$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b7dee87-62db-3c9c-b11e-afd3a47d3da2.roa File: 0b7dee87-62db-3c9c-b11e-afd3a47d3da2.roa (raw, json) Hash identifier: yzvMTIHoKq9Vq0+PXcF9xS6GOX3EpO38gIXhsqZ0etk= Subject key identifier: CD:C2:BD:00:F7:FC:B6:12:BE:1C:CA:30:E3:09:F9:FF:6C:75:DE:D7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E3A2F14BC33F439B29293D020 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b7dee87-62db-3c9c-b11e-afd3a47d3da2.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 396585 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:14:bc:33:f4:39:b2:92:93:d0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=01eaee84-895c-4791-b35d-d64e07d34588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:52:2c:dc:9e:a4:6f:f2:9d:d7:68:ec:8c:4c: b1:30:05:8c:bf:86:83:18:08:30:c2:ae:54:49:03: 8a:b8:53:85:73:91:14:8a:5f:fa:57:56:0a:81:c0: 38:13:e1:ae:df:de:1a:e8:fc:8b:46:c2:18:07:90: 98:60:e1:e9:73:3d:e8:9f:7b:03:77:05:ef:1d:65: cb:5b:27:e0:2c:1d:2c:7b:f1:0e:26:20:15:c6:33: 3a:46:59:cf:eb:55:e7:61:b2:20:d0:40:81:86:f0: 11:6f:c2:6d:b3:18:6a:3f:fa:d1:2a:97:bb:7d:7f: d3:de:0a:e8:ea:66:11:a9:0d:d6:3a:eb:83:33:f4: 64:4c:c1:ad:1a:9b:c7:e1:33:95:f4:1d:75:c2:61: 3d:ca:55:3e:6d:ad:ff:15:8f:1a:cc:d7:32:21:b6: 06:d9:a2:8d:92:c8:51:a5:06:af:f1:82:7f:8e:c9: ce:3e:09:d5:4b:5d:f7:91:b2:ef:87:32:63:fc:ac: 09:05:f7:58:16:86:83:6c:4d:66:f3:ff:fb:43:16: 81:11:aa:2a:1a:9e:45:b2:4a:91:48:72:0f:a1:1a: e2:1d:db:21:70:2e:af:4f:2d:83:20:5d:72:f5:c9: 95:90:ac:05:ab:f9:f4:46:64:12:c5:7d:f0:2e:7e: c8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C2:BD:00:F7:FC:B6:12:BE:1C:CA:30:E3:09:F9:FF:6C:75:DE:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b7dee87-62db-3c9c-b11e-afd3a47d3da2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:e5:c6:3a:51:88:74:af:da:63:1d:7a:43:ce:9f:a3:ee:eb: bf:98:d8:37:18:b7:b4:e2:3c:21:5e:29:e2:d0:64:d7:aa:ff: a2:01:cc:ee:13:ca:32:48:f5:d8:99:0e:c7:4c:18:37:11:17: ce:d3:e1:82:d5:0a:e0:58:de:52:83:76:3d:05:ca:75:2f:a6: a7:c8:f0:8e:fb:d3:d8:d2:12:d2:d6:20:ce:fa:77:f9:29:1f: 3c:46:f9:37:c0:10:6b:be:a5:5d:43:cb:8a:45:0c:ed:b7:b3: 02:4c:83:46:15:d5:a0:42:61:8a:d6:20:05:ea:8a:e8:0a:ad: 64:b8:b8:e6:e0:f5:33:65:ca:c7:2c:d1:f0:6c:69:fb:2d:6a: 16:0e:ed:ae:56:3a:0c:a2:b7:10:44:a9:64:fe:45:75:c5:89: f5:67:2d:90:7a:cc:6f:43:90:87:bd:c8:af:33:9a:89:bc:04: 71:86:d2:52:9e:da:36:ed:3b:ba:af:21:88:02:1c:2d:fa:42: 67:6a:14:7a:ad:32:a4:46:1a:bd:54:4f:6a:c2:44:fd:ae:6a: 02:e8:f5:e9:66:50:29:12:9c:f6:c3:bf:5b:d1:29:24:98:c6: 02:bb:f6:9f:17:a7:32:91:28:1d:50:46:b7:37:b1:0a:6d:b9: 40:ed:74:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE46LxS8M/Q5spKT0CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk MDFlYWVlODQtODk1Yy00NzkxLWIzNWQtZDY0ZTA3ZDM0NTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlIs3J6kb/Kd12jsjEyxMAWMv4aDGAgwwq5U SQOKuFOFc5EUil/6V1YKgcA4E+Gu394a6PyLRsIYB5CYYOHpcz3on3sDdwXvHWXL WyfgLB0se/EOJiAVxjM6RlnP61XnYbIg0ECBhvARb8JtsxhqP/rRKpe7fX/T3gro 6mYRqQ3WOuuDM/RkTMGtGpvH4TOV9B11wmE9ylU+ba3/FY8azNcyIbYG2aKNkshR pQav8YJ/jsnOPgnVS133kbLvhzJj/KwJBfdYFoaDbE1m8//7QxaBEaoqGp5FskqR SHIPoRriHdshcC6vTy2DIF1y9cmVkKwFq/n0RmQSxX3wLn7IBQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM3CvQD3/LYSvhzKMOMJ+f9sdd7XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGI3ZGVlODctNjJkYi0z YzljLWIxMWUtYWZkM2E0N2QzZGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKHlxjpRiHSv2mMdekPOn6Pu67+Y2DcYt7TiPCFeKeLQZNeq/6IB zO4TyjJI9diZDsdMGDcRF87T4YLVCuBY3lKDdj0FynUvpqfI8I7709jSEtLWIM76 d/kpHzxG+TfAEGu+pV1Dy4pFDO23swJMg0YV1aBCYYrWIAXqiugKrWS4uObg9TNl yscs0fBsafstahYO7a5WOgyitxBEqWT+RXXFifVnLZB6zG9DkIe9yK8zmom8BHGG 0lKe2jbtO7qvIYgCHC36QmdqFHqtMqRGGr1UT2rCRP2uagLo9elmUCkSnPbDv1vR KSSYxgK79p8XpzKRKB1QRrc3sQptuUDtdBE= -----END CERTIFICATE-----Generated at Sun Jun 28 20:36:14 2026 by rpki-client