$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3821673e-6bee-3996-9ffa-e0c7b3532a7e.roa File: 3821673e-6bee-3996-9ffa-e0c7b3532a7e.roa (raw, json) Hash identifier: fLQwGdDpdxhuRE4mUCH/Osqnw1kS9FOvJaB4rBeFOoY= Subject key identifier: 59:82:98:F1:4A:17:51:7E:32:B2:3D:37:91:82:88:0B:F5:87:E8:BD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E4DB9F39CEAE87A9033FFD380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3821673e-6bee-3996-9ffa-e0c7b3532a7e.roa Signing time: Fri 26 Jun 2026 21:00:11 +0000 ROA not before: Fri 26 Jun 2026 21:00:11 +0000 ROA not after: Thu 24 Sep 2026 21:00:11 +0000 asID: 396565 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4d:b9:f3:9c:ea:e8:7a:90:33:ff:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 26 21:00:11 2026 GMT Not After : Sep 24 21:00:11 2026 GMT Subject: CN=a4f8b018-bfa4-41bc-9854-ee651bd5c37e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7f:9a:22:53:09:f3:fc:26:5d:b6:88:13:eb: 99:13:f7:e8:a9:8a:26:81:4f:88:7f:f2:0e:d2:0c: 91:90:e7:93:4c:0f:be:46:51:8e:a9:a8:80:1f:ae: ab:75:b9:32:fb:b0:99:9b:9a:8a:a8:49:05:94:df: c0:dd:64:88:a2:17:3b:cc:62:3c:11:41:af:28:16: 39:0a:a4:65:c7:53:ff:3b:4e:8f:85:76:73:ba:b8: 0c:6d:a4:1c:d1:45:53:d1:f8:35:5f:b3:9d:e6:d1: 0c:ad:34:34:18:1b:91:51:5d:9d:e9:69:75:10:41: 75:f9:1c:9e:ad:5f:48:4f:87:b7:64:8e:ce:cd:24: 5b:5f:8d:02:6c:a3:4e:d5:d9:b3:51:b9:a1:5f:98: e7:00:f7:94:d4:9a:67:ed:6e:b1:bd:7a:1f:a7:7e: 06:d9:45:6b:48:5a:6f:1e:60:c2:3c:86:a1:2d:13: 61:66:34:5d:04:ff:06:42:14:45:b2:a3:44:d3:a4: 6d:9f:13:79:df:1e:9a:01:61:bb:6f:94:d4:fc:b4: 4c:b9:88:80:67:ba:06:d0:77:e5:77:4d:a7:fb:4f: 57:37:f2:6f:0e:24:7a:27:55:9c:e5:81:75:b7:93: ec:3b:5e:de:ed:52:06:36:91:22:69:7a:f2:e6:48: 22:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:82:98:F1:4A:17:51:7E:32:B2:3D:37:91:82:88:0B:F5:87:E8:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3821673e-6bee-3996-9ffa-e0c7b3532a7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:96:ad:5a:a6:c3:7c:15:07:55:27:b7:cb:9d:e3:5b:fb:6e: 26:fa:84:0c:2e:52:e4:54:77:1c:85:f3:ff:27:13:63:53:b5: f5:86:d4:65:81:09:e3:f3:73:f3:4c:b5:4e:9e:81:29:2e:36: 81:a6:be:14:fb:1d:66:b5:e9:1d:37:8b:07:e1:d0:b0:58:38: 58:5b:16:f7:e7:34:3d:90:b5:19:88:9a:15:e1:7f:01:95:9b: bf:d0:16:09:9d:78:eb:a2:57:b1:f6:1b:23:4c:9a:35:2e:f6: a3:b1:b3:d4:30:da:96:bf:d8:c4:27:73:e2:24:e8:fb:39:2e: c6:94:af:68:01:08:fe:45:8c:95:cd:58:7e:3d:a4:16:a0:7e: cb:c6:04:61:01:48:96:e8:21:c9:29:a0:3f:3c:7d:66:da:34: de:6d:85:09:dd:ac:33:e5:5b:db:63:43:a3:1c:22:43:35:b2: a4:5f:08:c5:b6:85:70:4d:29:6d:0f:03:20:5c:de:66:2e:17: 90:e9:41:ba:c3:c8:16:75:71:98:33:c0:e0:1b:12:a8:73:7e: 80:63:4b:50:55:bd:73:17:75:f3:48:7d:c1:df:07:9c:6b:f8: 4a:b1:96:72:2f:cf:da:c1:ec:ec:bd:a6:69:ec:bb:06:c7:81: 31:9d:90:fb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5NufOc6uh6kDP/04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDYyNjIxMDAxMVoXDTI2MDkyNDIxMDAxMVowLzEtMCsGA1UEAxMk YTRmOGIwMTgtYmZhNC00MWJjLTk4NTQtZWU2NTFiZDVjMzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH+aIlMJ8/wmXbaIE+uZE/foqYomgU+If/IO 0gyRkOeTTA++RlGOqaiAH66rdbky+7CZm5qKqEkFlN/A3WSIohc7zGI8EUGvKBY5 CqRlx1P/O06PhXZzurgMbaQc0UVT0fg1X7Od5tEMrTQ0GBuRUV2d6Wl1EEF1+Rye rV9IT4e3ZI7OzSRbX40CbKNO1dmzUbmhX5jnAPeU1Jpn7W6xvXofp34G2UVrSFpv HmDCPIahLRNhZjRdBP8GQhRFsqNE06RtnxN53x6aAWG7b5TU/LRMuYiAZ7oG0Hfl d02n+09XN/JvDiR6J1Wc5YF1t5PsO17e7VIGNpEiaXry5kgiEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFmCmPFKF1F+MrI9N5GCiAv1h+i9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzgyMTY3M2UtNmJlZS0z OTk2LTlmZmEtZTBjN2IzNTMyYTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKWWrVqmw3wVB1Unt8ud41v7bib6hAwuUuRUdxyF8/8nE2NTtfWG 1GWBCePzc/NMtU6egSkuNoGmvhT7HWa16R03iwfh0LBYOFhbFvfnND2QtRmImhXh fwGVm7/QFgmdeOuiV7H2GyNMmjUu9qOxs9Qw2pa/2MQnc+Ik6Ps5LsaUr2gBCP5F jJXNWH49pBagfsvGBGEBSJboIckpoD88fWbaNN5thQndrDPlW9tjQ6McIkM1sqRf CMW2hXBNKW0PAyBc3mYuF5DpQbrDyBZ1cZgzwOAbEqhzfoBjS1BVvXMXdfNIfcHf B5xr+EqxlnIvz9rB7Oy9pmnsuwbHgTGdkPs= -----END CERTIFICATE-----Generated at Sun Jun 28 19:34:06 2026 by rpki-client