$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaf29e11-0fb6-3fec-b2cd-f4d5668fa5b8.roa File: aaf29e11-0fb6-3fec-b2cd-f4d5668fa5b8.roa (raw, json) Hash identifier: xR8/SKnoBETd9Sg5UJipQw8r0dJydDVoU1lbJZ6th/8= Subject key identifier: 59:47:8F:67:8F:09:09:8E:6B:A4:FE:96:E8:9D:35:14:81:DF:44:CD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EA7939CBD1349FE6AC4D41C00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaf29e11-0fb6-3fec-b2cd-f4d5668fa5b8.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396546 IP address blocks: 2001:500:125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:93:9c:bd:13:49:fe:6a:c4:d4:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c1ee43b4-326f-41b8-8183-8c24e39fcac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9b:ef:94:68:31:15:f9:92:d0:0b:1b:64:4f: 79:f8:93:35:38:c0:17:f3:ad:26:50:6b:0e:70:d3: 17:b4:b7:e1:11:8f:0e:0a:96:75:b7:32:70:23:15: 6e:97:d5:f3:f7:78:85:0c:ea:ac:cc:a7:7b:bb:69: 21:f3:2f:e6:80:07:00:5a:13:6e:f7:d6:bc:7f:dc: 7c:51:de:5d:22:cd:ff:aa:10:7c:cc:dd:c9:bb:c4: ec:f0:5b:02:ae:43:6a:b0:51:f3:a8:6b:7d:ff:bf: 7c:22:1f:37:3b:f8:00:0b:80:ac:cd:e3:2f:d0:3c: db:8d:60:40:5a:88:04:46:81:b8:a5:98:66:50:e5: f2:e4:4a:76:89:a7:2f:f0:80:d3:44:17:72:d2:7b: d5:30:b7:19:ee:bd:fe:6a:fe:67:8d:64:28:03:aa: 32:88:78:86:e7:8a:a1:96:fd:76:2e:b8:f6:0c:b8: 5c:a2:7d:b5:88:2e:43:f8:75:9c:a5:20:a2:f6:58: 9a:f5:42:27:10:b2:9b:c4:d6:9c:b8:96:f7:ce:b9: d4:71:91:fd:c9:a3:6d:73:82:66:cf:8f:a9:97:94: 26:5a:20:14:6c:06:7c:9f:f1:0f:d7:5c:b4:3e:d8: f5:5d:d8:12:e9:ea:f8:2b:ce:ea:83:2b:7b:c5:cd: 96:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:47:8F:67:8F:09:09:8E:6B:A4:FE:96:E8:9D:35:14:81:DF:44:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaf29e11-0fb6-3fec-b2cd-f4d5668fa5b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:de:62:78:7e:84:29:80:85:41:78:13:1b:60:f5:61:fd:00: c8:e7:01:55:7e:73:65:fd:bf:09:d2:9d:a5:47:f2:90:7f:d0: a4:01:5b:6a:b5:23:61:df:1b:ad:14:76:33:12:84:ff:d9:cb: 5f:90:7e:56:6d:5b:5a:99:fb:69:6a:b6:c4:e5:1f:38:fd:4e: 36:8b:c2:e1:0c:ae:44:1e:79:fa:bf:d5:36:14:11:40:b8:06: 82:05:4b:2c:56:3a:8a:73:8e:c0:42:8d:c9:92:31:de:d4:ba: ad:49:94:88:e2:4c:53:62:c9:70:2d:75:a3:f1:0c:0e:26:9f: 4a:81:51:17:89:57:82:6d:30:e0:06:32:3f:6b:d1:9e:21:25: ed:31:54:1f:59:9a:92:2d:6d:cc:b7:29:2b:b7:94:d4:ea:be: 94:fc:7c:44:e5:20:35:e3:55:75:23:e7:90:e3:7d:ff:9a:91: 33:73:fd:cd:27:3f:a0:30:5c:e6:69:26:b4:42:fd:fb:58:d8: 43:bc:08:92:bd:16:fb:93:d9:e8:c7:9f:db:05:9f:9a:9a:a2: 29:90:b5:a6:4b:06:55:d3:47:e9:75:b3:99:7e:90:7a:85:fe: b3:34:02:05:40:bf:f1:bb:93:b6:a5:6d:da:41:06:d6:33:a0: f3:ee:e6:c9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nk5y9E0n+asTUHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzFlZTQzYjQtMzI2Zi00MWI4LTgxODMtOGMyNGUzOWZjYWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJvvlGgxFfmS0AsbZE95+JM1OMAX860mUGsO cNMXtLfhEY8OCpZ1tzJwIxVul9Xz93iFDOqszKd7u2kh8y/mgAcAWhNu99a8f9x8 Ud5dIs3/qhB8zN3Ju8Ts8FsCrkNqsFHzqGt9/798Ih83O/gAC4CszeMv0DzbjWBA WogERoG4pZhmUOXy5Ep2iacv8IDTRBdy0nvVMLcZ7r3+av5njWQoA6oyiHiG54qh lv12Lrj2DLhcon21iC5D+HWcpSCi9lia9UInELKbxNacuJb3zrnUcZH9yaNtc4Jm z4+pl5QmWiAUbAZ8n/EP11y0Ptj1XdgS6er4K87qgyt7xc2W+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFlHj2ePCQmOa6T+luidNRSB30TNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWFmMjllMTEtMGZiNi0z ZmVjLWIyY2QtZjRkNTY2OGZhNWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAETeYnh+hCmAhUF4Extg9WH9AMjnAVV+c2X9vwnSnaVH8pB/0KQB W2q1I2HfG60UdjMShP/Zy1+QflZtW1qZ+2lqtsTlHzj9TjaLwuEMrkQeefq/1TYU EUC4BoIFSyxWOopzjsBCjcmSMd7Uuq1JlIjiTFNiyXAtdaPxDA4mn0qBUReJV4Jt MOAGMj9r0Z4hJe0xVB9ZmpItbcy3KSu3lNTqvpT8fETlIDXjVXUj55Djff+akTNz /c0nP6AwXOZpJrRC/ftY2EO8CJK9FvuT2ejHn9sFn5qaoimQtaZLBlXTR+l1s5l+ kHqF/rM0AgVAv/G7k7albdpBBtYzoPPu5sk= -----END CERTIFICATE-----Generated at Wed Jul 29 08:16:32 2026 by rpki-client