05:2b:01:b2:46:db:fa:73:71:f7:8b:71:74:8c:0e:22:40:32: 01:49:74:06:6d:7b:18:94:84:92:dc:44:89:25:2e:4c:dc:1a: 1b:45:25:61:36:3e:b9:54:75:92:51:5a:8e:d3:12:a0:82:6e: c1:59:36:cb:7a:81:0d:98:5d:e9:ef:2c:a9:c3:78:3d:58:f1: 27:8a:59:64:cb:74:b0:47:0c:bc:93:77:d8:83:7c:80:64:d5: 31:5d:b7:21:e5:8a:3b:11:8b:74:3d:45:b1:ed:c1:d2:46:91: 79:13:96:d0:49:1e:0f:a3:d0:42:46:1f:7a:87:d7:24:f0:e1: c7:53:92:84:e5:20:f2:b3:08:96:90:2f:f8:2e:7a:f5:d7:35: 16:1c:67:34:85:fe:40:7e:3b:58:bf:fd:6e:f3:36:93:7f:4f: 42:fd:9a:f0:f3:25:57:32:44:c3:04:6c:d9:e3:97:25:27:8c: ad:99:a9:51:27:64:b8:e5:7c:47:1f:86:9b:35:8e:a3:59:db: b5:35:8c:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3i2J2vBaDe5o0pEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDUxOTE0MTA0M1oXDTI2MDgxNzE0MTA0M1owLzEtMCsGA1UEAxMk ZTIzZDc2NTItYmIwNC00YjllLWFmZTMtNTI5MTE5YzU1ZWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJC2OURLzUIwWsVmw8r6+sivt3rJN+MtHF7E E0ffK/lumZeUMgd0JGGKhDzEKUJ1ObG3PjsCYrDQAC5zLwFyT95rVtKSlnDerlhq DTc6OqnKorTVIOO3wu28dbO2bmcFXJ2eLl88WOTYtoLJnjKxWSQXYkH1ZS8cyJpc Uipb0k/XKl+CxhNbNV021N0LsUkuNmeUFbqKrze1yNgaxjcZWv50vSYbGGIh/x5b WuL3eGl4ZdYZCqg21gOd4R9pcGocZ5aQ3keZSi+CAlj250CWsE4ui6VZooYEHjlw ElKc4cas2eb5eqbcLHmc/x7HosnGY1kFq7VdgdGN0wlddc0P0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEb4dSHMwXw/Q+CER84uDxlMt1BKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmYzNjUxZGQtMGRmZC0z ZTVmLTlkMDMtZDAyZGVhMmEyMDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA9QU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAExrV91e4U4/edh9MdU7OZoHN3Nqw7tw0SSopK3tI+t/N6H5qiRs qwooFSwhYoJvXt7eCNOopgUrAbJG2/pzcfeLcXSMDiJAMgFJdAZtexiUhJLcRIkl LkzcGhtFJWE2PrlUdZJRWo7TEqCCbsFZNst6gQ2YXenvLKnDeD1Y8SeKWWTLdLBH DLyTd9iDfIBk1TFdtyHlijsRi3Q9RbHtwdJGkXkTltBJHg+j0EJGH3qH1yTw4cdT koTlIPKzCJaQL/guevXXNRYcZzSF/kB+O1i//W7zNpN/T0L9mvDzJVcyRMMEbNnj lyUnjK2ZqVEnZLjlfEcfhps1jqNZ27U1jL0= -----END CERTIFICATE-----Generated at Sat Jun 13 17:53:54 2026 by rpki-client