$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3650e65-d47d-3e8d-b03a-6078f0012c3a.roa File: b3650e65-d47d-3e8d-b03a-6078f0012c3a.roa (raw, json) Hash identifier: YIVO5QbldCthvCdI7CAV6qtnEEJUialaGCGf6KR8j1s= Subject key identifier: B8:5A:5C:2E:C0:D5:46:84:CA:FF:0F:FF:E8:A6:E1:9E:C7:21:BF:26 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584DEC7B3EA49F2B6FC696DE3000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3650e65-d47d-3e8d-b03a-6078f0012c3a.roa Signing time: Sat 23 May 2026 01:00:25 +0000 ROA not before: Sat 23 May 2026 01:00:25 +0000 ROA not after: Fri 21 Aug 2026 01:00:25 +0000 asID: 36627 IP address blocks: 2001:500:125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ec:7b:3e:a4:9f:2b:6f:c6:96:de:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 23 01:00:25 2026 GMT Not After : Aug 21 01:00:25 2026 GMT Subject: CN=fb8d1ac5-582f-4dac-b022-48c286fcc304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0f:ab:d5:37:f1:6b:de:3d:38:e3:75:13:89: 2a:60:49:a0:30:23:50:0c:57:1d:39:ab:15:a6:25: 23:1d:3a:f3:85:2c:35:de:97:85:b8:de:43:23:83: dd:d9:b3:0e:b8:5d:60:dc:f6:56:7e:d5:50:32:62: b1:57:b5:2e:73:2c:8f:79:d0:50:ab:ce:2c:dd:e1: 8a:be:a7:94:5c:96:f6:ee:b7:17:e8:5d:ea:92:55: 0c:0f:02:31:60:57:f7:17:11:d5:1d:35:f9:4f:fd: 79:ee:8e:c2:e7:aa:0f:db:f7:f6:6d:8a:b9:ab:49: 0f:f5:34:83:cf:42:08:f9:21:00:b0:af:c2:01:37: aa:7f:09:a6:e4:17:97:cd:d8:3f:50:5a:76:b9:2d: 54:64:9a:e7:18:27:35:28:06:bb:bc:6f:c8:b1:ac: 6f:a0:1c:e8:61:14:1b:6c:fb:b0:53:45:2f:af:3c: 20:82:fc:be:9a:99:90:e7:ee:04:0d:2b:63:5a:65: 00:61:f4:4f:21:d0:ca:c9:a1:e8:50:2f:10:8b:71: 30:e9:fb:73:76:b5:08:fe:c5:25:e4:59:c4:4c:25: ea:55:f4:19:db:48:d1:51:cc:f1:45:d3:67:aa:dd: 8c:6b:24:bb:42:cf:4a:e1:03:22:b9:19:b4:72:e3: f0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:5A:5C:2E:C0:D5:46:84:CA:FF:0F:FF:E8:A6:E1:9E:C7:21:BF:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3650e65-d47d-3e8d-b03a-6078f0012c3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:95:b8:c2:98:e1:ba:46:2a:21:90:44:bb:d6:7d:d4:f7:7c: da:4c:3c:18:36:e0:66:33:05:2d:c9:14:f8:cb:19:cd:f2:a0: 86:fa:f4:4d:dd:94:31:0c:d5:2e:2b:1d:68:c9:ea:b2:54:97: e6:15:6f:7d:cc:04:28:d6:1f:88:6c:10:4b:91:bc:ce:2d:bb: 10:4c:dd:92:c4:12:03:c2:37:0f:8b:7b:a6:96:a1:23:37:5d: e7:31:a8:f5:d0:9f:64:a7:d0:6f:f9:50:b5:d5:f3:89:96:91: aa:70:3c:0e:a0:37:84:24:97:a9:f5:6b:6b:dc:be:65:2f:3f: 8a:43:cc:d9:5a:71:65:bd:a3:fb:8f:11:82:d7:89:a9:b0:d2: 11:2d:a2:9d:00:5d:b1:c3:25:bc:64:42:f7:21:50:f4:cb:a8: fb:b2:d9:af:99:8e:b1:6e:ef:0c:e8:c6:0a:25:90:8d:c2:4e: cc:37:e3:4c:da:8c:d8:d9:68:29:20:67:5a:c0:d0:53:64:70: 1f:75:8c:17:20:bc:3a:82:a0:44:a0:c6:0a:5a:29:e3:8f:49: 94:f4:63:68:86:6d:9d:3a:f7:6c:28:6b:74:cd:86:ce:2f:2e: e2:39:17:46:47:22:20:82:41:a9:97:71:9f:72:a2:2e:dd:e3: 7b:67:1d:a0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3sez6knytvxpbeMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDUyMzAxMDAyNVoXDTI2MDgyMTAxMDAyNVowLzEtMCsGA1UEAxMk ZmI4ZDFhYzUtNTgyZi00ZGFjLWIwMjItNDhjMjg2ZmNjMzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ+r1Tfxa949OON1E4kqYEmgMCNQDFcdOasV piUjHTrzhSw13peFuN5DI4Pd2bMOuF1g3PZWftVQMmKxV7UucyyPedBQq84s3eGK vqeUXJb27rcX6F3qklUMDwIxYFf3FxHVHTX5T/157o7C56oP2/f2bYq5q0kP9TSD z0II+SEAsK/CATeqfwmm5BeXzdg/UFp2uS1UZJrnGCc1KAa7vG/IsaxvoBzoYRQb bPuwU0Uvrzwggvy+mpmQ5+4EDStjWmUAYfRPIdDKyaHoUC8Qi3Ew6ftzdrUI/sUl 5FnETCXqVfQZ20jRUczxRdNnqt2MayS7Qs9K4QMiuRm0cuPwvQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLhaXC7A1UaEyv8P/+im4Z7HIb8mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjM2NTBlNjUtZDQ3ZC0z ZThkLWIwM2EtNjA3OGYwMDEyYzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABKVuMKY4bpGKiGQRLvWfdT3fNpMPBg24GYzBS3JFPjLGc3yoIb6 9E3dlDEM1S4rHWjJ6rJUl+YVb33MBCjWH4hsEEuRvM4tuxBM3ZLEEgPCNw+Le6aW oSM3XecxqPXQn2Sn0G/5ULXV84mWkapwPA6gN4Qkl6n1a2vcvmUvP4pDzNlacWW9 o/uPEYLXiamw0hEtop0AXbHDJbxkQvchUPTLqPuy2a+ZjrFu7wzoxgolkI3CTsw3 40zajNjZaCkgZ1rA0FNkcB91jBcgvDqCoESgxgpaKeOPSZT0Y2iGbZ0692woa3TN hs4vLuI5F0ZHIiCCQamXcZ9yoi7d43tnHaA= -----END CERTIFICATE-----Generated at Sat Jun 13 16:09:39 2026 by rpki-client