$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd0e8984-e399-392b-8140-ba8369c491ab.roa File: cd0e8984-e399-392b-8140-ba8369c491ab.roa (raw, json) Hash identifier: OYvY+kPAO+wH+LPw8NENCz6xR1nftxsMFzulR1/ncYY= Subject key identifier: F5:7C:F1:7E:E9:ED:D0:E2:A6:5F:66:07:2B:22:D7:CE:B0:B4:0A:7A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EA79CF0B1A13DF01B7A5C3180 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd0e8984-e399-392b-8140-ba8369c491ab.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396617 IP address blocks: 2001:500:134::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:f0:b1:a1:3d:f0:1b:7a:5c:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=1b3916e9-b6fe-4fc6-b790-a75ef58a5d0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:77:1a:99:5a:1a:35:38:d8:3f:13:6c:d5:cd: bf:8c:8d:a4:75:9a:b6:a7:9a:bb:fc:19:3b:f2:26: 24:65:ff:d4:47:d0:dc:53:6f:c7:ee:c7:18:3e:64: e1:da:51:65:ea:37:61:8f:01:0b:8b:e5:be:7a:4d: ee:ce:a3:75:58:e9:73:36:ae:b4:da:82:69:8c:8a: be:f8:5f:85:e8:32:44:ff:c4:53:ca:e6:db:c5:fa: 62:d1:5d:92:66:ae:04:22:21:db:00:de:fd:c4:23: 50:16:b6:34:cb:ff:b4:24:c8:28:f0:49:2b:58:eb: 74:84:b8:cd:a9:c0:9d:41:42:06:a4:a1:e4:f6:7e: 36:3e:1f:87:57:fd:a9:66:a8:4e:ae:42:fa:b0:2c: e8:86:16:36:a2:90:92:2b:93:73:9e:29:20:7b:9c: 84:13:cb:93:59:f0:03:e7:15:00:e9:ce:2c:75:b9: 24:a6:f3:f0:bb:99:b6:d9:d6:ac:0f:4f:53:82:51: 40:1e:2a:5a:62:66:01:b5:a6:c4:0c:bf:e1:1e:f1: 2e:49:ea:4f:5f:54:fb:9f:e5:56:3a:0e:c0:10:2c: b8:88:cd:7c:e6:97:f9:fd:65:a4:de:e5:e9:cd:45: d1:8b:d0:b3:42:7c:86:63:f6:ca:62:4a:75:a5:44: 3b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:7C:F1:7E:E9:ED:D0:E2:A6:5F:66:07:2B:22:D7:CE:B0:B4:0A:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd0e8984-e399-392b-8140-ba8369c491ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:134::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:3f:62:a1:90:4c:3f:68:0b:77:c3:a5:39:e6:54:3e:c3:92: 99:51:37:39:2b:bd:97:e0:a6:6c:e1:9e:e9:5b:2c:2e:ed:50: fe:69:a1:c7:aa:a6:f9:e2:3f:11:38:5a:f8:96:a7:90:0d:3e: 72:2b:23:0a:e0:6e:dd:1c:d6:4a:98:46:e9:1f:12:b0:a9:0f: ee:87:9a:5a:95:53:f0:f6:45:b9:a5:b8:76:8e:51:0c:2f:af: 4a:fc:eb:6f:18:96:f1:a5:c0:cf:3c:33:e3:59:81:08:bc:00: 62:ee:20:7b:f3:01:d1:d6:e7:a7:fe:0c:99:74:32:c7:76:c8: 33:d8:89:80:48:d5:70:b7:d3:51:1d:4e:7c:f4:ea:1b:0f:cb: 51:85:d3:c1:34:9e:10:87:3c:13:a1:58:40:f1:4a:4c:0f:d9: cb:dc:56:77:d3:3d:ad:97:8b:eb:6b:8c:29:d4:c2:6a:5f:22: 72:d7:98:54:5a:52:87:af:45:8c:87:2b:38:c7:a0:c8:e0:60: 55:80:9b:3b:fb:b7:38:24:63:8c:70:34:5c:84:ca:a3:a1:1d: e8:a7:1b:6c:68:29:26:48:e8:6a:05:32:29:f2:01:12:c3:12: 49:67:5c:24:a2:71:03:6c:20:07:a1:40:c8:ac:03:0d:24:56: 0a:5c:ff:48 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nnPCxoT3wG3pcMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MWIzOTE2ZTktYjZmZS00ZmM2LWI3OTAtYTc1ZWY1OGE1ZDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjncamVoaNTjYPxNs1c2/jI2kdZq2p5q7/Bk7 8iYkZf/UR9DcU2/H7scYPmTh2lFl6jdhjwELi+W+ek3uzqN1WOlzNq602oJpjIq+ +F+F6DJE/8RTyubbxfpi0V2SZq4EIiHbAN79xCNQFrY0y/+0JMgo8EkrWOt0hLjN qcCdQUIGpKHk9n42Ph+HV/2pZqhOrkL6sCzohhY2opCSK5Nznikge5yEE8uTWfAD 5xUA6c4sdbkkpvPwu5m22dasD09TglFAHipaYmYBtabEDL/hHvEuSepPX1T7n+VW Og7AECy4iM185pf5/WWk3uXpzUXRi9CzQnyGY/bKYkp1pUQ7jQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPV88X7p7dDipl9mBysi186wtAp6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2QwZTg5ODQtZTM5OS0z OTJiLTgxNDAtYmE4MzY5YzQ5MWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ0/YqGQTD9oC3fDpTnmVD7DkplRNzkrvZfgpmzhnulbLC7tUP5p oceqpvniPxE4WviWp5ANPnIrIwrgbt0c1kqYRukfErCpD+6HmlqVU/D2RbmluHaO UQwvr0r8628YlvGlwM88M+NZgQi8AGLuIHvzAdHW56f+DJl0Msd2yDPYiYBI1XC3 01EdTnz06hsPy1GF08E0nhCHPBOhWEDxSkwP2cvcVnfTPa2Xi+trjCnUwmpfInLX mFRaUoevRYyHKzjHoMjgYFWAmzv7tzgkY4xwNFyEyqOhHeinG2xoKSZI6GoFMiny ARLDEklnXCSicQNsIAehQMisAw0kVgpc/0g= -----END CERTIFICATE-----Generated at Wed Jul 29 06:21:20 2026 by rpki-client