$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d21bd2f9-6863-30cc-a362-c3b2a0221200.roa File: d21bd2f9-6863-30cc-a362-c3b2a0221200.roa (raw, json) Hash identifier: HfWnB4MqBHzM3SjvUlTp/vPTRjCs/u0K5E4QJO7oSiU= Subject key identifier: 4C:5A:F0:BF:8C:60:3B:D7:39:4D:24:BC:E4:E0:0F:41:7C:FC:89:92 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E00062C9AAEA89B859B3EFCC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d21bd2f9-6863-30cc-a362-c3b2a0221200.roa Signing time: Sat 30 May 2026 01:00:10 +0000 ROA not before: Sat 30 May 2026 01:00:10 +0000 ROA not after: Fri 28 Aug 2026 01:00:10 +0000 asID: 397208 IP address blocks: 2001:500:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:06:2c:9a:ae:a8:9b:85:9b:3e:fc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 30 01:00:10 2026 GMT Not After : Aug 28 01:00:10 2026 GMT Subject: CN=0d36e29a-e080-4a23-9082-8829f47806d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d2:fd:e4:dd:f4:05:c8:69:ba:35:fb:31:20: 5a:60:6c:4c:b2:da:91:9a:b2:a4:d1:35:3a:43:97: 9d:96:f0:86:18:d0:98:4f:c3:4f:23:fb:76:3b:33: bc:fe:dd:0d:c2:9e:59:7e:92:77:00:80:e7:70:c0: 16:1e:3e:c6:8b:96:fb:f6:4b:2b:11:d3:58:88:5d: 34:87:8b:cd:36:f2:dc:80:a9:72:ad:d5:45:83:fd: b9:b9:03:d9:78:0a:e0:f9:b0:22:69:61:e1:18:9e: d1:60:1a:1a:f8:e7:95:72:8f:db:0d:a9:19:ec:bd: 23:9c:20:1a:39:c0:7f:f8:4b:f2:d5:13:f0:21:cf: 0a:f3:55:10:f6:af:8c:b5:69:69:2a:25:89:07:a9: 3f:1c:2d:53:2d:16:9e:b4:65:c1:54:72:09:a6:c1: aa:b4:c5:47:23:5f:13:8a:82:1b:79:25:ff:7b:22: 4a:7f:9b:55:3f:1f:7d:51:ca:30:96:18:11:08:70: 9e:13:73:4a:75:8b:78:ff:a9:05:c5:6d:6c:fc:ba: c5:c4:60:b4:a9:8a:88:f2:77:00:71:2e:e1:f1:80: a8:11:3d:f0:3c:0f:5f:8f:b8:6c:74:9e:45:d1:fb: a6:25:2b:6f:31:53:0f:30:b6:3a:55:94:7f:25:19: 24:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:5A:F0:BF:8C:60:3B:D7:39:4D:24:BC:E4:E0:0F:41:7C:FC:89:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d21bd2f9-6863-30cc-a362-c3b2a0221200.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:af:e9:cf:56:e2:a1:5d:dd:6c:95:65:e3:32:56:8d:9f:c5: ed:cf:fe:a8:f7:29:cb:60:31:3a:fa:be:3e:49:b9:be:65:79: 35:87:21:c5:13:fb:e4:00:e7:6d:24:e3:46:50:c7:ef:3a:ed: 33:74:08:c6:6c:6a:dd:ef:06:4c:19:52:8c:5a:f5:26:bc:38: 84:61:97:1a:f9:c6:1b:27:51:87:4d:42:ec:cb:21:d0:5b:3e: c3:7f:dc:9d:6d:42:84:69:5d:21:18:06:5c:22:2f:e1:a0:32: e4:27:a9:96:cd:c5:c9:bc:43:a1:7b:a3:ae:da:a4:25:e8:8c: 4d:b9:43:71:aa:1a:ef:ee:a2:5a:0c:42:d9:88:08:a7:0b:fe: fa:f6:ec:7e:82:82:ad:db:46:28:a1:cd:70:85:ec:d7:ab:1d: d9:af:1d:c4:ae:7b:8d:ae:e4:cd:60:50:42:b9:7a:fc:9d:23: 0d:13:49:f2:1e:36:e9:c0:a8:e2:38:ab:e3:de:4c:5e:f6:c1: c4:45:53:a6:94:ff:d0:9c:98:dd:a4:ab:d5:b1:80:fa:da:35: b7:af:16:ac:5f:bb:a3:d9:be:48:55:4d:18:3b:46:92:cb:d7: 54:59:5e:29:20:21:1e:e7:99:ae:c6:72:ff:94:8f:3a:82:59: b5:99:c5:f3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4ABiyarqibhZs+/MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk MGQzNmUyOWEtZTA4MC00YTIzLTkwODItODgyOWY0NzgwNmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dL95N30BchpujX7MSBaYGxMstqRmrKk0TU6 Q5edlvCGGNCYT8NPI/t2OzO8/t0Nwp5ZfpJ3AIDncMAWHj7Gi5b79ksrEdNYiF00 h4vNNvLcgKlyrdVFg/25uQPZeArg+bAiaWHhGJ7RYBoa+OeVco/bDakZ7L0jnCAa OcB/+Evy1RPwIc8K81UQ9q+MtWlpKiWJB6k/HC1TLRaetGXBVHIJpsGqtMVHI18T ioIbeSX/eyJKf5tVPx99UcowlhgRCHCeE3NKdYt4/6kFxW1s/LrFxGC0qYqI8ncA cS7h8YCoET3wPA9fj7hsdJ5F0fumJStvMVMPMLY6VZR/JRkkXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFExa8L+MYDvXOU0kvOTgD0F8/ImSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDIxYmQyZjktNjg2My0z MGNjLWEzNjItYzNiMmEwMjIxMjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALiv6c9W4qFd3WyVZeMyVo2fxe3P/qj3KctgMTr6vj5Jub5leTWH IcUT++QA520k40ZQx+867TN0CMZsat3vBkwZUoxa9Sa8OIRhlxr5xhsnUYdNQuzL IdBbPsN/3J1tQoRpXSEYBlwiL+GgMuQnqZbNxcm8Q6F7o67apCXojE25Q3GqGu/u oloMQtmICKcL/vr27H6Cgq3bRiihzXCF7NerHdmvHcSue42u5M1gUEK5evydIw0T SfIeNunAqOI4q+PeTF72wcRFU6aU/9CcmN2kq9WxgPraNbevFqxfu6PZvkhVTRg7 RpLL11RZXikgIR7nma7Gcv+UjzqCWbWZxfM= -----END CERTIFICATE-----Generated at Sat Jun 13 22:11:12 2026 by rpki-client