$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3109d2e8-cfb4-3ffb-9fbf-56a58eac9b32.roa File: 3109d2e8-cfb4-3ffb-9fbf-56a58eac9b32.roa (raw, json) Hash identifier: h/uBzm3PIAAVIUedcoi6eTArLbC50T6n+A0vJaRcotc= Subject key identifier: A3:3D:0F:2A:EC:FB:01:DC:14:3C:21:D3:C4:90:CE:96:07:C0:7D:5A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E1D7A999446DF4574AA925E90 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3109d2e8-cfb4-3ffb-9fbf-56a58eac9b32.roa Signing time: Tue 09 Jun 2026 14:13:59 +0000 ROA not before: Tue 09 Jun 2026 14:13:59 +0000 ROA not after: Mon 07 Sep 2026 14:13:59 +0000 asID: 20172 IP address blocks: 2001:500:d937::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1d:7a:99:94:46:df:45:74:aa:92:5e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 9 14:13:59 2026 GMT Not After : Sep 7 14:13:59 2026 GMT Subject: CN=84284a4a-5ec6-4ed2-b088-02bb65ee25cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1e:b5:4e:d3:1f:3c:46:3d:17:15:09:89:29: b9:37:25:34:37:34:c9:a4:1f:12:82:c8:86:1a:e1: 43:96:89:c7:29:ac:c4:47:8c:19:c5:65:8e:46:52: 98:7e:51:75:a1:69:02:c9:7d:c0:33:60:05:84:dc: 26:41:1d:25:18:27:b1:bb:11:4e:81:b7:b3:1e:24: 3d:b2:f0:90:18:c1:33:76:2d:63:1a:73:9a:3a:f8: 0a:87:74:70:bd:71:01:ca:70:ba:89:44:68:2b:b7: 50:9e:a8:01:e0:00:8e:66:46:12:78:d8:69:0b:2a: c2:bd:c4:c6:8a:61:05:e2:10:67:29:4b:f9:29:2b: 5f:a6:21:b6:45:6f:84:71:12:80:41:9e:18:68:32: 9e:a7:31:54:2a:91:b5:ba:09:d7:aa:e9:7e:95:06: a5:bf:1d:ab:70:4a:91:0e:14:89:f7:50:0e:0a:64: 60:ee:3f:3c:14:ff:26:46:b9:1f:9b:1d:be:50:84: be:41:1d:1c:77:9a:0b:b8:f4:09:55:a7:05:26:b5: 34:57:ea:5d:a6:1d:92:de:54:26:8c:5a:56:32:b6: dd:03:c7:94:c3:38:d1:47:da:d9:d2:b9:b9:7e:3e: db:45:62:54:ff:90:bc:59:d5:bb:3f:5f:0d:be:8f: ac:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:3D:0F:2A:EC:FB:01:DC:14:3C:21:D3:C4:90:CE:96:07:C0:7D:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3109d2e8-cfb4-3ffb-9fbf-56a58eac9b32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:d937::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:5b:13:54:2c:ac:47:90:b4:d3:13:66:55:d2:b3:45:00:6f: 0c:d4:9d:f0:31:5f:fc:4a:46:bf:d6:59:8f:47:1d:d3:f7:9c: 41:45:4f:cf:24:62:3c:1b:de:ba:fc:94:06:fd:e6:30:48:9f: ec:18:1d:b9:74:86:08:fc:b9:0e:cf:e3:8d:63:a7:24:70:ec: f7:8f:09:2d:6b:b2:71:8e:01:99:6f:82:9f:8e:52:6e:fc:60: 45:6f:43:83:37:f4:d8:c2:b5:26:9e:9a:26:7f:4a:0e:04:26: d3:b4:7e:8e:e8:75:4f:62:db:30:d8:eb:fc:11:8c:42:25:ff: 0b:a4:04:59:1d:52:e4:05:d4:fc:90:06:25:e9:3f:b5:67:b5: 21:c1:dd:d6:37:43:32:2d:cb:5b:e4:15:0f:2e:f6:1a:0e:f7: a6:5f:85:38:e4:36:db:a6:f8:f6:02:27:da:5d:9b:25:2c:45: 3a:21:a3:5f:c2:7b:98:7a:be:b7:14:b8:39:46:15:57:c8:a2: f5:dd:3d:58:e9:64:b3:dc:76:e9:f6:2c:57:cd:4c:05:ea:3c: 43:e6:1f:06:df:54:0d:8b:3c:a4:0b:09:ca:eb:22:41:49:bf: 24:9f:4a:b4:9c:90:29:6a:19:eb:1b:f5:e9:ee:ae:a4:28:bf: 99:97:96:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4depmURt9FdKqSXpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDYwOTE0MTM1OVoXDTI2MDkwNzE0MTM1OVowLzEtMCsGA1UEAxMk ODQyODRhNGEtNWVjNi00ZWQyLWIwODgtMDJiYjY1ZWUyNWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiB61TtMfPEY9FxUJiSm5NyU0NzTJpB8SgsiG GuFDlonHKazER4wZxWWORlKYflF1oWkCyX3AM2AFhNwmQR0lGCexuxFOgbezHiQ9 svCQGMEzdi1jGnOaOvgKh3RwvXEBynC6iURoK7dQnqgB4ACOZkYSeNhpCyrCvcTG imEF4hBnKUv5KStfpiG2RW+EcRKAQZ4YaDKepzFUKpG1ugnXqul+lQalvx2rcEqR DhSJ91AOCmRg7j88FP8mRrkfmx2+UIS+QR0cd5oLuPQJVacFJrU0V+pdph2S3lQm jFpWMrbdA8eUwzjRR9rZ0rm5fj7bRWJU/5C8WdW7P18Nvo+sOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKM9Dyrs+wHcFDwh08SQzpYHwH1aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzEwOWQyZTgtY2ZiNC0z ZmZiLTlmYmYtNTZhNThlYWM5YjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFANk3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJVbE1QsrEeQtNMTZlXSs0UAbwzUnfAxX/xKRr/WWY9HHdP3nEFF T88kYjwb3rr8lAb95jBIn+wYHbl0hgj8uQ7P441jpyRw7PePCS1rsnGOAZlvgp+O Um78YEVvQ4M39NjCtSaemiZ/Sg4EJtO0fo7odU9i2zDY6/wRjEIl/wukBFkdUuQF 1PyQBiXpP7VntSHB3dY3QzIty1vkFQ8u9hoO96ZfhTjkNtum+PYCJ9pdmyUsRToh o1/Ce5h6vrcUuDlGFVfIovXdPVjpZLPcdun2LFfNTAXqPEPmHwbfVA2LPKQLCcrr IkFJvySfSrSckClqGesb9enurqQov5mXlnc= -----END CERTIFICATE-----Generated at Sat Jun 13 15:17:06 2026 by rpki-client