$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4857ecf-55a1-3c13-8a60-3a1a55a1c420.roa File: b4857ecf-55a1-3c13-8a60-3a1a55a1c420.roa (raw, json) Hash identifier: zzRHHZuJCb64wsFoedbiFmbpOtDMu7LKVfrkid+Ad18= Subject key identifier: 37:D7:61:58:C6:70:62:9A:98:82:44:0C:25:6F:33:D5:D0:45:FD:5D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E18AF026845100C3524641EC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4857ecf-55a1-3c13-8a60-3a1a55a1c420.roa Signing time: Sun 07 Jun 2026 21:00:12 +0000 ROA not before: Sun 07 Jun 2026 21:00:12 +0000 ROA not after: Sat 05 Sep 2026 21:00:12 +0000 asID: 396549 IP address blocks: 2001:500:127::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:18:af:02:68:45:10:0c:35:24:64:1e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 7 21:00:12 2026 GMT Not After : Sep 5 21:00:12 2026 GMT Subject: CN=33efd578-f939-4a93-8062-4c2aca420f0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e3:74:d5:3c:a8:60:23:44:3c:5f:17:13:4b: bf:be:51:bf:02:7d:57:22:71:61:06:a6:68:7b:43: 0f:3a:18:76:b7:be:5e:8d:06:11:20:d4:6d:57:46: e6:42:c8:fe:10:b1:1f:20:19:5a:41:2b:2c:9e:a9: 21:39:4e:29:aa:d7:36:b3:fa:95:cc:88:5a:4d:cf: 7c:54:cf:14:3d:35:9b:2a:03:6f:36:8d:f3:13:2e: 0d:e8:51:9e:4d:95:74:cb:a7:61:ff:b9:92:0f:da: 6a:65:76:88:81:d8:98:eb:ba:db:f8:bb:1f:30:c9: 49:93:8c:7c:19:23:35:c2:b0:83:b8:61:c2:41:f6: 96:2c:9c:0c:40:43:cc:0b:67:1e:d7:6e:45:e4:f2: d0:ac:77:b7:f0:f6:00:04:77:d6:f5:46:92:24:fc: 71:a6:f5:02:b1:30:84:77:85:a9:02:fc:8c:d5:7b: 53:34:d3:fd:4a:22:9f:73:28:2d:4a:a5:ef:6c:61: de:5a:4a:20:c7:c4:f6:fd:04:7c:4f:80:35:70:73: 9a:2e:88:52:3e:03:ce:c8:e7:a1:63:13:3d:d6:c3: 02:c8:09:9e:92:74:12:37:9b:c6:90:cc:81:22:b2: f1:8d:c0:ce:72:31:b6:ed:5f:e2:28:61:1f:40:9d: 49:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D7:61:58:C6:70:62:9A:98:82:44:0C:25:6F:33:D5:D0:45:FD:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4857ecf-55a1-3c13-8a60-3a1a55a1c420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:d5:01:f3:d7:2b:4e:74:ec:64:39:9d:19:2a:1c:34:7f:93: e8:88:e3:d8:a4:1f:42:e0:90:86:05:c8:d1:14:05:51:86:75: 1e:28:ab:64:7f:6d:35:0e:15:cf:b5:07:10:89:b0:d9:eb:1c: 09:d4:d6:5d:6c:4a:03:db:d7:51:7e:2e:27:bb:36:29:62:a7: d5:83:6e:83:d9:0d:b7:9f:a4:64:cb:26:0f:e8:6d:60:b3:91: a7:64:6d:8e:96:70:1d:c0:32:b4:73:dc:33:d5:11:3f:49:2f: 61:c5:75:81:05:c2:b0:65:0d:de:e7:db:e7:77:c6:eb:76:61: 58:04:af:55:7d:00:cb:97:67:51:01:e5:86:d1:f8:16:a1:5b: 21:3c:a6:04:71:c6:27:9a:37:9a:99:e0:eb:db:a8:35:96:41: 68:94:a2:55:99:9e:0d:51:88:51:f4:9c:5a:ba:bc:d9:a5:44: 5d:c8:9a:3a:20:29:18:97:0f:6e:3d:0e:de:3c:59:d9:c1:53: 5e:09:af:fe:9a:c8:6e:1d:83:aa:4f:77:bb:a2:75:b7:54:d3: fc:b0:30:14:ec:52:f2:ed:97:7d:73:17:0c:cc:3a:c1:ca:f1: 99:2b:0f:55:7d:77:86:f8:c0:b3:03:31:af:e6:01:64:ca:ca: e9:da:06:b9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4YrwJoRRAMNSRkHsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDYwNzIxMDAxMloXDTI2MDkwNTIxMDAxMlowLzEtMCsGA1UEAxMk MzNlZmQ1NzgtZjkzOS00YTkzLTgwNjItNGMyYWNhNDIwZjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+N01TyoYCNEPF8XE0u/vlG/An1XInFhBqZo e0MPOhh2t75ejQYRINRtV0bmQsj+ELEfIBlaQSssnqkhOU4pqtc2s/qVzIhaTc98 VM8UPTWbKgNvNo3zEy4N6FGeTZV0y6dh/7mSD9pqZXaIgdiY67rb+LsfMMlJk4x8 GSM1wrCDuGHCQfaWLJwMQEPMC2ce125F5PLQrHe38PYABHfW9UaSJPxxpvUCsTCE d4WpAvyM1XtTNNP9SiKfcygtSqXvbGHeWkogx8T2/QR8T4A1cHOaLohSPgPOyOeh YxM91sMCyAmeknQSN5vGkMyBIrLxjcDOcjG27V/iKGEfQJ1JWQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDfXYVjGcGKamIJEDCVvM9XQRf1dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjQ4NTdlY2YtNTVhMS0z YzEzLThhNjAtM2ExYTU1YTFjNDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGHVAfPXK0507GQ5nRkqHDR/k+iI49ikH0LgkIYFyNEUBVGGdR4o q2R/bTUOFc+1BxCJsNnrHAnU1l1sSgPb11F+Lie7Nilip9WDboPZDbefpGTLJg/o bWCzkadkbY6WcB3AMrRz3DPVET9JL2HFdYEFwrBlDd7n2+d3xut2YVgEr1V9AMuX Z1EB5YbR+BahWyE8pgRxxieaN5qZ4OvbqDWWQWiUolWZng1RiFH0nFq6vNmlRF3I mjogKRiXD249Dt48WdnBU14Jr/6ayG4dg6pPd7uidbdU0/ywMBTsUvLtl31zFwzM OsHK8ZkrD1V9d4b4wLMDMa/mAWTKyunaBrk= -----END CERTIFICATE-----Generated at Sat Jun 13 18:51:49 2026 by rpki-client