$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db97597e-4798-3bae-9cc7-ada88d299f0a.roa File: db97597e-4798-3bae-9cc7-ada88d299f0a.roa (raw, json) Hash identifier: qQ9IYV3pc8Yn20iPskfIL3e07k5rAURPQwfkFvlFl9w= Subject key identifier: 86:10:49:38:25:C6:9E:78:7B:F1:12:26:BC:F8:31:23:8C:6E:70:6F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E4DB9E5F3D28175EC3F1A0B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db97597e-4798-3bae-9cc7-ada88d299f0a.roa Signing time: Fri 26 Jun 2026 21:00:11 +0000 ROA not before: Fri 26 Jun 2026 21:00:11 +0000 ROA not after: Thu 24 Sep 2026 21:00:11 +0000 asID: 36626 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4d:b9:e5:f3:d2:81:75:ec:3f:1a:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 26 21:00:11 2026 GMT Not After : Sep 24 21:00:11 2026 GMT Subject: CN=6d3f69ff-aff4-487f-b6f0-527500cb7aa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:67:b3:f4:2b:46:20:90:c1:77:57:f3:c4:05: e3:c3:1e:b1:a3:f8:98:4b:0c:11:70:01:bd:18:32: c5:42:b5:c8:fb:0b:ec:1f:10:87:6b:c9:91:0f:d4: 64:37:bc:84:ce:01:ab:22:74:ea:a8:9f:77:5d:ff: b0:cd:e8:24:d0:2e:48:02:9e:84:34:4f:9b:c1:2d: 06:43:b2:73:b1:08:d8:21:7a:be:01:82:3a:62:19: 6e:47:26:67:12:0c:26:17:0c:86:ff:93:43:04:c8: bd:32:7b:ec:0b:c6:dd:f9:e1:3d:61:9a:04:de:2b: 6a:c7:9c:40:9e:73:b8:68:49:77:a0:30:4c:c3:5b: 30:90:15:1e:eb:75:10:1e:8c:09:bc:29:00:72:ee: e4:d9:a2:52:8a:a3:ab:72:45:33:01:8f:78:29:58: bc:ef:c3:2e:e3:c8:06:10:ae:ce:15:01:d2:9d:bb: 23:db:a0:b1:d2:53:af:79:ad:fb:5e:41:f9:46:0b: 9b:dd:43:4b:29:e2:8c:85:33:27:c5:78:82:a4:77: fa:6f:5a:5f:35:1b:b2:68:36:36:15:59:95:d0:2a: 9c:83:ac:4f:27:5f:c6:40:89:5e:83:b1:e6:1a:36: 98:31:88:45:31:73:20:8b:85:2c:a8:3b:fe:47:f0: 18:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:10:49:38:25:C6:9E:78:7B:F1:12:26:BC:F8:31:23:8C:6E:70:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db97597e-4798-3bae-9cc7-ada88d299f0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:5f:02:e4:71:8a:71:96:1a:3d:22:5b:15:ea:f7:fa:56:f9: 50:2b:7b:86:d6:3e:4b:4d:ea:cf:68:21:19:55:ba:33:76:d5: f3:ec:ae:50:04:4b:79:9d:50:e4:6c:c0:34:e3:b1:75:aa:77: e4:81:68:78:5f:58:f3:90:7a:4d:a0:9c:8f:99:20:7b:2f:88: 65:f9:ce:0b:57:dc:b0:a3:05:dc:0e:ef:57:21:3f:fd:7c:fc: 06:cc:86:66:1c:5e:46:21:d2:29:96:5f:00:8f:69:2b:f6:40: 85:a0:dd:7f:3e:a4:c7:44:b0:0f:57:51:a1:16:50:4d:5e:d7: 9f:60:18:7f:7f:3a:70:fa:a4:f9:57:32:a1:b3:9d:3b:d8:87: b3:52:a1:9f:db:a9:43:73:bb:f7:9c:b8:00:d8:69:b0:e7:04: 93:c3:5f:5f:71:73:c2:11:02:08:1d:6b:26:5e:44:8b:4f:28: 87:97:1a:75:60:f4:86:7d:f8:7e:6f:c8:c9:d0:db:ea:de:5c: 27:fb:17:73:77:68:87:63:c5:0d:e6:97:ca:58:25:c4:d7:f3: c4:b2:73:08:ca:19:c2:7e:51:f6:29:3a:6b:69:52:89:3d:70: de:90:3c:98:cb:8e:a2:25:b1:9c:f3:1c:38:6e:72:5c:05:37: c3:b7:5c:08 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5NueXz0oF17D8aC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDYyNjIxMDAxMVoXDTI2MDkyNDIxMDAxMVowLzEtMCsGA1UEAxMk NmQzZjY5ZmYtYWZmNC00ODdmLWI2ZjAtNTI3NTAwY2I3YWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2ez9CtGIJDBd1fzxAXjwx6xo/iYSwwRcAG9 GDLFQrXI+wvsHxCHa8mRD9RkN7yEzgGrInTqqJ93Xf+wzegk0C5IAp6ENE+bwS0G Q7JzsQjYIXq+AYI6YhluRyZnEgwmFwyG/5NDBMi9MnvsC8bd+eE9YZoE3itqx5xA nnO4aEl3oDBMw1swkBUe63UQHowJvCkAcu7k2aJSiqOrckUzAY94KVi878Mu48gG EK7OFQHSnbsj26Cx0lOvea37XkH5Rgub3UNLKeKMhTMnxXiCpHf6b1pfNRuyaDY2 FVmV0Cqcg6xPJ1/GQIleg7HmGjaYMYhFMXMgi4UsqDv+R/AYBQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIYQSTglxp54e/ESJrz4MSOMbnBvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGI5NzU5N2UtNDc5OC0z YmFlLTljYzctYWRhODhkMjk5ZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIZfAuRxinGWGj0iWxXq9/pW+VAre4bWPktN6s9oIRlVujN21fPs rlAES3mdUORswDTjsXWqd+SBaHhfWPOQek2gnI+ZIHsviGX5zgtX3LCjBdwO71ch P/18/AbMhmYcXkYh0imWXwCPaSv2QIWg3X8+pMdEsA9XUaEWUE1e159gGH9/OnD6 pPlXMqGznTvYh7NSoZ/bqUNzu/ecuADYabDnBJPDX19xc8IRAggdayZeRItPKIeX GnVg9IZ9+H5vyMnQ2+reXCf7F3N3aIdjxQ3ml8pYJcTX88SycwjKGcJ+UfYpOmtp Uok9cN6QPJjLjqIlsZzzHDhuclwFN8O3XAg= -----END CERTIFICATE-----Generated at Sun Jun 28 20:37:44 2026 by rpki-client