$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df6dd3bd-c7a3-336c-a4c3-e53bcec83f0e.roa File: df6dd3bd-c7a3-336c-a4c3-e53bcec83f0e.roa (raw, json) Hash identifier: I43ZpDu7eYsoWIY1Acok5pOzaze+fYPY82I3yiTFM9E= Subject key identifier: 8C:39:78:47:43:88:11:C7:46:2C:2C:CE:3D:B6:EB:E6:98:7C:B0:77 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584DEC7B3DFB7C5899588B6B4A00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df6dd3bd-c7a3-336c-a4c3-e53bcec83f0e.roa Signing time: Sat 23 May 2026 01:00:25 +0000 ROA not before: Sat 23 May 2026 01:00:25 +0000 ROA not after: Fri 21 Aug 2026 01:00:25 +0000 asID: 397210 IP address blocks: 2001:500:125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ec:7b:3d:fb:7c:58:99:58:8b:6b:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 23 01:00:25 2026 GMT Not After : Aug 21 01:00:25 2026 GMT Subject: CN=df2a9a73-021e-4541-81fc-fceb00060e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:13:6e:65:37:bf:a6:fa:b1:4e:f9:a2:fb:36: 04:6d:79:6a:8d:31:41:11:e3:47:db:ac:41:73:2c: 41:8c:58:32:f6:ac:2b:2f:4b:25:a2:e7:20:c7:7f: 35:68:a3:9a:c6:c0:f9:ac:6c:fe:9e:3c:f8:21:a5: 0e:a9:93:02:2e:2f:92:15:b5:a6:0f:11:b1:c8:fc: 88:f4:1b:ac:df:27:02:5a:37:49:c1:cb:e2:b9:e4: 85:48:2d:48:b1:e6:c2:30:99:a5:46:ce:47:92:46: 1c:5e:f2:7f:67:f3:21:cb:af:e2:33:30:64:68:2b: 50:5b:6a:80:d4:9e:15:13:3c:dc:ec:78:2c:1b:68: b5:69:91:8d:85:df:6b:6b:5f:a4:c6:6c:4b:ac:f3: b5:cf:82:ba:7d:85:c6:d1:be:42:46:fe:e7:81:8b: 2b:5d:90:a9:3e:70:bc:9e:da:e6:26:53:41:e4:65: d9:81:ec:f1:f9:5b:2f:3e:ed:23:02:62:b4:7d:ae: 1f:4d:da:9a:ae:f3:46:34:d8:22:b6:96:3e:f1:ee: 29:a4:db:b1:f2:93:12:13:64:37:5d:8d:af:e0:80: f0:35:1d:d9:e4:a0:5e:d7:5c:d0:45:84:6b:cc:cb: 31:0e:a5:71:34:84:76:3f:94:7b:4b:9b:10:9c:0f: 1d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:39:78:47:43:88:11:C7:46:2C:2C:CE:3D:B6:EB:E6:98:7C:B0:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df6dd3bd-c7a3-336c-a4c3-e53bcec83f0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:72:4f:f3:a9:2a:94:6f:1e:67:a6:04:9c:77:6d:94:89:d8: b9:e5:99:e1:7c:5e:4e:a5:49:39:f8:1e:3a:c2:da:c0:d7:95: b3:3a:75:a7:f1:8a:a4:b2:d5:c9:ac:89:fa:37:5a:c6:cb:83: 23:7a:46:3d:65:00:43:7f:5e:65:39:ba:d0:1d:8d:01:8a:fd: b5:d8:26:16:ff:16:18:72:ac:02:88:11:07:d0:e1:9c:25:8d: ba:ab:15:06:41:4b:1b:85:2f:cb:4d:8c:cf:3e:62:13:c7:31: bb:7d:a8:25:13:98:54:be:67:03:15:31:1e:56:a4:2a:ec:1e: 1e:c7:18:84:f1:6b:af:d5:9f:68:db:c7:37:53:b9:35:5b:3a: c2:55:f7:66:3d:e0:c3:b7:00:be:8a:11:fc:08:1d:09:38:44: 85:6f:4c:fe:53:a3:7e:41:67:2c:62:96:22:c4:49:e1:06:f8: c1:b3:81:7d:cb:38:3a:5f:56:ec:b0:e1:b1:4f:45:90:e3:f9: 29:8b:de:4c:3c:a5:b1:fd:b7:ef:8d:0f:01:08:80:aa:d1:09: 0a:a1:48:f2:17:3c:0a:9e:ad:3d:97:2f:54:64:8d:3a:17:9b: e2:2f:a5:87:78:4d:d3:b1:e5:20:50:86:6e:4f:43:e3:0e:47: 2e:2e:e4:53 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3sez37fFiZWItrSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDUyMzAxMDAyNVoXDTI2MDgyMTAxMDAyNVowLzEtMCsGA1UEAxMk ZGYyYTlhNzMtMDIxZS00NTQxLTgxZmMtZmNlYjAwMDYwZTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRNuZTe/pvqxTvmi+zYEbXlqjTFBEeNH26xB cyxBjFgy9qwrL0sloucgx381aKOaxsD5rGz+njz4IaUOqZMCLi+SFbWmDxGxyPyI 9Bus3ycCWjdJwcviueSFSC1IsebCMJmlRs5HkkYcXvJ/Z/Mhy6/iMzBkaCtQW2qA 1J4VEzzc7HgsG2i1aZGNhd9ra1+kxmxLrPO1z4K6fYXG0b5CRv7ngYsrXZCpPnC8 ntrmJlNB5GXZgezx+VsvPu0jAmK0fa4fTdqarvNGNNgitpY+8e4ppNux8pMSE2Q3 XY2v4IDwNR3Z5KBe11zQRYRrzMsxDqVxNIR2P5R7S5sQnA8d6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIw5eEdDiBHHRiwszj226+aYfLB3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGY2ZGQzYmQtYzdhMy0z MzZjLWE0YzMtZTUzYmNlYzgzZjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFxyT/OpKpRvHmemBJx3bZSJ2LnlmeF8Xk6lSTn4HjrC2sDXlbM6 dafxiqSy1cmsifo3WsbLgyN6Rj1lAEN/XmU5utAdjQGK/bXYJhb/FhhyrAKIEQfQ 4ZwljbqrFQZBSxuFL8tNjM8+YhPHMbt9qCUTmFS+ZwMVMR5WpCrsHh7HGITxa6/V n2jbxzdTuTVbOsJV92Y94MO3AL6KEfwIHQk4RIVvTP5To35BZyxiliLESeEG+MGz gX3LODpfVuyw4bFPRZDj+SmL3kw8pbH9t++NDwEIgKrRCQqhSPIXPAqerT2XL1Rk jToXm+IvpYd4TdOx5SBQhm5PQ+MORy4u5FM= -----END CERTIFICATE-----Generated at Sat Jun 13 17:57:26 2026 by rpki-client