$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af2d6988-7f75-3dfe-8840-3008d86b3dcd.roa File: af2d6988-7f75-3dfe-8840-3008d86b3dcd.roa (raw, json) Hash identifier: ga3hUBVrOuXkdbBTo/C627TRvw3CU9PefXuPg+eYXyg= Subject key identifier: 0B:3B:55:A8:FC:3B:61:72:5D:FF:35:2D:C5:3F:7A:41:43:A0:5F:EB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E6C6F6D302765CAF248CB1500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af2d6988-7f75-3dfe-8840-3008d86b3dcd.roa Signing time: Tue 07 Jul 2026 21:00:13 +0000 ROA not before: Tue 07 Jul 2026 21:00:13 +0000 ROA not after: Mon 05 Oct 2026 21:00:13 +0000 asID: 396616 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:6f:6d:30:27:65:ca:f2:48:cb:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 7 21:00:13 2026 GMT Not After : Oct 5 21:00:13 2026 GMT Subject: CN=aa42063d-40d7-412b-958e-223839664986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5a:7c:8f:51:cd:aa:8c:9c:76:6d:77:01:dd: f8:29:51:8b:69:aa:07:ee:15:0a:43:ab:5f:1a:0d: e5:e5:e4:85:59:b3:75:da:00:0c:f8:11:b8:ad:25: d0:a1:fd:c7:ea:98:6e:b9:30:65:3f:8a:cd:af:3b: 5e:5a:27:e9:a9:b9:e8:62:a2:1e:68:23:3c:70:4d: c0:0a:42:ff:9b:a2:b4:ed:20:54:cc:7e:3d:ca:d4: a9:36:26:07:97:e2:30:fe:5b:d1:87:c7:f3:a6:f5: 27:1f:97:14:58:ed:3a:0c:5b:89:55:ac:60:b8:68: 84:aa:97:67:3b:8e:be:aa:ed:eb:d6:fc:cc:9e:26: fd:03:22:c0:57:55:19:e9:d5:26:3d:ac:c7:84:e9: 83:f3:79:62:dc:ef:c0:6f:cd:22:a9:b1:8b:70:08: 16:8f:17:f8:b0:a2:2a:63:5f:6c:59:88:76:04:d5: a9:cb:ba:ba:2e:e7:bc:63:66:d0:17:d9:61:df:c4: 33:5e:fb:1f:f0:41:52:6e:8b:6d:58:4e:3e:e3:49: b6:61:e6:97:c4:6f:06:7d:98:47:ea:cd:62:87:31: 95:38:9f:68:74:9f:5a:a6:ca:bb:e2:5f:36:98:40: b8:5b:87:7b:84:b2:a7:40:d0:ff:77:6f:d9:32:76: fb:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:3B:55:A8:FC:3B:61:72:5D:FF:35:2D:C5:3F:7A:41:43:A0:5F:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af2d6988-7f75-3dfe-8840-3008d86b3dcd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:1d:67:9f:37:92:a5:ee:74:9c:1d:9d:ae:4e:a9:9d:1a:d6: d3:16:72:cb:20:cf:fe:28:83:9e:c3:76:36:61:1d:29:d0:66: 4b:a5:b0:c2:0b:f0:3f:ed:24:69:73:66:a2:d0:10:d6:08:6b: fb:84:2c:51:ee:4b:be:2f:2b:d1:7a:11:01:7b:a0:7f:a2:22: f0:5f:2b:30:c5:0c:73:dc:c5:a9:27:e5:bd:97:ba:1e:fe:8a: fe:e1:04:b0:fb:20:e8:39:5e:34:c3:3e:79:1b:1d:5a:ac:fd: d9:f9:13:62:b2:9c:9d:ad:61:8d:f2:37:49:b1:0f:54:47:99: dd:38:b0:45:b5:fc:1d:1f:f3:18:9b:25:a4:66:9f:b4:f6:aa: 7e:85:bd:75:43:76:0b:a3:7c:e1:67:da:dd:7e:e2:79:5b:91: 0f:2e:d1:85:22:c6:89:36:46:fb:b7:cb:4e:a0:1f:ec:85:b5: 27:21:12:0b:c4:d8:14:32:78:eb:5c:8f:ed:04:84:4d:bd:7f: ae:64:da:49:be:03:82:f1:37:3b:27:7a:cb:78:26:34:83:b8: c5:0e:7b:2b:6a:67:26:ef:96:f3:cc:9f:d3:5a:93:23:82:19: bc:58:8e:ca:b4:25:e3:2d:de:d1:91:8e:cb:a2:83:1e:c9:0f: a3:87:12:6b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE5sb20wJ2XK8kjLFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcwNzIxMDAxM1oXDTI2MTAwNTIxMDAxM1owLzEtMCsGA1UEAxMk YWE0MjA2M2QtNDBkNy00MTJiLTk1OGUtMjIzODM5NjY0OTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVp8j1HNqoycdm13Ad34KVGLaaoH7hUKQ6tf Gg3l5eSFWbN12gAM+BG4rSXQof3H6phuuTBlP4rNrzteWifpqbnoYqIeaCM8cE3A CkL/m6K07SBUzH49ytSpNiYHl+Iw/lvRh8fzpvUnH5cUWO06DFuJVaxguGiEqpdn O46+qu3r1vzMnib9AyLAV1UZ6dUmPazHhOmD83li3O/Ab80iqbGLcAgWjxf4sKIq Y19sWYh2BNWpy7q6Lue8Y2bQF9lh38QzXvsf8EFSbottWE4+40m2YeaXxG8GfZhH 6s1ihzGVOJ9odJ9apsq74l82mEC4W4d7hLKnQND/d2/ZMnb71QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAs7Vaj8O2FyXf81LcU/ekFDoF/rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWYyZDY5ODgtN2Y3NS0z ZGZlLTg4NDAtMzAwOGQ4NmIzZGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBEHWefN5Kl7nScHZ2uTqmdGtbTFnLLIM/+KIOe w3Y2YR0p0GZLpbDCC/A/7SRpc2ai0BDWCGv7hCxR7ku+LyvRehEBe6B/oiLwXysw xQxz3MWpJ+W9l7oe/or+4QSw+yDoOV40wz55Gx1arP3Z+RNispydrWGN8jdJsQ9U R5ndOLBFtfwdH/MYmyWkZp+09qp+hb11Q3YLo3zhZ9rdfuJ5W5EPLtGFIsaJNkb7 t8tOoB/shbUnIRILxNgUMnjrXI/tBIRNvX+uZNpJvgOC8Tc7J3rLeCY0g7jFDnsr amcm75bzzJ/TWpMjghm8WI7KtCXjLd7RkY7LooMeyQ+jhxJr -----END CERTIFICATE-----Generated at Fri Jul 24 06:40:33 2026 by rpki-client