$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89d13b8d-db81-31a1-8d2d-78a80928c40a.roa File: 89d13b8d-db81-31a1-8d2d-78a80928c40a.roa (raw, json) Hash identifier: Q08yhR4WgWwGNUsJl8lkO77jBWWi8R5bETD9jB7UzBw= Subject key identifier: 47:4C:4D:1F:6A:A6:88:46:CC:B7:F5:01:8F:C6:49:74:57:E2:EE:15 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E640FA52FD9E2C75023234480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89d13b8d-db81-31a1-8d2d-78a80928c40a.roa Signing time: Sat 04 Jul 2026 21:00:12 +0000 ROA not before: Sat 04 Jul 2026 21:00:12 +0000 ROA not after: Fri 02 Oct 2026 21:00:12 +0000 asID: 396602 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:64:0f:a5:2f:d9:e2:c7:50:23:23:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 4 21:00:12 2026 GMT Not After : Oct 2 21:00:12 2026 GMT Subject: CN=2eff5746-2529-4ff1-ad57-dac43b7816e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:56:fa:30:78:f9:0c:61:d4:74:5f:71:67:6c: 68:9e:c0:a4:c8:c0:e6:66:1b:e6:75:c8:a4:4c:ab: 24:da:00:76:89:06:0f:ec:d3:c4:99:04:1a:78:32: 8b:2a:10:20:6b:ea:de:05:cc:46:b6:5f:42:d0:54: 4c:50:e8:70:7d:0c:74:9a:81:93:49:e1:a9:4a:b8: 8a:2e:64:68:8c:ed:78:48:36:b5:67:89:39:59:99: 2d:52:a8:fc:bb:cc:0c:55:47:33:1c:19:d2:65:60: ff:b7:bf:28:de:85:d1:4a:8e:92:a9:e2:18:d4:f3: 2a:0e:af:e6:6f:b5:f9:e1:00:39:c1:43:27:8e:b3: 07:e0:4a:98:ed:83:dc:0b:c1:76:18:bd:7a:07:20: b5:31:c9:a6:0e:f5:b5:33:8d:3e:9f:71:d3:2e:54: d8:7e:1b:5c:31:34:4a:30:b1:c5:a6:a6:42:ca:7c: 5a:4f:96:3a:05:8b:b2:69:d6:9a:03:2c:77:ad:22: 5e:06:cd:2f:34:14:eb:1f:85:75:77:9c:50:45:46: 34:9d:1a:4a:d0:5b:4f:62:31:c9:d1:bc:9f:c3:3c: 4c:c5:f7:98:ce:e6:b2:ca:de:d9:8a:d5:30:0f:40: 2a:b6:f6:82:10:e6:c4:da:26:ea:4c:ea:65:d0:22: e2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:4C:4D:1F:6A:A6:88:46:CC:B7:F5:01:8F:C6:49:74:57:E2:EE:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89d13b8d-db81-31a1-8d2d-78a80928c40a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:50:ef:93:ba:e7:10:ac:79:78:7e:7b:43:26:8a:d1:64:ba: 9a:05:2f:b8:14:92:3e:e6:6a:7b:25:ae:bb:6e:cf:0b:c9:77: 08:8d:22:02:a3:4f:02:df:05:8f:51:02:07:92:6d:7d:e8:47: 3e:4a:38:a0:ca:31:28:ea:ea:3b:5e:71:3b:b2:86:c3:37:92: 03:6e:fe:77:78:f2:85:a3:35:d6:8d:26:da:66:2c:51:e9:5e: 00:37:5f:03:b6:aa:0c:7b:8a:36:b7:cf:6a:9d:1b:26:92:e7: 8e:dd:a2:b8:e8:ef:e3:6d:5f:7b:85:8f:0d:2a:52:0b:58:8f: b1:02:25:ff:ea:81:88:bd:88:0a:f1:09:c4:7d:96:7b:ec:85: 38:3d:93:a1:3c:28:7e:ac:7f:18:97:53:8b:1a:d5:b8:9e:8e: cc:80:f2:71:6d:8c:2d:1e:c7:8c:34:39:da:38:45:68:34:34: 95:53:8c:9d:28:b4:7e:51:ed:91:9d:97:38:9d:ec:44:ad:89: 27:57:70:39:8e:af:8d:b2:f5:65:d7:19:68:9b:77:e3:43:8d: 0e:5b:72:0d:af:96:0b:47:ef:38:b2:59:84:4d:f3:fa:ff:5e: a7:00:95:cd:53:5d:8a:9a:37:2e:7c:85:b1:c4:03:19:8c:cc: c2:f7:20:86 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE5kD6Uv2eLHUCMjRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk MmVmZjU3NDYtMjUyOS00ZmYxLWFkNTctZGFjNDNiNzgxNmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFb6MHj5DGHUdF9xZ2xonsCkyMDmZhvmdcik TKsk2gB2iQYP7NPEmQQaeDKLKhAga+reBcxGtl9C0FRMUOhwfQx0moGTSeGpSriK LmRojO14SDa1Z4k5WZktUqj8u8wMVUczHBnSZWD/t78o3oXRSo6SqeIY1PMqDq/m b7X54QA5wUMnjrMH4EqY7YPcC8F2GL16ByC1McmmDvW1M40+n3HTLlTYfhtcMTRK MLHFpqZCynxaT5Y6BYuyadaaAyx3rSJeBs0vNBTrH4V1d5xQRUY0nRpK0FtPYjHJ 0byfwzxMxfeYzuayyt7ZitUwD0AqtvaCEObE2ibqTOpl0CLi6QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEdMTR9qpohGzLf1AY/GSXRX4u4VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODlkMTNiOGQtZGI4MS0z MWExLThkMmQtNzhhODA5MjhjNDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA1UO+TuucQrHl4fntDJorRZLqaBS+4FJI+5mp7 Ja67bs8LyXcIjSICo08C3wWPUQIHkm196Ec+SjigyjEo6uo7XnE7sobDN5IDbv53 ePKFozXWjSbaZixR6V4AN18DtqoMe4o2t89qnRsmkueO3aK46O/jbV97hY8NKlIL WI+xAiX/6oGIvYgK8QnEfZZ77IU4PZOhPCh+rH8Yl1OLGtW4no7MgPJxbYwtHseM NDnaOEVoNDSVU4ydKLR+Ue2RnZc4nexErYknV3A5jq+NsvVl1xlom3fjQ40OW3IN r5YLR+84slmETfP6/16nAJXNU12KmjcufIWxxAMZjMzC9yCG -----END CERTIFICATE-----Generated at Fri Jul 24 11:24:28 2026 by rpki-client