$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b04aa5a2-20e3-3412-9ada-745c1b83d315.roa File: b04aa5a2-20e3-3412-9ada-745c1b83d315.roa (raw, json) Hash identifier: vjse9K65S+XCKPvZYuysjtuG5MYj+ZM0CXh7aGCl4As= Subject key identifier: 0E:CA:0B:38:08:59:24:02:13:0B:62:BA:7F:BB:FB:E6:4F:70:04:E4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584DEC7B3EF674CDC162D6654780 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b04aa5a2-20e3-3412-9ada-745c1b83d315.roa Signing time: Sat 23 May 2026 01:00:25 +0000 ROA not before: Sat 23 May 2026 01:00:25 +0000 ROA not after: Fri 21 Aug 2026 01:00:25 +0000 asID: 396567 IP address blocks: 2001:500:125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ec:7b:3e:f6:74:cd:c1:62:d6:65:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 23 01:00:25 2026 GMT Not After : Aug 21 01:00:25 2026 GMT Subject: CN=4c5c238c-08bb-4249-ba64-899832fffa80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c9:51:4b:ec:e3:d8:c3:2a:95:ad:58:95:ba: 89:d3:be:df:94:f0:3d:fa:b7:98:85:d4:a3:91:c8: 91:1a:e5:fe:7b:33:1a:dd:95:3b:ee:c7:4a:19:d2: 1c:2e:ce:73:b8:27:b2:13:05:92:fb:71:a4:76:88: a5:f6:12:bb:a7:d3:bd:01:47:bc:8e:42:9b:65:b2: 65:53:35:c9:ba:5f:3c:46:1b:5c:11:43:70:ea:2b: 16:f9:34:04:f1:75:7b:62:9e:85:24:f6:4b:07:66: 90:a4:1f:68:05:a4:45:fa:68:a5:a7:4e:1d:4c:b0: b1:d2:1e:48:99:cd:6e:e2:a5:fb:f9:5a:7f:10:35: a2:9f:e3:d6:d6:3c:5e:78:aa:2f:8e:7f:7e:b8:03: 81:fd:5d:44:3f:d2:db:5f:63:2e:b3:8e:c6:a2:de: 1f:ac:31:08:9e:d5:c4:16:28:dd:04:2f:09:dd:0a: 90:22:6d:df:df:a1:ea:9d:b4:10:e8:cd:84:9a:e4: c3:7a:38:89:27:c2:08:c2:43:b9:94:6f:5a:d4:40: 7d:3d:19:b5:fb:76:cd:bb:ff:35:28:62:6c:93:32: 15:4b:7e:51:bf:d2:fe:59:84:ed:85:9c:29:23:b4: ba:5b:7d:35:ae:91:3a:4f:f6:63:4b:0e:68:2f:a3: c7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:CA:0B:38:08:59:24:02:13:0B:62:BA:7F:BB:FB:E6:4F:70:04:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b04aa5a2-20e3-3412-9ada-745c1b83d315.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:c7:fd:17:21:bb:c0:21:f0:6a:76:71:be:72:1d:3c:85:dc: bd:b6:6c:f4:ba:01:c8:c4:fc:dd:3c:30:9e:4f:6e:1d:b4:29: b4:44:80:d3:f5:51:1c:90:d4:6b:c9:e3:c9:1d:60:db:4a:5e: 99:5c:ce:f1:fc:fb:a5:30:9c:1c:28:2d:69:45:ab:21:6e:20: 18:01:64:9c:5e:55:51:7f:e6:99:d2:d0:87:19:61:c4:b7:3c: 42:2d:bc:3f:05:c3:e1:be:53:87:9f:07:38:bf:31:69:1b:81: 3a:a3:21:d7:34:a0:27:04:0d:2b:f0:91:a9:e0:84:39:bd:74: ef:80:a2:0e:2b:25:dc:ce:1f:d2:a9:69:ed:9d:ae:74:e2:c9: c3:ff:5c:b5:be:98:a8:5c:40:2e:08:0f:d8:94:a1:27:e8:64: 58:0a:58:ff:0e:5d:a2:84:a1:d9:8f:a8:3f:ea:4e:86:c9:19: ae:d7:d1:61:05:fc:ff:03:b8:32:7a:93:4b:31:d8:6c:10:bd: ba:52:ea:f2:9c:66:10:79:66:24:84:ce:7c:db:4b:a8:c8:e9: e7:40:5a:f2:f6:b9:43:d5:bc:b3:7c:be:06:16:49:ac:bc:70: 6a:0e:fa:73:f5:44:d4:85:03:54:28:ac:90:a4:b1:37:d5:ed: 85:73:6e:ad -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3sez72dM3BYtZlR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDUyMzAxMDAyNVoXDTI2MDgyMTAxMDAyNVowLzEtMCsGA1UEAxMk NGM1YzIzOGMtMDhiYi00MjQ5LWJhNjQtODk5ODMyZmZmYTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMlRS+zj2MMqla1YlbqJ077flPA9+reYhdSj kciRGuX+ezMa3ZU77sdKGdIcLs5zuCeyEwWS+3Gkdoil9hK7p9O9AUe8jkKbZbJl UzXJul88RhtcEUNw6isW+TQE8XV7Yp6FJPZLB2aQpB9oBaRF+milp04dTLCx0h5I mc1u4qX7+Vp/EDWin+PW1jxeeKovjn9+uAOB/V1EP9LbX2Mus47Got4frDEIntXE FijdBC8J3QqQIm3f36HqnbQQ6M2EmuTDejiJJ8IIwkO5lG9a1EB9PRm1+3bNu/81 KGJskzIVS35Rv9L+WYTthZwpI7S6W301rpE6T/ZjSw5oL6PHZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA7KCzgIWSQCEwtiun+7++ZPcATkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjA0YWE1YTItMjBlMy0z NDEyLTlhZGEtNzQ1YzFiODNkMzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALXH/Rchu8Ah8Gp2cb5yHTyF3L22bPS6AcjE/N08MJ5Pbh20KbRE gNP1URyQ1GvJ48kdYNtKXplczvH8+6UwnBwoLWlFqyFuIBgBZJxeVVF/5pnS0IcZ YcS3PEItvD8Fw+G+U4efBzi/MWkbgTqjIdc0oCcEDSvwkanghDm9dO+Aog4rJdzO H9Kpae2drnTiycP/XLW+mKhcQC4ID9iUoSfoZFgKWP8OXaKEodmPqD/qTobJGa7X 0WEF/P8DuDJ6k0sx2GwQvbpS6vKcZhB5ZiSEznzbS6jI6edAWvL2uUPVvLN8vgYW Say8cGoO+nP1RNSFA1QorJCksTfV7YVzbq0= -----END CERTIFICATE-----Generated at Sat Jun 13 20:40:47 2026 by rpki-client