$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8affc96-6389-3459-8b74-cc42c6f34d56.roa File: b8affc96-6389-3459-8b74-cc42c6f34d56.roa (raw, json) Hash identifier: apnseaP310mWssd2pwBvWjtFrXTInwkcQ+pCCtFCw/k= Subject key identifier: 1A:BF:3B:CC:3E:CE:FE:E9:5F:7A:D1:BA:D6:E4:FE:B6:70:79:BF:03 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584DEC7B44E3D2E042C578CA3980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8affc96-6389-3459-8b74-cc42c6f34d56.roa Signing time: Sat 23 May 2026 01:00:25 +0000 ROA not before: Sat 23 May 2026 01:00:25 +0000 ROA not after: Fri 21 Aug 2026 01:00:25 +0000 asID: 396591 IP address blocks: 2001:500:125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ec:7b:44:e3:d2:e0:42:c5:78:ca:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 23 01:00:25 2026 GMT Not After : Aug 21 01:00:25 2026 GMT Subject: CN=59d2a891-28f8-4502-b66b-2a9b9ce7803f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3b:5f:2d:99:61:d6:58:14:b3:9e:fc:13:67: b7:db:6e:3b:a8:42:45:c2:fb:b2:f5:a9:04:4a:54: 60:d3:c6:01:ed:2f:ba:e2:8f:90:e4:b3:5d:3f:5e: 7c:36:5e:e2:fe:a0:90:52:b9:ba:cb:fc:fb:67:7f: 83:9c:9f:e2:ba:97:1b:d2:a2:2e:90:2a:c6:c9:7c: 05:7d:74:e9:59:ef:b5:e5:20:28:4f:25:f1:35:90: b5:6e:87:fd:0b:20:fe:35:3a:f8:97:38:22:17:79: 21:58:6b:7e:20:84:b7:9b:03:1e:4c:e5:99:3e:4b: 83:f8:a7:9e:09:2b:9e:fc:6d:af:73:3c:59:ed:6f: bc:d9:29:25:c4:08:ca:87:ac:a9:86:61:37:4c:48: 42:c8:23:1b:42:b2:cf:f0:49:2e:5c:78:b6:bb:0b: 0f:ea:76:9e:04:16:ce:f0:b8:09:04:9f:82:94:2a: b2:9e:88:f7:22:86:24:93:1e:7f:77:41:62:45:4f: c0:1e:4b:91:b2:e2:3e:af:3d:32:af:60:52:12:77: 61:c5:65:57:9b:e2:f3:57:e2:b6:ba:1b:c7:f9:61: a9:6f:61:37:b8:1e:0c:67:56:8a:12:59:94:13:49: a2:66:62:ac:57:e5:0f:e7:7f:86:01:d2:ff:6b:0d: 05:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:BF:3B:CC:3E:CE:FE:E9:5F:7A:D1:BA:D6:E4:FE:B6:70:79:BF:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8affc96-6389-3459-8b74-cc42c6f34d56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:c0:47:7e:8f:ca:2e:a0:dd:7e:e2:1c:c1:13:0a:78:96:0a: fa:ce:54:04:61:d0:a1:f9:1e:cd:df:20:dd:90:1c:d2:d2:34: 50:d4:4d:58:85:51:f1:85:92:2a:a6:ee:73:91:76:eb:c6:8c: f2:35:d4:3b:09:1d:c3:79:2d:42:d4:47:02:a0:94:22:42:cb: ba:ca:2e:39:e9:f2:9b:03:51:91:ff:de:31:a7:77:c8:cf:94: d3:85:b2:17:2f:bb:4d:20:67:cb:a8:4c:78:32:5e:fc:a1:40: 38:4c:4c:11:6b:62:b9:42:e9:d0:c1:68:94:57:f1:8f:4b:6a: b5:78:81:f9:57:61:6b:4e:8b:5c:65:56:fe:ed:3e:9a:39:9c: b2:24:56:73:4d:4d:2c:62:7c:78:27:6e:2c:84:59:4a:8f:38: 81:d4:86:9e:40:9f:a8:9d:14:d5:ba:10:f1:fb:ae:08:e2:a9: 82:f2:5f:34:c8:62:9e:14:f8:58:a9:8f:b2:c3:6d:2c:dc:d9: 0e:20:1c:2f:47:0e:15:1b:5c:49:48:d3:d8:95:87:f3:f4:38: d7:65:3a:b8:f9:ca:95:ea:79:bd:3c:b8:28:a2:6d:19:b5:70: aa:d1:20:79:37:ec:ac:00:da:f5:e8:e5:3c:72:12:05:ad:0d: 86:34:3b:01 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3se0Tj0uBCxXjKOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDUyMzAxMDAyNVoXDTI2MDgyMTAxMDAyNVowLzEtMCsGA1UEAxMk NTlkMmE4OTEtMjhmOC00NTAyLWI2NmItMmE5YjljZTc4MDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjztfLZlh1lgUs578E2e32247qEJFwvuy9akE SlRg08YB7S+64o+Q5LNdP158Nl7i/qCQUrm6y/z7Z3+DnJ/iupcb0qIukCrGyXwF fXTpWe+15SAoTyXxNZC1bof9CyD+NTr4lzgiF3khWGt+IIS3mwMeTOWZPkuD+Kee CSue/G2vczxZ7W+82SklxAjKh6yphmE3TEhCyCMbQrLP8EkuXHi2uwsP6naeBBbO 8LgJBJ+ClCqynoj3IoYkkx5/d0FiRU/AHkuRsuI+rz0yr2BSEndhxWVXm+LzV+K2 uhvH+WGpb2E3uB4MZ1aKElmUE0miZmKsV+UP53+GAdL/aw0F6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBq/O8w+zv7pX3rRutbk/rZweb8DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjhhZmZjOTYtNjM4OS0z NDU5LThiNzQtY2M0MmM2ZjM0ZDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKXAR36Pyi6g3X7iHMETCniWCvrOVARh0KH5Hs3fIN2QHNLSNFDU TViFUfGFkiqm7nORduvGjPI11DsJHcN5LULURwKglCJCy7rKLjnp8psDUZH/3jGn d8jPlNOFshcvu00gZ8uoTHgyXvyhQDhMTBFrYrlC6dDBaJRX8Y9LarV4gflXYWtO i1xlVv7tPpo5nLIkVnNNTSxifHgnbiyEWUqPOIHUhp5An6idFNW6EPH7rgjiqYLy XzTIYp4U+Fipj7LDbSzc2Q4gHC9HDhUbXElI09iVh/P0ONdlOrj5ypXqeb08uCii bRm1cKrRIHk37KwA2vXo5TxyEgWtDYY0OwE= -----END CERTIFICATE-----Generated at Sat Jun 13 17:32:01 2026 by rpki-client