$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3856a0d5-8bf5-3295-933c-bffa295f1ab5.roa File: 3856a0d5-8bf5-3295-933c-bffa295f1ab5.roa (raw, json) Hash identifier: cdoB3ASh8Ap9d8Ux9LejXm8RU555mpjyT4ez1yRC81Y= Subject key identifier: 97:DE:7E:DA:CF:EE:E6:EB:A1:7E:A4:44:2A:C0:AC:D3:DA:08:2D:A8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E640F9BE3773A7453133EF860 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3856a0d5-8bf5-3295-933c-bffa295f1ab5.roa Signing time: Sat 04 Jul 2026 21:00:12 +0000 ROA not before: Sat 04 Jul 2026 21:00:12 +0000 ROA not after: Fri 02 Oct 2026 21:00:12 +0000 asID: 397204 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:64:0f:9b:e3:77:3a:74:53:13:3e:f8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 4 21:00:12 2026 GMT Not After : Oct 2 21:00:12 2026 GMT Subject: CN=1cfddb8e-890c-4456-8013-85f538dc31a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ba:5f:bc:d3:06:90:4c:cf:32:19:2e:03:4b: fa:87:27:38:6c:3a:ee:61:97:ac:3f:96:d2:39:3a: 94:97:f6:d2:53:f6:99:34:fa:5f:96:69:13:2a:e5: 53:61:20:1b:80:da:da:73:d2:02:73:5c:22:ff:b5: 1b:07:9a:2b:ec:ae:f2:53:8a:6e:a2:0e:21:00:d3: 70:ea:d2:04:95:70:b8:73:12:6c:90:71:c2:de:80: 8b:56:49:ed:dd:a9:eb:e1:2c:57:03:ec:69:cd:aa: 24:ae:f0:e0:fe:2b:46:e7:8b:fd:43:a1:02:48:79: 37:1d:da:c1:88:c6:48:cf:92:95:2c:48:e9:d1:04: 29:ec:23:b5:a6:94:70:db:83:ad:8b:8b:9b:fe:55: bd:2a:42:59:51:14:5d:9d:54:33:69:c5:8b:74:50: 2e:55:6b:86:e0:e1:69:7f:cc:9b:67:d6:c5:16:4a: 2d:32:29:c1:2a:c0:94:2b:a0:d1:0b:6e:d5:dd:91: 98:5e:af:9b:3f:ad:a9:5a:56:7c:7e:24:a9:f7:70: 97:fd:96:c5:c6:3c:6d:dc:84:ff:b2:58:13:77:78: d3:a4:3d:59:2d:85:dd:49:d3:4e:df:9d:64:f2:19: 12:d8:42:e2:c7:ab:db:58:ae:45:9a:d6:f0:1a:58: c7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:DE:7E:DA:CF:EE:E6:EB:A1:7E:A4:44:2A:C0:AC:D3:DA:08:2D:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3856a0d5-8bf5-3295-933c-bffa295f1ab5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:a3:c7:93:43:7a:1a:70:88:e6:66:fc:23:a7:13:06:bc:d2: 74:67:39:ac:11:50:6c:c0:94:7c:b1:83:c3:bf:c9:f2:47:76: 92:31:e1:c5:a3:83:b9:67:ac:58:a8:5d:73:5b:6b:e3:d4:33: 2d:8f:bb:69:a1:a2:69:c4:1b:aa:22:83:51:66:88:cd:cc:66: cc:0c:72:dd:55:08:25:d7:20:98:f1:3e:68:64:f7:d3:e0:90: e8:38:46:8b:ec:7d:51:31:b6:33:37:5d:a2:f6:86:94:82:4a: dc:47:62:f2:0a:12:da:31:89:08:a3:08:55:39:94:77:0d:05: ef:8c:7a:0e:4e:fe:8a:3f:95:3a:cd:a6:ae:74:2b:1f:72:a2: db:e3:66:52:8e:77:64:1b:1f:fb:2e:3b:ab:b4:ce:41:cc:f8: 3f:c1:08:c9:e9:6a:2b:30:a3:e7:c9:a4:71:83:96:67:24:91: 8a:bb:24:97:ef:5a:f8:4e:5e:6c:87:92:b9:73:17:26:fb:48: ec:29:50:c2:7a:6b:e3:19:b3:f6:db:ae:9f:1c:a5:43:59:77: b3:a5:7e:74:be:f2:a1:43:e7:9c:71:6a:9a:45:b0:6e:83:65: 21:f0:8c:8f:e3:74:b5:b9:20:e7:16:6d:77:1b:ce:dd:9f:18: f9:47:47:4c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE5kD5vjdzp0UxM++GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk MWNmZGRiOGUtODkwYy00NDU2LTgwMTMtODVmNTM4ZGMzMWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbpfvNMGkEzPMhkuA0v6hyc4bDruYZesP5bS OTqUl/bSU/aZNPpflmkTKuVTYSAbgNrac9ICc1wi/7UbB5or7K7yU4puog4hANNw 6tIElXC4cxJskHHC3oCLVknt3anr4SxXA+xpzaokrvDg/itG54v9Q6ECSHk3HdrB iMZIz5KVLEjp0QQp7CO1ppRw24Oti4ub/lW9KkJZURRdnVQzacWLdFAuVWuG4OFp f8ybZ9bFFkotMinBKsCUK6DRC27V3ZGYXq+bP62pWlZ8fiSp93CX/ZbFxjxt3IT/ slgTd3jTpD1ZLYXdSdNO351k8hkS2ELix6vbWK5FmtbwGljH7wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJfeftrP7ubroX6kRCrArNPaCC2oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzg1NmEwZDUtOGJmNS0z Mjk1LTkzM2MtYmZmYTI5NWYxYWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBso8eTQ3oacIjmZvwjpxMGvNJ0ZzmsEVBswJR8 sYPDv8nyR3aSMeHFo4O5Z6xYqF1zW2vj1DMtj7tpoaJpxBuqIoNRZojNzGbMDHLd VQgl1yCY8T5oZPfT4JDoOEaL7H1RMbYzN12i9oaUgkrcR2LyChLaMYkIowhVOZR3 DQXvjHoOTv6KP5U6zaaudCsfcqLb42ZSjndkGx/7LjurtM5BzPg/wQjJ6WorMKPn yaRxg5ZnJJGKuySX71r4Tl5sh5K5cxcm+0jsKVDCemvjGbP2266fHKVDWXezpX50 vvKhQ+eccWqaRbBug2Uh8IyP43S1uSDnFm13G87dnxj5R0dM -----END CERTIFICATE-----Generated at Fri Jul 24 09:08:47 2026 by rpki-client