$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaf29e11-0fb6-3fec-b2cd-f4d5668fa5b8.roa File: aaf29e11-0fb6-3fec-b2cd-f4d5668fa5b8.roa (raw, json) Hash identifier: DU/MB6Et/tkdPK1Z0KJGvi/2RbsVn3O5KV00lziM2is= Subject key identifier: 6F:73:12:E4:C4:DC:23:23:BE:ED:2C:CD:07:07:2E:BC:C8:FC:A8:3D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584DEC7B4347CE9C4B9DB9CF2A40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaf29e11-0fb6-3fec-b2cd-f4d5668fa5b8.roa Signing time: Sat 23 May 2026 01:00:25 +0000 ROA not before: Sat 23 May 2026 01:00:25 +0000 ROA not after: Fri 21 Aug 2026 01:00:25 +0000 asID: 396546 IP address blocks: 2001:500:125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ec:7b:43:47:ce:9c:4b:9d:b9:cf:2a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 23 01:00:25 2026 GMT Not After : Aug 21 01:00:25 2026 GMT Subject: CN=0872c155-04a5-4936-834b-0c87611d272f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:54:7b:d1:9e:3f:5d:77:8b:b4:92:a6:b4:60: 07:84:85:86:cb:84:a5:25:45:4e:46:1d:ff:20:52: 88:d8:a5:b9:b8:6d:38:cc:10:a4:84:c7:35:c4:51: f4:6d:bf:89:56:5b:e0:09:1f:09:4b:45:81:55:10: 09:32:9e:f4:89:29:f1:e6:92:a0:96:8f:21:44:70: 7c:ff:43:54:f0:72:da:2a:87:01:ef:d5:e1:8f:f6: fc:7a:00:97:4c:49:d9:b8:9d:07:64:da:b4:0e:5a: 5e:d9:2d:42:31:d4:49:0d:6d:4f:fe:d9:6e:2a:eb: 59:7d:64:1f:8f:c5:96:eb:80:ef:03:b4:ec:dc:d1: 1d:d2:d7:df:20:5c:32:07:5d:0e:27:60:7a:1f:3a: c5:43:50:6b:a2:c5:7e:f9:7e:de:e0:e2:b5:d3:aa: 46:5c:74:d1:ad:d2:0f:2a:cd:53:47:6f:0d:89:f8: d8:cf:c0:b6:98:41:63:4c:13:18:2f:2a:ea:5b:e7: 78:d7:c8:79:b8:c5:a2:f4:ec:de:ab:99:41:0e:3d: 46:c2:33:b8:2b:c7:78:d9:e0:a9:b3:ee:52:3e:5a: 65:63:60:55:87:64:65:a2:20:c1:6a:ec:5d:97:3c: ef:21:61:5d:37:9c:b4:2d:f8:8b:d7:a9:0a:14:e0: 60:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:73:12:E4:C4:DC:23:23:BE:ED:2C:CD:07:07:2E:BC:C8:FC:A8:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaf29e11-0fb6-3fec-b2cd-f4d5668fa5b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:27:92:d3:8d:a2:04:18:e7:3d:98:58:13:f8:5a:b2:d6:cc: 93:bb:e9:7d:3b:2b:c9:3d:3a:c3:fe:8c:38:7c:71:dd:4c:33: 97:06:c5:fd:72:01:40:84:7a:93:b7:ee:38:7e:bd:fa:ce:dd: e7:7e:29:2b:31:74:52:29:35:bb:9f:81:fe:a7:a8:57:13:cd: 4b:55:0f:30:67:8a:a2:66:98:70:61:33:71:8f:89:53:ee:28: 18:4f:fe:42:27:d9:66:e6:9a:c7:49:6b:56:2e:d2:7c:ef:19: e5:3c:f7:df:48:e6:07:d3:23:da:cf:fe:6f:ca:ec:bd:00:f7: 33:0d:f1:b9:29:09:af:fa:ee:62:44:8d:57:62:33:41:0d:fa: 8a:1a:f2:c0:07:1a:17:ab:f4:d9:81:a0:be:e8:78:fd:37:4a: fc:c4:de:75:52:da:75:82:f5:11:87:85:b5:5c:a4:04:fd:5f: 99:17:e8:54:5f:a7:f4:cb:07:1e:4e:f7:29:d5:d5:00:c5:d8: e7:9c:8e:13:da:78:20:e8:2f:d2:25:31:87:0e:d8:d2:bd:e6: 23:84:63:cb:c6:7b:84:ae:71:15:7d:23:40:eb:ff:99:b7:fe: 3e:44:ef:ee:63:66:69:32:7d:d8:56:39:87:bb:f7:c7:fc:a7: 40:59:54:c4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3se0NHzpxLnbnPKkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDUyMzAxMDAyNVoXDTI2MDgyMTAxMDAyNVowLzEtMCsGA1UEAxMk MDg3MmMxNTUtMDRhNS00OTM2LTgzNGItMGM4NzYxMWQyNzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVR70Z4/XXeLtJKmtGAHhIWGy4SlJUVORh3/ IFKI2KW5uG04zBCkhMc1xFH0bb+JVlvgCR8JS0WBVRAJMp70iSnx5pKglo8hRHB8 /0NU8HLaKocB79Xhj/b8egCXTEnZuJ0HZNq0Dlpe2S1CMdRJDW1P/tluKutZfWQf j8WW64DvA7Ts3NEd0tffIFwyB10OJ2B6HzrFQ1BrosV++X7e4OK106pGXHTRrdIP Ks1TR28NifjYz8C2mEFjTBMYLyrqW+d418h5uMWi9Ozeq5lBDj1GwjO4K8d42eCp s+5SPlplY2BVh2RloiDBauxdlzzvIWFdN5y0LfiL16kKFOBgRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG9zEuTE3CMjvu0szQcHLrzI/Kg9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWFmMjllMTEtMGZiNi0z ZmVjLWIyY2QtZjRkNTY2OGZhNWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI4nktONogQY5z2YWBP4WrLWzJO76X07K8k9OsP+jDh8cd1MM5cG xf1yAUCEepO37jh+vfrO3ed+KSsxdFIpNbufgf6nqFcTzUtVDzBniqJmmHBhM3GP iVPuKBhP/kIn2WbmmsdJa1Yu0nzvGeU8999I5gfTI9rP/m/K7L0A9zMN8bkpCa/6 7mJEjVdiM0EN+ooa8sAHGher9NmBoL7oeP03SvzE3nVS2nWC9RGHhbVcpAT9X5kX 6FRfp/TLBx5O9ynV1QDF2OecjhPaeCDoL9IlMYcO2NK95iOEY8vGe4SucRV9I0Dr /5m3/j5E7+5jZmkyfdhWOYe798f8p0BZVMQ= -----END CERTIFICATE-----Generated at Sat Jun 13 16:50:55 2026 by rpki-client