$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3df0a727-ea87-348a-8f6f-059ba07bec81.roa File: 3df0a727-ea87-348a-8f6f-059ba07bec81.roa (raw, json) Hash identifier: /4xdqSg0XGtXAYLaU9Ntn92KS0A9canBHnkNjaRC2H8= Subject key identifier: 12:F0:82:82:BF:E3:5D:5D:C4:70:67:7F:C5:0F:9B:28:9E:01:AA:89 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E6C6F6E87D67075E369215B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3df0a727-ea87-348a-8f6f-059ba07bec81.roa Signing time: Tue 07 Jul 2026 21:00:13 +0000 ROA not before: Tue 07 Jul 2026 21:00:13 +0000 ROA not after: Mon 05 Oct 2026 21:00:13 +0000 asID: 396590 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:6f:6e:87:d6:70:75:e3:69:21:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 7 21:00:13 2026 GMT Not After : Oct 5 21:00:13 2026 GMT Subject: CN=787c1142-b765-4da0-a5b3-a28250933203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b9:77:43:f6:9c:19:86:85:50:38:ef:e1:d0: bb:d8:0b:b4:bd:26:63:ac:af:36:75:de:cd:6b:7f: 1b:58:c4:cc:08:d9:ed:93:06:59:39:ed:1a:7c:b7: 57:72:a7:25:7c:f0:88:e6:f1:cf:77:19:11:6d:f6: 6c:9c:24:82:45:43:32:b4:57:7c:11:f2:36:03:a7: 1c:12:94:ec:fc:54:0f:ec:9c:5c:b7:18:ad:f1:5d: 4c:3d:c3:d2:bc:c7:a4:e0:6e:88:2d:d6:86:57:92: 6c:e5:83:c0:cd:a1:f8:ae:8b:82:9b:5a:19:29:f2: dc:31:67:5b:34:73:58:00:ac:81:c6:21:1c:95:c9: f5:0f:8c:a8:c9:8d:b4:1a:bd:16:da:ba:ca:c0:b1: 7c:54:f0:28:9a:ad:01:7d:32:6a:0a:01:b7:f4:b6: c0:5f:3d:1a:12:d1:50:da:1c:73:13:25:2a:07:0f: e3:0d:5d:5d:f3:ab:e8:58:c2:7f:d2:8b:a5:79:c8: d0:d1:a5:f1:71:e1:0d:2d:0a:ff:55:61:09:82:ac: da:14:15:b5:3d:8b:14:94:7d:66:9b:33:c9:5c:c2: 4d:9b:ec:36:58:5f:93:bd:e6:82:6b:f2:b1:47:da: 11:97:bc:96:31:b7:aa:ae:61:1d:ac:37:e6:b9:03: 73:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F0:82:82:BF:E3:5D:5D:C4:70:67:7F:C5:0F:9B:28:9E:01:AA:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3df0a727-ea87-348a-8f6f-059ba07bec81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:94:32:9c:8a:28:56:cf:d0:29:60:ac:7f:f2:aa:f1:0e:5c: 77:70:f7:06:91:b6:0f:8f:b4:01:b5:c7:e7:73:a3:1c:91:3e: 40:d6:21:bd:68:91:d6:46:06:9a:23:6e:1e:08:89:9b:c2:43: f8:95:41:fa:5a:34:b9:f9:15:e8:ba:d4:5d:ef:e3:4a:27:01: bc:a3:7c:d4:b2:2d:58:46:57:48:c9:e8:c2:6a:3d:3d:e3:50: b2:85:7f:54:9b:7c:8b:4c:da:ca:a2:d5:1a:60:4e:76:68:d3: b1:7b:54:92:58:09:df:4f:9b:c3:7f:26:01:4f:1c:60:10:fe: 88:e4:5f:7f:f7:29:45:d0:5c:ea:14:d1:4f:ee:85:a9:b9:c0: 1b:57:9b:3e:9b:00:41:f2:49:0d:69:bc:d2:68:6e:a4:66:bb: 83:7e:26:39:3d:e9:cf:30:07:ab:08:f9:e7:ee:3d:e2:1c:e8: ff:9b:b4:12:d8:18:eb:1b:65:08:9e:2a:76:95:d9:ab:77:4f: ed:69:f0:3c:5f:6e:32:9d:90:73:3f:e1:a6:d0:f4:ea:7b:58: 0a:bf:5d:a5:ac:ba:30:25:7f:60:db:02:36:81:78:96:59:96: 10:23:9f:e2:33:64:02:9e:21:44:c3:9f:84:93:5f:03:62:e1: 37:4a:02:73 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE5sb26H1nB142khW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcwNzIxMDAxM1oXDTI2MTAwNTIxMDAxM1owLzEtMCsGA1UEAxMk Nzg3YzExNDItYjc2NS00ZGEwLWE1YjMtYTI4MjUwOTMzMjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbl3Q/acGYaFUDjv4dC72Au0vSZjrK82dd7N a38bWMTMCNntkwZZOe0afLdXcqclfPCI5vHPdxkRbfZsnCSCRUMytFd8EfI2A6cc EpTs/FQP7Jxctxit8V1MPcPSvMek4G6ILdaGV5Js5YPAzaH4rouCm1oZKfLcMWdb NHNYAKyBxiEclcn1D4yoyY20Gr0W2rrKwLF8VPAomq0BfTJqCgG39LbAXz0aEtFQ 2hxzEyUqBw/jDV1d86voWMJ/0oulecjQ0aXxceENLQr/VWEJgqzaFBW1PYsUlH1m mzPJXMJNm+w2WF+TveaCa/KxR9oRl7yWMbeqrmEdrDfmuQNzDwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBLwgoK/411dxHBnf8UPmyieAaqJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2RmMGE3MjctZWE4Ny0z NDhhLThmNmYtMDU5YmEwN2JlYzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQASlDKciihWz9ApYKx/8qrxDlx3cPcGkbYPj7QB tcfnc6MckT5A1iG9aJHWRgaaI24eCImbwkP4lUH6WjS5+RXoutRd7+NKJwG8o3zU si1YRldIyejCaj0941CyhX9Um3yLTNrKotUaYE52aNOxe1SSWAnfT5vDfyYBTxxg EP6I5F9/9ylF0FzqFNFP7oWpucAbV5s+mwBB8kkNabzSaG6kZruDfiY5PenPMAer CPnn7j3iHOj/m7QS2BjrG2UInip2ldmrd0/tafA8X24ynZBzP+Gm0PTqe1gKv12l rLowJX9g2wI2gXiWWZYQI5/iM2QCniFEw5+Ek18DYuE3SgJz -----END CERTIFICATE-----Generated at Fri Jul 24 16:54:26 2026 by rpki-client