$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49f7c9c0-60f0-3cb7-a858-24d9dac160cc.roa File: 49f7c9c0-60f0-3cb7-a858-24d9dac160cc.roa (raw, json) Hash identifier: 5BWgMkmfOt7RSpYuge9+W2Rtn1laLgaR3Kwcf6p5TfQ= Subject key identifier: D4:4C:34:C7:09:49:C8:98:5D:78:33:CC:7D:6E:90:4B:F7:1A:1E:A7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E4DB9F03E752D7B22610A2B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49f7c9c0-60f0-3cb7-a858-24d9dac160cc.roa Signing time: Fri 26 Jun 2026 21:00:11 +0000 ROA not before: Fri 26 Jun 2026 21:00:11 +0000 ROA not after: Thu 24 Sep 2026 21:00:11 +0000 asID: 396610 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4d:b9:f0:3e:75:2d:7b:22:61:0a:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 26 21:00:11 2026 GMT Not After : Sep 24 21:00:11 2026 GMT Subject: CN=6b49339f-f129-4c3e-8fb3-b734030e08ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5b:d7:2b:a4:5f:5a:a1:fc:0e:68:58:8a:5e: 8e:11:45:57:e6:8f:ae:a8:65:d3:f0:09:91:b5:ee: cf:68:c6:f9:b1:a5:8a:c3:6e:d0:6c:a6:0c:9c:f7: 1a:49:4d:29:ba:4e:9f:3c:fa:87:b7:b4:e8:32:33: a8:7e:ea:1f:8e:59:de:98:3b:e2:cf:9a:ad:cd:92: eb:18:f1:66:f7:34:a1:cb:f9:fe:93:4a:80:b7:b7: 18:c3:45:6c:ee:08:c3:8a:f7:28:4c:e7:4c:9e:a3: 3e:d8:9c:75:61:bb:be:f9:16:fe:0c:4d:ef:13:90: b0:fc:65:55:41:e8:f4:ae:cb:06:72:51:a1:83:26: e9:bc:f4:ca:68:a0:51:72:fe:bf:38:ca:71:9f:91: ef:7c:eb:aa:99:05:ac:74:e0:b6:cc:7a:4f:4d:b6: 2c:cb:d2:d5:a8:45:2e:0e:c5:b0:a5:fc:96:97:d5: be:19:51:f8:88:8f:2d:7e:04:8d:fa:3e:c3:c4:f3: 8e:d5:fb:ab:d2:e8:ea:29:65:39:00:d3:3a:50:bc: b7:19:7e:9f:6d:67:d3:61:bf:99:a1:1f:50:4b:f5: da:8c:93:01:69:da:88:04:08:4f:8a:db:78:f7:80: 3b:68:82:16:ff:c9:78:f8:0b:eb:c7:d0:c4:41:7c: 9b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:4C:34:C7:09:49:C8:98:5D:78:33:CC:7D:6E:90:4B:F7:1A:1E:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49f7c9c0-60f0-3cb7-a858-24d9dac160cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:f4:80:a7:9a:7c:d9:4a:35:fc:c9:ad:fa:06:5f:6d:c3:bc: 76:ca:3d:c8:65:93:b3:5e:40:da:f3:42:12:8c:38:16:07:c4: 29:86:1e:f5:c1:36:1d:ea:03:28:79:8d:87:b9:41:73:aa:27: 75:ca:fb:03:3c:6d:2d:c4:64:5b:69:bb:72:a4:fe:c3:9b:2c: 3d:88:48:ed:59:e9:dc:c1:3c:0c:81:c5:3b:0f:42:59:1b:61: 2d:95:dd:86:e7:63:e9:2a:d0:a6:3d:a0:1f:f7:11:6a:0f:57: e6:4b:cb:32:99:80:70:a3:50:e5:ba:15:15:6a:e4:4d:9d:de: b6:00:a4:8f:d8:7f:85:dd:95:a0:4a:91:ba:fb:62:61:dd:24: a1:7b:c5:ce:c6:99:09:13:aa:22:59:55:d2:9a:ad:49:06:f6: 5b:f3:a8:83:a6:83:9f:bb:32:03:14:c0:ee:c9:e4:31:c1:6b: f2:10:4a:d5:fb:55:07:f0:5d:d6:dc:26:ad:48:43:5c:ad:be: 89:a1:d1:ec:5e:60:bb:03:50:64:d9:a7:51:ed:ac:bb:2b:3b: 90:69:b0:f4:c0:84:20:94:07:29:4f:e1:ca:fd:dc:eb:5a:b0: 57:de:bd:73:7c:2a:2b:c6:09:79:24:90:81:ba:96:fa:9d:42: de:7d:a1:13 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5NufA+dS17ImEKK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDYyNjIxMDAxMVoXDTI2MDkyNDIxMDAxMVowLzEtMCsGA1UEAxMk NmI0OTMzOWYtZjEyOS00YzNlLThmYjMtYjczNDAzMGUwOGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVvXK6RfWqH8DmhYil6OEUVX5o+uqGXT8AmR te7PaMb5saWKw27QbKYMnPcaSU0puk6fPPqHt7ToMjOofuofjlnemDviz5qtzZLr GPFm9zShy/n+k0qAt7cYw0Vs7gjDivcoTOdMnqM+2Jx1Ybu++Rb+DE3vE5Cw/GVV Qej0rssGclGhgybpvPTKaKBRcv6/OMpxn5HvfOuqmQWsdOC2zHpPTbYsy9LVqEUu DsWwpfyWl9W+GVH4iI8tfgSN+j7DxPOO1fur0ujqKWU5ANM6ULy3GX6fbWfTYb+Z oR9QS/XajJMBadqIBAhPitt494A7aIIW/8l4+Avrx9DEQXybJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNRMNMcJSciYXXgzzH1ukEv3Gh6nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDlmN2M5YzAtNjBmMC0z Y2I3LWE4NTgtMjRkOWRhYzE2MGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEv0gKeafNlKNfzJrfoGX23DvHbKPchlk7NeQNrzQhKMOBYHxCmG HvXBNh3qAyh5jYe5QXOqJ3XK+wM8bS3EZFtpu3Kk/sObLD2ISO1Z6dzBPAyBxTsP QlkbYS2V3YbnY+kq0KY9oB/3EWoPV+ZLyzKZgHCjUOW6FRVq5E2d3rYApI/Yf4Xd laBKkbr7YmHdJKF7xc7GmQkTqiJZVdKarUkG9lvzqIOmg5+7MgMUwO7J5DHBa/IQ StX7VQfwXdbcJq1IQ1ytvomh0exeYLsDUGTZp1HtrLsrO5BpsPTAhCCUBylP4cr9 3OtasFfevXN8KivGCXkkkIG6lvqdQt59oRM= -----END CERTIFICATE-----Generated at Sun Jun 28 19:38:49 2026 by rpki-client