$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfd113b5-add6-3e93-a091-c39b7157b8f7.roa File: bfd113b5-add6-3e93-a091-c39b7157b8f7.roa (raw, json) Hash identifier: PceANjC3JKZXq8ZIbbZG+ujjpOeeOuJjmaZntfHY7VY= Subject key identifier: 8F:DB:B1:3C:F8:A4:E5:E3:80:C0:51:DF:E1:60:5A:AF:BD:D9:CD:04 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EA7883A048AD6096E0CEFC580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfd113b5-add6-3e93-a091-c39b7157b8f7.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 397211 IP address blocks: 2001:500:856e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:3a:04:8a:d6:09:6e:0c:ef:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=f4e3871b-b975-4a64-89ed-5850b22cc1fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7f:3a:fb:e4:17:82:b8:72:ca:17:f4:da:47: 26:fa:2e:d8:ad:7b:bd:be:ba:fa:22:ec:56:e1:ee: 77:f5:c9:f5:3a:bd:f8:2a:99:ac:b7:b0:a9:17:59: e7:af:66:85:63:7c:6d:dc:a6:66:81:2c:01:5d:fa: 56:54:d7:3e:26:dd:78:28:af:f4:86:b5:be:3a:ff: 72:78:65:d3:54:8f:31:c7:3c:e5:a9:c0:e9:be:b0: 75:30:35:6f:f5:04:90:61:c2:dd:b5:75:06:84:24: 00:81:57:45:04:e2:f2:03:bf:96:dd:57:93:54:54: e7:94:e4:85:5c:ac:00:10:c4:bf:af:de:ae:35:6f: 22:d0:d4:de:4e:cf:20:6d:17:81:30:07:80:62:35: 8c:fe:62:42:20:72:07:d9:5f:21:df:30:de:b9:d8: ba:d4:10:d0:eb:ad:19:26:ef:d4:e4:38:8e:b9:1f: 74:7c:7b:5a:09:a3:4f:4c:13:cf:92:80:ac:11:0f: 11:37:99:5a:2b:45:1a:cc:4d:d0:91:ea:12:a3:0c: 5d:66:5b:4d:32:9e:18:89:d9:ab:64:f6:7c:7a:a3: 01:b5:29:e5:80:d7:a9:ba:9b:e7:67:f9:7d:7c:fa: c3:07:99:b2:80:65:32:af:6a:67:40:5c:23:ee:2d: 51:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DB:B1:3C:F8:A4:E5:E3:80:C0:51:DF:E1:60:5A:AF:BD:D9:CD:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfd113b5-add6-3e93-a091-c39b7157b8f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:856e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:00:47:63:b0:83:bc:7f:76:60:2f:c7:80:7a:e3:dd:c3:51: 49:2b:01:0f:89:3a:78:8b:e4:c0:ba:9a:fa:88:a9:79:25:ce: 5e:18:60:29:b3:b2:19:6b:71:53:19:a0:ea:fc:ed:fd:cf:29: 38:b0:01:85:50:17:f9:38:c4:06:8c:10:75:b4:90:bd:4e:90: 84:99:f1:f2:17:fe:9e:7d:ac:27:ba:02:bc:59:04:42:dd:cd: d7:bc:a7:84:de:b6:6d:bb:40:98:dd:d8:2d:26:33:7a:c9:72: 71:f4:e6:69:c5:29:39:f8:83:e9:20:c9:ad:af:f3:3a:e7:32: c1:3c:49:ae:dc:19:fb:f6:17:c6:3d:3f:02:52:d7:2f:49:a9: f1:c4:5f:ed:9d:b6:1c:ad:0d:f3:37:c5:5c:4a:67:d6:82:a5: ef:6e:a5:da:0b:8b:96:16:a4:a3:96:18:e4:06:fc:ce:b4:fd: 28:ba:6e:d5:0e:76:2c:be:28:58:6c:5b:33:a5:1f:b4:f8:8d: 8e:42:20:6a:38:54:b7:f6:f4:fc:1c:ca:42:94:5d:bc:67:cf: c6:a4:07:e8:54:e8:31:96:89:fe:27:7a:cb:d2:d7:83:09:ad: 0e:ef:96:29:ad:4b:e8:38:ca:0a:ff:e9:2e:bf:86:8d:b2:13: 7e:73:55:d4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6niDoEitYJbgzvxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZjRlMzg3MWItYjk3NS00YTY0LTg5ZWQtNTg1MGIyMmNjMWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApX86++QXgrhyyhf02kcm+i7YrXu9vrr6IuxW 4e539cn1Or34Kpmst7CpF1nnr2aFY3xt3KZmgSwBXfpWVNc+Jt14KK/0hrW+Ov9y eGXTVI8xxzzlqcDpvrB1MDVv9QSQYcLdtXUGhCQAgVdFBOLyA7+W3VeTVFTnlOSF XKwAEMS/r96uNW8i0NTeTs8gbReBMAeAYjWM/mJCIHIH2V8h3zDeudi61BDQ660Z Ju/U5DiOuR90fHtaCaNPTBPPkoCsEQ8RN5laK0UazE3QkeoSowxdZltNMp4Yidmr ZPZ8eqMBtSnlgNepupvnZ/l9fPrDB5mygGUyr2pnQFwj7i1RIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI/bsTz4pOXjgMBR3+FgWq+92c0EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmZkMTEzYjUtYWRkNi0z ZTkzLWEwOTEtYzM5YjcxNTdiOGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAIVu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJUAR2Owg7x/dmAvx4B6493DUUkrAQ+JOniL5MC6mvqIqXklzl4Y YCmzshlrcVMZoOr87f3PKTiwAYVQF/k4xAaMEHW0kL1OkISZ8fIX/p59rCe6ArxZ BELdzde8p4Tetm27QJjd2C0mM3rJcnH05mnFKTn4g+kgya2v8zrnMsE8Sa7cGfv2 F8Y9PwJS1y9JqfHEX+2dthytDfM3xVxKZ9aCpe9updoLi5YWpKOWGOQG/M60/Si6 btUOdiy+KFhsWzOlH7T4jY5CIGo4VLf29PwcykKUXbxnz8akB+hU6DGWif4nesvS 14MJrQ7vlimtS+g4ygr/6S6/ho2yE35zVdQ= -----END CERTIFICATE-----Generated at Wed Jul 29 06:07:51 2026 by rpki-client