$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f5f97c0b-771c-3b41-8018-e77191c9f988.roa File: f5f97c0b-771c-3b41-8018-e77191c9f988.roa (raw, json) Hash identifier: KxNlm2GBXp0UAq1Bd3JwrT8al6dl8lWb072azqL8a8s= Subject key identifier: E0:3F:6A:29:A4:39:9D:13:FD:87:4F:13:86:02:8D:7C:2E:95:77:58 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E4DB9E3061B26EEB2247C0A80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f5f97c0b-771c-3b41-8018-e77191c9f988.roa Signing time: Fri 26 Jun 2026 21:00:11 +0000 ROA not before: Fri 26 Jun 2026 21:00:11 +0000 ROA not after: Thu 24 Sep 2026 21:00:11 +0000 asID: 397198 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4d:b9:e3:06:1b:26:ee:b2:24:7c:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 26 21:00:11 2026 GMT Not After : Sep 24 21:00:11 2026 GMT Subject: CN=3cd7b808-1c1d-4b43-8e5f-27e6f87458a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7e:30:21:3a:61:fa:f8:bf:a4:e5:df:99:b3: e7:1f:0c:5f:b5:9e:a8:98:cb:0f:d5:06:7f:2b:7f: 05:fb:b9:bf:dd:9f:5a:35:88:8d:84:09:ee:ca:a2: 9a:05:35:1e:62:19:06:73:52:0e:e7:83:3f:b1:0b: b2:c8:00:9c:f7:a5:e0:3a:4e:26:e8:85:29:bf:bd: cf:24:e6:f2:e3:11:60:73:05:a1:53:4a:a2:77:1a: d8:82:08:ae:3e:a5:f1:55:c5:7f:2b:5b:19:9f:d2: e6:51:ad:93:d5:38:59:3e:12:a3:27:09:a2:c1:4f: 0f:fd:bf:56:c5:14:8f:46:a3:0f:e7:2d:b5:67:c4: 78:71:ea:90:38:46:59:2b:e0:35:a0:f2:8e:cb:d9: de:df:b5:46:a5:ec:6c:b9:32:40:72:7d:f8:8e:24: 9b:61:5c:7f:cd:e7:7a:5f:02:22:21:50:dd:77:0f: a3:0a:3e:38:fd:f2:36:82:1b:36:b4:a0:22:01:80: 6d:5b:8f:b4:6b:15:82:73:7b:0d:29:b2:d5:44:84: 05:5a:ac:07:63:93:76:cd:da:44:8c:79:62:43:d0: d0:3d:77:6d:11:67:67:88:4a:6e:d7:4a:39:1f:7f: 7d:c6:51:10:d1:02:81:01:c9:03:01:01:9e:89:ec: 81:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:3F:6A:29:A4:39:9D:13:FD:87:4F:13:86:02:8D:7C:2E:95:77:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f5f97c0b-771c-3b41-8018-e77191c9f988.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:1e:5d:c8:56:70:db:16:2c:f1:e0:8e:50:6b:04:c6:6d:15: cd:ec:82:f0:12:b9:f8:df:ab:77:1e:84:2d:29:c6:ae:32:df: 12:5a:1d:ae:b3:af:94:ab:91:e8:97:fb:35:04:6d:16:35:75: 61:ff:39:cf:cd:68:b1:59:c1:c1:87:0c:92:f7:13:69:b2:de: e8:7e:07:38:a0:af:51:9a:7b:20:92:7f:58:dc:da:40:5d:ae: c2:59:41:7c:e2:b6:7f:68:e2:0a:49:9e:19:f8:e2:8c:e0:e1: f9:ff:69:6b:4a:4a:c0:d1:c3:ee:e8:33:5d:5c:d4:f0:d4:ac: 8f:54:df:61:8d:d7:cd:9b:ce:cf:54:88:9a:24:79:af:b3:8d: bd:b7:df:3a:f6:24:37:81:f9:a1:10:6d:8e:c9:d0:f3:51:87: e0:10:87:72:07:2c:70:27:51:23:d6:19:55:cd:6a:39:31:b1: 2e:65:40:63:83:c8:3d:02:5e:76:37:a0:8e:8e:d9:82:00:66: ce:af:03:08:91:a5:66:ac:0f:36:76:78:89:8b:96:85:6a:d3: 4b:4f:77:09:14:7d:c7:54:d2:63:14:32:91:d0:ed:10:af:2c: 67:82:21:a8:d7:8c:49:a3:a7:08:39:f4:c2:25:4c:87:73:09: 63:95:9e:b1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5NueMGGybusiR8CoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDYyNjIxMDAxMVoXDTI2MDkyNDIxMDAxMVowLzEtMCsGA1UEAxMk M2NkN2I4MDgtMWMxZC00YjQzLThlNWYtMjdlNmY4NzQ1OGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq34wITph+vi/pOXfmbPnHwxftZ6omMsP1QZ/ K38F+7m/3Z9aNYiNhAnuyqKaBTUeYhkGc1IO54M/sQuyyACc96XgOk4m6IUpv73P JOby4xFgcwWhU0qidxrYggiuPqXxVcV/K1sZn9LmUa2T1ThZPhKjJwmiwU8P/b9W xRSPRqMP5y21Z8R4ceqQOEZZK+A1oPKOy9ne37VGpexsuTJAcn34jiSbYVx/zed6 XwIiIVDddw+jCj44/fI2ghs2tKAiAYBtW4+0axWCc3sNKbLVRIQFWqwHY5N2zdpE jHliQ9DQPXdtEWdniEpu10o5H399xlEQ0QKBAckDAQGeieyB9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOA/aimkOZ0T/YdPE4YCjXwulXdYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjVmOTdjMGItNzcxYy0z YjQxLTgwMTgtZTc3MTkxYzlmOTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEEeXchWcNsWLPHgjlBrBMZtFc3sgvASufjfq3cehC0pxq4y3xJa Ha6zr5SrkeiX+zUEbRY1dWH/Oc/NaLFZwcGHDJL3E2my3uh+Bzigr1GaeyCSf1jc 2kBdrsJZQXzitn9o4gpJnhn44ozg4fn/aWtKSsDRw+7oM11c1PDUrI9U32GN182b zs9UiJokea+zjb233zr2JDeB+aEQbY7J0PNRh+AQh3IHLHAnUSPWGVXNajkxsS5l QGODyD0CXnY3oI6O2YIAZs6vAwiRpWasDzZ2eImLloVq00tPdwkUfcdU0mMUMpHQ 7RCvLGeCIajXjEmjpwg59MIlTIdzCWOVnrE= -----END CERTIFICATE-----Generated at Sun Jun 28 19:34:27 2026 by rpki-client