$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/bd24ff87-c178-3f0d-a1e7-788cf90a8c56.roa File: bd24ff87-c178-3f0d-a1e7-788cf90a8c56.roa (raw, json) Hash identifier: ZzSaD+smjkPzid0EFmHrhJHAiYis7qZyM14IQEI6w2I= Subject key identifier: 3A:33:27:AA:8E:C1:9F:3D:C8:8A:F7:8F:F9:5D:F9:BB:40:3E:80:B7 Certificate issuer: /CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f Certificate serial: 010D0C9F4328584F1CC7A921DF209F9273FA6700 Authority key identifier: E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/bd24ff87-c178-3f0d-a1e7-788cf90a8c56.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 0 IP address blocks: 2001:504:1b::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:a9:21:df:20:9f:92:73:fa:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=ed96a37c-a735-464f-9f33-a139f58f0904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4e:a8:19:bf:ac:cf:c2:d8:84:fd:ef:5c:1c: 11:54:7d:f5:4e:e6:a0:a0:cf:ed:4e:22:ca:33:3e: a5:c4:93:3b:08:c2:dd:39:b9:0f:3f:f1:c4:b7:ef: f7:c6:e6:5d:16:98:6d:1b:f7:3e:a2:64:25:1e:a7: 58:2c:a5:b1:29:8c:f3:0a:95:e7:c2:3f:b5:d0:f0: c7:8b:10:2e:9b:de:bc:12:9d:c1:6b:0e:43:69:e9: ea:b8:b4:c3:ab:3c:97:f0:4d:36:36:da:04:3b:a7: 58:da:db:7d:50:0c:a8:0f:42:b4:ec:44:f4:2a:7c: 95:2e:4e:3f:93:2a:f8:d6:c6:59:c2:87:e8:2b:1d: db:b1:30:9c:37:88:49:5c:35:be:cf:2b:f8:dc:90: 8a:03:79:52:e9:43:f0:f7:59:64:86:ec:30:79:ec: ea:ea:0a:3c:b6:06:87:68:c1:f3:d9:41:97:51:d6: cd:ec:16:3e:a6:27:24:32:28:36:70:0c:74:ca:42: da:d9:2c:a0:65:5a:cf:0a:a0:44:5c:c7:b0:22:0c: 9a:78:26:63:26:cd:55:06:dd:bb:71:e2:2c:09:0c: e0:97:48:aa:b0:99:a1:68:cb:d1:6f:c7:d5:5c:62: b4:b8:85:8c:72:ec:b2:2f:c8:92:8e:3f:c0:aa:57: d1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:33:27:AA:8E:C1:9F:3D:C8:8A:F7:8F:F9:5D:F9:BB:40:3E:80:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/bd24ff87-c178-3f0d-a1e7-788cf90a8c56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.crl X509v3 Authority Key Identifier: keyid:E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:1b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:00:0f:1a:c8:d2:6c:f2:85:6f:0f:c3:51:eb:62:1e:9d:13: 3b:c0:a0:70:da:d9:13:f8:8b:e1:7f:e2:1b:67:4e:2e:63:b4: 88:4f:d9:f2:b4:84:72:2e:85:98:27:b9:d1:10:d2:b9:4c:66: eb:8c:30:19:f9:12:94:f2:c4:70:7c:64:82:3b:af:ee:7e:b6: 18:85:5d:bc:d9:f7:bd:3a:23:65:aa:30:2f:c0:f4:9a:43:df: c1:84:83:f2:45:9f:7d:a3:2d:2c:5a:63:c3:4f:eb:a2:94:d3: 63:40:26:75:d1:0d:e9:d9:31:bc:1d:93:7c:a5:a4:94:8f:a7: 66:3b:87:16:e5:b2:c9:b8:57:3c:d0:56:9c:42:08:d2:b1:0e: b0:94:ca:53:fd:0f:be:de:61:91:54:ef:20:09:57:8f:f0:70: 3a:1e:93:2a:ac:01:80:43:74:0c:fc:92:41:5a:76:dc:c9:90: ee:8f:20:85:87:ef:a2:06:ca:1d:cf:12:30:69:81:0e:db:47: e1:9a:8f:09:e8:96:d9:e8:de:73:4b:21:a6:a3:25:e0:4f:59: 74:26:2c:73:04:24:71:50:40:b7:36:84:1f:d4:c0:89:39:6b: 1b:f2:9a:fd:e0:df:56:58:29:2c:17:ef:6b:f4:cb:75:6e:ee: 6c:5c:49:67 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8cx6kh3yCfknP6ZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE2MTFlZjEtMTk1ZS00OTU4LWE2YWMtZjRhMWQyY2Q4 YzhmMB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk ZWQ5NmEzN2MtYTczNS00NjRmLTlmMzMtYTEzOWY1OGYwOTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1U6oGb+sz8LYhP3vXBwRVH31TuagoM/tTiLK Mz6lxJM7CMLdObkPP/HEt+/3xuZdFphtG/c+omQlHqdYLKWxKYzzCpXnwj+10PDH ixAum968Ep3Baw5DaenquLTDqzyX8E02NtoEO6dY2tt9UAyoD0K07ET0KnyVLk4/ kyr41sZZwofoKx3bsTCcN4hJXDW+zyv43JCKA3lS6UPw91lkhuwweezq6go8tgaH aMHz2UGXUdbN7BY+pickMig2cAx0ykLa2SygZVrPCqBEXMewIgyaeCZjJs1VBt27 ceIsCQzgl0iqsJmhaMvRb8fVXGK0uIWMcuyyL8iSjj/AqlfRyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDozJ6qOwZ89yIr3j/ld+btAPoC3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yYTYx MWVmMS0xOTVlLTQ5NTgtYTZhYy1mNGExZDJjZDhjOGYvYmQyNGZmODctYzE3OC0z ZjBkLWExZTctNzg4Y2Y5MGE4YzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmE2MTFlZjEtMTk1ZS00OTU4LWE2 YWMtZjRhMWQyY2Q4YzhmLzJhNjExZWYxLTE5NWUtNDk1OC1hNmFjLWY0YTFkMmNk OGM4Zi5jcmwwHwYDVR0jBBgwFoAU58NNkhO9kN6+mFO2dWGXhlsnRk0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yYTYxMWVmMS0xOTVlLTQ5NTgtYTZhYy1mNGEx ZDJjZDhjOGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAAb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACMADxrI0mzyhW8Pw1HrYh6dEzvAoHDa2RP4i+F/4htnTi5jtIhP 2fK0hHIuhZgnudEQ0rlMZuuMMBn5EpTyxHB8ZII7r+5+thiFXbzZ9706I2WqMC/A 9JpD38GEg/JFn32jLSxaY8NP66KU02NAJnXRDenZMbwdk3ylpJSPp2Y7hxblssm4 VzzQVpxCCNKxDrCUylP9D77eYZFU7yAJV4/wcDoekyqsAYBDdAz8kkFadtzJkO6P IIWH76IGyh3PEjBpgQ7bR+Gajwnoltno3nNLIaajJeBPWXQmLHMEJHFQQLc2hB/U wIk5axvymv3g31ZYKSwX72v0y3Vu7mxcSWc= -----END CERTIFICATE-----Generated at Sun Sep 20 14:32:23 2026 by rpki-client