$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4dd6d20-c751-313e-b4a0-9dbcdc6da34e.roa File: c4dd6d20-c751-313e-b4a0-9dbcdc6da34e.roa (raw, json) Hash identifier: LugtXniVGfNeNmHPDTpeKdDvkVd1rl0pDsBe1/OU+h0= Subject key identifier: BD:57:A8:B6:F8:78:00:E9:04:8B:19:63:AD:E3:15:CE:70:8D:36:76 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E61456DD1D384EC7F14BC5780 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4dd6d20-c751-313e-b4a0-9dbcdc6da34e.roa Signing time: Fri 03 Jul 2026 21:00:11 +0000 ROA not before: Fri 03 Jul 2026 21:00:11 +0000 ROA not after: Thu 01 Oct 2026 21:00:11 +0000 asID: 21313 IP address blocks: 2001:500:124::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:61:45:6d:d1:d3:84:ec:7f:14:bc:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 3 21:00:11 2026 GMT Not After : Oct 1 21:00:11 2026 GMT Subject: CN=75864e0e-4c27-44ff-8a50-2cdf3469cc75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:04:b2:a8:98:8a:c3:87:e5:64:15:c8:e8:12: 72:20:da:5d:79:47:53:4d:b5:ea:40:6b:c9:20:3f: bb:62:41:62:9f:5e:f8:45:97:a7:68:2c:e7:49:cf: 20:6b:61:f5:d9:4d:34:ae:f2:71:85:6c:2f:1f:89: 01:bb:33:b0:f8:f5:91:19:43:69:a8:7a:08:7c:87: da:a4:6a:42:72:b2:f7:da:a5:d6:e2:3c:e9:8a:37: 21:41:3c:dd:65:c5:b3:62:26:dd:e3:16:de:47:e3: fd:62:cf:3b:ed:1e:66:a3:30:3f:11:57:9a:fe:48: b4:3f:bd:d8:07:01:71:2c:8b:e8:ad:d0:3b:54:34: 93:6c:a7:21:1a:b9:a1:a5:02:80:a0:18:d7:53:f5: 38:49:55:11:5d:e6:82:f4:29:f5:2a:95:2c:12:5b: 9e:80:b8:6c:33:21:54:f6:2a:0f:ee:f1:2a:48:83: a0:b8:62:ba:21:12:f7:74:82:db:37:59:f1:08:da: 00:68:f9:83:54:e8:32:54:be:41:1b:21:2c:e1:c8: cc:a6:34:96:78:6d:89:32:fd:4a:67:10:a8:58:2f: cc:f2:ef:e3:48:8f:37:22:9d:ed:5d:6f:49:b7:75: c7:be:d8:89:80:a5:10:20:8c:7e:b7:87:2f:3f:43: eb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:57:A8:B6:F8:78:00:E9:04:8B:19:63:AD:E3:15:CE:70:8D:36:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4dd6d20-c751-313e-b4a0-9dbcdc6da34e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:124::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:f1:5f:e5:85:60:47:c7:56:52:c2:c8:cb:0a:4d:ea:0f:d7: e4:49:22:9a:51:77:7e:8f:3c:34:b9:54:32:7d:eb:63:c5:3f: 13:5e:f5:53:a0:15:29:a8:42:dc:52:d0:08:c2:a3:8d:11:24: f2:ea:54:27:d3:97:ce:10:74:68:f7:f4:82:1a:d2:51:6c:5e: 84:73:91:c5:6e:ae:0c:9b:69:c9:49:f7:23:74:2c:26:6b:d6: 72:e6:41:e9:3b:94:da:0e:6a:0e:03:8d:d0:12:7f:9b:75:b4: 9e:e4:e1:1a:14:7c:16:53:6a:d9:80:86:c9:62:15:e5:a1:17: 7d:ac:78:b2:40:4c:c5:a5:36:2c:54:51:d9:51:70:8e:62:d8: 97:1e:bf:42:cf:fb:30:93:01:00:3a:d1:b3:6b:d7:49:26:f1: 2c:ae:93:71:61:0c:7d:dc:f9:28:da:57:59:15:68:e4:bf:55: 59:03:20:1a:be:21:6b:f4:28:21:65:bd:46:81:f5:41:32:fb: 27:98:75:fc:0c:be:c1:55:99:23:29:eb:ec:20:77:da:6f:15: 36:a5:6c:cd:38:a5:22:c6:a8:48:e4:08:1b:99:a5:e0:5f:fe: 76:69:3b:ec:ad:b0:63:43:0d:c2:5c:df:ee:52:e6:57:3d:c4: e2:39:c9:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5hRW3R04TsfxS8V4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk NzU4NjRlMGUtNGMyNy00NGZmLThhNTAtMmNkZjM0NjljYzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygSyqJiKw4flZBXI6BJyINpdeUdTTbXqQGvJ ID+7YkFin174RZenaCznSc8ga2H12U00rvJxhWwvH4kBuzOw+PWRGUNpqHoIfIfa pGpCcrL32qXW4jzpijchQTzdZcWzYibd4xbeR+P9Ys877R5mozA/EVea/ki0P73Y BwFxLIvordA7VDSTbKchGrmhpQKAoBjXU/U4SVURXeaC9Cn1KpUsEluegLhsMyFU 9ioP7vEqSIOguGK6IRL3dILbN1nxCNoAaPmDVOgyVL5BGyEs4cjMpjSWeG2JMv1K ZxCoWC/M8u/jSI83Ip3tXW9Jt3XHvtiJgKUQIIx+t4cvP0PrPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL1XqLb4eADpBIsZY63jFc5wjTZ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzRkZDZkMjAtYzc1MS0z MTNlLWI0YTAtOWRiY2RjNmRhMzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD3xX+WFYEfHVlLCyMsKTeoP1+RJIppRd36PPDS5VDJ962PFPxNe 9VOgFSmoQtxS0AjCo40RJPLqVCfTl84QdGj39IIa0lFsXoRzkcVurgybaclJ9yN0 LCZr1nLmQek7lNoOag4DjdASf5t1tJ7k4RoUfBZTatmAhsliFeWhF32seLJATMWl NixUUdlRcI5i2Jcev0LP+zCTAQA60bNr10km8Syuk3FhDH3c+SjaV1kVaOS/VVkD IBq+IWv0KCFlvUaB9UEy+yeYdfwMvsFVmSMp6+wgd9pvFTalbM04pSLGqEjkCBuZ peBf/nZpO+ytsGNDDcJc3+5S5lc9xOI5yU4= -----END CERTIFICATE-----Generated at Fri Jul 24 05:21:08 2026 by rpki-client