$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/688aedef-bfda-3362-a5e8-1ce611e44196.roa File: 688aedef-bfda-3362-a5e8-1ce611e44196.roa (raw, json) Hash identifier: To/KJbe7X5UuFWfP51knrTiZuwPnxOueUGm+F6NBuQA= Subject key identifier: D7:1E:9E:94:AB:27:0C:EF:3B:F9:FF:0F:3E:1D:DA:5A:B4:73:07:50 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E534F44ED45E3440C76A4DC00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/688aedef-bfda-3362-a5e8-1ce611e44196.roa Signing time: Sun 28 Jun 2026 21:00:11 +0000 ROA not before: Sun 28 Jun 2026 21:00:11 +0000 ROA not after: Sat 26 Sep 2026 21:00:11 +0000 asID: 396578 IP address blocks: 2001:500:133::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:53:4f:44:ed:45:e3:44:0c:76:a4:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 28 21:00:11 2026 GMT Not After : Sep 26 21:00:11 2026 GMT Subject: CN=a4a57ff4-406c-42e7-93e1-a8123793e931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:95:40:6d:50:88:1d:6e:64:54:b3:91:a7:1d: 90:a4:79:2e:bf:4c:55:18:49:1b:fe:75:5b:54:67: e0:a8:2b:8a:03:4f:d2:0c:e6:4b:5e:e1:09:f8:60: 65:a4:f3:28:9e:38:df:68:9c:a2:8d:98:53:62:31: d6:02:31:89:1d:df:4d:17:c2:5d:44:d6:d9:7a:e1: 4c:9c:b6:aa:b3:a5:17:e3:43:35:c6:d9:36:a4:7e: 7c:ca:d6:d5:ac:9f:ac:dd:44:75:20:9e:4d:15:7a: e0:76:92:b4:99:cf:22:46:0c:75:7b:c5:9a:2b:c7: 5e:a2:d6:fd:55:c4:4f:c5:c9:af:92:a7:6d:00:61: fc:e0:bb:76:ac:dc:1b:da:43:88:7e:d8:6d:9f:1b: ad:fa:4e:61:8b:9c:c9:5a:5b:be:14:a3:8e:1f:10: 2d:6c:5d:54:89:0c:70:e9:7a:be:fb:78:74:52:09: 64:1c:1a:05:cc:e7:b5:0d:11:92:c8:0b:27:98:fe: ca:dd:35:7e:b5:93:dd:a2:03:3f:72:d2:87:69:19: 5a:be:27:ff:a1:48:d6:7f:6a:32:0f:76:c9:63:5a: c9:77:d7:35:b4:07:bf:b9:c5:a3:92:56:73:fe:4a: 4b:46:07:5d:c8:bb:32:55:75:ce:c1:ff:50:8f:1e: 1c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:1E:9E:94:AB:27:0C:EF:3B:F9:FF:0F:3E:1D:DA:5A:B4:73:07:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/688aedef-bfda-3362-a5e8-1ce611e44196.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:9d:af:28:c5:37:d5:1b:22:4e:a5:78:8b:51:25:d6:14:02: 28:9e:80:c3:16:da:34:d7:05:4f:f3:ea:95:22:40:6d:06:8f: 63:95:41:da:3f:96:e1:55:1c:91:86:15:15:b1:d4:2e:c1:96: 8d:00:12:aa:cd:17:fe:e1:d4:40:d3:b8:cf:06:01:65:a1:9c: 60:f3:9f:39:ad:9b:78:5c:f1:f6:34:5f:b3:f5:c2:64:bd:cb: bd:ba:97:7f:ee:e1:24:96:45:4b:69:7c:0e:a7:60:39:f9:2f: 06:c8:71:7f:e1:f6:58:9c:1a:8b:bb:c3:45:ab:d0:fc:a8:31: 17:cd:1e:62:92:22:64:cc:55:09:7d:7f:ff:e5:9b:f5:92:cd: 13:f4:e9:64:a9:f8:dd:52:9c:9a:9e:71:78:ec:ed:46:70:ce: 05:37:dc:47:6c:38:2d:d6:ba:91:81:6d:5d:b7:39:28:41:b2: 23:28:51:70:1f:fd:08:34:30:8c:c9:fd:45:ac:b2:69:25:c0: fa:17:ee:24:ba:a4:0e:af:09:ce:10:6e:da:06:cb:dc:c5:11: 56:31:dc:2d:97:a0:50:cd:80:1a:f1:45:4a:b0:d7:b2:fe:96: 8a:46:93:dc:ea:5d:04:f7:9b:7b:d0:00:d0:ad:aa:4a:6b:a8: 28:85:a8:79 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5TT0TtReNEDHak3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDYyODIxMDAxMVoXDTI2MDkyNjIxMDAxMVowLzEtMCsGA1UEAxMk YTRhNTdmZjQtNDA2Yy00MmU3LTkzZTEtYTgxMjM3OTNlOTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpVAbVCIHW5kVLORpx2QpHkuv0xVGEkb/nVb VGfgqCuKA0/SDOZLXuEJ+GBlpPMonjjfaJyijZhTYjHWAjGJHd9NF8JdRNbZeuFM nLaqs6UX40M1xtk2pH58ytbVrJ+s3UR1IJ5NFXrgdpK0mc8iRgx1e8WaK8deotb9 VcRPxcmvkqdtAGH84Lt2rNwb2kOIfthtnxut+k5hi5zJWlu+FKOOHxAtbF1UiQxw 6Xq++3h0UglkHBoFzOe1DRGSyAsnmP7K3TV+tZPdogM/ctKHaRlavif/oUjWf2oy D3bJY1rJd9c1tAe/ucWjklZz/kpLRgddyLsyVXXOwf9Qjx4cHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNcenpSrJwzvO/n/Dz4d2lq0cwdQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjg4YWVkZWYtYmZkYS0z MzYyLWE1ZTgtMWNlNjExZTQ0MTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG6dryjFN9UbIk6leItRJdYUAiiegMMW2jTXBU/z6pUiQG0Gj2OV Qdo/luFVHJGGFRWx1C7Blo0AEqrNF/7h1EDTuM8GAWWhnGDznzmtm3hc8fY0X7P1 wmS9y726l3/u4SSWRUtpfA6nYDn5LwbIcX/h9licGou7w0Wr0PyoMRfNHmKSImTM VQl9f//lm/WSzRP06WSp+N1SnJqecXjs7UZwzgU33EdsOC3WupGBbV23OShBsiMo UXAf/Qg0MIzJ/UWssmklwPoX7iS6pA6vCc4QbtoGy9zFEVYx3C2XoFDNgBrxRUqw 17L+lopGk9zqXQT3m3vQANCtqkprqCiFqHk= -----END CERTIFICATE-----Generated at Fri Jul 24 10:09:35 2026 by rpki-client