$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c309a9c3-3779-31cd-b437-b0ae44209a05.roa File: c309a9c3-3779-31cd-b437-b0ae44209a05.roa (raw, json) Hash identifier: uF8OXkRVdqe1BZC/pZQEm16XvUfDguo1lCkTHF1/0r8= Subject key identifier: 14:B5:20:18:A8:1B:AE:6F:B7:31:4D:34:9D:34:C4:D4:18:49:F9:71 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E000634B07332B7F5B8418B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c309a9c3-3779-31cd-b437-b0ae44209a05.roa Signing time: Sat 30 May 2026 01:00:10 +0000 ROA not before: Sat 30 May 2026 01:00:10 +0000 ROA not after: Fri 28 Aug 2026 01:00:10 +0000 asID: 397200 IP address blocks: 2001:500:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:06:34:b0:73:32:b7:f5:b8:41:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 30 01:00:10 2026 GMT Not After : Aug 28 01:00:10 2026 GMT Subject: CN=985dfb24-1b2e-4105-a4cb-9aa12cf31899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0c:5c:6e:0d:42:17:6f:87:d1:47:81:ee:ce: 38:92:71:60:fb:34:b3:a7:87:5c:58:b8:01:52:7b: 2b:23:a7:f8:ef:21:41:35:98:47:81:14:bc:10:ad: ea:ee:e3:bf:9f:0c:ad:e5:a5:17:55:92:5e:ec:be: 25:01:31:0f:ab:9a:2f:30:ff:fd:12:d4:7c:f1:fd: 3d:f5:78:d3:9e:34:cb:ee:0d:2e:a1:54:8d:2f:fd: c1:f5:9a:54:36:3b:3a:25:08:28:2b:76:98:8b:82: 8b:b3:95:bf:53:61:bc:02:e0:ac:76:55:63:20:fc: be:19:fe:d8:03:90:03:c7:9f:52:9c:9f:fa:1d:dd: e4:4a:56:c8:cc:f3:76:db:93:0d:95:33:29:c4:35: 77:a2:74:75:fc:7a:6e:d8:86:71:66:c0:30:8c:be: 67:ce:9d:9c:9c:f5:4a:19:91:25:85:bf:7f:84:b5: 0d:ab:d2:f7:a5:56:e2:04:81:2d:c4:57:18:ac:6c: 6c:bf:7f:42:21:09:ec:d6:2a:9d:03:a1:1e:aa:ae: 85:b8:7a:a3:5c:63:28:20:33:f2:54:6d:04:67:86: a9:c9:a9:d8:76:a4:33:52:03:2a:ac:3f:fe:64:a8: f5:b0:82:74:33:e9:1b:8c:ac:03:48:f8:98:2f:f0: 6b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B5:20:18:A8:1B:AE:6F:B7:31:4D:34:9D:34:C4:D4:18:49:F9:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c309a9c3-3779-31cd-b437-b0ae44209a05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:63:bf:63:25:6d:a3:e4:c0:0f:72:ff:77:71:4d:ae:fe:c5: 1f:d7:73:42:38:02:35:ba:a8:47:5f:60:3e:ca:24:3b:0e:1c: 12:df:09:fd:9c:1d:b8:ad:fa:28:28:c5:f5:c8:51:a2:ca:0c: 39:03:19:7d:fc:14:55:57:59:0a:6f:be:61:fe:25:fa:01:08: 18:6a:af:60:90:c3:3f:18:a7:60:4b:78:d9:06:90:0f:6e:e6: 33:91:2b:a0:4c:74:a7:b6:12:a6:1a:65:27:86:5d:e9:9e:c2: 93:14:86:47:13:70:77:ea:30:14:18:13:d0:c7:59:a4:9b:4b: ba:e4:71:70:02:27:0e:23:b5:0d:aa:75:cf:5c:6a:15:32:4e: 45:38:92:a2:40:bf:b2:c7:b1:81:6c:75:36:56:cb:34:13:dc: 9d:8d:92:30:02:e4:16:a0:a9:66:96:42:31:68:1a:25:00:79: ba:0e:5d:7d:d0:72:18:86:8e:ae:91:cf:aa:6c:0b:a0:4b:75: a1:3d:4f:d0:55:1d:4e:7c:25:89:a6:cb:7f:83:0c:fa:90:16: 5c:a8:6c:c1:b5:ac:82:07:01:86:23:23:5f:a2:5e:53:98:cc: bf:5a:9d:3f:c8:22:d5:75:90:57:7e:6a:8a:1a:78:21:16:91: b6:f4:7b:6b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4ABjSwczK39bhBi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk OTg1ZGZiMjQtMWIyZS00MTA1LWE0Y2ItOWFhMTJjZjMxODk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgxcbg1CF2+H0UeB7s44knFg+zSzp4dcWLgB UnsrI6f47yFBNZhHgRS8EK3q7uO/nwyt5aUXVZJe7L4lATEPq5ovMP/9EtR88f09 9XjTnjTL7g0uoVSNL/3B9ZpUNjs6JQgoK3aYi4KLs5W/U2G8AuCsdlVjIPy+Gf7Y A5ADx59SnJ/6Hd3kSlbIzPN225MNlTMpxDV3onR1/Hpu2IZxZsAwjL5nzp2cnPVK GZElhb9/hLUNq9L3pVbiBIEtxFcYrGxsv39CIQns1iqdA6Eeqq6FuHqjXGMoIDPy VG0EZ4apyanYdqQzUgMqrD/+ZKj1sIJ0M+kbjKwDSPiYL/BrHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBS1IBioG65vtzFNNJ00xNQYSflxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzMwOWE5YzMtMzc3OS0z MWNkLWI0MzctYjBhZTQ0MjA5YTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADtjv2MlbaPkwA9y/3dxTa7+xR/Xc0I4AjW6qEdfYD7KJDsOHBLf Cf2cHbit+igoxfXIUaLKDDkDGX38FFVXWQpvvmH+JfoBCBhqr2CQwz8Yp2BLeNkG kA9u5jORK6BMdKe2EqYaZSeGXemewpMUhkcTcHfqMBQYE9DHWaSbS7rkcXACJw4j tQ2qdc9cahUyTkU4kqJAv7LHsYFsdTZWyzQT3J2NkjAC5BagqWaWQjFoGiUAeboO XX3QchiGjq6Rz6psC6BLdaE9T9BVHU58JYmmy3+DDPqQFlyobMG1rIIHAYYjI1+i XlOYzL9anT/IItV1kFd+aooaeCEWkbb0e2s= -----END CERTIFICATE-----Generated at Sat Jun 13 19:35:45 2026 by rpki-client