$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1aef4b28-5d59-3ca9-a67b-ee4fe00d775b.roa File: 1aef4b28-5d59-3ca9-a67b-ee4fe00d775b.roa (raw, json) Hash identifier: 6VykcEeVQybWUndvGvUnGAvmBVlWASFqLUkFU9JJgAc= Subject key identifier: 72:84:D3:8B:26:F8:05:50:5D:E6:9D:92:64:8D:4F:C0:A3:5D:52:49 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E6F3EA92B793A599467F8D700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1aef4b28-5d59-3ca9-a67b-ee4fe00d775b.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 396547 IP address blocks: 2001:502:8cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3e:a9:2b:79:3a:59:94:67:f8:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=931027f1-9baa-4278-a870-c5b701f11aeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b8:ed:a9:a0:7c:49:22:f6:3f:24:a1:52:1d: 5b:5b:6a:55:c8:95:fb:1f:43:5a:a9:7b:37:f4:85: 5b:10:73:2b:fe:61:fb:74:50:48:07:ee:7b:8b:0e: ec:75:db:98:dc:2e:30:1d:39:4b:01:ac:7b:ab:30: a8:0b:cd:98:58:18:46:a6:43:79:ad:d4:ed:cd:55: f8:e3:a1:b9:61:4f:40:90:e5:4b:96:41:4e:eb:86: 7b:df:f5:68:ee:07:ec:f5:72:60:46:6e:26:29:ef: e1:58:ce:7f:c0:48:0d:2b:53:e3:8f:d2:24:a8:fc: d1:e5:07:0d:b0:3a:b8:8e:db:0d:b4:2f:41:ac:26: 59:4b:20:b5:b8:2c:6a:e4:e2:3e:61:5c:22:2c:3d: 7f:9c:1f:39:5a:45:77:3d:3b:35:28:d2:d8:65:2c: 14:41:8a:cf:19:d9:b3:06:59:cf:d8:1a:f0:6f:0b: e9:c0:2a:fb:87:d6:17:3f:60:f5:6e:e7:cb:75:0a: 61:1c:a7:9e:d8:93:c4:d0:80:5c:53:35:84:cc:4d: be:d6:84:09:71:e3:2c:49:12:a1:73:d3:c2:de:3e: 19:2b:94:27:9c:fe:2d:f5:c2:ba:49:48:d8:7e:49: a1:b8:45:35:4b:3b:e0:83:0a:c9:10:d5:c3:76:a2: fe:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:84:D3:8B:26:F8:05:50:5D:E6:9D:92:64:8D:4F:C0:A3:5D:52:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1aef4b28-5d59-3ca9-a67b-ee4fe00d775b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:2e:3d:c9:6d:12:1e:2e:31:b6:fc:df:0e:38:1b:1b:ca:dd: 09:40:5b:17:7e:92:84:42:1e:e8:15:70:68:fe:4d:51:73:2a: c7:c2:ec:f9:1a:86:c7:f8:b6:2f:3c:b3:16:61:e7:4e:4f:18: c6:9a:66:ee:1e:e6:03:33:c1:b7:f7:31:61:48:3a:81:bc:b6: 49:f7:55:6b:54:33:0e:e8:36:da:a4:47:79:5e:91:cd:b2:f8: bf:5e:59:33:60:97:2e:d8:aa:69:9c:5c:61:60:dd:eb:45:16: b0:ce:f2:d8:f0:48:64:bd:f7:e8:aa:32:12:2c:42:5e:e9:96: 3d:b3:bf:45:e5:ac:e7:31:db:9e:23:e5:45:ce:71:13:70:63: a8:6d:40:57:0e:78:79:b0:02:fb:c3:cc:61:91:d2:66:2b:a6: e9:bc:91:6a:49:ba:12:b1:e4:1d:d3:ba:17:7c:4a:d7:35:cf: c6:06:c6:33:a1:2b:7c:c7:e8:45:18:85:c8:05:ea:6c:ad:ca: 79:f8:c0:64:33:bb:16:67:e5:c7:2d:53:72:60:51:04:29:5d: 2b:eb:31:63:cf:95:a4:78:0b:a2:7f:f5:3f:67:a4:b8:8c:42: 3c:bf:75:f2:b5:a2:36:54:c1:e5:e1:be:a5:46:10:6d:6f:67: 52:b7:3a:a3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5vPqkreTpZlGf41wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk OTMxMDI3ZjEtOWJhYS00Mjc4LWE4NzAtYzViNzAxZjExYWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLjtqaB8SSL2PyShUh1bW2pVyJX7H0NaqXs3 9IVbEHMr/mH7dFBIB+57iw7sdduY3C4wHTlLAax7qzCoC82YWBhGpkN5rdTtzVX4 46G5YU9AkOVLlkFO64Z73/Vo7gfs9XJgRm4mKe/hWM5/wEgNK1Pjj9IkqPzR5QcN sDq4jtsNtC9BrCZZSyC1uCxq5OI+YVwiLD1/nB85WkV3PTs1KNLYZSwUQYrPGdmz BlnP2BrwbwvpwCr7h9YXP2D1bufLdQphHKee2JPE0IBcUzWEzE2+1oQJceMsSRKh c9PC3j4ZK5QnnP4t9cK6SUjYfkmhuEU1SzvggwrJENXDdqL+JQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHKE04sm+AVQXeadkmSNT8CjXVJJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWFlZjRiMjgtNWQ1OS0z Y2E5LWE2N2ItZWU0ZmUwMGQ3NzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAgjM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABkuPcltEh4uMbb83w44GxvK3QlAWxd+koRCHugVcGj+TVFzKsfC 7Pkahsf4ti88sxZh505PGMaaZu4e5gMzwbf3MWFIOoG8tkn3VWtUMw7oNtqkR3le kc2y+L9eWTNgly7YqmmcXGFg3etFFrDO8tjwSGS99+iqMhIsQl7plj2zv0XlrOcx 254j5UXOcRNwY6htQFcOeHmwAvvDzGGR0mYrpum8kWpJuhKx5B3Tuhd8Stc1z8YG xjOhK3zH6EUYhcgF6mytynn4wGQzuxZn5cctU3JgUQQpXSvrMWPPlaR4C6J/9T9n pLiMQjy/dfK1ojZUweXhvqVGEG1vZ1K3OqM= -----END CERTIFICATE-----Generated at Fri Jul 24 04:39:08 2026 by rpki-client