$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/abb8e1f0-4a50-3121-a8a8-e5bb9e9ada34.roa File: abb8e1f0-4a50-3121-a8a8-e5bb9e9ada34.roa (raw, json) Hash identifier: I3gNo4+Xh9h9PxYC/gFWOcLoqN5+r6W628Upl+sxLQA= Subject key identifier: 3B:F2:F5:95:7A:62:CC:6C:CD:21:7C:CD:65:15:4A:F3:A5:E5:22:C9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E7A64F334F8A244AD29224C80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/abb8e1f0-4a50-3121-a8a8-e5bb9e9ada34.roa Signing time: Sun 12 Jul 2026 21:00:13 +0000 ROA not before: Sun 12 Jul 2026 21:00:13 +0000 ROA not after: Sat 10 Oct 2026 21:00:13 +0000 asID: 396583 IP address blocks: 2001:500:120::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7a:64:f3:34:f8:a2:44:ad:29:22:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 12 21:00:13 2026 GMT Not After : Oct 10 21:00:13 2026 GMT Subject: CN=389a0de3-e741-464b-b090-37703210ef86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b0:94:19:21:dc:47:5c:4e:9d:26:d3:d5:35: bf:31:66:32:60:79:68:e2:d8:71:89:3f:d2:a3:3f: 5c:80:18:4e:ec:e4:88:6c:40:d5:62:2a:ab:fc:a7: 8b:2c:19:0b:ff:97:5e:23:e5:67:38:72:85:18:d6: 09:15:98:c0:5e:f5:7c:93:da:3a:18:87:e5:8c:a9: 1f:b2:2c:ba:c9:13:8b:e5:cb:5b:23:0f:93:52:7b: 61:a4:e6:04:f1:64:a1:cc:e5:5e:cd:17:ca:68:3d: 68:55:a9:d7:d1:e1:46:05:b7:ef:7e:38:51:5b:92: 09:82:91:23:78:e1:06:46:6a:ea:fa:2d:37:d5:d6: 44:95:fc:75:06:1f:67:80:66:e2:be:bd:5a:10:4d: 3c:22:38:fb:cb:77:dd:31:6e:35:fc:06:f9:b0:d7: 03:3d:6a:9e:d1:91:dc:54:78:5a:16:4e:b5:06:a6: 55:f8:0b:56:1f:96:7b:88:7b:61:58:d2:fc:73:14: 58:14:50:b0:15:14:f1:5d:7d:21:da:69:cb:2c:1d: 51:6c:4e:82:5e:16:51:5f:3c:cb:7c:d6:f6:77:d4: 0c:e0:56:53:7a:a5:54:7f:8a:cb:19:ac:aa:d7:fd: 21:93:d7:da:fe:98:48:34:9e:ec:e2:ec:d7:26:3d: 69:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F2:F5:95:7A:62:CC:6C:CD:21:7C:CD:65:15:4A:F3:A5:E5:22:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/abb8e1f0-4a50-3121-a8a8-e5bb9e9ada34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:12:2c:f5:31:5e:f1:3a:2f:5f:93:20:a5:37:f8:eb:3e:0e: b9:d3:20:a4:8c:4c:06:0d:52:6c:61:0d:61:fb:23:7f:66:10: 48:90:d1:b8:ec:a1:5c:81:3a:60:8e:6d:81:8d:0f:2c:39:39: 4a:95:77:ea:a2:17:7f:75:d8:6d:8c:5e:3c:dc:1f:1c:c2:f6: 74:80:cf:6a:3e:16:f0:6f:5b:28:ab:ee:94:2b:d4:09:20:6a: 89:bc:da:7c:2b:97:74:c0:03:67:d6:66:c7:4d:6f:bb:a6:f5: 72:a5:78:f0:47:85:c8:94:c1:aa:e7:3e:75:14:e2:b5:15:f8: 22:f9:1e:d0:df:1d:e4:b1:6d:f2:87:1e:08:ea:90:fe:2c:23: 73:6d:af:50:09:3f:cf:6d:f0:8a:5b:16:36:8f:cd:bb:c3:a2: 24:8a:ac:ec:a9:53:7a:48:b0:b8:33:e0:3e:35:d9:3f:05:87: 51:8e:1c:2f:66:6a:26:46:09:ce:b1:8d:b3:fa:ee:c2:80:5e: 3a:05:2a:ae:8f:a1:fa:c9:87:b9:a9:9e:bc:83:25:f9:77:42: ad:2b:fb:33:18:4c:81:6a:af:a5:6e:f1:52:44:05:5f:dd:f9: 78:a0:6a:82:a4:e2:b5:a7:38:ee:a7:a1:99:35:44:08:62:9c: 97:bd:bc:7b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE56ZPM0+KJErSkiTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk Mzg5YTBkZTMtZTc0MS00NjRiLWIwOTAtMzc3MDMyMTBlZjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrCUGSHcR1xOnSbT1TW/MWYyYHlo4thxiT/S oz9cgBhO7OSIbEDVYiqr/KeLLBkL/5deI+VnOHKFGNYJFZjAXvV8k9o6GIfljKkf siy6yROL5ctbIw+TUnthpOYE8WShzOVezRfKaD1oVanX0eFGBbfvfjhRW5IJgpEj eOEGRmrq+i031dZElfx1Bh9ngGbivr1aEE08Ijj7y3fdMW41/Ab5sNcDPWqe0ZHc VHhaFk61BqZV+AtWH5Z7iHthWNL8cxRYFFCwFRTxXX0h2mnLLB1RbE6CXhZRXzzL fNb2d9QM4FZTeqVUf4rLGayq1/0hk9fa/phINJ7s4uzXJj1pTQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDvy9ZV6YsxszSF8zWUVSvOl5SLJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWJiOGUxZjAtNGE1MC0z MTIxLWE4YTgtZTViYjllOWFkYTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBgEiz1MV7xOi9fkyClN/jrPg650yCkjEwGDVJs YQ1h+yN/ZhBIkNG47KFcgTpgjm2BjQ8sOTlKlXfqohd/ddhtjF483B8cwvZ0gM9q Phbwb1soq+6UK9QJIGqJvNp8K5d0wANn1mbHTW+7pvVypXjwR4XIlMGq5z51FOK1 Ffgi+R7Q3x3ksW3yhx4I6pD+LCNzba9QCT/PbfCKWxY2j827w6IkiqzsqVN6SLC4 M+A+Ndk/BYdRjhwvZmomRgnOsY2z+u7CgF46BSquj6H6yYe5qZ68gyX5d0KtK/sz GEyBaq+lbvFSRAVf3fl4oGqCpOK1pzjup6GZNUQIYpyXvbx7 -----END CERTIFICATE-----Generated at Fri Jul 24 12:08:52 2026 by rpki-client