$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/209c2afd-1ef7-350d-ac7f-66af5a91c679.roa File: 209c2afd-1ef7-350d-ac7f-66af5a91c679.roa (raw, json) Hash identifier: AR+HAIMhyxKkOuCG3vMAORIqNjGAhuP/xilJpWrv7II= Subject key identifier: 30:04:97:45:64:84:DE:84:CE:1D:78:6C:13:33:9E:5C:3C:2E:B0:DF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E3A2F15CABE669CCFB4BD5D00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/209c2afd-1ef7-350d-ac7f-66af5a91c679.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 32651 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:15:ca:be:66:9c:cf:b4:bd:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=3d54605c-2041-4333-936f-13c246c5dd0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9c:67:59:80:45:05:83:ee:5e:cb:e4:d8:ca: 36:ce:bf:fc:65:f5:12:5a:98:4b:f3:a7:db:45:62: 6c:00:d1:43:db:66:c1:8e:4b:0f:79:78:a1:aa:18: ca:a9:f3:b4:ec:69:e4:f3:da:50:f4:10:e6:23:ce: 77:11:c8:f6:9b:00:6a:cc:73:f9:79:87:d6:41:05: 14:de:ff:c0:c8:1d:76:fe:08:7f:06:0a:46:65:66: 6b:91:9e:76:ab:a1:38:79:18:85:9e:14:d4:bc:34: e4:e3:ac:91:d8:83:18:d8:14:32:86:61:12:f8:48: 64:55:4e:0c:08:56:70:10:af:af:c1:84:ba:ba:58: e9:fb:f4:16:ca:f3:a4:a3:2f:8c:43:26:21:3b:b9: d9:14:5c:8e:4d:43:75:8e:86:43:a7:34:45:8c:bd: a6:ba:42:39:86:90:14:36:01:8b:51:a5:84:f8:b7: e7:3b:eb:2f:33:e5:3b:39:92:15:48:a9:0d:ef:44: 8e:67:e2:38:4b:db:d1:d4:19:df:19:32:6f:18:74: a2:d9:6a:f8:10:9d:c2:1f:1b:d1:2f:44:fb:45:c3: 18:db:b8:c3:36:96:73:8b:e0:a9:89:8e:64:3e:ea: e5:1b:1f:58:1e:3b:fb:46:7f:5f:ee:3a:8f:4f:08: bb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:04:97:45:64:84:DE:84:CE:1D:78:6C:13:33:9E:5C:3C:2E:B0:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/209c2afd-1ef7-350d-ac7f-66af5a91c679.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:44:37:db:3c:a3:bb:b4:aa:d5:80:b3:16:11:1a:e4:4c:a2: b7:87:4b:d0:43:b0:c5:78:14:02:79:45:d4:6c:53:1e:25:07: a9:12:04:30:84:61:0d:42:14:28:4a:91:c3:82:c4:ea:3b:c4: d9:37:f2:49:23:47:e9:73:f5:66:82:10:2e:0d:16:8d:ed:e9: 3d:9d:de:9d:b9:14:89:ac:14:c5:40:ec:9b:fe:05:c5:c9:08: 82:c8:b8:90:4f:60:4f:7c:7a:70:64:3a:ca:29:9c:1a:ce:ff: a6:65:8a:b6:da:0d:9f:83:33:ca:d7:11:26:be:03:42:2e:34: 60:4b:65:f7:47:55:cd:93:0b:2d:6d:19:34:1d:b4:9a:69:04: 24:2a:eb:fc:f3:1c:6e:78:9e:f2:24:48:48:33:ce:f5:4e:9b: 30:cc:fa:fd:5a:18:ee:c8:f2:4a:2e:99:2c:ea:15:d0:41:03: 14:c5:48:fa:46:84:23:7b:f0:6a:05:6c:04:7c:ca:81:df:1c: 10:bb:e1:5f:cc:b6:b0:32:f7:20:c7:12:0d:dd:22:46:4d:8e: 3c:3e:70:a7:f7:4b:af:9c:1f:17:97:13:01:d9:5b:d8:ae:99: 19:87:d8:7b:49:5d:c0:63:60:c7:da:15:bb:8e:24:d9:ec:44: 49:9a:e0:64 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE46LxXKvmacz7S9XQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk M2Q1NDYwNWMtMjA0MS00MzMzLTkzNmYtMTNjMjQ2YzVkZDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZxnWYBFBYPuXsvk2Mo2zr/8ZfUSWphL86fb RWJsANFD22bBjksPeXihqhjKqfO07Gnk89pQ9BDmI853Ecj2mwBqzHP5eYfWQQUU 3v/AyB12/gh/BgpGZWZrkZ52q6E4eRiFnhTUvDTk46yR2IMY2BQyhmES+EhkVU4M CFZwEK+vwYS6uljp+/QWyvOkoy+MQyYhO7nZFFyOTUN1joZDpzRFjL2mukI5hpAU NgGLUaWE+LfnO+svM+U7OZIVSKkN70SOZ+I4S9vR1BnfGTJvGHSi2Wr4EJ3CHxvR L0T7RcMY27jDNpZzi+CpiY5kPurlGx9YHjv7Rn9f7jqPTwi7/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDAEl0VkhN6Ezh14bBMznlw8LrDfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjA5YzJhZmQtMWVmNy0z NTBkLWFjN2YtNjZhZjVhOTFjNjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALBEN9s8o7u0qtWAsxYRGuRMoreHS9BDsMV4FAJ5RdRsUx4lB6kS BDCEYQ1CFChKkcOCxOo7xNk38kkjR+lz9WaCEC4NFo3t6T2d3p25FImsFMVA7Jv+ BcXJCILIuJBPYE98enBkOsopnBrO/6ZlirbaDZ+DM8rXESa+A0IuNGBLZfdHVc2T Cy1tGTQdtJppBCQq6/zzHG54nvIkSEgzzvVOmzDM+v1aGO7I8koumSzqFdBBAxTF SPpGhCN78GoFbAR8yoHfHBC74V/MtrAy9yDHEg3dIkZNjjw+cKf3S6+cHxeXEwHZ W9iumRmH2HtJXcBjYMfaFbuOJNnsREma4GQ= -----END CERTIFICATE-----Generated at Sun Jun 28 19:33:36 2026 by rpki-client