$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/84db4c5a-a983-3f25-880d-e7b259a1e26e.roa File: 84db4c5a-a983-3f25-880d-e7b259a1e26e.roa (raw, json) Hash identifier: kDI7aGBL7sjE+TILssi1J2IXJs5eObM11o3pTKqGx8A= Subject key identifier: 16:92:7E:44:60:F4:9C:1C:36:4E:DA:B0:7F:32:50:59:B3:BD:1B:DB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E640FBF878EBCD840EFB7E258 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/84db4c5a-a983-3f25-880d-e7b259a1e26e.roa Signing time: Sat 04 Jul 2026 21:00:12 +0000 ROA not before: Sat 04 Jul 2026 21:00:12 +0000 ROA not after: Fri 02 Oct 2026 21:00:12 +0000 asID: 396573 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:64:0f:bf:87:8e:bc:d8:40:ef:b7:e2:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 4 21:00:12 2026 GMT Not After : Oct 2 21:00:12 2026 GMT Subject: CN=3bf6ef0f-3f8e-4d23-8f11-1db2c81203ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:04:e0:18:0e:7c:10:0e:3f:88:55:9f:43:b0: 77:9e:f6:6a:14:5f:cc:43:c1:05:7d:18:94:07:02: 12:21:01:f8:3a:c6:cc:86:96:7f:18:08:89:9f:aa: 16:80:96:de:10:e8:2f:64:a9:2b:62:24:47:9b:55: 1f:ae:97:b5:b4:e9:5f:02:dd:c4:4d:32:9c:51:1d: 6f:1f:68:69:5f:38:c5:56:fa:fc:e9:a9:0f:9a:6f: c7:c7:bc:fc:9b:1e:f1:c1:ec:fc:9d:1f:c8:8f:44: 99:56:5e:7c:51:60:22:39:9a:f0:86:a4:9f:d9:d9: db:7e:f1:53:45:31:7c:f9:f6:72:93:e7:cd:9e:93: f7:12:88:2b:6f:1e:66:13:5e:e6:ce:81:72:32:13: b3:e7:5e:cb:74:58:d3:e1:d6:cd:84:84:ca:20:c3: d4:bb:5f:1e:62:d0:50:08:e6:13:4d:b2:08:f6:ca: 85:67:33:5d:e4:4a:0f:4e:15:ac:61:ba:03:cf:a6: 30:46:45:f8:c5:50:65:39:86:c9:5a:ba:84:f3:1b: f9:b6:b9:ed:86:d8:3c:30:be:49:2c:54:75:52:de: 8b:d2:87:71:b0:42:a0:33:22:9a:e4:42:3b:84:f3: 2f:49:c0:e8:50:1d:e0:eb:d3:19:af:25:bd:96:81: 83:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:92:7E:44:60:F4:9C:1C:36:4E:DA:B0:7F:32:50:59:B3:BD:1B:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/84db4c5a-a983-3f25-880d-e7b259a1e26e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:db:e0:75:29:d4:9d:94:74:69:06:b5:18:ac:23:f6:d0:19: 3f:e1:2f:64:f6:ce:de:bf:4b:cf:4a:c1:10:73:77:35:9b:45: 64:6a:21:ab:a3:80:b0:c9:f9:5c:32:3a:46:c1:88:0a:3e:57: df:6f:ac:d9:13:9d:b7:5b:c7:0f:e8:0b:15:fe:6c:bc:7b:b5: 77:1e:e0:c8:5c:3b:70:04:40:55:fe:3a:87:df:3c:a2:c2:a5: e9:b2:85:8f:a9:a9:7e:17:fa:16:41:b5:d5:30:b1:53:ce:0f: 25:24:fa:16:ae:20:b8:ca:65:bf:bd:13:2f:b5:54:f3:f7:b7: 23:9f:a3:a6:8e:ed:8d:e1:3a:27:3f:b8:53:19:fb:06:4e:28: 2f:92:59:c0:32:58:05:74:64:82:a5:fb:c6:c7:0f:01:fa:85: 25:3d:c3:ef:bb:dc:aa:14:f0:02:d8:7b:10:9b:30:99:09:ea: d3:fd:e2:5c:e0:8d:35:6f:fb:4b:3f:49:f7:08:4b:fb:bb:20: 91:84:92:c7:11:ef:52:71:c2:03:d1:55:54:dd:08:96:79:6f: ca:07:39:b4:d1:ad:ea:a5:81:d3:23:fa:f5:3d:f0:86:9e:bc: 28:b3:fe:d2:fc:52:57:9c:47:80:ef:27:76:ea:3c:f0:be:3f: 7c:c8:3e:9f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE5kD7+HjrzYQO+34lgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk M2JmNmVmMGYtM2Y4ZS00ZDIzLThmMTEtMWRiMmM4MTIwM2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoATgGA58EA4/iFWfQ7B3nvZqFF/MQ8EFfRiU BwISIQH4OsbMhpZ/GAiJn6oWgJbeEOgvZKkrYiRHm1Ufrpe1tOlfAt3ETTKcUR1v H2hpXzjFVvr86akPmm/Hx7z8mx7xwez8nR/Ij0SZVl58UWAiOZrwhqSf2dnbfvFT RTF8+fZyk+fNnpP3Eogrbx5mE17mzoFyMhOz517LdFjT4dbNhITKIMPUu18eYtBQ COYTTbII9sqFZzNd5EoPThWsYboDz6YwRkX4xVBlOYbJWrqE8xv5trnthtg8ML5J LFR1Ut6L0odxsEKgMyKa5EI7hPMvScDoUB3g69MZryW9loGDSwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBaSfkRg9JwcNk7asH8yUFmzvRvbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODRkYjRjNWEtYTk4My0z ZjI1LTg4MGQtZTdiMjU5YTFlMjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBz2+B1KdSdlHRpBrUYrCP20Bk/4S9k9s7ev0vP SsEQc3c1m0VkaiGro4CwyflcMjpGwYgKPlffb6zZE523W8cP6AsV/my8e7V3HuDI XDtwBEBV/jqH3zyiwqXpsoWPqal+F/oWQbXVMLFTzg8lJPoWriC4ymW/vRMvtVTz 97cjn6Omju2N4TonP7hTGfsGTigvklnAMlgFdGSCpfvGxw8B+oUlPcPvu9yqFPAC 2HsQmzCZCerT/eJc4I01b/tLP0n3CEv7uyCRhJLHEe9SccID0VVU3QiWeW/KBzm0 0a3qpYHTI/r1PfCGnrwos/7S/FJXnEeA7yd26jzwvj98yD6f -----END CERTIFICATE-----Generated at Fri Jul 24 12:43:34 2026 by rpki-client