$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f88418f-0cbf-3f8a-83bc-29643139b994.roa File: 3f88418f-0cbf-3f8a-83bc-29643139b994.roa (raw, json) Hash identifier: yzckgQRS0h7WaAVA0C06U/O50qUITsM5TuZFk+b3Zno= Subject key identifier: 1D:02:A8:28:B9:A1:E9:46:CF:E0:AC:D9:4D:7C:8E:BC:CE:7C:C0:C9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E8B24E86B433F57495CE2D500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f88418f-0cbf-3f8a-83bc-29643139b994.roa Signing time: Sat 18 Jul 2026 21:00:11 +0000 ROA not before: Sat 18 Jul 2026 21:00:11 +0000 ROA not after: Fri 16 Oct 2026 21:00:11 +0000 asID: 396599 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8b:24:e8:6b:43:3f:57:49:5c:e2:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 18 21:00:11 2026 GMT Not After : Oct 16 21:00:11 2026 GMT Subject: CN=c3d47f64-ae35-45c6-8202-7488de88f859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8b:91:fa:2e:aa:69:44:a3:cd:aa:c2:36:ac: 06:4c:98:a2:58:52:a6:91:7a:ff:b3:4b:db:33:64: 39:ac:c8:2d:96:f0:35:bf:9a:eb:e8:9a:ba:b4:35: db:e9:d2:73:1c:85:7a:f0:57:b8:1a:bc:a5:3b:1c: a9:39:bd:b5:42:a4:45:bd:59:2b:e0:0d:0a:a4:8d: 87:78:cc:5f:2a:b3:b9:8c:ea:3d:d0:78:74:0e:b7: b3:14:91:be:0b:d8:64:4e:05:d5:a8:f9:a4:08:a8: bf:49:d9:5a:df:14:b0:7f:08:80:d1:2f:4a:f8:1b: a6:9a:e3:61:1c:69:49:d2:42:b8:d6:87:71:62:37: b9:38:07:45:c7:01:f4:0f:bf:f3:d3:d0:84:bc:62: f7:35:59:8d:d2:84:22:32:ed:85:1e:a2:c1:23:06: c7:80:2c:2b:29:9a:ec:83:fe:7c:73:b2:df:40:71: 2c:8f:22:af:5b:8f:a4:d0:b8:b8:84:6f:96:9b:52: 7a:37:79:95:f1:9d:a7:1b:19:44:9b:da:55:9c:98: a5:78:c2:1f:c3:14:37:89:d1:f6:32:a8:1e:18:5b: 4a:65:2c:dc:70:c1:d3:43:f2:81:d2:ff:02:75:a2: db:f2:7c:75:07:80:15:eb:ac:00:3a:6b:d7:78:6f: f7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:02:A8:28:B9:A1:E9:46:CF:E0:AC:D9:4D:7C:8E:BC:CE:7C:C0:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f88418f-0cbf-3f8a-83bc-29643139b994.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:a6:b2:68:00:59:26:b2:d3:01:49:a4:30:bf:0f:8e:41:b3: 05:0e:97:96:e5:d5:3a:7f:46:c6:38:69:cb:3e:76:09:ee:f4: 23:5f:33:27:51:6c:91:72:23:86:6d:51:84:38:53:9d:96:45: 69:25:89:d1:23:77:a0:e0:0d:d2:ad:a0:da:ee:27:61:6f:cd: a8:79:ea:c8:8e:27:f7:cb:be:55:71:e7:cf:96:93:77:88:68: 43:02:f7:72:0c:05:4c:94:79:c9:7e:63:48:4c:46:e3:74:fe: f1:16:c0:7c:61:fd:42:2b:9c:72:be:e4:3a:21:f3:c5:ec:32: b5:7a:1a:a9:6a:d7:31:e1:5c:fe:2d:ac:ac:43:dd:f9:17:14: 6b:a2:ba:cb:b7:3e:e2:af:4c:0a:26:99:82:76:07:fc:bc:1c: db:9d:69:e6:7b:b5:84:0e:ea:75:f5:9a:2a:d7:f5:04:29:b0: 23:80:92:37:22:86:4e:ec:1d:17:ce:8d:cd:fd:56:0e:bb:f5: b2:87:72:78:23:e5:b1:24:59:ef:32:46:f4:d4:82:aa:d3:49: 0b:f2:06:06:76:b3:47:7b:e9:ea:f8:77:21:97:17:75:03:b6: a8:53:90:b4:8f:0c:74:d5:5c:ba:ff:28:2f:8d:f6:20:21:e2: 67:76:db:33 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6LJOhrQz9XSVzi1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcxODIxMDAxMVoXDTI2MTAxNjIxMDAxMVowLzEtMCsGA1UEAxMk YzNkNDdmNjQtYWUzNS00NWM2LTgyMDItNzQ4OGRlODhmODU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhouR+i6qaUSjzarCNqwGTJiiWFKmkXr/s0vb M2Q5rMgtlvA1v5rr6Jq6tDXb6dJzHIV68Fe4GrylOxypOb21QqRFvVkr4A0KpI2H eMxfKrO5jOo90Hh0DrezFJG+C9hkTgXVqPmkCKi/Sdla3xSwfwiA0S9K+BummuNh HGlJ0kK41odxYje5OAdFxwH0D7/z09CEvGL3NVmN0oQiMu2FHqLBIwbHgCwrKZrs g/58c7LfQHEsjyKvW4+k0Li4hG+Wm1J6N3mV8Z2nGxlEm9pVnJileMIfwxQ3idH2 MqgeGFtKZSzccMHTQ/KB0v8CdaLb8nx1B4AV66wAOmvXeG/37wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB0CqCi5oelGz+Cs2U18jrzOfMDJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2Y4ODQxOGYtMGNiZi0z ZjhhLTgzYmMtMjk2NDMxMzliOTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG+msmgAWSay0wFJpDC/D45BswUOl5bl1Tp/RsY4acs+dgnu9CNf MydRbJFyI4ZtUYQ4U52WRWklidEjd6DgDdKtoNruJ2Fvzah56siOJ/fLvlVx58+W k3eIaEMC93IMBUyUecl+Y0hMRuN0/vEWwHxh/UIrnHK+5Doh88XsMrV6Gqlq1zHh XP4trKxD3fkXFGuiusu3PuKvTAommYJ2B/y8HNudaeZ7tYQO6nX1mirX9QQpsCOA kjcihk7sHRfOjc39Vg679bKHcngj5bEkWe8yRvTUgqrTSQvyBgZ2s0d76er4dyGX F3UDtqhTkLSPDHTVXLr/KC+N9iAh4md22zM= -----END CERTIFICATE-----Generated at Fri Jul 24 13:14:38 2026 by rpki-client