$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af382251-c142-3904-865a-a47105b1531a.roa File: af382251-c142-3904-865a-a47105b1531a.roa (raw, json) Hash identifier: 6VWi6NammmweYQHIW63DLc7u96jj9Sk8T0WIEoU/hh0= Subject key identifier: 51:DC:AE:0C:ED:50:E7:E1:C1:06:96:1D:47:04:3C:18:A8:DB:59:B7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E3A2F711B3A5D2CDE62879100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af382251-c142-3904-865a-a47105b1531a.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 20431 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:71:1b:3a:5d:2c:de:62:87:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=d3bf70d2-4cdd-4013-aaf4-cb475b6628f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:76:b3:37:a6:23:9d:2a:f6:71:15:7f:8c:87: 0c:03:fb:56:5a:75:1a:47:49:82:f6:3a:63:95:90: f9:f7:30:f2:bf:ea:8c:f7:14:4a:13:f7:16:67:3f: a6:0e:e6:0b:33:7d:60:b1:28:b1:1a:82:4f:e9:38: 4d:12:3c:81:cf:40:b0:7a:26:d6:b7:80:7b:b8:de: b7:13:b5:b1:47:9c:c8:ec:f2:6b:3b:9f:21:7c:52: 11:e3:aa:22:fc:83:52:cd:b2:bc:b6:f6:49:ba:bb: 4c:b9:30:ac:f6:8d:fd:cd:fb:0b:03:0a:ef:56:7e: 01:f6:f3:af:d2:d9:c0:43:4a:e2:3f:61:ba:34:64: 79:0b:4d:44:53:ee:e3:99:b7:d6:03:fe:ff:dd:bb: cf:0c:42:5c:ea:d9:94:00:25:ee:d4:24:5c:e7:b0: 7b:c9:29:22:9a:b9:c5:02:86:b6:50:81:db:4a:a1: a9:58:55:4b:05:7f:41:65:12:f5:d2:bf:79:89:65: c6:bb:48:ad:e0:3d:47:57:85:ba:6f:33:e4:b7:cb: ff:b3:e3:50:ce:ad:86:b8:7e:aa:d7:0b:f7:04:73: d5:f5:70:df:78:9a:76:eb:4c:07:56:49:d6:20:dc: 0d:13:dd:26:1d:5d:fc:76:4c:21:08:ab:5e:8d:79: 7b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:DC:AE:0C:ED:50:E7:E1:C1:06:96:1D:47:04:3C:18:A8:DB:59:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af382251-c142-3904-865a-a47105b1531a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:f7:69:8b:a0:c5:03:88:eb:50:83:7c:6d:7d:b6:30:e7:c6: f4:08:92:c7:1c:a0:93:5b:ba:85:56:bf:5b:56:5d:73:1d:6f: c5:b2:9d:4c:7e:9f:50:1c:45:20:e3:58:83:83:4c:4a:2e:e3: df:ed:a5:b0:8d:4b:0a:6f:0e:30:1b:03:2e:fb:d8:70:01:91: 8b:55:4f:63:dd:49:e2:10:4e:15:55:06:c4:ac:aa:20:3a:a9: 5d:38:86:08:00:88:cf:25:03:e6:fa:2a:1f:3c:5f:d4:1d:d4: 79:c7:70:9f:87:eb:b9:7b:f1:fd:c5:a1:29:ed:8e:13:d9:08: 46:52:1b:d9:96:85:d8:3a:db:f4:a8:7e:93:6c:b7:4d:f7:a6: bd:f4:78:ef:99:3d:8b:71:27:95:24:e1:a2:a5:18:a0:a8:d0: 71:3a:87:35:e1:79:91:83:0d:d2:75:3c:ef:8a:9b:f3:c5:7f: 28:b9:87:62:99:41:6d:9d:29:38:b1:5e:28:b1:25:34:f2:7f: 57:be:eb:9c:b6:fc:7d:da:65:9c:8e:33:93:38:98:1c:0e:df: 98:c6:49:96:de:81:b6:06:84:21:40:33:e8:00:d0:f1:0d:33: 94:e0:9f:07:74:d4:3d:69:c4:a9:c5:9a:bb:d5:8b:c3:47:f4: d2:60:09:a0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE46L3EbOl0s3mKHkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk ZDNiZjcwZDItNGNkZC00MDEzLWFhZjQtY2I0NzViNjYyOGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXazN6YjnSr2cRV/jIcMA/tWWnUaR0mC9jpj lZD59zDyv+qM9xRKE/cWZz+mDuYLM31gsSixGoJP6ThNEjyBz0CweibWt4B7uN63 E7WxR5zI7PJrO58hfFIR46oi/INSzbK8tvZJurtMuTCs9o39zfsLAwrvVn4B9vOv 0tnAQ0riP2G6NGR5C01EU+7jmbfWA/7/3bvPDEJc6tmUACXu1CRc57B7ySkimrnF Aoa2UIHbSqGpWFVLBX9BZRL10r95iWXGu0it4D1HV4W6bzPkt8v/s+NQzq2GuH6q 1wv3BHPV9XDfeJp260wHVknWINwNE90mHV38dkwhCKtejXl7BQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFHcrgztUOfhwQaWHUcEPBio21m3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWYzODIyNTEtYzE0Mi0z OTA0LTg2NWEtYTQ3MTA1YjE1MzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKP3aYugxQOI61CDfG19tjDnxvQIksccoJNbuoVWv1tWXXMdb8Wy nUx+n1AcRSDjWIODTEou49/tpbCNSwpvDjAbAy772HABkYtVT2PdSeIQThVVBsSs qiA6qV04hggAiM8lA+b6Kh88X9Qd1HnHcJ+H67l78f3FoSntjhPZCEZSG9mWhdg6 2/SofpNst033pr30eO+ZPYtxJ5Uk4aKlGKCo0HE6hzXheZGDDdJ1PO+Km/PFfyi5 h2KZQW2dKTixXiixJTTyf1e+65y2/H3aZZyOM5M4mBwO35jGSZbegbYGhCFAM+gA 0PENM5Tgnwd01D1pxKnFmrvVi8NH9NJgCaA= -----END CERTIFICATE-----Generated at Sun Jun 28 21:57:59 2026 by rpki-client