$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaeab459-55b6-3d1b-8a79-b4db77e31200.roa File: aaeab459-55b6-3d1b-8a79-b4db77e31200.roa (raw, json) Hash identifier: QrRMGKpEE43mIF5OXofq9BcUTEQDzLn5Qaz6MRpoc3c= Subject key identifier: 29:25:9F:F9:B5:3E:8B:2D:A8:FA:B1:C6:65:D6:68:0C:0F:A8:4F:27 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E07009E3A83A059517BC58DC8 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaeab459-55b6-3d1b-8a79-b4db77e31200.roa Signing time: Mon 01 Jun 2026 13:00:10 +0000 ROA not before: Mon 01 Jun 2026 13:00:10 +0000 ROA not after: Sun 30 Aug 2026 13:00:10 +0000 asID: 396590 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:07:00:9e:3a:83:a0:59:51:7b:c5:8d:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 1 13:00:10 2026 GMT Not After : Aug 30 13:00:10 2026 GMT Subject: CN=70a85971-d2e2-4f16-ac7d-d88a11970fff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d2:42:9d:ea:34:4b:cb:5b:75:88:42:40:50: ed:f3:fc:75:1a:76:48:ab:13:2d:c3:7c:af:b8:00: 94:06:cb:ef:38:46:8f:84:97:be:89:da:64:21:3f: b0:04:58:9d:a7:06:ff:21:68:cc:04:f6:85:21:46: c2:28:7f:33:9f:eb:fc:f0:9a:b7:22:db:d4:76:b5: d0:63:c7:9b:70:2f:2b:6d:52:1e:58:4b:44:73:60: d4:a8:e6:35:08:59:14:58:b8:fa:1a:c5:ca:5c:b9: 84:61:7e:3b:5a:b4:13:25:8c:f1:1f:84:51:87:ca: 37:76:e9:49:90:28:30:af:be:53:6f:5c:84:95:d4: 4b:f1:5a:2a:93:81:5e:e5:cd:7f:b2:93:17:18:a9: f8:78:dc:ca:bb:c2:db:f8:65:6c:90:7d:1f:50:df: 7f:6c:ee:bb:dd:68:c3:87:1e:dd:a0:ee:e6:1b:5b: 43:a2:55:49:a0:d4:ae:90:5b:a7:7b:2f:a3:bc:30: 65:a3:0b:0b:75:78:8e:16:f8:28:7d:06:b2:81:23: 46:8c:bc:1a:cf:de:d1:a9:a8:47:d6:47:36:01:0a: 7f:70:b1:8e:5d:45:cd:9f:d5:42:9a:b0:03:5d:30: 94:6c:09:07:65:94:37:e8:ec:a6:65:f6:fe:18:eb: 4c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:25:9F:F9:B5:3E:8B:2D:A8:FA:B1:C6:65:D6:68:0C:0F:A8:4F:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaeab459-55b6-3d1b-8a79-b4db77e31200.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:6e:d3:30:0f:52:52:21:b8:bd:a3:b6:17:ea:93:c2:a8:24: 5c:00:30:39:d7:d3:05:81:44:12:c2:a9:4e:0f:95:ed:f5:3f: 28:48:85:e5:23:be:bd:b6:46:65:42:97:8c:b8:07:4b:ee:3a: 53:ab:d2:ae:d4:e7:2a:3a:da:c5:be:c9:c5:09:ae:14:e7:17: 83:5b:5b:1c:9e:7d:70:95:df:ce:79:02:ba:ee:87:7e:a2:9d: ff:ed:ad:ec:c9:d2:42:5c:4a:07:b3:6f:b4:d1:2d:08:19:4a: 10:d5:1b:d1:e5:1f:14:2b:65:bc:7c:ed:30:8b:11:af:7d:57: a9:ff:5a:8a:3b:db:07:3c:a6:34:f3:13:5a:15:e0:e3:9f:43: 7e:f6:f3:f4:03:ad:69:78:84:79:d5:c8:7e:7f:a7:22:13:1d: 66:41:1e:12:d0:98:ae:f0:c4:f9:f7:b4:e5:f8:c9:ae:64:80: 30:30:b9:3f:7a:f5:f2:d7:5f:7b:13:d9:6c:d5:78:f9:fc:31: 08:e9:84:52:01:e3:5c:08:05:32:70:c0:29:e7:5f:12:71:09: 3d:cd:cd:fa:61:3c:b0:ab:e0:0b:4f:35:30:76:a9:e0:fb:a4: 1f:3c:0a:a6:ac:c8:0d:e1:3f:65:78:ac:62:d3:6c:40:05:74: bd:a3:48:8f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4HAJ46g6BZUXvFjcgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDYwMTEzMDAxMFoXDTI2MDgzMDEzMDAxMFowLzEtMCsGA1UEAxMk NzBhODU5NzEtZDJlMi00ZjE2LWFjN2QtZDg4YTExOTcwZmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9JCneo0S8tbdYhCQFDt8/x1GnZIqxMtw3yv uACUBsvvOEaPhJe+idpkIT+wBFidpwb/IWjMBPaFIUbCKH8zn+v88Jq3ItvUdrXQ Y8ebcC8rbVIeWEtEc2DUqOY1CFkUWLj6GsXKXLmEYX47WrQTJYzxH4RRh8o3dulJ kCgwr75Tb1yEldRL8Voqk4Fe5c1/spMXGKn4eNzKu8Lb+GVskH0fUN9/bO673WjD hx7doO7mG1tDolVJoNSukFuney+jvDBlowsLdXiOFvgofQaygSNGjLwaz97RqahH 1kc2AQp/cLGOXUXNn9VCmrADXTCUbAkHZZQ36OymZfb+GOtMwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCkln/m1PostqPqxxmXWaAwPqE8nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWFlYWI0NTktNTViNi0z ZDFiLThhNzktYjRkYjc3ZTMxMjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABhu0zAPUlIhuL2jthfqk8KoJFwAMDnX0wWBRBLCqU4Ple31PyhI heUjvr22RmVCl4y4B0vuOlOr0q7U5yo62sW+ycUJrhTnF4NbWxyefXCV3855Arru h36inf/trezJ0kJcSgezb7TRLQgZShDVG9HlHxQrZbx87TCLEa99V6n/Woo72wc8 pjTzE1oV4OOfQ3728/QDrWl4hHnVyH5/pyITHWZBHhLQmK7wxPn3tOX4ya5kgDAw uT969fLXX3sT2WzVePn8MQjphFIB41wIBTJwwCnnXxJxCT3NzfphPLCr4AtPNTB2 qeD7pB88CqasyA3hP2V4rGLTbEAFdL2jSI8= -----END CERTIFICATE-----Generated at Sat Jun 13 16:20:25 2026 by rpki-client