$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef4ff7e5-dea1-32ea-b988-a81a3516b5ec.roa File: ef4ff7e5-dea1-32ea-b988-a81a3516b5ec.roa (raw, json) Hash identifier: SnYv5DlERR5im+ST+S0BtguI0JgCA4b4aMQ5jeWlkzc= Subject key identifier: 0A:2D:64:F3:D4:FA:0B:0E:46:4F:55:4F:73:9E:D8:86:26:AA:1C:B4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E18AEFA953CEAE29C97A9B000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef4ff7e5-dea1-32ea-b988-a81a3516b5ec.roa Signing time: Sun 07 Jun 2026 21:00:12 +0000 ROA not before: Sun 07 Jun 2026 21:00:12 +0000 ROA not after: Sat 05 Sep 2026 21:00:12 +0000 asID: 396576 IP address blocks: 2001:500:127::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:18:ae:fa:95:3c:ea:e2:9c:97:a9:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 7 21:00:12 2026 GMT Not After : Sep 5 21:00:12 2026 GMT Subject: CN=388cb2c1-245a-449d-9701-9aa7f7553944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fc:79:3e:f2:f0:23:4f:34:1f:fa:ef:e2:5d: f8:90:ed:56:1f:73:fc:fa:15:4c:55:22:34:9a:2b: a6:9b:09:81:d0:fc:71:67:27:89:93:0d:51:82:a8: 19:c1:66:51:f1:48:18:a2:c9:f4:48:25:78:9e:22: eb:4b:40:34:ad:30:80:d5:68:26:f4:6e:a0:93:ae: 8f:3c:3c:52:62:6e:aa:12:e5:ad:42:32:e7:44:a0: 3c:dd:78:5d:32:75:df:3c:13:2f:49:23:67:69:fa: 85:3d:8a:53:80:f3:cb:9f:eb:56:e3:ce:96:88:03: ec:9a:5e:34:23:3a:64:5e:fa:4f:9b:bc:09:b6:0c: 18:10:34:41:79:19:96:cf:45:3d:fb:05:dd:6f:33: 37:60:f0:77:46:4d:8f:eb:8f:aa:15:a4:ce:87:4d: 98:0b:71:f3:83:b8:10:f2:3c:f5:f4:95:99:11:68: f4:e2:25:c8:6d:95:e0:d7:01:00:a9:ad:33:29:b0: a2:2a:5f:30:04:87:56:46:e4:28:88:54:26:4c:b1: c6:7d:20:78:b2:c2:6d:ea:26:d4:f6:32:85:f1:8a: ee:41:c1:bd:de:ec:b2:10:f5:58:a3:cf:51:36:7c: ec:2f:1a:1a:dc:a4:f3:87:89:51:9b:b8:d4:ab:2a: 90:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:2D:64:F3:D4:FA:0B:0E:46:4F:55:4F:73:9E:D8:86:26:AA:1C:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef4ff7e5-dea1-32ea-b988-a81a3516b5ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:a0:cf:0c:d4:9a:8e:5e:4d:31:85:ec:38:44:36:fc:9e:06: 16:e1:c6:3e:db:9b:ff:cc:29:56:99:f2:11:61:15:75:14:31: 58:51:da:c0:39:76:23:9a:62:09:f6:a9:88:5f:a6:3e:87:20: dd:ea:0d:d1:02:81:8c:17:4c:0c:52:0d:59:df:e2:1d:92:83: c9:26:63:15:ad:64:97:01:5d:76:c7:4b:d7:01:fa:f0:b4:d3: f9:cd:c3:da:08:b3:aa:c3:57:0a:89:14:e9:49:4d:c6:b2:a0: 36:43:9e:d0:06:03:3f:fe:5f:e0:9a:31:99:b1:8e:97:ee:a6: 89:77:56:cc:e6:d7:38:41:0c:d2:96:5d:27:d5:73:16:46:b2: 42:49:6e:43:b1:60:78:0f:d3:14:72:57:73:e1:60:af:71:2c: ff:ef:65:87:ae:40:8b:c5:f8:e5:7d:cc:ae:2b:81:03:89:7d: 9c:36:ce:eb:5d:ab:ec:e1:6a:91:2c:f3:1d:95:03:f0:2d:62: 8a:f8:3f:41:ca:ea:28:87:e0:ae:88:83:4d:aa:d8:6f:95:1d: 38:99:6d:0b:18:bd:cf:c6:00:e7:39:29:02:4e:c2:bf:10:e6: f1:72:b5:fd:56:b7:b2:ca:01:ae:1a:96:62:cd:43:9a:03:4f: 7f:82:eb:76 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4YrvqVPOrinJepsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDYwNzIxMDAxMloXDTI2MDkwNTIxMDAxMlowLzEtMCsGA1UEAxMk Mzg4Y2IyYzEtMjQ1YS00NDlkLTk3MDEtOWFhN2Y3NTUzOTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/x5PvLwI080H/rv4l34kO1WH3P8+hVMVSI0 miummwmB0PxxZyeJkw1RgqgZwWZR8UgYosn0SCV4niLrS0A0rTCA1Wgm9G6gk66P PDxSYm6qEuWtQjLnRKA83XhdMnXfPBMvSSNnafqFPYpTgPPLn+tW486WiAPsml40 IzpkXvpPm7wJtgwYEDRBeRmWz0U9+wXdbzM3YPB3Rk2P64+qFaTOh02YC3Hzg7gQ 8jz19JWZEWj04iXIbZXg1wEAqa0zKbCiKl8wBIdWRuQoiFQmTLHGfSB4ssJt6ibU 9jKF8YruQcG93uyyEPVYo89RNnzsLxoa3KTzh4lRm7jUqyqQeQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAotZPPU+gsORk9VT3Oe2IYmqhy0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWY0ZmY3ZTUtZGVhMS0z MmVhLWI5ODgtYTgxYTM1MTZiNWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH+gzwzUmo5eTTGF7DhENvyeBhbhxj7bm//MKVaZ8hFhFXUUMVhR 2sA5diOaYgn2qYhfpj6HIN3qDdECgYwXTAxSDVnf4h2Sg8kmYxWtZJcBXXbHS9cB +vC00/nNw9oIs6rDVwqJFOlJTcayoDZDntAGAz/+X+CaMZmxjpfupol3Vszm1zhB DNKWXSfVcxZGskJJbkOxYHgP0xRyV3PhYK9xLP/vZYeuQIvF+OV9zK4rgQOJfZw2 zutdq+zhapEs8x2VA/AtYor4P0HK6iiH4K6Ig02q2G+VHTiZbQsYvc/GAOc5KQJO wr8Q5vFytf1Wt7LKAa4almLNQ5oDT3+C63Y= -----END CERTIFICATE-----Generated at Sat Jun 13 16:03:17 2026 by rpki-client