$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b21e70dc-58a0-3eea-b9f3-be6d8a4e1e29.roa File: b21e70dc-58a0-3eea-b9f3-be6d8a4e1e29.roa (raw, json) Hash identifier: UfAbxhWIVx/0r9DdaBv2qKNGy5pTDZ5iVIOpVrxlTaM= Subject key identifier: DA:F6:A7:F1:6B:1E:66:4A:70:69:A7:0D:3C:A6:8A:D4:7A:BA:48:84 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E18AEE61B9DDF287F82D2DA70 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b21e70dc-58a0-3eea-b9f3-be6d8a4e1e29.roa Signing time: Sun 07 Jun 2026 21:00:12 +0000 ROA not before: Sun 07 Jun 2026 21:00:12 +0000 ROA not after: Sat 05 Sep 2026 21:00:12 +0000 asID: 396661 IP address blocks: 2001:503:c27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:18:ae:e6:1b:9d:df:28:7f:82:d2:da:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 7 21:00:12 2026 GMT Not After : Sep 5 21:00:12 2026 GMT Subject: CN=068f6c10-d397-4c4b-b36c-e3d4e71e88cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:00:1c:93:d7:dd:8a:83:40:8f:f2:45:2e:92: 67:2d:3c:6a:8b:2f:c9:6b:e6:41:b1:43:ef:8b:02: db:d1:2d:e3:db:13:30:d8:9c:1d:ba:83:40:9e:5f: 50:34:5a:96:0c:7b:c3:87:6d:ac:dc:62:82:9a:05: 49:4a:29:01:16:34:31:51:60:bd:7c:6f:ff:84:5f: c0:da:89:ad:ba:74:39:65:de:10:dd:1d:c6:ba:2e: f2:73:b7:bf:16:0f:28:06:e2:2d:67:96:1b:5e:59: 39:1d:86:5f:e1:af:0c:e6:c8:21:14:76:ff:44:a7: 75:97:d2:54:2c:63:8a:fb:a7:7d:d1:83:0c:c0:d0: 3e:ba:6f:8d:6c:4e:06:e1:7e:b0:e6:aa:68:db:c5: db:e0:42:49:4b:59:dd:e1:f6:42:2e:f0:dd:ce:14: 2c:b4:3f:75:c5:dc:08:f1:a8:90:e4:52:18:4f:84: ff:13:2d:f4:aa:01:26:49:a2:34:08:7b:72:d9:0f: 91:92:dc:9f:2a:28:42:b3:d8:a4:1e:ef:2b:2a:71: 97:c8:c2:cd:e2:32:03:4a:07:01:f9:58:67:f3:bf: 9b:22:cf:5c:4d:e7:ea:f6:f8:81:e3:51:dc:b7:bd: e3:08:b1:d4:3e:06:84:b6:c3:f3:4c:1f:36:cc:4d: ff:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F6:A7:F1:6B:1E:66:4A:70:69:A7:0D:3C:A6:8A:D4:7A:BA:48:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b21e70dc-58a0-3eea-b9f3-be6d8a4e1e29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:43:f8:a3:53:75:68:63:dc:e6:14:fc:e5:42:7b:1a:91:10: 52:a7:36:28:d8:0c:bf:e3:f2:4d:86:23:60:02:f8:c5:f1:d0: 36:de:52:ae:f7:1c:87:9c:e5:a5:bf:d2:9f:c8:2e:2b:41:c2: 71:af:83:a8:32:48:65:80:5a:a2:8e:ba:a5:49:9d:86:c4:04: ad:8c:f3:78:21:4d:0d:ae:fe:7d:63:ea:42:cb:79:11:42:e1: 6b:72:bd:a1:b9:23:1a:a2:3f:b0:8a:27:1e:e4:21:52:30:14: 5a:d4:10:03:8c:6e:a9:fa:77:99:1c:d3:68:b0:0c:05:df:94: d3:69:25:78:c2:ac:84:60:92:dc:77:77:a9:0e:29:25:ca:59: bb:14:5b:5f:90:3f:cb:7b:8f:14:bd:38:57:6a:04:37:fd:39: 22:48:76:a6:69:4e:6d:46:d3:4d:2b:bd:d0:6b:f9:a4:a4:69: d6:02:53:ba:b2:b5:0f:9c:8c:c6:5a:39:18:e4:74:ad:b5:52: be:63:72:45:1a:c3:0b:7f:e4:dc:d9:9d:e1:e4:c1:dc:79:74: c4:53:23:f4:af:f6:07:0e:65:26:7f:6a:82:ea:c3:95:41:0e: ce:99:fa:74:15:51:26:a9:7f:e1:63:32:59:b3:72:63:d7:7a: 29:10:1c:fb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4YruYbnd8of4LS2nAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDYwNzIxMDAxMloXDTI2MDkwNTIxMDAxMlowLzEtMCsGA1UEAxMk MDY4ZjZjMTAtZDM5Ny00YzRiLWIzNmMtZTNkNGU3MWU4OGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgAck9fdioNAj/JFLpJnLTxqiy/Ja+ZBsUPv iwLb0S3j2xMw2JwduoNAnl9QNFqWDHvDh22s3GKCmgVJSikBFjQxUWC9fG//hF/A 2omtunQ5Zd4Q3R3Gui7yc7e/Fg8oBuItZ5YbXlk5HYZf4a8M5sghFHb/RKd1l9JU LGOK+6d90YMMwNA+um+NbE4G4X6w5qpo28Xb4EJJS1nd4fZCLvDdzhQstD91xdwI 8aiQ5FIYT4T/Ey30qgEmSaI0CHty2Q+RktyfKihCs9ikHu8rKnGXyMLN4jIDSgcB +Vhn87+bIs9cTefq9viB41Hct73jCLHUPgaEtsPzTB82zE3//QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNr2p/FrHmZKcGmnDTymitR6ukiEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjIxZTcwZGMtNThhMC0z ZWVhLWI5ZjMtYmU2ZDhhNGUxZTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADpD+KNTdWhj3OYU/OVCexqREFKnNijYDL/j8k2GI2AC+MXx0Dbe Uq73HIec5aW/0p/ILitBwnGvg6gySGWAWqKOuqVJnYbEBK2M83ghTQ2u/n1j6kLL eRFC4WtyvaG5IxqiP7CKJx7kIVIwFFrUEAOMbqn6d5kc02iwDAXflNNpJXjCrIRg ktx3d6kOKSXKWbsUW1+QP8t7jxS9OFdqBDf9OSJIdqZpTm1G000rvdBr+aSkadYC U7qytQ+cjMZaORjkdK21Ur5jckUawwt/5NzZneHkwdx5dMRTI/Sv9gcOZSZ/aoLq w5VBDs6Z+nQVUSapf+FjMlmzcmPXeikQHPs= -----END CERTIFICATE-----Generated at Sat Jun 13 18:42:16 2026 by rpki-client