$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e85e0d5-04f1-3abe-9e6b-6eeb6908e164.roa File: 3e85e0d5-04f1-3abe-9e6b-6eeb6908e164.roa (raw, json) Hash identifier: SR/t/nKhuxTLJ0kxAr+4GQtIh9pbIDXka7Whq2KQsRg= Subject key identifier: F2:2F:3D:2A:84:81:61:45:C4:12:07:69:BE:17:7B:A2:6D:F5:FA:28 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E4DB9ED53FB3B72B350C99B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e85e0d5-04f1-3abe-9e6b-6eeb6908e164.roa Signing time: Fri 26 Jun 2026 21:00:11 +0000 ROA not before: Fri 26 Jun 2026 21:00:11 +0000 ROA not after: Thu 24 Sep 2026 21:00:11 +0000 asID: 396611 IP address blocks: 2001:500:13f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4d:b9:ed:53:fb:3b:72:b3:50:c9:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 26 21:00:11 2026 GMT Not After : Sep 24 21:00:11 2026 GMT Subject: CN=6b438413-5849-4a77-ac2d-748464de618c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a8:e8:de:37:d8:8f:d2:1c:2f:dc:24:e9:28: 1b:9b:61:73:63:03:4e:6d:f1:8a:70:26:cb:ab:33: ac:9c:82:66:63:47:b9:eb:05:3f:d7:42:5e:6e:99: 7a:9f:79:fb:60:f2:11:8d:91:15:75:fb:fa:42:89: d3:2a:61:f0:bd:9d:c3:36:d1:b4:e5:d5:63:99:f2: aa:d9:55:fc:c6:29:6b:3f:ef:f7:54:54:a3:2d:38: 09:39:4b:0f:76:a6:72:ee:84:b5:a7:84:7d:d2:df: 02:36:b1:c2:e0:fb:7c:38:68:db:33:d3:71:c9:f2: ec:55:48:09:4a:51:5f:11:d0:2e:5e:de:2e:34:25: ca:6a:ba:a8:b8:ad:90:5f:b6:c2:4f:29:fb:4d:5b: 7d:f6:52:81:78:6d:59:a3:a5:f9:16:29:e4:95:c8: 5e:a6:34:97:20:2e:b1:84:bf:23:53:c3:d4:c5:ad: c1:4d:33:b2:ca:2c:61:0b:48:25:96:ee:18:24:04: c4:64:da:eb:c8:c3:b3:fa:af:62:a1:02:d9:b7:a3: ae:e0:33:05:43:b8:d6:f2:52:99:2a:55:b4:d5:bc: 20:fe:d9:d1:94:ec:c5:fc:bd:ad:68:da:9e:2c:0d: a0:64:bb:4e:3c:70:64:26:1f:5a:1a:a8:ab:8e:26: 6c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:2F:3D:2A:84:81:61:45:C4:12:07:69:BE:17:7B:A2:6D:F5:FA:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e85e0d5-04f1-3abe-9e6b-6eeb6908e164.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:13f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:d3:90:8d:db:56:98:c5:b8:ce:f4:49:1a:de:cd:4a:d3:fd: 04:12:fb:46:ce:36:1f:7e:87:c2:4a:61:6e:fc:51:1e:df:06: 7b:74:b4:f2:a4:47:84:61:30:90:03:04:07:51:07:76:6d:eb: 00:cb:22:7e:00:74:c0:af:03:e7:74:26:23:0b:d0:eb:a1:84: 40:49:1b:12:ad:18:eb:8f:c4:27:c7:67:39:a9:e6:9d:fd:59: 64:e2:1b:b5:fe:aa:d7:46:4a:85:3c:6d:8c:22:b3:2d:dd:68: c2:bc:ee:5b:77:81:59:97:87:c7:13:de:33:9c:88:ae:bc:99: cc:f1:82:8d:c9:97:0a:e2:81:fa:46:3e:18:08:64:ad:d5:11: 08:ab:a5:e8:10:42:9f:54:cb:89:d3:ec:a6:74:dd:2b:d2:c3: fb:88:bb:c9:3b:11:26:df:0b:5a:c5:29:d1:c2:06:af:ca:74: cb:76:2c:be:b6:f3:03:44:5e:a0:ac:8b:71:d1:f2:f3:c1:3f: f3:e4:61:18:1f:8a:c4:e0:65:5f:80:27:95:c4:ed:c8:37:3b: cf:48:39:5c:86:eb:3e:ae:8c:dc:a4:16:1a:86:2b:1c:a4:48: 1c:b9:ff:0a:3b:aa:8d:cf:da:61:0e:d7:38:69:d4:2d:0b:74: cd:fd:5f:46 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5Nue1T+ztys1DJm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDYyNjIxMDAxMVoXDTI2MDkyNDIxMDAxMVowLzEtMCsGA1UEAxMk NmI0Mzg0MTMtNTg0OS00YTc3LWFjMmQtNzQ4NDY0ZGU2MThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKjo3jfYj9IcL9wk6Sgbm2FzYwNObfGKcCbL qzOsnIJmY0e56wU/10Jebpl6n3n7YPIRjZEVdfv6QonTKmHwvZ3DNtG05dVjmfKq 2VX8xilrP+/3VFSjLTgJOUsPdqZy7oS1p4R90t8CNrHC4Pt8OGjbM9NxyfLsVUgJ SlFfEdAuXt4uNCXKarqouK2QX7bCTyn7TVt99lKBeG1Zo6X5FinklchepjSXIC6x hL8jU8PUxa3BTTOyyixhC0gllu4YJATEZNrryMOz+q9ioQLZt6Ou4DMFQ7jW8lKZ KlW01bwg/tnRlOzF/L2taNqeLA2gZLtOPHBkJh9aGqirjiZsyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPIvPSqEgWFFxBIHab4Xe6Jt9fooMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2U4NWUwZDUtMDRmMS0z YWJlLTllNmItNmVlYjY5MDhlMTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ/TkI3bVpjFuM70SRrezUrT/QQS+0bONh9+h8JKYW78UR7fBnt0 tPKkR4RhMJADBAdRB3Zt6wDLIn4AdMCvA+d0JiML0OuhhEBJGxKtGOuPxCfHZzmp 5p39WWTiG7X+qtdGSoU8bYwisy3daMK87lt3gVmXh8cT3jOciK68mczxgo3Jlwri gfpGPhgIZK3VEQirpegQQp9Uy4nT7KZ03SvSw/uIu8k7ESbfC1rFKdHCBq/KdMt2 LL628wNEXqCsi3HR8vPBP/PkYRgfisTgZV+AJ5XE7cg3O89IOVyG6z6ujNykFhqG KxykSBy5/wo7qo3P2mEO1zhp1C0LdM39X0Y= -----END CERTIFICATE-----Generated at Sun Jun 28 21:52:17 2026 by rpki-client