$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00173dfc-c377-3c09-bf77-f3fa9827cafb.roa File: 00173dfc-c377-3c09-bf77-f3fa9827cafb.roa (raw, json) Hash identifier: poSHCGvkMw1TFGVLWAXR3QxqaA5F38/sPP+DGwd32wE= Subject key identifier: 9B:A4:A7:EA:12:37:64:A7:A1:A0:55:C5:24:3D:77:F3:C6:B7:B5:D3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E4DB9ECBEDB00288A51619920 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00173dfc-c377-3c09-bf77-f3fa9827cafb.roa Signing time: Fri 26 Jun 2026 21:00:11 +0000 ROA not before: Fri 26 Jun 2026 21:00:11 +0000 ROA not after: Thu 24 Sep 2026 21:00:11 +0000 asID: 396551 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4d:b9:ec:be:db:00:28:8a:51:61:99:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 26 21:00:11 2026 GMT Not After : Sep 24 21:00:11 2026 GMT Subject: CN=85a36bec-ceca-42da-a3b8-71590ec08024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:38:29:8d:70:80:ab:6b:61:bb:b9:e4:00:b0: ce:d2:85:7d:41:08:1c:b6:52:03:5f:4f:55:e1:90: 10:f8:c1:9d:a5:51:b5:f9:c3:c6:9d:30:7a:ea:8d: 38:32:ba:f6:15:c6:ed:60:df:ea:5e:37:f7:fc:c4: 45:4f:4a:d0:7b:df:3d:d1:46:69:71:bc:c2:bb:05: f3:2f:52:52:45:a0:ac:9e:cb:ae:91:b3:73:28:49: 1c:c4:77:f0:87:fc:b3:08:86:ad:a9:3b:f2:7f:3b: 85:11:97:3f:a6:68:91:cf:d4:9f:ca:3f:98:5d:46: 1c:bf:3f:e4:70:ef:d2:6f:e1:0f:08:c5:89:b7:f2: de:f3:9f:46:eb:34:a4:5c:fc:ec:54:cf:b3:85:c8: 12:db:dd:52:28:45:be:9b:6a:b5:2d:f5:de:d9:98: d2:87:bd:6b:e2:a0:fc:3c:52:28:33:dc:55:54:03: 4c:2b:1f:17:64:54:1e:89:f6:c3:d8:3f:a2:ac:79: 4b:0a:2a:5f:16:a5:1c:5f:f6:5f:3a:de:ba:49:3b: 62:8c:49:f1:c2:ba:f8:32:c6:fc:a7:e7:95:68:06: ca:0f:fd:b6:2c:b2:e3:cb:58:c9:76:cf:ac:8f:7d: a1:aa:cd:69:6f:a3:cd:6e:1c:56:7a:0b:86:64:fc: d8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A4:A7:EA:12:37:64:A7:A1:A0:55:C5:24:3D:77:F3:C6:B7:B5:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00173dfc-c377-3c09-bf77-f3fa9827cafb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:f8:37:89:99:10:0d:67:e6:4d:73:2f:20:ed:94:ac:9d:78: ec:40:f1:2f:f5:b1:9f:d8:2a:ab:e2:6a:49:c4:f0:d1:e1:78: 72:66:d8:62:57:96:58:32:26:1b:7f:5f:23:f9:26:1a:c7:2d: 8e:d9:21:a0:06:b1:24:aa:12:c9:bf:6e:18:c6:d7:7b:06:27: 60:2a:c5:f3:5c:75:7d:68:9f:c6:ba:8e:dd:23:58:2c:30:44: 19:ee:c8:9d:9c:ee:99:1e:49:e1:e9:bd:23:34:22:df:a7:0b: 40:aa:57:69:8e:0d:f4:7c:ed:f9:60:15:5e:93:54:c7:e6:dd: 85:fe:2c:fb:84:41:9e:1a:c6:e1:3e:87:08:67:56:33:da:91: 30:93:a1:f2:dc:bc:7a:29:db:ba:13:1b:a8:dd:7b:7d:2b:75: a2:96:5f:5a:08:35:39:5d:13:a3:e7:f9:58:50:7c:4f:2f:e9: f0:e5:6c:15:b1:02:f8:2b:a5:62:b0:ac:2b:bf:9d:68:98:b4: 1a:b6:e2:a7:88:1d:6f:96:05:33:c5:b7:1d:f4:fe:1b:cf:83: b8:d8:09:61:81:8b:fd:76:84:85:a9:02:30:2f:ca:8f:a3:ab: 27:3c:99:51:b7:d4:81:42:66:5e:e3:ab:07:26:cd:b6:02:4e: da:cf:b3:de -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5Nuey+2wAoilFhmSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDYyNjIxMDAxMVoXDTI2MDkyNDIxMDAxMVowLzEtMCsGA1UEAxMk ODVhMzZiZWMtY2VjYS00MmRhLWEzYjgtNzE1OTBlYzA4MDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDgpjXCAq2thu7nkALDO0oV9QQgctlIDX09V 4ZAQ+MGdpVG1+cPGnTB66o04Mrr2FcbtYN/qXjf3/MRFT0rQe9890UZpcbzCuwXz L1JSRaCsnsuukbNzKEkcxHfwh/yzCIatqTvyfzuFEZc/pmiRz9Sfyj+YXUYcvz/k cO/Sb+EPCMWJt/Le859G6zSkXPzsVM+zhcgS291SKEW+m2q1LfXe2ZjSh71r4qD8 PFIoM9xVVANMKx8XZFQeifbD2D+irHlLCipfFqUcX/ZfOt66STtijEnxwrr4Msb8 p+eVaAbKD/22LLLjy1jJds+sj32hqs1pb6PNbhxWeguGZPzYAQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJukp+oSN2SnoaBVxSQ9d/PGt7XTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDAxNzNkZmMtYzM3Ny0z YzA5LWJmNzctZjNmYTk4MjdjYWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADL4N4mZEA1n5k1zLyDtlKydeOxA8S/1sZ/YKqviaknE8NHheHJm 2GJXllgyJht/XyP5JhrHLY7ZIaAGsSSqEsm/bhjG13sGJ2AqxfNcdX1on8a6jt0j WCwwRBnuyJ2c7pkeSeHpvSM0It+nC0CqV2mODfR87flgFV6TVMfm3YX+LPuEQZ4a xuE+hwhnVjPakTCTofLcvHop27oTG6jde30rdaKWX1oINTldE6Pn+VhQfE8v6fDl bBWxAvgrpWKwrCu/nWiYtBq24qeIHW+WBTPFtx30/hvPg7jYCWGBi/12hIWpAjAv yo+jqyc8mVG31IFCZl7jqwcmzbYCTtrPs94= -----END CERTIFICATE-----Generated at Sun Jun 28 19:42:19 2026 by rpki-client