$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8aff1ae4-4c53-3ede-ab24-ade089c9e5fb.roa File: 8aff1ae4-4c53-3ede-ab24-ade089c9e5fb.roa (raw, json) Hash identifier: PwR7TM2TU573GZif1M5A9VYH9hgccbOtlEN8bddXvSc= Subject key identifier: 18:D7:33:EC:4C:96:28:A7:94:2C:42:D7:2F:5C:C8:FB:3C:D4:21:E0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E6F3EB833D17AB9F951D88500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8aff1ae4-4c53-3ede-ab24-ade089c9e5fb.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 396617 IP address blocks: 2001:502:8cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3e:b8:33:d1:7a:b9:f9:51:d8:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=40a7fa69-d3a6-4bd1-a3e3-64c314c018da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:18:06:cd:04:f8:04:09:db:69:37:a1:1b:5d: a8:3f:9c:9f:bf:51:83:45:02:ef:72:98:a6:e0:77: aa:ce:09:11:7d:b6:0c:07:04:69:12:96:6d:8b:f6: 2e:91:98:d0:e4:9f:2c:fa:d2:56:8b:c5:ba:89:7e: b5:42:1b:10:9b:71:32:2a:88:0c:f0:80:12:c2:63: e3:01:95:76:c1:8d:9c:6e:c8:db:5e:97:9b:8f:8f: 6c:24:d6:5a:92:fe:08:77:a3:34:38:77:d0:6b:c2: 79:aa:2a:d0:90:99:e0:dc:df:a6:1f:b1:67:71:7a: 15:68:71:e6:3d:db:ad:10:f9:60:5e:9c:54:22:22: 54:56:b8:4b:ef:24:4e:c6:c2:7d:fe:19:a4:84:b2: 2d:65:93:12:aa:88:b0:83:a9:3f:c8:ff:2f:27:88: cf:b6:9e:4b:a9:aa:e4:3e:e2:c2:f0:55:e2:47:f7: ef:49:b1:c0:c9:b6:15:87:df:68:c5:f5:83:6b:80: 04:fc:d3:81:b8:df:d6:4d:2a:96:2d:da:93:1f:03: 12:21:1b:b7:94:cd:48:6a:6b:5f:81:2d:f2:db:42: 3c:7d:d7:c6:dd:6a:f0:7e:a9:39:3e:0d:b0:3b:38: 22:50:61:2c:fb:72:2d:b9:0e:d4:60:56:7e:d7:32: 6f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D7:33:EC:4C:96:28:A7:94:2C:42:D7:2F:5C:C8:FB:3C:D4:21:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8aff1ae4-4c53-3ede-ab24-ade089c9e5fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:cb:04:f1:92:39:22:90:f0:7a:37:9c:8f:76:31:c3:0b:94: ff:e3:dc:78:43:04:6b:b9:fc:e9:1f:2e:50:db:3d:f3:5d:85: cc:19:5f:61:d5:a2:4b:3e:2e:b9:8f:70:41:0d:3d:eb:b5:c2: c6:91:e6:57:89:ed:79:e1:10:8f:89:75:8f:98:b5:b1:03:64: ad:5c:f6:c8:63:7b:ee:4b:42:8c:15:d9:e2:91:f8:51:f8:ca: aa:a8:d6:1b:d7:db:fb:b4:1f:50:95:5a:49:ff:b3:52:9a:f1: 37:9b:90:e5:85:47:97:88:2c:31:e1:20:d0:a2:4f:b7:1a:5a: 7e:d2:6b:ba:62:a0:63:bb:48:d3:d2:99:9a:3a:21:1c:5e:7c: 0c:e3:4b:c5:07:e3:00:e9:74:06:2c:55:ed:b2:86:02:0b:62: 76:9f:93:de:f8:93:97:e7:5f:83:b4:14:f3:77:a5:50:86:5f: 6f:a0:9c:f1:b9:54:ca:fe:11:85:5c:fc:ce:57:5b:06:9e:77: 8a:2c:25:66:ce:25:69:b1:d1:5f:b2:63:3e:b6:d2:1a:22:d2: 3d:1e:6c:d5:aa:4c:93:04:f6:6b:66:c4:94:58:d5:e9:7c:d4: c4:6a:28:41:b1:20:05:ad:b2:f8:d9:ef:b4:16:e4:59:ab:d5: 94:90:8b:97 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5vPrgz0Xq5+VHYhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk NDBhN2ZhNjktZDNhNi00YmQxLWEzZTMtNjRjMzE0YzAxOGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhgGzQT4BAnbaTehG12oP5yfv1GDRQLvcpim 4HeqzgkRfbYMBwRpEpZti/YukZjQ5J8s+tJWi8W6iX61QhsQm3EyKogM8IASwmPj AZV2wY2cbsjbXpebj49sJNZakv4Id6M0OHfQa8J5qirQkJng3N+mH7FncXoVaHHm PdutEPlgXpxUIiJUVrhL7yROxsJ9/hmkhLItZZMSqoiwg6k/yP8vJ4jPtp5Lqark PuLC8FXiR/fvSbHAybYVh99oxfWDa4AE/NOBuN/WTSqWLdqTHwMSIRu3lM1Iamtf gS3y20I8fdfG3Wrwfqk5Pg2wOzgiUGEs+3ItuQ7UYFZ+1zJv2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBjXM+xMliinlCxC1y9cyPs81CHgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGFmZjFhZTQtNGM1My0z ZWRlLWFiMjQtYWRlMDg5YzllNWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAgjM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAfLBPGSOSKQ8Ho3nI92McMLlP/j3HhDBGu5/OkfLlDbPfNdhcwZ X2HVoks+LrmPcEENPeu1wsaR5leJ7XnhEI+JdY+YtbEDZK1c9shje+5LQowV2eKR +FH4yqqo1hvX2/u0H1CVWkn/s1Ka8TebkOWFR5eILDHhINCiT7caWn7Sa7pioGO7 SNPSmZo6IRxefAzjS8UH4wDpdAYsVe2yhgILYnafk974k5fnX4O0FPN3pVCGX2+g nPG5VMr+EYVc/M5XWwaed4osJWbOJWmx0V+yYz620hoi0j0ebNWqTJME9mtmxJRY 1el81MRqKEGxIAWtsvjZ77QW5Fmr1ZSQi5c= -----END CERTIFICATE-----Generated at Fri Jul 24 09:46:18 2026 by rpki-client