$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3af4d4f4-12eb-3c74-869e-8bf437e1a96c.roa File: 3af4d4f4-12eb-3c74-869e-8bf437e1a96c.roa (raw, json) Hash identifier: MlORgHRw2GEd/dL1ZmoXUKtsMTINw1iATpG4mxrlb6s= Subject key identifier: 06:F0:91:95:31:CE:6B:BA:33:3D:EF:4F:33:7F:44:CC:64:B9:66:2B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E00063517FEE171127B66C480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3af4d4f4-12eb-3c74-869e-8bf437e1a96c.roa Signing time: Sat 30 May 2026 01:00:10 +0000 ROA not before: Sat 30 May 2026 01:00:10 +0000 ROA not after: Fri 28 Aug 2026 01:00:10 +0000 asID: 396563 IP address blocks: 2001:500:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:06:35:17:fe:e1:71:12:7b:66:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 30 01:00:10 2026 GMT Not After : Aug 28 01:00:10 2026 GMT Subject: CN=9fcdada1-48cc-440b-9a03-89167a566ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a7:ac:12:cc:d8:b3:30:76:ad:19:87:6d:64: 00:66:00:a5:bf:9f:c9:4c:2f:9d:81:e9:19:91:9f: 7f:31:1b:24:9e:27:d5:bd:b3:10:da:fa:21:78:18: bf:ef:4e:68:1a:ce:70:40:0d:f6:30:fb:f4:d4:4a: e2:89:d5:39:2b:db:e8:c0:62:83:32:f3:a2:40:30: 62:44:c1:d8:1f:03:ce:10:ba:1c:7c:c4:e9:ee:8e: 4a:a5:b8:ee:64:40:72:c3:58:7c:62:96:11:33:e6: 8b:15:c9:a0:bd:76:7c:84:10:5f:6e:d2:a9:cd:db: 47:3e:6a:42:28:bd:70:d2:ee:9b:36:f0:da:4c:9e: 32:7e:93:ba:fe:90:b2:06:6b:21:b1:ca:c3:f6:3f: b4:31:76:3e:68:6e:21:fb:ee:e0:14:68:41:e3:9e: 4b:d1:54:47:9d:b2:2c:ef:ec:6d:d0:3b:71:7c:5a: 7d:fa:60:ad:c2:6a:85:14:ed:a2:1e:3f:ff:66:c7: 60:16:97:e8:6f:90:8c:d3:0a:3c:f8:95:bd:ff:df: ef:9c:2b:56:45:f5:cb:b5:79:bb:13:7a:d9:55:45: 9b:ed:ef:9a:8e:66:18:4c:a1:df:48:a6:2a:9c:b2: 6a:06:41:c0:ca:e0:b8:60:1c:2b:18:31:14:6a:e0: 03:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F0:91:95:31:CE:6B:BA:33:3D:EF:4F:33:7F:44:CC:64:B9:66:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3af4d4f4-12eb-3c74-869e-8bf437e1a96c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:e8:69:a8:6e:03:35:84:b0:b7:c1:35:8a:5b:0c:db:6a:c9: 3d:a6:60:97:f7:e0:a9:34:da:88:2a:f5:74:37:d4:95:86:76: 49:b3:ce:84:8c:54:2f:c6:b7:e8:46:82:20:5c:e0:57:ce:50: a1:57:90:5a:b6:53:1e:43:8a:ba:82:6c:0a:33:39:25:19:13: 7f:34:79:0f:bc:78:eb:7e:6e:33:e8:75:12:e1:27:31:f5:4c: b0:07:61:ce:68:9b:cf:f4:f0:7f:0c:84:8e:a4:7f:f9:0e:90: d5:7b:60:b7:b2:ce:91:65:1f:e3:6b:2b:93:65:3a:ad:b7:5d: c1:e8:da:ea:e6:e2:3b:21:80:5a:c6:76:f5:53:37:e4:6c:dc: 01:05:85:ad:4d:53:63:67:85:9a:98:e3:55:42:f9:3e:3f:8c: 89:6c:4e:50:89:d0:d6:8e:88:49:84:7c:2e:0b:a6:42:ce:e7: ee:90:0b:40:19:77:da:b1:45:c8:45:15:77:54:5e:32:c4:df: 82:a2:9d:14:08:0b:11:0d:9b:33:93:95:b0:1f:bf:47:3d:14: 7c:19:b8:05:12:ed:45:c0:dc:1e:69:0d:a9:2f:46:f9:55:7d: 8c:ce:2c:b4:21:16:18:44:dc:88:f9:ae:8a:68:d2:c1:01:41: 5a:9b:30:b6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4ABjUX/uFxEntmxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk OWZjZGFkYTEtNDhjYy00NDBiLTlhMDMtODkxNjdhNTY2YWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaesEszYszB2rRmHbWQAZgClv5/JTC+dgekZ kZ9/MRsknifVvbMQ2voheBi/705oGs5wQA32MPv01EriidU5K9vowGKDMvOiQDBi RMHYHwPOELocfMTp7o5KpbjuZEByw1h8YpYRM+aLFcmgvXZ8hBBfbtKpzdtHPmpC KL1w0u6bNvDaTJ4yfpO6/pCyBmshscrD9j+0MXY+aG4h++7gFGhB455L0VRHnbIs 7+xt0DtxfFp9+mCtwmqFFO2iHj//ZsdgFpfob5CM0wo8+JW9/9/vnCtWRfXLtXm7 E3rZVUWb7e+ajmYYTKHfSKYqnLJqBkHAyuC4YBwrGDEUauADLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAbwkZUxzmu6Mz3vTzN/RMxkuWYrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2FmNGQ0ZjQtMTJlYi0z Yzc0LTg2OWUtOGJmNDM3ZTFhOTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALDoaahuAzWEsLfBNYpbDNtqyT2mYJf34Kk02ogq9XQ31JWGdkmz zoSMVC/Gt+hGgiBc4FfOUKFXkFq2Ux5DirqCbAozOSUZE380eQ+8eOt+bjPodRLh JzH1TLAHYc5om8/08H8MhI6kf/kOkNV7YLeyzpFlH+NrK5NlOq23XcHo2urm4jsh gFrGdvVTN+Rs3AEFha1NU2NnhZqY41VC+T4/jIlsTlCJ0NaOiEmEfC4LpkLO5+6Q C0AZd9qxRchFFXdUXjLE34KinRQICxENmzOTlbAfv0c9FHwZuAUS7UXA3B5pDakv RvlVfYzOLLQhFhhE3Ij5ropo0sEBQVqbMLY= -----END CERTIFICATE-----Generated at Sat Jun 13 18:37:45 2026 by rpki-client