$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/771428ab-3f29-362a-a898-03fbdab60897.roa File: 771428ab-3f29-362a-a898-03fbdab60897.roa (raw, json) Hash identifier: KkZi5h5uAJ1Z9ogbXcL4tHNzyZkq/N2NPpwcwx3y6+c= Subject key identifier: 29:7A:1B:56:DB:27:D5:66:36:73:65:77:18:66:01:C4:04:82:A3:F2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E6F3EAF5DA77F278834043000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/771428ab-3f29-362a-a898-03fbdab60897.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 396615 IP address blocks: 2001:502:8cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3e:af:5d:a7:7f:27:88:34:04:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=b825527c-aec1-41c3-a7f3-688322e2b929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8f:3c:f4:3e:62:ac:5f:99:a9:fc:5f:c6:42: ba:47:9c:c9:a1:4b:28:12:5d:8d:38:11:09:6c:94: 3b:b5:fb:b5:f8:27:71:ff:49:c9:fa:14:89:8c:b9: 86:0f:f3:0e:e2:6e:1f:56:c8:bc:7a:e8:eb:db:69: 09:3e:e8:3b:62:25:14:6c:6b:44:d6:4f:83:6f:1c: ad:10:fa:98:48:61:fc:34:e9:6f:5f:5f:ef:0d:7a: 73:d5:5d:85:ad:74:52:da:e6:0c:c5:33:b8:86:83: 08:15:0c:6e:ce:7e:2c:9c:ff:2d:f7:44:a1:bb:3f: 61:d2:6c:78:56:80:4a:61:66:f9:10:c2:42:86:b3: 58:f1:f6:d7:a4:93:e6:f1:f0:55:af:4e:26:f0:8e: bd:de:8e:1b:ec:46:62:19:64:c0:00:8b:c9:c1:d0: 18:85:00:0f:16:55:e6:c5:82:52:2e:9a:34:29:19: eb:82:eb:fe:ae:00:7f:16:78:c7:06:9d:cc:0b:5f: 61:bc:01:2c:a4:d8:d7:85:11:4b:8c:ff:ca:b1:e4: 2d:1d:ad:99:c4:5a:55:bc:23:fd:57:b9:82:f6:7b: 46:fc:2a:9e:bd:ad:2f:7b:68:21:c5:b6:0b:27:93: f7:cb:91:10:68:da:d3:a2:ec:ad:76:36:14:e4:89: ae:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:7A:1B:56:DB:27:D5:66:36:73:65:77:18:66:01:C4:04:82:A3:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/771428ab-3f29-362a-a898-03fbdab60897.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:ad:bc:97:c2:ff:af:ac:0d:30:3b:ea:41:06:2e:77:9d:b8: f6:98:07:4d:15:51:c7:be:03:5c:4a:0a:da:8a:bc:c3:e1:37: 35:ec:c0:73:cc:03:4c:c3:a1:a1:41:58:70:c3:7e:a8:95:a3: 8b:65:6d:48:7d:14:92:b5:d6:56:a5:c8:11:ee:38:c8:75:51: f7:fd:43:a9:9b:54:81:1e:40:8f:97:43:56:85:9d:52:f6:9e: 73:48:74:be:3a:75:61:57:5a:72:2d:23:c7:94:47:44:bf:02: 88:16:9e:1b:31:22:ea:4b:09:53:81:26:ce:01:9b:6c:4a:e1: da:b9:42:29:8e:27:3a:44:c0:df:47:d2:0d:97:57:78:7b:85: e1:65:94:e3:47:cc:69:98:30:80:d7:89:b8:23:c3:84:df:bd: 44:54:c1:27:02:63:65:07:17:dc:36:50:22:de:c4:cf:17:0d: 46:92:ea:ce:bd:cf:bf:31:89:bb:d0:ab:9b:f3:e4:87:e3:e7: e2:70:a9:fa:c2:b4:0b:a0:b7:80:43:c8:85:7d:ab:05:f1:19: 2c:6f:fe:b4:76:5a:b6:ca:07:23:5b:4c:97:87:9b:6a:46:9a: 15:21:6b:94:a2:b0:47:f4:44:82:b2:78:e9:a1:58:d6:af:98: 5d:5c:6c:20 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5vPq9dp38niDQEMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk YjgyNTUyN2MtYWVjMS00MWMzLWE3ZjMtNjg4MzIyZTJiOTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgI889D5irF+ZqfxfxkK6R5zJoUsoEl2NOBEJ bJQ7tfu1+Cdx/0nJ+hSJjLmGD/MO4m4fVsi8eujr22kJPug7YiUUbGtE1k+Dbxyt EPqYSGH8NOlvX1/vDXpz1V2FrXRS2uYMxTO4hoMIFQxuzn4snP8t90Shuz9h0mx4 VoBKYWb5EMJChrNY8fbXpJPm8fBVr04m8I693o4b7EZiGWTAAIvJwdAYhQAPFlXm xYJSLpo0KRnrguv+rgB/FnjHBp3MC19hvAEspNjXhRFLjP/KseQtHa2ZxFpVvCP9 V7mC9ntG/Cqeva0ve2ghxbYLJ5P3y5EQaNrTouytdjYU5ImuhQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCl6G1bbJ9VmNnNldxhmAcQEgqPyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzcxNDI4YWItM2YyOS0z NjJhLWE4OTgtMDNmYmRhYjYwODk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAgjM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALKtvJfC/6+sDTA76kEGLneduPaYB00VUce+A1xKCtqKvMPhNzXs wHPMA0zDoaFBWHDDfqiVo4tlbUh9FJK11lalyBHuOMh1Uff9Q6mbVIEeQI+XQ1aF nVL2nnNIdL46dWFXWnItI8eUR0S/AogWnhsxIupLCVOBJs4Bm2xK4dq5QimOJzpE wN9H0g2XV3h7heFllONHzGmYMIDXibgjw4TfvURUwScCY2UHF9w2UCLexM8XDUaS 6s69z78xibvQq5vz5Ifj5+JwqfrCtAugt4BDyIV9qwXxGSxv/rR2WrbKByNbTJeH m2pGmhUha5SisEf0RIKyeOmhWNavmF1cbCA= -----END CERTIFICATE-----Generated at Fri Jul 24 15:16:26 2026 by rpki-client