$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/329d1610-acf9-3307-a833-d7e15c7c5a28.roa File: 329d1610-acf9-3307-a833-d7e15c7c5a28.roa (raw, json) Hash identifier: OnTd9ERQU9NUTkO5dQwHhkMTwDsLd5EDHVqMY2UW5Tc= Subject key identifier: EC:4B:85:44:71:79:76:E5:9D:B3:EE:FE:6F:67:4E:85:E2:F8:D1:67 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E9A7FC885C87797A9FCA38300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/329d1610-acf9-3307-a833-d7e15c7c5a28.roa Signing time: Fri 24 Jul 2026 09:00:12 +0000 ROA not before: Fri 24 Jul 2026 09:00:12 +0000 ROA not after: Thu 22 Oct 2026 09:00:12 +0000 asID: 396582 IP address blocks: 2001:501:b1f9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:7f:c8:85:c8:77:97:a9:fc:a3:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 09:00:12 2026 GMT Not After : Oct 22 09:00:12 2026 GMT Subject: CN=1f68bcaa-0dbe-4504-9cbd-b2f0bd9ca586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:31:03:64:99:18:4c:ec:29:88:eb:1f:04:d1: 21:4a:6e:7f:6b:16:42:88:cb:83:f4:f5:47:bf:43: 6c:bc:e1:9f:b3:69:c4:3f:52:aa:16:4a:52:a4:5c: 17:69:2d:44:a3:56:3f:b8:7a:0b:ce:3d:b9:81:11: 35:b8:e9:c2:91:b8:69:a4:65:9c:35:9b:dc:e7:ec: 62:7a:b6:fa:3d:57:1b:11:c7:fb:de:d3:c0:f8:f4: 65:aa:77:a6:cc:43:54:6e:8d:c2:46:12:bb:d9:03: 0b:14:a7:8a:6f:fc:1b:76:2d:2d:f6:52:27:d1:5d: 25:53:51:3b:08:10:d3:bb:c8:e3:32:fd:9f:e1:6f: 31:87:cd:cf:f0:11:9b:95:20:69:e4:b8:85:89:df: 2b:65:34:26:d8:06:f1:5b:5b:4a:e2:00:8e:76:7d: 88:5d:eb:d5:e3:e7:ca:67:f3:fd:5f:20:c9:6d:3c: 5d:73:51:7e:a7:ae:2c:51:ca:ce:2a:c7:b0:ed:71: 8d:ab:21:c7:f9:00:5e:fa:40:df:97:9a:cd:79:72: 59:3c:f4:8a:8f:ba:f7:55:54:d7:25:34:7e:34:d3: 12:89:d2:e2:e7:20:1e:b6:7b:13:45:2b:fc:de:fe: ee:68:d8:0f:47:b8:9b:eb:e4:eb:6f:e9:e8:79:51: 88:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:4B:85:44:71:79:76:E5:9D:B3:EE:FE:6F:67:4E:85:E2:F8:D1:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/329d1610-acf9-3307-a833-d7e15c7c5a28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:b1f9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:e2:26:8e:1e:0b:85:7d:54:b2:23:f7:20:54:49:25:f7:10: 3b:4f:c0:7c:e4:a2:57:f0:8c:e1:ce:94:c4:10:e0:29:d8:41: 5c:5b:41:19:55:91:50:39:bc:8b:be:a1:f3:66:9c:d3:67:df: e3:d8:01:aa:60:1e:bf:8f:c6:0d:52:a5:96:af:7c:eb:12:77: c2:85:ea:4f:f1:d9:e9:af:3e:c3:29:48:8f:b2:f4:eb:0b:a1: aa:55:a4:dd:7d:68:85:ce:bb:a3:e5:98:e3:8c:32:f4:8e:09: 79:cd:c3:5c:f5:a5:2e:fc:c4:c3:c1:6d:e6:85:18:3d:5e:8f: a8:77:40:aa:fb:4a:5c:6f:c1:e7:c8:e7:cd:9b:0a:55:20:28: 5a:e8:c1:b5:2f:29:b9:d8:7f:80:07:61:61:2e:f7:8d:af:b6: e8:7f:75:1f:8c:e9:9c:6c:ec:a5:47:d9:af:65:8a:1e:a7:cb: 99:b8:bf:ab:c6:e7:63:2b:1b:2b:52:cf:87:70:c4:10:92:5f: cf:ff:af:5c:ec:f3:d5:3b:d1:e6:4b:b9:72:8c:70:94:5b:ba: 74:f8:8a:18:2f:91:d2:ed:ab:79:81:73:e9:73:d4:55:c9:63: a7:c2:1f:e0:e9:ec:8d:3e:c3:69:54:c7:12:9f:c0:ae:c7:27: 47:fb:5e:eb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6af8iFyHeXqfyjgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk MWY2OGJjYWEtMGRiZS00NTA0LTljYmQtYjJmMGJkOWNhNTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzEDZJkYTOwpiOsfBNEhSm5/axZCiMuD9PVH v0NsvOGfs2nEP1KqFkpSpFwXaS1Eo1Y/uHoLzj25gRE1uOnCkbhppGWcNZvc5+xi erb6PVcbEcf73tPA+PRlqnemzENUbo3CRhK72QMLFKeKb/wbdi0t9lIn0V0lU1E7 CBDTu8jjMv2f4W8xh83P8BGblSBp5LiFid8rZTQm2AbxW1tK4gCOdn2IXevV4+fK Z/P9XyDJbTxdc1F+p64sUcrOKsew7XGNqyHH+QBe+kDfl5rNeXJZPPSKj7r3VVTX JTR+NNMSidLi5yAetnsTRSv83v7uaNgPR7ib6+Trb+noeVGI4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOxLhURxeXblnbPu/m9nToXi+NFnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzI5ZDE2MTAtYWNmOS0z MzA3LWE4MzMtZDdlMTVjN2M1YTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAbH5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAHiJo4eC4V9VLIj9yBUSSX3EDtPwHzkolfwjOHOlMQQ4CnYQVxb QRlVkVA5vIu+ofNmnNNn3+PYAapgHr+Pxg1SpZavfOsSd8KF6k/x2emvPsMpSI+y 9OsLoapVpN19aIXOu6PlmOOMMvSOCXnNw1z1pS78xMPBbeaFGD1ej6h3QKr7Slxv wefI582bClUgKFrowbUvKbnYf4AHYWEu942vtuh/dR+M6Zxs7KVH2a9lih6ny5m4 v6vG52MrGytSz4dwxBCSX8//r1zs89U70eZLuXKMcJRbunT4ihgvkdLtq3mBc+lz 1FXJY6fCH+Dp7I0+w2lUxxKfwK7HJ0f7Xus= -----END CERTIFICATE-----Generated at Fri Jul 24 15:16:30 2026 by rpki-client