$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec33225e-9805-3b6e-af99-8ed2dae79218.roa File: ec33225e-9805-3b6e-af99-8ed2dae79218.roa (raw, json) Hash identifier: 28BfSjRe+cRegFJsrzXYrSTtAN+Rss4CUxiRnfZx5Eo= Subject key identifier: 20:25:3F:52:B1:14:FF:2B:AA:61:D2:9E:9F:BB:E5:C7:EE:A1:5B:0C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E779A1E38BC058C747FD66380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec33225e-9805-3b6e-af99-8ed2dae79218.roa Signing time: Sat 11 Jul 2026 21:00:11 +0000 ROA not before: Sat 11 Jul 2026 21:00:11 +0000 ROA not after: Fri 09 Oct 2026 21:00:11 +0000 asID: 396611 IP address blocks: 2001:500:7967::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:77:9a:1e:38:bc:05:8c:74:7f:d6:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 11 21:00:11 2026 GMT Not After : Oct 9 21:00:11 2026 GMT Subject: CN=34f009ea-b43f-42f6-bf6d-c0fda765d041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:95:aa:40:97:3b:2b:96:3b:f9:db:8c:77:37: 2e:40:b6:c1:3b:ec:b4:1d:28:b9:89:c2:99:2d:96: 5f:1d:f6:d9:6d:8d:72:c1:5a:00:d1:2c:78:11:7d: a9:34:26:19:d8:76:13:7a:e3:8e:1c:9d:d4:a2:98: 8f:81:87:7e:8b:46:b6:9f:95:37:32:f9:6f:53:4f: cb:7c:cd:85:be:19:b8:1e:a9:58:83:36:09:d0:84: 85:04:45:1d:6d:2c:2b:5b:01:6f:67:76:4f:c7:17: 1a:e9:4a:9e:c2:3c:20:90:85:9f:9d:9f:08:6d:34: 8b:9b:f3:7a:1a:3c:91:fc:57:78:36:65:91:1d:9f: 47:7e:d8:cf:51:a4:4f:71:b1:97:e6:7d:8b:f0:2e: 9d:18:0a:9d:bf:c2:71:ea:cc:f9:16:af:03:02:b7: 9c:ca:1c:47:f7:2b:39:0d:1a:6c:28:d5:88:69:d5: 89:96:da:e4:29:57:8d:9f:12:ae:2a:65:15:11:80: c8:7e:e8:f1:47:7b:23:08:57:9d:6a:33:57:be:37: 35:b8:cb:50:3c:6d:bb:fe:58:8d:f9:2e:c6:bb:1c: 0e:3e:13:4f:05:5f:92:8b:d8:53:41:eb:b2:6b:16: 33:75:66:ec:44:da:75:92:e1:dd:01:a2:7c:be:09: f4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:25:3F:52:B1:14:FF:2B:AA:61:D2:9E:9F:BB:E5:C7:EE:A1:5B:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec33225e-9805-3b6e-af99-8ed2dae79218.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:e0:fe:c1:53:2f:59:20:8d:92:5b:0e:99:9a:53:cc:bf:2d: 9d:a9:57:34:6d:fb:61:fa:b7:f3:f6:be:50:9e:a1:fb:45:90: 2e:a8:9b:cf:bc:c6:ca:be:db:12:83:1e:e1:58:dd:45:74:66: 0b:84:90:1f:00:a1:de:2d:d8:27:ae:45:3d:40:1a:53:5b:74: b1:72:9b:9c:ab:35:d8:24:e1:a0:d5:3e:ac:92:72:04:e6:f0: 76:6e:9b:bb:ec:51:72:b8:83:c3:1e:b4:49:eb:e0:d9:ea:0d: 63:59:58:83:eb:17:7c:b1:b2:a7:6f:01:8e:cf:35:26:44:fd: 03:41:20:e6:30:f5:26:eb:88:d2:d3:eb:68:bb:61:8d:b6:2f: de:86:da:5d:e6:95:1b:d8:f4:5b:76:2e:cb:f3:02:8d:55:ed: 84:40:47:c2:b6:80:f6:09:7f:b8:22:34:10:a9:c6:28:68:a7: 2c:72:df:a0:95:90:a9:8d:5d:84:48:45:a2:d4:cd:3a:8b:5a: 3a:f5:fa:07:71:2f:95:af:30:21:7e:ca:f2:ac:f9:32:c9:da: 0c:16:4a:1b:55:4d:3e:24:6a:5b:c6:7c:d4:6b:4d:e7:48:2b: d8:a3:80:98:8a:74:2e:e5:2d:84:49:11:f6:a2:3f:3e:fa:10: 9e:9f:43:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE53mh44vAWMdH/WY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcxMTIxMDAxMVoXDTI2MTAwOTIxMDAxMVowLzEtMCsGA1UEAxMk MzRmMDA5ZWEtYjQzZi00MmY2LWJmNmQtYzBmZGE3NjVkMDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpWqQJc7K5Y7+duMdzcuQLbBO+y0HSi5icKZ LZZfHfbZbY1ywVoA0Sx4EX2pNCYZ2HYTeuOOHJ3UopiPgYd+i0a2n5U3MvlvU0/L fM2Fvhm4HqlYgzYJ0ISFBEUdbSwrWwFvZ3ZPxxca6UqewjwgkIWfnZ8IbTSLm/N6 GjyR/Fd4NmWRHZ9HftjPUaRPcbGX5n2L8C6dGAqdv8Jx6sz5Fq8DArecyhxH9ys5 DRpsKNWIadWJltrkKVeNnxKuKmUVEYDIfujxR3sjCFedajNXvjc1uMtQPG27/liN +S7GuxwOPhNPBV+Si9hTQeuyaxYzdWbsRNp1kuHdAaJ8vgn0ZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCAlP1KxFP8rqmHSnp+75cfuoVsMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWMzMzIyNWUtOTgwNS0z YjZlLWFmOTktOGVkMmRhZTc5MjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAHln MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAALg/sFTL1kgjZJbDpmaU8y/LZ2pVzRt+2H6t/P2vlCeoftFkC6o m8+8xsq+2xKDHuFY3UV0ZguEkB8Aod4t2CeuRT1AGlNbdLFym5yrNdgk4aDVPqyS cgTm8HZum7vsUXK4g8MetEnr4NnqDWNZWIPrF3yxsqdvAY7PNSZE/QNBIOYw9Sbr iNLT62i7YY22L96G2l3mlRvY9Ft2LsvzAo1V7YRAR8K2gPYJf7giNBCpxihopyxy 36CVkKmNXYRIRaLUzTqLWjr1+gdxL5WvMCF+yvKs+TLJ2gwWShtVTT4kalvGfNRr TedIK9ijgJiKdC7lLYRJEfaiPz76EJ6fQxE= -----END CERTIFICATE-----Generated at Fri Jul 24 09:45:55 2026 by rpki-client