$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfaf6d25-2951-3a13-9688-8b35f867d1bb.roa File: bfaf6d25-2951-3a13-9688-8b35f867d1bb.roa (raw, json) Hash identifier: zBpUJj3LpJUV51e36n49nCkEGCCzn0TUqbAjMLXAbQg= Subject key identifier: 63:48:6D:3F:57:A2:5D:7C:CF:62:A2:C7:D4:C7:CB:C4:02:84:9C:AF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D83CAE84B1C4D642FA9176280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfaf6d25-2951-3a13-9688-8b35f867d1bb.roa Signing time: Wed 15 Apr 2026 13:00:30 +0000 ROA not before: Wed 15 Apr 2026 13:00:30 +0000 ROA not after: Tue 14 Jul 2026 13:00:30 +0000 asID: 396599 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:83:ca:e8:4b:1c:4d:64:2f:a9:17:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 15 13:00:30 2026 GMT Not After : Jul 14 13:00:30 2026 GMT Subject: CN=f11f3549-8593-4939-a553-3a609e6ffeb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:92:bc:65:a5:6f:7c:65:53:dd:0c:77:ea:dd: 4a:51:16:fa:6f:db:4f:c9:e4:1e:95:49:1b:a9:b6: 00:a7:0a:1a:24:b2:b3:53:63:a5:77:2d:37:1e:2c: c1:ba:49:6e:0f:78:c5:02:5a:20:74:0f:bd:3e:29: 94:07:22:94:79:b6:98:69:af:f0:cd:58:fa:7c:53: 71:d9:ab:f5:88:40:f5:6b:e7:85:54:43:14:ca:09: d2:88:65:ac:29:b4:61:28:0c:6d:84:8c:00:9e:20: df:dc:94:ea:71:6e:89:a1:b6:14:d8:3b:53:c9:57: 3a:91:53:34:1a:0b:09:ec:32:e0:00:b7:0b:0f:59: f5:40:7a:7c:de:f6:98:5a:92:22:a9:b6:a8:db:b1: a2:53:dc:84:65:92:fb:f9:7a:dc:71:2b:bc:f3:b5: 33:03:1c:f6:8e:c4:e8:09:1d:ff:46:9e:7d:f4:de: 04:7a:7e:58:62:e4:1e:f7:05:8b:3f:85:ba:f9:29: df:df:68:d9:1b:8f:5b:74:78:61:82:13:98:8e:ee: 33:58:e8:da:9d:49:54:5b:35:08:fd:00:20:7f:74: 1c:3e:2f:d5:bc:66:16:5b:37:2e:54:3b:08:9d:2a: 04:3e:0c:ba:08:01:78:9d:e3:1d:be:81:ef:52:f7: d5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:48:6D:3F:57:A2:5D:7C:CF:62:A2:C7:D4:C7:CB:C4:02:84:9C:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfaf6d25-2951-3a13-9688-8b35f867d1bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:ff:ef:0b:62:5d:74:c2:37:e2:2c:7b:a1:46:41:3c:eb:ef: 7b:84:db:e7:e8:f7:da:d7:60:9f:73:4d:75:4f:ee:81:7f:96: 16:df:33:eb:ad:6b:f4:86:ca:8f:c3:91:e4:45:15:1f:99:ca: 0b:06:91:02:18:2d:50:6e:63:00:0e:88:ac:ea:21:1b:d2:b9: 63:5f:2b:cc:3a:21:52:1f:1c:2f:89:11:1e:16:51:bc:6f:9a: 96:68:71:41:59:93:20:83:24:c0:45:48:c0:8a:6d:59:8c:f5: cf:af:1b:98:66:00:66:c7:b9:ed:88:e8:75:ba:c8:14:81:d4: 4b:41:d2:94:22:1f:72:a5:bf:57:10:ce:75:0c:98:00:21:7d: f4:fd:e4:38:b2:ab:7d:7f:5c:ef:82:94:67:37:c0:bc:ca:73: fd:6c:29:8d:09:15:96:30:78:f9:ed:ad:94:2f:d5:4b:01:c3: be:65:e8:a5:b1:25:6c:6b:61:5b:e6:3c:07:2a:c4:21:98:c9: 13:ea:1c:51:1d:eb:eb:59:c3:df:cf:6f:d9:1b:43:e0:8d:e2: 16:a4:ae:73:f8:a5:c9:c5:cf:3c:a9:87:6b:95:85:fb:78:37: cc:09:96:61:28:d9:d7:3c:9a:32:5f:63:fb:f8:b5:1d:87:0f: ca:df:66:8b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE2DyuhLHE1kL6kXYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk ZjExZjM1NDktODU5My00OTM5LWE1NTMtM2E2MDllNmZmZWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JK8ZaVvfGVT3Qx36t1KURb6b9tPyeQelUkb qbYApwoaJLKzU2Oldy03HizBukluD3jFAlogdA+9PimUByKUebaYaa/wzVj6fFNx 2av1iED1a+eFVEMUygnSiGWsKbRhKAxthIwAniDf3JTqcW6JobYU2DtTyVc6kVM0 GgsJ7DLgALcLD1n1QHp83vaYWpIiqbao27GiU9yEZZL7+XrccSu887UzAxz2jsTo CR3/Rp599N4Een5YYuQe9wWLP4W6+Snf32jZG49bdHhhghOYju4zWOjanUlUWzUI /QAgf3QcPi/VvGYWWzcuVDsInSoEPgy6CAF4neMdvoHvUvfVWQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGNIbT9Xol18z2Kix9THy8QChJyvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmZhZjZkMjUtMjk1MS0z YTEzLTk2ODgtOGIzNWY4NjdkMWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC9/+8LYl10wjfiLHuhRkE86+97hNvn6Pfa12Cf c011T+6Bf5YW3zPrrWv0hsqPw5HkRRUfmcoLBpECGC1QbmMADois6iEb0rljXyvM OiFSHxwviREeFlG8b5qWaHFBWZMggyTARUjAim1ZjPXPrxuYZgBmx7ntiOh1usgU gdRLQdKUIh9ypb9XEM51DJgAIX30/eQ4sqt9f1zvgpRnN8C8ynP9bCmNCRWWMHj5 7a2UL9VLAcO+ZeilsSVsa2Fb5jwHKsQhmMkT6hxRHevrWcPfz2/ZG0PgjeIWpK5z +KXJxc88qYdrlYX7eDfMCZZhKNnXPJoyX2P7+LUdhw/K32aL -----END CERTIFICATE-----Generated at Fri Apr 17 14:50:06 2026 by rpki-client