$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85a6f2bf-7ac8-3478-a4c6-95c3fae9bd48.roa File: 85a6f2bf-7ac8-3478-a4c6-95c3fae9bd48.roa (raw, json) Hash identifier: pyZDkBbyXwxTr9BacCbgRuat09Sx5AInKXOnv0b5WPE= Subject key identifier: 0A:6E:42:27:F7:01:8F:D7:32:10:9C:6D:98:2B:09:AC:60:F5:D7:80 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E7A64F28FA5849C1DAF8A8C00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85a6f2bf-7ac8-3478-a4c6-95c3fae9bd48.roa Signing time: Sun 12 Jul 2026 21:00:13 +0000 ROA not before: Sun 12 Jul 2026 21:00:13 +0000 ROA not after: Sat 10 Oct 2026 21:00:13 +0000 asID: 396596 IP address blocks: 2001:500:120::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7a:64:f2:8f:a5:84:9c:1d:af:8a:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 12 21:00:13 2026 GMT Not After : Oct 10 21:00:13 2026 GMT Subject: CN=2f66aa22-17e4-4f60-855c-76c4f6dc163f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ad:88:22:53:bc:c5:18:fd:60:77:64:68:fa: 81:5f:7b:26:c4:85:78:03:7e:91:5c:1d:bb:6d:c3: 9a:ab:ac:e8:b4:8a:76:1e:bc:22:bc:87:cb:2a:1c: 9b:43:12:a5:3a:a8:03:50:d4:02:81:60:02:16:d2: 0c:b3:79:1a:7c:cf:c9:50:5a:a5:3d:69:34:a1:c4: 6e:ed:5c:f7:c8:df:6a:60:85:e5:18:cc:fd:3a:44: c1:6b:70:c4:dc:54:dd:91:f9:bf:ad:de:63:02:2d: b8:d6:ae:e9:5f:8b:89:4e:b2:54:3e:26:cf:e2:f5: 56:9f:c0:f8:3a:fc:4d:ab:5f:f8:4f:61:67:a8:1d: 42:10:91:8b:7d:1b:7f:da:ca:a3:28:5a:63:ee:77: 1d:71:50:ae:79:d2:6a:33:6a:fd:19:f7:d0:82:48: 8a:40:6b:de:be:01:8c:ba:1a:bf:09:d6:69:1f:16: 99:39:f9:c2:c7:0a:59:b4:b9:c6:a2:e2:1c:fa:ed: 4d:11:46:4c:28:c2:0c:14:32:86:d8:66:1d:6e:36: cd:fb:9f:5d:f4:94:b7:52:31:62:74:7f:d0:27:2a: 0c:eb:cf:4d:d1:eb:e1:5b:97:05:31:e7:fb:90:da: 02:e0:f4:bb:91:e2:d5:a5:09:0f:da:cb:40:bf:37: 6c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:6E:42:27:F7:01:8F:D7:32:10:9C:6D:98:2B:09:AC:60:F5:D7:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85a6f2bf-7ac8-3478-a4c6-95c3fae9bd48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:e7:62:f1:7e:75:bf:c9:bc:7a:44:e3:8d:24:08:36:de:ed: 18:ea:13:a2:54:17:f7:90:1d:a1:85:8d:92:6f:34:69:64:d1: ac:5a:c9:58:b4:e6:d9:ea:ee:ec:34:9c:2b:f1:6e:59:b4:f3: 86:03:bf:8a:b7:a8:0f:17:ca:16:64:6f:54:06:8c:28:20:7d: a8:4c:14:07:2f:ab:09:4e:5f:cf:cc:64:98:25:d3:53:88:c7: bd:65:3a:8e:26:20:7d:76:f2:1d:33:bb:69:76:f6:51:38:0c: eb:d4:4e:5c:a2:b2:38:71:8b:c7:30:11:ad:06:07:46:74:6f: f2:eb:6f:df:e7:0a:9f:05:9c:6a:9c:70:1a:e6:bb:4f:12:c9: 44:98:2d:35:c3:1f:53:41:e7:f7:70:f1:e7:cf:c2:5c:39:59: fa:c8:05:3f:c4:c7:56:56:48:1c:11:36:cb:60:cb:65:63:05: 5d:f6:1a:fc:d9:1a:7e:08:4c:24:4a:9d:74:84:16:4b:89:8e: c8:59:8d:dd:6d:20:86:a8:8d:f3:ee:55:e2:11:41:8d:18:03: a5:19:b2:de:3a:6c:50:ff:ed:c7:f9:24:d0:eb:bf:aa:4b:6a: 88:95:69:1f:11:c1:67:36:52:5b:92:81:35:cb:15:78:67:77: 85:f7:f5:b5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE56ZPKPpYScHa+KjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk MmY2NmFhMjItMTdlNC00ZjYwLTg1NWMtNzZjNGY2ZGMxNjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq2IIlO8xRj9YHdkaPqBX3smxIV4A36RXB27 bcOaq6zotIp2HrwivIfLKhybQxKlOqgDUNQCgWACFtIMs3kafM/JUFqlPWk0ocRu 7Vz3yN9qYIXlGMz9OkTBa3DE3FTdkfm/rd5jAi241q7pX4uJTrJUPibP4vVWn8D4 OvxNq1/4T2FnqB1CEJGLfRt/2sqjKFpj7ncdcVCuedJqM2r9GffQgkiKQGvevgGM uhq/CdZpHxaZOfnCxwpZtLnGouIc+u1NEUZMKMIMFDKG2GYdbjbN+59d9JS3UjFi dH/QJyoM689N0evhW5cFMef7kNoC4PS7keLVpQkP2stAvzds5QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFApuQif3AY/XMhCcbZgrCaxg9deAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODVhNmYyYmYtN2FjOC0z NDc4LWE0YzYtOTVjM2ZhZTliZDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAL52LxfnW/ybx6ROONJAg23u0Y6hOiVBf3kB2h hY2SbzRpZNGsWslYtObZ6u7sNJwr8W5ZtPOGA7+Kt6gPF8oWZG9UBowoIH2oTBQH L6sJTl/PzGSYJdNTiMe9ZTqOJiB9dvIdM7tpdvZROAzr1E5corI4cYvHMBGtBgdG dG/y62/f5wqfBZxqnHAa5rtPEslEmC01wx9TQef3cPHnz8JcOVn6yAU/xMdWVkgc ETbLYMtlYwVd9hr82Rp+CEwkSp10hBZLiY7IWY3dbSCGqI3z7lXiEUGNGAOlGbLe OmxQ/+3H+STQ67+qS2qIlWkfEcFnNlJbkoE1yxV4Z3eF9/W1 -----END CERTIFICATE-----Generated at Fri Jul 24 10:56:44 2026 by rpki-client