$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24047a38-5dd2-34d7-a4f0-b7f5a6af961e.roa File: 24047a38-5dd2-34d7-a4f0-b7f5a6af961e.roa (raw, json) Hash identifier: C922T1asiildqkpz24cdXXqvr9Lzd//GnYsCVpxnCNQ= Subject key identifier: 35:10:92:93:43:54:2F:00:EE:BF:B4:90:DD:33:67:EC:DF:B7:10:14 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E640FBDEA869F65DCE8CD3880 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24047a38-5dd2-34d7-a4f0-b7f5a6af961e.roa Signing time: Sat 04 Jul 2026 21:00:12 +0000 ROA not before: Sat 04 Jul 2026 21:00:12 +0000 ROA not after: Fri 02 Oct 2026 21:00:12 +0000 asID: 397198 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:64:0f:bd:ea:86:9f:65:dc:e8:cd:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 4 21:00:12 2026 GMT Not After : Oct 2 21:00:12 2026 GMT Subject: CN=67a8a2a6-deb5-4c86-a33a-761f7d58fce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7d:fa:d8:67:aa:a2:de:0b:b2:01:61:57:1b: 2a:1f:42:e8:ba:4e:3e:f2:b0:78:ba:6d:d1:5e:ea: 3f:d8:0c:56:34:06:db:be:26:24:99:cd:4a:4f:b5: 90:f3:9d:d7:98:fd:fa:3c:a8:07:82:72:1f:51:4a: 05:86:54:b4:e6:f1:a4:f7:03:b3:0a:6e:25:93:ce: e3:d1:28:87:34:98:2c:ba:00:12:67:60:36:9f:8d: b8:b7:3c:34:e0:0a:8f:b3:f6:5f:f7:6e:a7:98:0f: dd:5a:a6:fe:bd:d8:61:82:6b:93:0a:dc:31:a5:5b: 48:78:cc:40:92:75:e8:4d:45:d8:0c:96:5c:7d:08: b9:49:86:75:75:7e:3f:55:ff:c3:a9:37:03:fc:3b: 2e:78:a7:3b:d2:5d:40:ae:15:6a:8b:c3:bd:a4:e2: 85:74:1e:b3:03:3b:09:dd:9f:37:6e:94:69:ee:7f: 6b:4f:40:0e:4c:3f:6f:47:5a:85:c2:19:94:1c:dd: b4:5b:8d:cd:44:bc:dd:aa:4e:c1:e6:c7:1a:4b:10: b7:7a:95:b0:3a:cd:8b:c0:64:b0:14:cc:9f:97:c2: 2a:14:4d:f3:72:77:a7:b3:39:35:af:21:f2:51:01: 1a:e5:ed:b3:3c:76:fe:37:05:3d:c8:c7:20:57:50: bd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:10:92:93:43:54:2F:00:EE:BF:B4:90:DD:33:67:EC:DF:B7:10:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24047a38-5dd2-34d7-a4f0-b7f5a6af961e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:7a:83:46:fd:82:70:17:af:ef:f0:e5:be:97:95:75:57:f7: 2a:86:b3:ad:5b:29:d1:2d:d1:16:fa:dd:bf:4d:bf:80:5c:48: 82:15:73:ae:7a:2f:83:d4:74:84:ab:cd:67:75:48:79:eb:26: f2:97:13:20:04:d0:d5:18:c7:47:f2:59:40:6f:e8:b1:53:1c: d7:15:39:90:5a:e4:6f:32:92:1f:bc:85:73:2c:10:58:af:de: 32:29:8b:ab:5e:22:85:f3:54:df:20:df:aa:3e:4f:c1:0f:72: f9:4a:a5:55:16:78:6c:a5:75:39:5e:f4:5b:0c:4b:21:8f:6b: da:dd:ae:04:99:fe:89:b2:93:b6:73:83:1c:05:bf:2b:09:02: b1:3e:60:9c:79:cf:82:b1:1b:6c:b3:c4:4c:79:5f:83:18:cf: b3:d7:70:2e:99:cd:ff:67:23:99:50:47:9d:8a:ab:cb:bb:62: 5d:ec:e4:b3:7a:d8:b4:c7:84:d7:c4:4f:91:ba:3b:d8:cb:f6: a8:e2:65:72:9e:98:26:c3:a5:81:84:c3:c5:27:31:ed:8f:9c: 43:c9:e7:2b:7f:97:c4:00:3f:08:f6:44:2e:63:56:1b:d7:9b: 90:b6:24:0f:22:d7:d0:92:cd:40:67:93:39:9b:f5:c5:3f:c8: 35:74:59:cf -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE5kD73qhp9l3OjNOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk NjdhOGEyYTYtZGViNS00Yzg2LWEzM2EtNzYxZjdkNThmY2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoH362Geqot4LsgFhVxsqH0Louk4+8rB4um3R Xuo/2AxWNAbbviYkmc1KT7WQ853XmP36PKgHgnIfUUoFhlS05vGk9wOzCm4lk87j 0SiHNJgsugASZ2A2n424tzw04AqPs/Zf926nmA/dWqb+vdhhgmuTCtwxpVtIeMxA knXoTUXYDJZcfQi5SYZ1dX4/Vf/DqTcD/DsueKc70l1ArhVqi8O9pOKFdB6zAzsJ 3Z83bpRp7n9rT0AOTD9vR1qFwhmUHN20W43NRLzdqk7B5scaSxC3epWwOs2LwGSw FMyfl8IqFE3zcnenszk1ryHyUQEa5e2zPHb+NwU9yMcgV1C98QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDUQkpNDVC8A7r+0kN0zZ+zftxAUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjQwNDdhMzgtNWRkMi0z NGQ3LWE0ZjAtYjdmNWE2YWY5NjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAceoNG/YJwF6/v8OW+l5V1V/cqhrOtWynRLdEW +t2/Tb+AXEiCFXOuei+D1HSEq81ndUh56ybylxMgBNDVGMdH8llAb+ixUxzXFTmQ WuRvMpIfvIVzLBBYr94yKYurXiKF81TfIN+qPk/BD3L5SqVVFnhspXU5XvRbDEsh j2va3a4Emf6JspO2c4McBb8rCQKxPmCcec+CsRtss8RMeV+DGM+z13Aumc3/ZyOZ UEediqvLu2Jd7OSzeti0x4TXxE+RujvYy/ao4mVynpgmw6WBhMPFJzHtj5xDyecr f5fEAD8I9kQuY1Yb15uQtiQPItfQks1AZ5M5m/XFP8g1dFnP -----END CERTIFICATE-----Generated at Fri Jul 24 11:07:39 2026 by rpki-client