$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bff6fe6d-686b-38f9-bbf0-337ac9184e19.roa File: bff6fe6d-686b-38f9-bbf0-337ac9184e19.roa (raw, json) Hash identifier: 3a+7N8uH4lqbcMRgJnRIUZG++XVQlLXC+Afp8EHfStU= Subject key identifier: B5:00:B8:56:E4:5D:F2:B3:87:E9:7F:FA:23:94:50:69:8E:20:C0:0F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EF01CF3D9C8A19B7CFEEEA0C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bff6fe6d-686b-38f9-bbf0-337ac9184e19.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 396553 IP address blocks: 2001:503:eea3::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:f3:d9:c8:a1:9b:7c:fe:ee:a0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=134a3154-b076-4604-b886-b59a030e1484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:44:25:4e:14:64:93:49:5c:1d:75:22:ea:f5: c7:20:30:3d:f1:f3:f8:7d:62:0f:12:9f:40:ff:d2: 9e:df:da:e8:7c:f3:5b:94:d4:b1:7d:be:30:1a:b2: 81:9a:e9:b5:a2:cf:a3:51:7c:48:f9:84:03:6c:a7: 59:85:fa:5f:09:2a:fa:21:e5:b9:89:db:11:cf:6a: 95:3b:7d:40:1f:3a:5e:fd:e2:ec:8f:5e:f3:7c:bc: b1:e6:5e:9e:86:49:59:21:36:4e:96:85:e9:e5:6e: 64:70:fb:71:b6:03:5d:96:e0:cb:ed:17:1c:79:cf: 17:c4:ca:15:e2:f7:08:eb:29:75:7e:fc:7b:3e:b2: 30:b1:05:4d:04:95:4b:99:01:cd:37:58:38:ab:09: 6f:1c:33:f8:a7:2e:f2:5b:af:60:45:e9:ba:1b:36: e2:8a:18:60:48:c4:51:fa:4c:ff:11:b7:ff:e9:3e: f1:91:ca:e5:b9:9a:f5:42:70:2e:9a:6a:0b:53:61: ba:b1:5c:74:dd:72:50:a4:81:34:43:8f:66:67:39: 43:51:05:9b:e4:b0:dc:c2:02:c0:9d:33:ae:4a:7a: a3:2e:7e:d9:ce:ca:d8:5e:b8:93:a2:e2:78:d9:bf: 11:12:b3:1a:75:3e:c9:26:69:2d:c4:9a:26:ea:cc: 70:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:00:B8:56:E4:5D:F2:B3:87:E9:7F:FA:23:94:50:69:8E:20:C0:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bff6fe6d-686b-38f9-bbf0-337ac9184e19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:eea3:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:45:83:bd:f2:2f:22:3f:4d:fd:d7:0f:1b:e8:a2:7a:98:b8: 9e:a8:39:2d:83:2c:ac:82:9e:f0:ca:a6:9d:f8:da:bc:fc:cc: 1c:7e:ae:d5:65:53:07:8b:dc:dc:04:0d:87:14:b0:5a:0e:21: 93:35:53:03:87:3c:c3:8a:07:e2:00:55:26:42:5b:50:fe:e9: bf:e3:71:ec:d5:62:9e:b9:ce:1d:53:f5:a6:1b:77:08:a8:48: 14:1a:2f:b0:8d:07:61:80:c0:c4:32:5d:fd:76:af:a5:e9:98: 5f:88:ec:8d:bd:95:fe:41:43:23:f3:17:0d:42:ca:71:b6:bb: f7:06:22:d3:f3:a6:20:e6:0f:88:74:3e:d1:b6:55:bb:94:4b: e3:ce:05:91:62:f2:f3:b9:e5:9c:f8:be:57:48:ca:c7:a3:72: 8d:fc:8e:bd:59:91:44:c0:47:a2:c4:ec:04:84:a9:ed:de:64: 1b:03:98:38:af:13:eb:20:93:98:64:ae:3c:4d:40:b8:e4:12: 60:f7:fd:35:b5:2e:c8:e1:49:cf:12:25:d1:84:36:ad:34:e0: 08:88:19:64:87:f5:9b:b3:06:0c:4b:20:8d:84:a3:bc:28:ad: 22:f3:12:a5:9f:1d:c7:1d:ba:8b:09:3b:39:47:48:54:23:0c: ed:82:39:5d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE7wHPPZyKGbfP7uoMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk MTM0YTMxNTQtYjA3Ni00NjA0LWI4ODYtYjU5YTAzMGUxNDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0QlThRkk0lcHXUi6vXHIDA98fP4fWIPEp9A /9Ke39rofPNblNSxfb4wGrKBmum1os+jUXxI+YQDbKdZhfpfCSr6IeW5idsRz2qV O31AHzpe/eLsj17zfLyx5l6ehklZITZOloXp5W5kcPtxtgNdluDL7Rccec8XxMoV 4vcI6yl1fvx7PrIwsQVNBJVLmQHNN1g4qwlvHDP4py7yW69gRem6GzbiihhgSMRR +kz/Ebf/6T7xkcrluZr1QnAummoLU2G6sVx03XJQpIE0Q49mZzlDUQWb5LDcwgLA nTOuSnqjLn7ZzsrYXriTouJ42b8RErMadT7JJmktxJom6sxwhQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLUAuFbkXfKzh+l/+iOUUGmOIMAPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmZmNmZlNmQtNjg2Yi0z OGY5LWJiZjAtMzM3YWM5MTg0ZTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFA+6j AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCFRYO98i8iP0391w8b6KJ6mLieqDktgyysgp7w yqad+Nq8/Mwcfq7VZVMHi9zcBA2HFLBaDiGTNVMDhzzDigfiAFUmQltQ/um/43Hs 1WKeuc4dU/WmG3cIqEgUGi+wjQdhgMDEMl39dq+l6ZhfiOyNvZX+QUMj8xcNQspx trv3BiLT86Yg5g+IdD7RtlW7lEvjzgWRYvLzueWc+L5XSMrHo3KN/I69WZFEwEei xOwEhKnt3mQbA5g4rxPrIJOYZK48TUC45BJg9/01tS7I4UnPEiXRhDatNOAIiBlk h/WbswYMSyCNhKO8KK0i8xKlnx3HHbqLCTs5R0hUIwztgjld -----END CERTIFICATE-----Generated at Tue Sep 22 17:44:39 2026 by rpki-client