$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf574deb-c06f-3222-8798-bb3c35a92563.roa File: cf574deb-c06f-3222-8798-bb3c35a92563.roa (raw, json) Hash identifier: Z2tY7ScWkkvcAvcRzu0uNn+7Z4c+Nli7mCJipp+5Qlo= Subject key identifier: 1A:F8:C2:1E:C1:88:7E:D3:2B:9A:1A:51:72:D2:E1:65:B3:DD:6F:D1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E6145739797ECF4A927CC6280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf574deb-c06f-3222-8798-bb3c35a92563.roa Signing time: Fri 03 Jul 2026 21:00:11 +0000 ROA not before: Fri 03 Jul 2026 21:00:11 +0000 ROA not after: Thu 01 Oct 2026 21:00:11 +0000 asID: 396599 IP address blocks: 2001:500:124::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:61:45:73:97:97:ec:f4:a9:27:cc:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 3 21:00:11 2026 GMT Not After : Oct 1 21:00:11 2026 GMT Subject: CN=486f849a-3e24-4ab3-9f83-3105689d5fcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9d:ac:06:9b:18:bc:95:d8:21:37:eb:84:19: 4d:72:34:c4:ef:e1:fc:d3:2e:d6:5b:89:da:f5:d2: 8a:50:c3:41:6a:ef:69:67:10:14:25:19:d3:0d:9d: 73:c6:4c:c9:f2:fd:bf:cc:44:38:e0:7b:6f:8a:eb: 3d:e6:1d:fb:18:8a:32:d8:06:1e:68:5b:76:e7:3d: b4:ca:89:98:58:21:0d:bf:15:2f:17:27:a3:52:fe: 5e:e1:16:66:a3:6a:a1:07:9b:8e:3f:71:7a:e8:ac: 1e:24:d6:65:81:86:04:ce:cd:c1:28:58:01:6e:76: a1:97:8c:25:2b:92:05:11:4c:48:76:5d:b1:9c:36: c3:0b:30:67:ca:93:e4:34:b1:d4:17:cd:bd:79:02: c6:14:be:94:28:e6:1e:47:d9:3d:f5:33:94:55:97: 6d:75:21:16:8f:7c:f0:6b:bd:df:c1:68:2c:63:06: b9:9e:60:ed:b3:6b:6c:67:97:44:23:74:4d:d6:a0: 8e:67:cc:d4:49:3a:3d:ad:de:36:03:4f:37:3e:c5: a3:1e:88:7d:7f:35:a9:20:1a:6e:e2:b9:43:f7:74: 61:63:92:d8:a1:c9:75:8f:2e:d3:35:76:00:5a:cf: e2:4e:ba:4e:c0:15:62:e4:a1:e3:f1:10:eb:14:cf: ae:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F8:C2:1E:C1:88:7E:D3:2B:9A:1A:51:72:D2:E1:65:B3:DD:6F:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf574deb-c06f-3222-8798-bb3c35a92563.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:124::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:7b:90:97:81:1a:80:97:bb:41:e7:5e:c5:ef:47:1b:7b:ba: 33:c3:bd:1b:8d:7d:dc:4e:66:00:db:12:19:01:48:1c:d1:56: 44:1f:ea:93:6b:82:72:39:0c:3a:97:48:64:97:f7:bf:96:ff: 17:3a:d9:d5:55:86:32:f4:f4:b5:a7:10:e3:ab:73:d2:3f:5c: 6a:f3:0b:1b:15:cd:52:3e:3b:98:b1:2c:a3:a7:3f:c0:d6:c0: 70:b9:ac:47:3b:17:f2:69:b2:92:79:9b:9b:12:19:5c:9c:e2: ec:7f:49:b1:0e:c4:80:9e:15:3b:6a:fe:9f:e6:f6:72:11:17: d5:1f:18:cf:ec:e7:66:24:a1:1a:8e:ff:50:7b:f0:b9:2b:ae: 35:72:d1:55:72:d4:84:42:38:f2:c3:d1:88:8c:91:1b:ff:39: 59:e6:f8:59:88:90:29:f9:d2:dc:9a:ca:2d:f8:22:57:11:3c: 9f:33:43:78:86:e0:54:9c:c7:c1:09:85:35:b8:be:6a:88:25: 0c:ef:03:31:0f:e6:fd:9e:fb:2b:6e:2b:84:6f:0f:ee:3a:82: 6f:8f:44:e3:df:ac:fb:c5:81:ca:ed:93:3d:b9:03:c6:ef:2b: 58:66:7e:dc:98:3b:6e:5f:9d:39:60:7d:0e:fc:54:2f:df:6c: 04:70:c0:06 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5hRXOXl+z0qSfMYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk NDg2Zjg0OWEtM2UyNC00YWIzLTlmODMtMzEwNTY4OWQ1ZmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAip2sBpsYvJXYITfrhBlNcjTE7+H80y7WW4na 9dKKUMNBau9pZxAUJRnTDZ1zxkzJ8v2/zEQ44Htvius95h37GIoy2AYeaFt25z20 yomYWCENvxUvFyejUv5e4RZmo2qhB5uOP3F66KweJNZlgYYEzs3BKFgBbnahl4wl K5IFEUxIdl2xnDbDCzBnypPkNLHUF829eQLGFL6UKOYeR9k99TOUVZdtdSEWj3zw a73fwWgsYwa5nmDts2tsZ5dEI3RN1qCOZ8zUSTo9rd42A083PsWjHoh9fzWpIBpu 4rlD93RhY5LYocl1jy7TNXYAWs/iTrpOwBVi5KHj8RDrFM+uIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBr4wh7BiH7TK5oaUXLS4WWz3W/RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2Y1NzRkZWItYzA2Zi0z MjIyLTg3OTgtYmIzYzM1YTkyNTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHl7kJeBGoCXu0HnXsXvRxt7ujPDvRuNfdxOZgDbEhkBSBzRVkQf 6pNrgnI5DDqXSGSX97+W/xc62dVVhjL09LWnEOOrc9I/XGrzCxsVzVI+O5ixLKOn P8DWwHC5rEc7F/JpspJ5m5sSGVyc4ux/SbEOxICeFTtq/p/m9nIRF9UfGM/s52Yk oRqO/1B78LkrrjVy0VVy1IRCOPLD0YiMkRv/OVnm+FmIkCn50tyayi34IlcRPJ8z Q3iG4FScx8EJhTW4vmqIJQzvAzEP5v2e+ytuK4RvD+46gm+PROPfrPvFgcrtkz25 A8bvK1hmftyYO25fnTlgfQ78VC/fbARwwAY= -----END CERTIFICATE-----Generated at Fri Jul 24 14:03:56 2026 by rpki-client