$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42570da3-d1a7-3ac7-93a6-a6a71c1f32e6.roa File: 42570da3-d1a7-3ac7-93a6-a6a71c1f32e6.roa (raw, json) Hash identifier: xbPbW3RVi41OZyFqtqVgi7oo2aDfC6WmCPASvW9uwFU= Subject key identifier: AA:37:ED:44:FB:7A:A3:08:DB:9F:53:C8:8B:11:55:81:EE:B8:97:79 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E815FBB49307204FF205D6540 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42570da3-d1a7-3ac7-93a6-a6a71c1f32e6.roa Signing time: Wed 15 Jul 2026 09:00:13 +0000 ROA not before: Wed 15 Jul 2026 09:00:13 +0000 ROA not after: Tue 13 Oct 2026 09:00:13 +0000 asID: 396584 IP address blocks: 2001:501:8a29::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:81:5f:bb:49:30:72:04:ff:20:5d:65:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 15 09:00:13 2026 GMT Not After : Oct 13 09:00:13 2026 GMT Subject: CN=333e550a-7309-4f01-9453-8b4984e8c171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:79:79:74:9d:ba:a3:9b:f1:ed:86:b2:c2:b8: 4f:c3:f8:a4:6d:a6:f7:c5:cd:19:10:e4:b5:1c:65: af:90:f4:3c:db:ea:d0:3c:8b:1c:5f:ce:8f:e0:4a: 52:9d:01:35:2e:c5:76:0b:55:5b:ed:c9:16:3e:cd: ab:d0:60:d5:c9:bb:62:2a:c1:f5:65:81:8d:40:d7: eb:4a:2e:98:bc:c6:20:87:8d:04:98:2e:9c:b3:b3: d0:04:2d:28:c6:fd:ff:e4:01:50:1c:b2:ee:8e:8e: 54:40:68:32:8d:b8:6e:99:37:21:bc:a7:b8:bc:e0: 94:cd:82:ce:98:0b:fe:4f:e5:cd:fd:4e:9e:b9:cb: 90:a0:85:b9:c4:d3:93:c2:05:c8:55:64:09:93:e8: c8:25:7e:11:21:af:5c:1b:aa:ec:fb:40:44:c1:1d: 41:2d:69:4b:4c:1c:6e:e4:61:c4:a5:8a:e2:9a:87: 25:84:ee:1a:7d:b9:94:8b:4e:eb:f4:cb:7e:50:f2: 2b:38:05:c8:87:4d:66:40:63:cd:88:26:81:78:6a: 29:16:fa:71:10:be:78:79:f2:2f:df:bf:fc:17:ce: a9:de:fc:c0:a0:cb:33:9f:43:9a:f4:71:d5:16:2d: 5f:04:14:d0:83:29:ba:6f:02:84:99:63:19:ac:72: 64:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:37:ED:44:FB:7A:A3:08:DB:9F:53:C8:8B:11:55:81:EE:B8:97:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42570da3-d1a7-3ac7-93a6-a6a71c1f32e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:5f:3f:e9:c2:02:b9:50:c2:9a:5a:47:7a:7f:3a:04:cf:2b: 28:e4:a0:64:15:84:9c:5a:95:8f:e2:47:14:09:af:20:ec:11: 3d:3d:86:8e:fa:30:ed:6d:39:e9:88:2a:4c:30:cb:61:40:30: ce:ba:2d:ea:77:ae:b7:a0:c1:b3:82:26:64:19:d5:f6:c1:12: 1a:62:cd:4b:70:87:26:13:40:2c:d0:2b:64:19:9a:5c:e1:80: b1:29:f4:5e:15:d4:92:34:be:82:72:27:0d:0f:b0:26:99:0a: 8a:0c:b8:1e:7e:a6:05:08:d9:fa:83:0d:28:7d:6b:34:29:07: 68:6f:c5:00:ab:38:22:78:19:f6:90:d9:24:23:8e:7f:34:5a: 12:ea:7f:01:cd:31:bb:9a:e5:96:9b:fa:57:25:e8:91:31:60: bd:14:07:c1:30:25:2f:4d:24:e7:1f:26:89:f0:70:ec:52:70: dd:57:20:aa:36:01:16:d8:a7:79:f5:2c:a6:42:02:b4:26:1c: 79:7e:9f:0c:f3:77:46:0b:78:69:c8:8b:a4:69:d5:c8:eb:e1: 10:6e:7a:aa:16:e3:36:43:a0:ce:93:23:4c:0a:e8:fe:11:25: 39:3a:ad:36:dd:a3:f5:49:53:aa:52:d3:54:fb:2f:16:b4:fe: b8:93:82:77 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE6BX7tJMHIE/yBdZUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcxNTA5MDAxM1oXDTI2MTAxMzA5MDAxM1owLzEtMCsGA1UEAxMk MzMzZTU1MGEtNzMwOS00ZjAxLTk0NTMtOGI0OTg0ZThjMTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznl5dJ26o5vx7YaywrhPw/ikbab3xc0ZEOS1 HGWvkPQ82+rQPIscX86P4EpSnQE1LsV2C1Vb7ckWPs2r0GDVybtiKsH1ZYGNQNfr Si6YvMYgh40EmC6cs7PQBC0oxv3/5AFQHLLujo5UQGgyjbhumTchvKe4vOCUzYLO mAv+T+XN/U6eucuQoIW5xNOTwgXIVWQJk+jIJX4RIa9cG6rs+0BEwR1BLWlLTBxu 5GHEpYrimoclhO4afbmUi07r9Mt+UPIrOAXIh01mQGPNiCaBeGopFvpxEL54efIv 37/8F86p3vzAoMszn0Oa9HHVFi1fBBTQgym6bwKEmWMZrHJknQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKo37UT7eqMI259TyIsRVYHuuJd5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDI1NzBkYTMtZDFhNy0z YWM3LTkzYTYtYTZhNzFjMWYzMmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAvXz/pwgK5UMKaWkd6fzoEzyso5KBkFYScWpWP 4kcUCa8g7BE9PYaO+jDtbTnpiCpMMMthQDDOui3qd663oMGzgiZkGdX2wRIaYs1L cIcmE0As0CtkGZpc4YCxKfReFdSSNL6CcicND7AmmQqKDLgefqYFCNn6gw0ofWs0 KQdob8UAqzgieBn2kNkkI45/NFoS6n8BzTG7muWWm/pXJeiRMWC9FAfBMCUvTSTn HyaJ8HDsUnDdVyCqNgEW2Kd59SymQgK0Jhx5fp8M83dGC3hpyIukadXI6+EQbnqq FuM2Q6DOkyNMCuj+ESU5Oq023aP1SVOqUtNU+y8WtP64k4J3 -----END CERTIFICATE-----Generated at Fri Jul 24 11:33:23 2026 by rpki-client