$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3a7ae8e-ccdb-3aad-86ad-f87eb52aefef.roa File: d3a7ae8e-ccdb-3aad-86ad-f87eb52aefef.roa (raw, json) Hash identifier: KCclpR1Y3eo0IiqkmymHATZiTWIJffMAZL84sDsLaKU= Subject key identifier: 7D:6C:5A:79:1B:A5:6B:9D:85:89:34:DD:AE:D8:4D:11:84:94:47:3F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E640F9D2E2BD5FD4D2D62A280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3a7ae8e-ccdb-3aad-86ad-f87eb52aefef.roa Signing time: Sat 04 Jul 2026 21:00:12 +0000 ROA not before: Sat 04 Jul 2026 21:00:12 +0000 ROA not after: Fri 02 Oct 2026 21:00:12 +0000 asID: 396575 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:64:0f:9d:2e:2b:d5:fd:4d:2d:62:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 4 21:00:12 2026 GMT Not After : Oct 2 21:00:12 2026 GMT Subject: CN=8a681564-92e2-4175-8636-a23a40d73519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fe:b5:80:65:08:a5:76:05:53:2b:b7:00:87: 32:64:cd:97:09:a4:df:fe:85:cd:a1:d9:b8:11:9d: dc:1c:97:37:e4:35:77:32:38:b1:16:00:4a:f3:0a: 00:4d:91:43:61:2f:e2:b4:19:fb:24:33:b0:3a:26: a5:2a:9f:a2:58:14:98:41:81:47:a3:3d:1f:7a:83: 03:53:39:44:c4:92:35:db:92:b3:4a:3f:46:37:f7: 20:38:b3:60:42:1f:e4:74:57:68:c0:63:20:b5:0d: 4d:52:54:14:54:41:3d:89:04:42:11:65:bd:9f:b6: 05:ad:57:a4:e9:d1:96:9d:ab:44:32:2d:7b:57:52: b8:78:cd:ba:0f:96:bf:f5:b0:2b:14:16:f4:ad:6e: 13:ac:53:be:cf:56:6b:8e:31:4d:cf:b1:b6:b3:cd: b9:e4:9f:54:ae:2e:55:c7:42:b6:ec:7c:7e:53:08: f6:0f:4a:83:f7:c4:72:23:fb:d0:c9:03:e1:fb:33: c1:4c:e7:80:f5:1c:63:ff:28:6b:c5:8c:2a:27:2d: de:e4:92:2c:2f:13:1c:85:54:c2:35:75:f8:dc:d8: e9:17:e6:2d:d5:30:76:2b:3d:7b:df:94:27:97:f0: 14:1d:1b:7a:f8:ea:a0:cc:b7:40:53:df:18:66:d5: 28:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:6C:5A:79:1B:A5:6B:9D:85:89:34:DD:AE:D8:4D:11:84:94:47:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3a7ae8e-ccdb-3aad-86ad-f87eb52aefef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:1b:a4:ca:ca:f0:45:2f:45:2f:c3:eb:ba:c1:1b:41:aa:90: f8:44:88:b4:21:e6:31:ab:23:43:f8:77:9a:d6:a5:09:cf:84: c4:ac:54:c4:5f:68:f3:60:d1:66:d2:4e:6f:e8:6a:3c:25:7b: f4:09:1c:0f:b1:a0:d9:5c:d6:1d:ff:52:94:64:dc:35:89:d8: 88:36:cb:dc:8f:43:e3:e0:29:99:39:c3:e2:43:01:5b:29:d0: 6a:d0:db:f8:23:88:a9:41:27:66:6c:a5:99:9d:c2:7f:f4:b0: f6:aa:52:83:1c:b2:33:aa:8e:1d:73:b2:15:e7:6f:9b:e3:d2: 72:0b:99:bb:e8:fb:56:64:6d:6c:de:76:8c:a0:bd:1a:31:1f: e7:55:a5:e8:5e:99:9b:4a:c6:5a:66:ec:d0:c3:60:ab:4f:44: 59:8a:af:15:f8:5b:ca:e6:79:fa:57:0a:54:f2:b2:37:56:b7: d8:9d:75:ee:50:5e:b0:54:59:4b:b8:04:a7:42:39:08:c6:31: 18:2a:d5:b3:38:27:8b:c7:5d:c8:b2:ab:3a:3d:13:a7:fc:46: d1:5e:43:a9:52:d8:e4:39:a4:83:18:b1:e7:77:4a:75:2e:64: b3:2d:30:3f:65:bf:6b:fe:3d:dc:be:20:f1:77:f4:f0:66:9f: 55:cc:c2:31 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE5kD50uK9X9TS1iooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk OGE2ODE1NjQtOTJlMi00MTc1LTg2MzYtYTIzYTQwZDczNTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/61gGUIpXYFUyu3AIcyZM2XCaTf/oXNodm4 EZ3cHJc35DV3MjixFgBK8woATZFDYS/itBn7JDOwOialKp+iWBSYQYFHoz0feoMD UzlExJI125KzSj9GN/cgOLNgQh/kdFdowGMgtQ1NUlQUVEE9iQRCEWW9n7YFrVek 6dGWnatEMi17V1K4eM26D5a/9bArFBb0rW4TrFO+z1ZrjjFNz7G2s8255J9Uri5V x0K27Hx+Uwj2D0qD98RyI/vQyQPh+zPBTOeA9Rxj/yhrxYwqJy3e5JIsLxMchVTC NXX43NjpF+Yt1TB2Kz1735Qnl/AUHRt6+OqgzLdAU98YZtUo4QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFH1sWnkbpWudhYk03a7YTRGElEc/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDNhN2FlOGUtY2NkYi0z YWFkLTg2YWQtZjg3ZWI1MmFlZmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC/G6TKyvBFL0Uvw+u6wRtBqpD4RIi0IeYxqyND +Hea1qUJz4TErFTEX2jzYNFm0k5v6Go8JXv0CRwPsaDZXNYd/1KUZNw1idiINsvc j0Pj4CmZOcPiQwFbKdBq0Nv4I4ipQSdmbKWZncJ/9LD2qlKDHLIzqo4dc7IV52+b 49JyC5m76PtWZG1s3naMoL0aMR/nVaXoXpmbSsZaZuzQw2CrT0RZiq8V+FvK5nn6 VwpU8rI3VrfYnXXuUF6wVFlLuASnQjkIxjEYKtWzOCeLx13Isqs6PROn/EbRXkOp UtjkOaSDGLHnd0p1LmSzLTA/Zb9r/j3cviDxd/TwZp9VzMIx -----END CERTIFICATE-----Generated at Fri Jul 24 06:01:26 2026 by rpki-client