$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfbc87c6-c6e5-38f1-a77a-2f2223749730.roa File: bfbc87c6-c6e5-38f1-a77a-2f2223749730.roa (raw, json) Hash identifier: QUgUXbNjQXv2pGam9lGxjRwKBcl9KW96Ht0xqj53dQE= Subject key identifier: 81:2A:5A:C5:6F:82:70:BB:27:6E:D1:7B:A7:22:00:07:6C:C8:1E:44 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E0700A0521F47FDFE660A9EE0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfbc87c6-c6e5-38f1-a77a-2f2223749730.roa Signing time: Mon 01 Jun 2026 13:00:10 +0000 ROA not before: Mon 01 Jun 2026 13:00:10 +0000 ROA not after: Sun 30 Aug 2026 13:00:10 +0000 asID: 397196 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:07:00:a0:52:1f:47:fd:fe:66:0a:9e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 1 13:00:10 2026 GMT Not After : Aug 30 13:00:10 2026 GMT Subject: CN=a1ddfff8-c775-4672-8462-401cd2ceea1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:22:f3:26:be:73:76:c5:e0:0f:95:79:12:dc: 15:2d:f8:2b:63:96:5b:36:32:45:5f:11:1d:bd:d3: 29:3b:c8:59:db:8d:41:58:e4:6b:09:b8:ea:87:02: 7c:cf:6d:65:bb:1c:d4:f4:74:cc:3a:26:b3:11:4d: 24:e0:df:18:b9:5b:15:22:96:20:ae:fa:c0:48:08: 16:68:f0:71:84:0a:5f:c3:fe:3c:96:84:22:f2:d3: 60:d2:20:91:bf:d7:69:47:f6:8a:8f:03:a1:2b:5d: 2b:69:bf:42:1a:a2:50:32:93:c8:7b:3a:64:8e:25: a7:bc:fe:6a:84:84:38:80:f2:57:bf:39:14:8d:75: 51:86:71:42:37:c4:5a:c0:aa:af:30:fb:e1:14:c8: cc:27:16:8f:24:45:6d:44:37:eb:c0:2b:97:7c:68: d3:0a:02:1c:2e:28:b0:58:13:8c:4f:27:b9:c6:dd: e2:77:7f:51:d1:3a:27:03:14:34:4a:ef:52:51:9f: ad:9b:e0:66:07:35:30:9a:66:c5:7c:3d:30:94:ae: 44:b0:84:e7:c7:51:2d:7e:67:2b:2f:0f:e4:37:fc: 6c:42:58:36:32:8c:8c:55:33:4a:7e:9a:d5:6b:6f: be:59:d0:5c:05:e6:f7:dc:6c:78:0c:9d:10:ad:ce: 12:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:2A:5A:C5:6F:82:70:BB:27:6E:D1:7B:A7:22:00:07:6C:C8:1E:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfbc87c6-c6e5-38f1-a77a-2f2223749730.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:27:3c:5f:a9:4c:5a:b1:cf:b4:f3:78:e0:32:13:f0:c3:50: ed:80:eb:61:f0:d1:2b:30:98:53:e2:8f:3b:79:e1:4e:d2:5b: ed:d9:a4:2e:1d:4b:66:c2:1b:66:be:d4:c0:77:51:6f:ee:3f: 29:e8:6c:fd:a1:80:48:cf:61:91:70:43:3e:5d:9c:fe:0e:46: f0:1e:91:98:04:93:19:f7:b5:55:75:22:25:50:76:46:e3:80: 3e:4c:d9:ba:dd:00:89:0d:d2:43:9d:7b:a0:f7:ea:9b:2a:6a: c2:4d:60:dd:df:df:5b:7c:ee:2c:ff:aa:b3:c8:54:1d:74:a0: 6e:48:4c:e1:b6:7e:22:5e:9a:aa:b7:50:cf:98:c0:1e:21:20: 71:1a:f5:54:97:a1:da:9d:84:2b:59:e7:ab:85:31:33:ce:bd: 80:8e:bd:9b:0a:3c:33:94:ea:75:72:37:f3:30:d8:a0:a5:38: de:06:c6:45:fa:3e:8e:75:44:63:b9:6b:dd:48:1c:98:a7:4f: 85:c2:17:40:86:ad:2c:ff:6f:f3:34:ba:09:cf:3d:7a:11:63: 68:4b:eb:f4:b4:44:6e:a2:09:97:92:12:6e:87:d8:38:d4:0b: 9e:79:80:e7:65:6f:21:17:79:4b:1c:7c:ce:b4:21:4d:6a:0c: b6:36:b4:1b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4HAKBSH0f9/mYKnuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDYwMTEzMDAxMFoXDTI2MDgzMDEzMDAxMFowLzEtMCsGA1UEAxMk YTFkZGZmZjgtYzc3NS00NjcyLTg0NjItNDAxY2QyY2VlYTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSLzJr5zdsXgD5V5EtwVLfgrY5ZbNjJFXxEd vdMpO8hZ241BWORrCbjqhwJ8z21luxzU9HTMOiazEU0k4N8YuVsVIpYgrvrASAgW aPBxhApfw/48loQi8tNg0iCRv9dpR/aKjwOhK10rab9CGqJQMpPIezpkjiWnvP5q hIQ4gPJXvzkUjXVRhnFCN8RawKqvMPvhFMjMJxaPJEVtRDfrwCuXfGjTCgIcLiiw WBOMTye5xt3id39R0TonAxQ0Su9SUZ+tm+BmBzUwmmbFfD0wlK5EsITnx1Etfmcr Lw/kN/xsQlg2MoyMVTNKfprVa2++WdBcBeb33Gx4DJ0Qrc4SLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIEqWsVvgnC7J27Re6ciAAdsyB5EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmZiYzg3YzYtYzZlNS0z OGYxLWE3N2EtMmYyMjIzNzQ5NzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFAnPF+pTFqxz7TzeOAyE/DDUO2A62Hw0SswmFPijzt54U7SW+3Z pC4dS2bCG2a+1MB3UW/uPynobP2hgEjPYZFwQz5dnP4ORvAekZgEkxn3tVV1IiVQ dkbjgD5M2brdAIkN0kOde6D36psqasJNYN3f31t87iz/qrPIVB10oG5ITOG2fiJe mqq3UM+YwB4hIHEa9VSXodqdhCtZ56uFMTPOvYCOvZsKPDOU6nVyN/Mw2KClON4G xkX6Po51RGO5a91IHJinT4XCF0CGrSz/b/M0ugnPPXoRY2hL6/S0RG6iCZeSEm6H 2DjUC555gOdlbyEXeUscfM60IU1qDLY2tBs= -----END CERTIFICATE-----Generated at Sat Jun 13 17:34:41 2026 by rpki-client