$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddba9cb4-5115-3def-9f55-b91890dc3020.roa File: ddba9cb4-5115-3def-9f55-b91890dc3020.roa (raw, json) Hash identifier: mPXihOjEo0TaOq/k9LGQt7WcL2j7xBspnPtP2q8PNmE= Subject key identifier: 1E:61:A1:B9:45:0F:A1:47:01:FA:00:80:F3:95:FA:15:39:6B:29:34 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E640FA9C3E22B5BD5A5391500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddba9cb4-5115-3def-9f55-b91890dc3020.roa Signing time: Sat 04 Jul 2026 21:00:12 +0000 ROA not before: Sat 04 Jul 2026 21:00:12 +0000 ROA not after: Fri 02 Oct 2026 21:00:12 +0000 asID: 396561 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:64:0f:a9:c3:e2:2b:5b:d5:a5:39:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 4 21:00:12 2026 GMT Not After : Oct 2 21:00:12 2026 GMT Subject: CN=af9d4f73-7e14-4e92-9d88-8c2884dbb0fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:06:07:1a:92:7f:d0:6e:47:e0:22:95:a8:ae: 23:c9:f1:03:07:f4:fd:88:95:0b:03:d4:9c:57:bd: c3:04:b8:be:17:f0:8d:6a:51:76:ad:61:ad:57:9c: 34:a6:44:6e:54:36:73:94:d1:d0:2e:ac:fe:71:1c: 0c:d8:2a:21:e7:2a:51:09:1d:d7:6f:fb:94:2a:31: 06:de:f6:98:bd:7e:74:c8:7f:1c:7c:92:4e:32:4b: 1d:f0:c9:23:dc:18:a1:7c:92:3d:ea:77:a1:ba:89: a8:d9:25:c4:09:51:75:33:a2:71:22:a0:ae:7b:48: e4:ec:23:45:42:c5:19:d1:0b:33:3f:6f:bd:6f:6a: e7:99:d6:ae:55:74:3e:f6:68:dc:0c:b0:ce:12:a2: f7:d2:82:f9:a1:45:b6:be:d4:eb:90:6b:b6:b6:7e: cb:e9:2b:a6:0e:7e:c3:f3:1e:fb:92:3c:df:64:61: ab:77:24:1f:57:40:23:45:58:3d:b0:4a:08:38:c6: f0:cd:b8:1f:fc:ef:cd:0c:33:60:3a:45:15:ce:1b: 1b:c4:c9:46:5e:8b:88:b3:ad:61:c2:4a:a4:dd:de: b0:80:88:c3:6b:fe:da:10:b0:17:4c:3c:11:51:ce: 53:44:c2:f1:63:0b:07:0b:09:96:7c:41:04:f0:cd: 2a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:61:A1:B9:45:0F:A1:47:01:FA:00:80:F3:95:FA:15:39:6B:29:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddba9cb4-5115-3def-9f55-b91890dc3020.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:59:26:dc:a2:f1:09:77:02:13:c5:1c:1b:11:7a:bd:b4:0e: 4d:6c:f2:33:09:bb:d2:22:f8:b6:a2:77:3f:ec:c8:9b:cd:93: ec:77:b0:06:b3:54:9a:2b:cf:95:72:53:4a:44:78:05:88:9c: 00:29:f1:2b:a8:e8:07:4d:bb:cb:b6:72:fb:43:52:aa:9c:1e: 51:04:bc:08:a0:d9:60:5f:d0:2f:8e:e5:7c:07:5f:6d:a6:aa: 24:72:f6:85:a0:27:50:66:28:ea:c9:d3:ab:d0:5e:00:0d:d9: f4:23:c0:ef:ff:25:e7:7a:ad:14:93:f4:ac:6a:60:a2:94:84: cc:9b:df:00:ca:a8:a8:35:64:ba:a1:6b:db:1f:3a:4c:25:a8: a1:c6:07:35:d0:4a:6c:89:68:60:df:6c:91:d1:95:f9:bf:66: 02:64:85:15:3c:33:e4:0d:9a:1a:08:ab:84:fb:19:52:8e:59: f0:d0:8b:12:d9:12:0e:68:0b:66:0e:64:f3:fc:35:ad:f8:21: ce:8f:95:35:c0:66:27:88:79:a3:95:ac:74:0b:04:42:e1:6c: fd:1c:cd:57:d0:e6:b1:b7:5e:7f:f8:fb:e6:fa:dd:51:db:5a: d7:86:f3:97:1f:e9:c3:61:86:7b:f2:71:d9:ff:73:e1:7d:24: 74:42:ae:92 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE5kD6nD4itb1aU5FQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk YWY5ZDRmNzMtN2UxNC00ZTkyLTlkODgtOGMyODg0ZGJiMGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAYHGpJ/0G5H4CKVqK4jyfEDB/T9iJULA9Sc V73DBLi+F/CNalF2rWGtV5w0pkRuVDZzlNHQLqz+cRwM2Coh5ypRCR3Xb/uUKjEG 3vaYvX50yH8cfJJOMksd8Mkj3BihfJI96nehuomo2SXECVF1M6JxIqCue0jk7CNF QsUZ0QszP2+9b2rnmdauVXQ+9mjcDLDOEqL30oL5oUW2vtTrkGu2tn7L6SumDn7D 8x77kjzfZGGrdyQfV0AjRVg9sEoIOMbwzbgf/O/NDDNgOkUVzhsbxMlGXouIs61h wkqk3d6wgIjDa/7aELAXTDwRUc5TRMLxYwsHCwmWfEEE8M0qEwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFB5hoblFD6FHAfoAgPOV+hU5ayk0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGRiYTljYjQtNTExNS0z ZGVmLTlmNTUtYjkxODkwZGMzMDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB5WSbcovEJdwITxRwbEXq9tA5NbPIzCbvSIvi2 onc/7MibzZPsd7AGs1SaK8+VclNKRHgFiJwAKfErqOgHTbvLtnL7Q1KqnB5RBLwI oNlgX9AvjuV8B19tpqokcvaFoCdQZijqydOr0F4ADdn0I8Dv/yXneq0Uk/SsamCi lITMm98AyqioNWS6oWvbHzpMJaihxgc10EpsiWhg32yR0ZX5v2YCZIUVPDPkDZoa CKuE+xlSjlnw0IsS2RIOaAtmDmTz/DWt+CHOj5U1wGYniHmjlax0CwRC4Wz9HM1X 0Oaxt15/+Pvm+t1R21rXhvOXH+nDYYZ78nHZ/3PhfSR0Qq6S -----END CERTIFICATE-----Generated at Fri Jul 24 09:12:48 2026 by rpki-client