$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38173ab9-eaeb-3b02-b41c-fbabdeaa48ae.roa File: 38173ab9-eaeb-3b02-b41c-fbabdeaa48ae.roa (raw, json) Hash identifier: A1R0UvYqK9HB/QJUmkPyVi9pBrQ8HebWufkO7c+rigU= Subject key identifier: 85:A1:52:2E:B6:7E:EC:90:6C:BD:46:03:DF:74:3F:1D:1A:B5:4D:EC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E8B250DDDC648AE1375BBDC20 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38173ab9-eaeb-3b02-b41c-fbabdeaa48ae.roa Signing time: Sat 18 Jul 2026 21:00:11 +0000 ROA not before: Sat 18 Jul 2026 21:00:11 +0000 ROA not after: Fri 16 Oct 2026 21:00:11 +0000 asID: 396582 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8b:25:0d:dd:c6:48:ae:13:75:bb:dc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 18 21:00:11 2026 GMT Not After : Oct 16 21:00:11 2026 GMT Subject: CN=de99f42a-a6ec-4f5d-893a-329708a82f04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b8:c0:38:2d:16:df:e4:4e:41:76:d9:ae:0a: 44:41:4d:b6:a3:41:e1:59:dc:ef:a3:ea:ad:ba:65: 95:bd:a4:bf:61:39:88:35:2f:0d:39:8b:a2:4f:30: 24:9c:f6:04:66:aa:06:da:26:f8:56:48:79:ed:fd: 36:17:4e:92:66:64:23:6e:68:a3:c8:ef:82:ab:bc: d3:9c:7d:1e:5a:b1:9e:87:ac:e4:21:55:eb:06:67: e5:a6:00:ee:63:40:f3:b2:e1:19:42:a9:ef:e2:b9: bd:bf:c8:85:8c:87:49:1e:d8:1f:a9:3d:55:07:8b: 8e:da:56:80:00:43:1f:f5:32:1b:9e:ab:b9:06:2f: 18:e2:0f:87:3d:5c:5f:62:3e:57:da:92:0a:00:23: f8:84:d2:24:d3:b3:d3:27:45:17:66:b7:0e:d8:40: 93:0d:6b:a0:95:21:20:29:f0:f8:5f:28:db:98:79: 1f:58:e3:23:69:60:27:f6:5b:20:68:53:89:27:06: 6f:4b:bd:84:59:81:10:e8:26:9a:68:d2:53:c8:26: 3d:ed:c2:aa:c2:f7:44:11:3c:0c:f7:d2:26:6b:b7: 35:ee:7d:67:55:b0:0a:21:a3:dc:76:2e:18:77:5b: 72:f2:6d:86:03:b2:0f:4d:91:b9:fc:4d:6a:3d:4f: fa:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A1:52:2E:B6:7E:EC:90:6C:BD:46:03:DF:74:3F:1D:1A:B5:4D:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38173ab9-eaeb-3b02-b41c-fbabdeaa48ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:20:16:f5:89:f8:0e:fa:95:14:9b:00:26:35:a1:a4:e3:66: 2b:d4:64:41:1e:f0:52:5a:30:dc:81:bf:66:ae:82:59:e2:80: 08:e5:51:f8:32:84:22:32:12:2c:c5:f3:c5:cf:3e:88:26:a2: d3:05:a9:52:92:7a:4b:34:8a:b2:17:c7:64:dd:ec:0b:86:2c: 6b:2b:27:c6:47:31:89:82:df:ac:71:f6:8d:5a:ab:06:5e:fe: 1c:cd:a3:48:00:13:42:26:80:60:9d:53:97:57:3a:d5:7d:e1: 8b:e0:f3:b1:b1:59:43:c0:80:a2:ae:33:87:07:0c:4d:51:21: 29:e4:46:ad:7d:99:8d:43:b5:77:fd:04:ad:4e:6b:19:79:49: ba:57:a1:72:93:4c:04:77:8c:1d:7c:7f:5d:46:ad:3c:49:67: b9:ed:e4:04:7b:bd:22:a5:3d:68:1a:9d:ac:07:fc:a4:cf:e1: 03:de:f8:b6:f9:40:40:7f:ac:de:5c:b2:d8:d1:b2:6c:be:15: af:54:0b:a5:1b:45:01:dd:d3:bb:cc:a4:a2:71:77:4e:ad:80: 74:b6:b6:8a:7d:e9:26:ce:93:a2:06:04:0b:d4:81:c6:58:cf: ed:4e:68:9f:dc:5c:45:5f:0e:bc:8f:c7:38:e1:3c:e9:e5:9b: 36:34:11:b6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6LJQ3dxkiuE3W73CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcxODIxMDAxMVoXDTI2MTAxNjIxMDAxMVowLzEtMCsGA1UEAxMk ZGU5OWY0MmEtYTZlYy00ZjVkLTg5M2EtMzI5NzA4YTgyZjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7jAOC0W3+ROQXbZrgpEQU22o0HhWdzvo+qt umWVvaS/YTmINS8NOYuiTzAknPYEZqoG2ib4Vkh57f02F06SZmQjbmijyO+Cq7zT nH0eWrGeh6zkIVXrBmflpgDuY0DzsuEZQqnv4rm9v8iFjIdJHtgfqT1VB4uO2laA AEMf9TIbnqu5Bi8Y4g+HPVxfYj5X2pIKACP4hNIk07PTJ0UXZrcO2ECTDWuglSEg KfD4XyjbmHkfWOMjaWAn9lsgaFOJJwZvS72EWYEQ6CaaaNJTyCY97cKqwvdEETwM 99Ima7c17n1nVbAKIaPcdi4Yd1ty8m2GA7IPTZG5/E1qPU/6eQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIWhUi62fuyQbL1GA990Px0atU3sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzgxNzNhYjktZWFlYi0z YjAyLWI0MWMtZmJhYmRlYWE0OGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALwgFvWJ+A76lRSbACY1oaTjZivUZEEe8FJaMNyBv2auglnigAjl UfgyhCIyEizF88XPPogmotMFqVKSeks0irIXx2Td7AuGLGsrJ8ZHMYmC36xx9o1a qwZe/hzNo0gAE0ImgGCdU5dXOtV94Yvg87GxWUPAgKKuM4cHDE1RISnkRq19mY1D tXf9BK1Oaxl5SbpXoXKTTAR3jB18f11GrTxJZ7nt5AR7vSKlPWganawH/KTP4QPe +Lb5QEB/rN5cstjRsmy+Fa9UC6UbRQHd07vMpKJxd06tgHS2top96SbOk6IGBAvU gcZYz+1OaJ/cXEVfDryPxzjhPOnlmzY0EbY= -----END CERTIFICATE-----Generated at Fri Jul 24 16:18:02 2026 by rpki-client