$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a00a32b6-8c40-3d9c-b81f-c39a58101621.roa File: a00a32b6-8c40-3d9c-b81f-c39a58101621.roa (raw, json) Hash identifier: mVcC9/+Bsq5nUs4X7+vUJfztkv+UskJ7DcAW0d9Jm38= Subject key identifier: E2:77:26:CD:5C:82:EB:59:3B:80:92:0B:00:A8:6C:92:A3:54:AE:85 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E640FA0C959A8FB90492FD280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a00a32b6-8c40-3d9c-b81f-c39a58101621.roa Signing time: Sat 04 Jul 2026 21:00:12 +0000 ROA not before: Sat 04 Jul 2026 21:00:12 +0000 ROA not after: Fri 02 Oct 2026 21:00:12 +0000 asID: 396571 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:64:0f:a0:c9:59:a8:fb:90:49:2f:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 4 21:00:12 2026 GMT Not After : Oct 2 21:00:12 2026 GMT Subject: CN=36e77a04-a345-44de-929e-f9669c623ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a8:b2:b5:88:03:c5:43:bb:01:da:7e:a6:63: 25:5b:fd:52:b5:63:7d:fc:97:f2:66:10:6e:5f:0a: 36:6b:ba:ef:4a:f4:1f:ca:28:3f:49:f0:ce:83:3b: 2c:4a:6e:90:bd:7f:ab:f8:0c:b8:8e:bc:8b:a1:7c: ba:e5:de:e9:e1:c0:71:64:c7:65:bb:3b:cf:fb:39: f0:55:f5:1c:b6:c5:36:1d:ab:7a:4c:5a:e1:fc:60: b2:67:13:50:67:ea:23:a6:80:14:b4:c7:d0:10:b1: 73:9a:5e:ee:a8:7f:97:91:2a:46:92:c0:4a:07:eb: 18:ed:3c:b1:84:25:6a:00:66:d2:89:b9:1b:71:a7: 71:d0:49:4c:61:fb:ed:15:2b:36:04:0d:b9:4a:cb: 63:9c:26:da:cc:42:d0:b7:42:f2:c2:a9:6c:27:58: 6b:4d:5a:ff:b8:44:3c:a5:82:0d:86:2a:08:b1:f8: fe:80:ec:ab:0b:ee:32:d2:04:79:75:79:84:19:65: 86:2b:56:8d:8f:c4:6c:f3:63:7b:18:91:af:84:48: a8:1e:34:18:21:f3:b0:ea:82:76:e1:c4:20:e4:91: 24:5b:f6:f0:6d:6b:aa:b0:96:26:1f:a7:5e:57:21: 52:0c:d0:d1:69:b9:5f:de:8f:f6:c1:65:db:da:d1: f5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:77:26:CD:5C:82:EB:59:3B:80:92:0B:00:A8:6C:92:A3:54:AE:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a00a32b6-8c40-3d9c-b81f-c39a58101621.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:6a:56:aa:14:7a:63:37:a2:a6:4e:42:5d:68:fd:bf:14:b6: 43:bd:b9:b8:fa:cd:de:fa:a2:73:21:e6:89:47:37:93:f9:2c: 6a:24:be:cb:d1:96:a6:b8:ed:3c:17:4e:1f:c3:f8:09:80:d1: c6:9c:b0:6c:ec:42:d8:1e:fb:4b:7c:ce:46:c8:b9:cb:29:fc: 63:25:fe:fb:eb:4b:58:ae:ad:e5:e3:ae:f1:83:b7:f6:12:4d: a4:8c:39:71:06:c2:9c:78:0a:3c:47:cd:8f:e9:08:e0:0b:fd: 5b:be:78:a4:0b:0d:b9:8c:41:c8:4f:ed:a9:fd:02:52:8b:91: d8:20:86:34:d8:16:e5:e8:f1:8d:e2:87:4d:c1:99:35:47:22: 9f:e3:da:c6:5e:19:e5:b2:fe:7f:4d:30:47:3c:f7:26:03:73: d8:e1:d3:e1:cf:0f:66:3c:82:cc:f0:35:05:68:00:1e:ca:32: 9a:60:37:96:f8:d4:3a:ec:ec:ae:bb:21:e5:17:11:12:d5:be: 3a:8e:9c:e4:70:44:ad:d1:30:2e:60:87:0f:4c:0f:7e:bc:dd: 20:f4:33:0b:74:81:b5:71:66:82:0c:57:09:6c:fb:05:01:43: 97:08:11:b4:75:4b:2f:71:d1:ea:95:c8:4b:06:6d:4b:65:6a: 81:1e:87:d0 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE5kD6DJWaj7kEkv0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk MzZlNzdhMDQtYTM0NS00NGRlLTkyOWUtZjk2NjljNjIzZWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6iytYgDxUO7Adp+pmMlW/1StWN9/JfyZhBu Xwo2a7rvSvQfyig/SfDOgzssSm6QvX+r+Ay4jryLoXy65d7p4cBxZMdluzvP+znw VfUctsU2Hat6TFrh/GCyZxNQZ+ojpoAUtMfQELFzml7uqH+XkSpGksBKB+sY7Tyx hCVqAGbSibkbcadx0ElMYfvtFSs2BA25SstjnCbazELQt0LywqlsJ1hrTVr/uEQ8 pYINhioIsfj+gOyrC+4y0gR5dXmEGWWGK1aNj8Rs82N7GJGvhEioHjQYIfOw6oJ2 4cQg5JEkW/bwbWuqsJYmH6deVyFSDNDRablf3o/2wWXb2tH1mQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOJ3Js1cgutZO4CSCwCobJKjVK6FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTAwYTMyYjYtOGM0MC0z ZDljLWI4MWYtYzM5YTU4MTAxNjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCUalaqFHpjN6KmTkJdaP2/FLZDvbm4+s3e+qJz IeaJRzeT+SxqJL7L0ZamuO08F04fw/gJgNHGnLBs7ELYHvtLfM5GyLnLKfxjJf77 60tYrq3l467xg7f2Ek2kjDlxBsKceAo8R82P6QjgC/1bvnikCw25jEHIT+2p/QJS i5HYIIY02Bbl6PGN4odNwZk1RyKf49rGXhnlsv5/TTBHPPcmA3PY4dPhzw9mPILM 8DUFaAAeyjKaYDeW+NQ67OyuuyHlFxES1b46jpzkcESt0TAuYIcPTA9+vN0g9DML dIG1cWaCDFcJbPsFAUOXCBG0dUsvcdHqlchLBm1LZWqBHofQ -----END CERTIFICATE-----Generated at Fri Jul 24 15:08:08 2026 by rpki-client