$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/408a472a-dd08-3193-bcce-560538aea5f1.roa File: 408a472a-dd08-3193-bcce-560538aea5f1.roa (raw, json) Hash identifier: cNUfYjMYRkJQvQ4g/9ys1uVn26hHb5UxJ4PJfk4OhiA= Subject key identifier: 66:48:70:E3:4D:AA:00:87:37:D3:57:6E:D5:9E:3B:5A:85:CD:EE:13 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E885A5C252A27359E29B44780 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/408a472a-dd08-3193-bcce-560538aea5f1.roa Signing time: Fri 17 Jul 2026 21:00:12 +0000 ROA not before: Fri 17 Jul 2026 21:00:12 +0000 ROA not after: Thu 15 Oct 2026 21:00:12 +0000 asID: 20172 IP address blocks: 2001:503:eea3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:88:5a:5c:25:2a:27:35:9e:29:b4:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 17 21:00:12 2026 GMT Not After : Oct 15 21:00:12 2026 GMT Subject: CN=bff53d19-6c81-44a0-8ab9-1737b036de23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:55:db:f8:56:a5:a6:ff:51:ba:a9:f8:4c:fd: fd:ca:29:1a:d8:ab:19:25:85:c7:25:40:40:78:3d: 76:69:a9:b8:c1:48:95:13:3c:83:ac:34:cf:3a:fb: 1d:7e:ea:f9:9e:6c:f8:59:6c:4f:fc:31:9c:a1:0b: 2e:1a:40:49:8d:00:c4:7f:48:3c:66:2c:2d:f1:ae: f5:d3:3b:cb:7e:6a:9f:1f:7b:3d:dd:df:14:c5:12: 88:01:51:1f:54:ac:fd:7f:4e:50:a9:66:aa:14:5d: e8:3f:b8:78:30:b1:e8:28:95:8d:89:73:d2:10:39: a3:5a:bc:08:b2:d8:7f:3b:f0:04:50:41:3f:39:bf: 5b:9a:f1:02:fc:44:e3:20:51:68:13:f3:b9:f5:bc: 13:2c:5b:f2:15:eb:b7:37:08:21:5f:ae:e6:8b:95: 82:1a:70:fd:9c:6b:aa:a4:c9:da:95:42:5a:16:bd: 99:9d:f2:0e:d1:85:57:b5:d9:66:d6:4c:dc:fa:ef: 95:a5:c0:65:0a:a1:66:24:f5:a2:b6:e1:0f:f2:94: a4:84:17:b7:d2:cc:8d:f7:24:1f:be:24:89:c6:fb: e1:a9:a2:e3:a4:c4:8f:20:de:ab:e3:4e:d4:cc:f8: 7b:37:b5:af:df:b9:04:5d:90:98:b7:6c:80:ba:21: fe:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:48:70:E3:4D:AA:00:87:37:D3:57:6E:D5:9E:3B:5A:85:CD:EE:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/408a472a-dd08-3193-bcce-560538aea5f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:eea3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:d9:76:a2:1d:75:8a:88:df:5c:07:1a:ef:ca:5d:21:48:83: bd:99:27:33:9b:1d:0c:0c:2a:f5:7c:5a:d5:db:55:8a:0a:ff: 52:33:f8:89:f0:26:cc:e0:c2:53:c9:8e:48:19:e1:98:e7:79: f9:6a:fa:62:1f:94:92:be:a9:78:90:f5:88:17:b9:1f:9e:bc: 7f:90:b3:74:05:e6:b3:89:20:dc:0f:83:f8:f9:ba:83:22:31: 7f:2d:71:b6:00:97:52:d3:94:25:9d:9d:c4:86:a4:c4:c8:c3: 9e:7a:6d:22:5e:f3:cc:1b:f1:38:ee:84:09:ff:62:a8:9f:b7: 4e:36:49:fc:b4:1b:a1:9e:86:33:10:e1:0d:03:dc:98:99:9c: ac:36:4b:f6:ef:b8:48:ee:9c:9f:02:3a:50:af:e7:eb:f4:bd: e8:75:53:a6:8a:bb:b2:b4:7b:a8:da:9c:34:d1:b5:b9:cd:52: 96:33:91:a9:9a:ff:2d:39:4f:0d:15:45:bb:cf:7f:b0:2d:93: 90:a3:b4:26:95:4f:e6:cf:9c:be:2e:2e:df:f6:fd:46:eb:03: c7:84:35:ae:f2:96:03:fe:c5:a5:78:cf:90:1b:ba:29:63:6d: ea:60:87:cf:6f:7f:6f:93:d4:f8:91:de:96:04:47:c8:a9:d9: d0:69:db:b3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6IWlwlKic1nim0R4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk YmZmNTNkMTktNmM4MS00NGEwLThhYjktMTczN2IwMzZkZTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlXb+Falpv9Ruqn4TP39yika2KsZJYXHJUBA eD12aam4wUiVEzyDrDTPOvsdfur5nmz4WWxP/DGcoQsuGkBJjQDEf0g8Ziwt8a71 0zvLfmqfH3s93d8UxRKIAVEfVKz9f05QqWaqFF3oP7h4MLHoKJWNiXPSEDmjWrwI sth/O/AEUEE/Ob9bmvEC/ETjIFFoE/O59bwTLFvyFeu3NwghX67mi5WCGnD9nGuq pMnalUJaFr2ZnfIO0YVXtdlm1kzc+u+VpcBlCqFmJPWituEP8pSkhBe30syN9yQf viSJxvvhqaLjpMSPIN6r407UzPh7N7Wv37kEXZCYt2yAuiH+yQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGZIcONNqgCHN9NXbtWeO1qFze4TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDA4YTQ3MmEtZGQwOC0z MTkzLWJjY2UtNTYwNTM4YWVhNWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA+6j MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFDZdqIddYqI31wHGu/KXSFIg72ZJzObHQwMKvV8WtXbVYoK/1Iz +InwJszgwlPJjkgZ4Zjneflq+mIflJK+qXiQ9YgXuR+evH+Qs3QF5rOJINwPg/j5 uoMiMX8tcbYAl1LTlCWdncSGpMTIw556bSJe88wb8TjuhAn/Yqift042Sfy0G6Ge hjMQ4Q0D3JiZnKw2S/bvuEjunJ8COlCv5+v0veh1U6aKu7K0e6janDTRtbnNUpYz kama/y05Tw0VRbvPf7Atk5CjtCaVT+bPnL4uLt/2/UbrA8eENa7ylgP+xaV4z5Ab uiljbepgh89vf2+T1PiR3pYER8ip2dBp27M= -----END CERTIFICATE-----Generated at Fri Jul 24 12:58:46 2026 by rpki-client