$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2ac9d71-2f2d-373b-86a3-fd82fb46cc06.roa File: f2ac9d71-2f2d-373b-86a3-fd82fb46cc06.roa (raw, json) Hash identifier: OgPz7oP0xI1L7Q4yJ0M4LSLl7WNRAoqPX6niCGYXgds= Subject key identifier: C2:0E:1F:09:14:B6:19:C5:A6:03:2C:3E:09:92:60:FC:46:C4:5E:13 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E000608A293FF23F5565F7800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2ac9d71-2f2d-373b-86a3-fd82fb46cc06.roa Signing time: Sat 30 May 2026 01:00:10 +0000 ROA not before: Sat 30 May 2026 01:00:10 +0000 ROA not after: Fri 28 Aug 2026 01:00:10 +0000 asID: 396594 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:06:08:a2:93:ff:23:f5:56:5f:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 30 01:00:10 2026 GMT Not After : Aug 28 01:00:10 2026 GMT Subject: CN=382e1a3f-04ae-4077-8999-d948a17b311f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2e:34:8d:28:54:26:cf:c0:10:ea:41:34:9b: 89:2c:17:23:54:2c:22:56:3b:4f:bf:90:e0:34:45: 6c:5b:6d:ae:ea:15:cd:00:b7:2a:2a:95:6a:a2:e8: 2d:15:7b:76:9f:3c:1c:24:32:79:93:c0:90:d8:7a: 85:fc:f7:4c:23:84:1a:5f:90:54:81:c6:ed:24:d5: 6e:53:6d:de:16:90:f1:00:0f:de:a5:41:01:d1:84: b1:d5:2a:db:da:2d:e8:dd:f0:2d:c4:a4:2b:2d:bd: ea:ff:7e:1d:8c:f5:bb:db:e7:5b:4f:02:96:e6:8d: 24:11:13:71:1f:27:58:f6:4d:38:ba:22:00:fa:14: 1b:7c:f1:18:99:fe:ce:31:4c:7e:a9:25:77:9a:2a: 64:d6:6e:bd:cd:5d:c5:2a:59:5f:80:13:39:3c:72: f4:23:a1:5c:7c:b2:29:9e:44:c3:0b:6b:4a:99:a1: bd:54:33:9c:f7:92:67:f2:48:24:fb:cc:b3:d2:e6: 01:b7:2a:48:25:e1:f9:fe:c0:71:37:ed:6b:82:27: 70:b3:c9:c9:b4:94:92:7f:22:da:79:57:7e:f0:f5: c5:6e:d7:1d:9d:0c:ee:53:95:c5:f9:22:25:6a:6f: cd:fd:0f:c4:e5:cf:ea:71:e6:f3:7d:8f:e4:3f:c5: 40:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:0E:1F:09:14:B6:19:C5:A6:03:2C:3E:09:92:60:FC:46:C4:5E:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2ac9d71-2f2d-373b-86a3-fd82fb46cc06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:00:9f:c7:7f:bc:c9:b1:95:97:8a:bd:7a:46:e3:a4:2f:23: 8c:13:3b:b7:3a:51:84:58:8a:23:30:88:a7:a5:de:ff:0c:a3: 23:55:2d:03:89:16:17:d0:62:7a:b7:0b:e4:f0:7c:e2:db:08: e2:e4:9e:a7:30:ac:52:0f:31:b5:87:8b:f2:ad:b1:9a:4c:0b: 2f:0a:29:62:c7:b7:0d:7e:ba:2f:52:1b:eb:8b:a8:47:5b:96: e9:b5:93:57:0b:87:ee:67:5c:f0:b9:6c:b3:a6:50:e6:50:ca: 2a:5e:b0:ac:8d:37:4c:5c:2a:0c:c4:5e:ae:84:07:d0:4f:18: 9f:78:b5:e4:81:f8:75:b3:7a:4d:42:fb:61:4f:c3:ff:29:c6: 02:8c:6a:df:e1:22:2e:f9:08:5f:80:0d:68:59:be:7f:13:66: 2c:41:be:5e:92:16:53:38:4f:76:a3:c5:b6:f2:16:bb:a8:8b: b2:5a:17:47:ce:07:e1:20:d1:b9:1c:dc:6b:bb:2e:39:e7:e0: 07:d1:84:fd:5c:fc:a0:d1:04:16:87:61:0e:61:69:37:b4:9d: bc:03:52:a3:4c:a0:c8:9d:ba:ae:7f:ab:3f:64:83:0b:63:6d: a7:7f:d5:55:df:4b:33:e5:94:9f:07:2b:8f:36:d5:4c:a0:32: 37:a8:d4:d4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE4ABgiik/8j9VZfeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk MzgyZTFhM2YtMDRhZS00MDc3LTg5OTktZDk0OGExN2IzMTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAli40jShUJs/AEOpBNJuJLBcjVCwiVjtPv5Dg NEVsW22u6hXNALcqKpVqougtFXt2nzwcJDJ5k8CQ2HqF/PdMI4QaX5BUgcbtJNVu U23eFpDxAA/epUEB0YSx1Srb2i3o3fAtxKQrLb3q/34djPW72+dbTwKW5o0kERNx HydY9k04uiIA+hQbfPEYmf7OMUx+qSV3mipk1m69zV3FKllfgBM5PHL0I6FcfLIp nkTDC2tKmaG9VDOc95Jn8kgk+8yz0uYBtypIJeH5/sBxN+1rgidws8nJtJSSfyLa eVd+8PXFbtcdnQzuU5XF+SIlam/N/Q/E5c/qcebzfY/kP8VAvQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMIOHwkUthnFpgMsPgmSYPxGxF4TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjJhYzlkNzEtMmYyZC0z NzNiLTg2YTMtZmQ4MmZiNDZjYzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAvAJ/Hf7zJsZWXir16RuOkLyOMEzu3OlGEWIoj MIinpd7/DKMjVS0DiRYX0GJ6twvk8Hzi2wji5J6nMKxSDzG1h4vyrbGaTAsvCili x7cNfrovUhvri6hHW5bptZNXC4fuZ1zwuWyzplDmUMoqXrCsjTdMXCoMxF6uhAfQ TxifeLXkgfh1s3pNQvthT8P/KcYCjGrf4SIu+QhfgA1oWb5/E2YsQb5ekhZTOE92 o8W28ha7qIuyWhdHzgfhING5HNxruy455+AH0YT9XPyg0QQWh2EOYWk3tJ28A1Kj TKDInbquf6s/ZIMLY22nf9VV30sz5ZSfByuPNtVMoDI3qNTU -----END CERTIFICATE-----Generated at Sat Jun 13 15:52:56 2026 by rpki-client