$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a3e0f0d-8d67-37ef-9cb4-f11a25e42329.roa File: 4a3e0f0d-8d67-37ef-9cb4-f11a25e42329.roa (raw, json) Hash identifier: qPShmCLhWDX7ZxdMdxlj91NvQ6sGtTqGi5YIQCnv3ns= Subject key identifier: 28:D9:93:79:3C:7B:62:96:2B:73:83:AC:FD:74:6E:0D:62:7E:2A:13 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E6C6F6E7C6C87169413EE01C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a3e0f0d-8d67-37ef-9cb4-f11a25e42329.roa Signing time: Tue 07 Jul 2026 21:00:13 +0000 ROA not before: Tue 07 Jul 2026 21:00:13 +0000 ROA not after: Mon 05 Oct 2026 21:00:13 +0000 asID: 397197 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:6f:6e:7c:6c:87:16:94:13:ee:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 7 21:00:13 2026 GMT Not After : Oct 5 21:00:13 2026 GMT Subject: CN=a453aa52-0c19-4085-8f33-5543079a4661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:59:67:f0:5b:89:a6:05:d2:5e:57:e4:06:68: 89:72:09:f7:80:d9:b3:3a:44:c1:17:cb:ff:93:51: 9a:b1:e2:92:53:c8:29:00:a2:2d:bb:a0:21:14:4d: 02:fc:44:ec:8d:2b:27:46:39:72:21:99:34:2d:66: 40:09:6b:90:2f:fc:a7:bf:98:56:ef:69:15:22:81: fa:41:79:e9:cb:20:6f:65:10:90:c3:2a:d9:c1:e3: 1a:71:41:73:3e:78:a4:b1:ec:d3:cd:62:7c:d9:7c: e7:7b:27:46:45:89:78:06:b3:92:19:a1:ff:da:7a: 11:8a:f2:c0:46:60:16:6e:15:b9:65:e6:0a:a8:54: e5:1a:36:1a:c9:6b:a7:6d:3b:1c:33:e2:1c:f0:f9: 21:de:ea:02:dc:bf:00:de:11:6d:a4:14:98:de:a2: 62:0b:d4:4e:22:64:fe:5a:66:35:63:27:2e:ac:5b: ae:01:1f:3b:49:6b:66:ce:b7:e8:d5:12:a2:09:09: b8:78:c1:ad:c8:5c:33:c7:3b:76:d7:37:bd:ac:d6: a2:84:40:ae:a9:f0:6c:eb:31:68:4f:2e:bc:bc:3d: 92:cd:7d:55:07:d6:6f:2d:4d:c6:6e:12:c0:96:36: 01:cc:23:25:45:f5:28:d6:e8:ed:c6:c7:5d:e4:11: c6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D9:93:79:3C:7B:62:96:2B:73:83:AC:FD:74:6E:0D:62:7E:2A:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a3e0f0d-8d67-37ef-9cb4-f11a25e42329.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:82:0a:8e:73:3c:0e:8c:f7:32:18:c9:ad:04:e4:4a:c5:f3: 25:64:17:a4:bc:4c:a2:5a:e9:76:4d:73:97:3e:63:24:fd:8a: 18:c4:4b:c6:31:eb:2e:d8:16:e8:a9:08:49:b9:16:03:74:e6: 1c:d0:c3:14:53:5f:02:de:4e:5e:47:1c:1a:0b:c4:e0:50:06: 1e:1d:39:d5:1d:cd:21:c9:c0:5c:74:15:02:bb:80:3d:e4:d6: ef:9d:b1:61:2a:d3:f7:22:12:05:6d:85:34:e1:b5:41:c6:e8: 89:72:98:cb:1f:56:0a:bb:e9:88:33:ce:1f:0f:28:72:93:da: 75:5f:1d:3e:b1:bc:ad:c7:02:a8:d5:71:c1:ef:4b:24:55:8e: 57:60:95:aa:28:f9:08:b4:cd:42:48:11:91:78:c4:66:dc:05: 46:42:ee:8a:69:cb:36:88:35:e9:f2:71:12:9d:5d:86:19:ac: 35:68:f9:ae:ae:52:52:0a:99:3a:b0:0e:dd:bf:b4:49:bf:e3: 92:cd:17:00:3e:e2:3d:36:65:2e:c9:66:ab:e5:bc:13:87:2d: 20:9f:03:64:6e:47:ca:6e:59:43:c3:9c:df:4d:26:c9:7d:cc: 02:7b:87:94:8b:7d:67:be:eb:cc:f4:5b:b5:01:78:df:cc:55: 51:a3:42:79 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE5sb258bIcWlBPuAcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcwNzIxMDAxM1oXDTI2MTAwNTIxMDAxM1owLzEtMCsGA1UEAxMk YTQ1M2FhNTItMGMxOS00MDg1LThmMzMtNTU0MzA3OWE0NjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFln8FuJpgXSXlfkBmiJcgn3gNmzOkTBF8v/ k1GaseKSU8gpAKItu6AhFE0C/ETsjSsnRjlyIZk0LWZACWuQL/ynv5hW72kVIoH6 QXnpyyBvZRCQwyrZweMacUFzPniksezTzWJ82XzneydGRYl4BrOSGaH/2noRivLA RmAWbhW5ZeYKqFTlGjYayWunbTscM+Ic8Pkh3uoC3L8A3hFtpBSY3qJiC9ROImT+ WmY1YycurFuuAR87SWtmzrfo1RKiCQm4eMGtyFwzxzt21ze9rNaihECuqfBs6zFo Ty68vD2SzX1VB9ZvLU3GbhLAljYBzCMlRfUo1ujtxsdd5BHGZwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCjZk3k8e2KWK3ODrP10bg1ifioTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGEzZTBmMGQtOGQ2Ny0z N2VmLTljYjQtZjExYTI1ZTQyMzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAOggqOczwOjPcyGMmtBORKxfMlZBekvEyiWul2 TXOXPmMk/YoYxEvGMesu2BboqQhJuRYDdOYc0MMUU18C3k5eRxwaC8TgUAYeHTnV Hc0hycBcdBUCu4A95NbvnbFhKtP3IhIFbYU04bVBxuiJcpjLH1YKu+mIM84fDyhy k9p1Xx0+sbytxwKo1XHB70skVY5XYJWqKPkItM1CSBGReMRm3AVGQu6Kacs2iDXp 8nESnV2GGaw1aPmurlJSCpk6sA7dv7RJv+OSzRcAPuI9NmUuyWar5bwThy0gnwNk bkfKbllDw5zfTSbJfcwCe4eUi31nvuvM9Fu1AXjfzFVRo0J5 -----END CERTIFICATE-----Generated at Fri Jul 24 13:04:59 2026 by rpki-client