$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8afb95b-d31f-356b-bd12-11d4f09e31c8.roa File: b8afb95b-d31f-356b-bd12-11d4f09e31c8.roa (raw, json) Hash identifier: K0PuYoX3zthBvl4zQG0PelEBz7YDqkSeRAFXhc/2AEw= Subject key identifier: B1:66:63:91:54:05:34:FD:41:BA:70:2F:C8:D1:53:8A:9E:54:5F:19 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E779A1F1F19F54A0B5B891B88 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8afb95b-d31f-356b-bd12-11d4f09e31c8.roa Signing time: Sat 11 Jul 2026 21:00:11 +0000 ROA not before: Sat 11 Jul 2026 21:00:11 +0000 ROA not after: Fri 09 Oct 2026 21:00:11 +0000 asID: 396605 IP address blocks: 2001:500:7967::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:77:9a:1f:1f:19:f5:4a:0b:5b:89:1b:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 11 21:00:11 2026 GMT Not After : Oct 9 21:00:11 2026 GMT Subject: CN=66a28caa-2a91-4e68-82ee-70056af9c458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fc:c7:c1:a5:c0:66:64:f1:39:99:cc:d2:6b: 8c:c3:d5:e7:7a:ad:38:7c:85:71:7b:b0:9b:b1:48: 8f:c7:5a:5f:d4:f2:50:5c:85:32:29:b5:04:f9:3b: 5c:5e:ae:f2:e8:ba:8b:77:ee:0b:e5:47:01:7f:e8: 7c:d5:93:ac:86:48:78:c6:ab:5b:5d:1b:a5:21:b7: 69:1a:47:02:22:29:e1:ba:b3:f5:2f:c8:81:25:7c: a6:e6:67:82:b5:34:88:20:16:46:6e:f9:87:6c:b7: 03:81:a0:a6:56:0e:3e:35:7d:28:2e:87:23:f1:d2: b9:c5:90:9c:96:08:e4:5f:a8:28:79:50:8b:17:27: 7a:1a:ba:f3:12:11:96:0e:d7:85:0b:ca:89:ea:1d: a4:d1:e7:ca:5e:dd:7d:32:8d:5b:4d:4e:ed:6f:88: 49:af:a2:ef:08:3c:c8:49:59:f3:dc:25:81:ea:01: 42:c8:81:ce:e5:28:14:f3:af:95:1f:73:ac:2c:05: 5e:f8:78:5c:0f:22:ec:c5:98:2f:e5:da:71:2b:b5: bd:64:7d:d1:4a:f7:77:fe:f6:4a:d9:23:db:f8:d5: 6c:53:dd:19:07:72:d0:ea:2e:23:b2:0a:e1:7e:4e: a8:5e:c3:33:96:60:b8:4b:46:e7:ed:17:c9:1c:42: f2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:66:63:91:54:05:34:FD:41:BA:70:2F:C8:D1:53:8A:9E:54:5F:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8afb95b-d31f-356b-bd12-11d4f09e31c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:95:cf:21:5e:8c:23:c0:3b:f3:8a:40:2e:6a:87:3b:b8:1c: c7:0f:01:d7:d0:9b:29:2f:49:dc:34:58:66:ae:7b:b3:04:de: d2:dc:f1:7c:64:80:f8:4c:03:65:75:af:d8:58:42:f9:ae:0a: e7:7d:21:c9:c0:30:12:21:e5:19:06:a2:88:14:9b:0a:ba:20: c4:cc:5d:36:c6:df:90:c1:a8:23:ea:10:7f:64:7e:a3:0f:77: 0f:33:9b:db:51:1c:a1:17:26:4b:93:e7:61:75:45:12:22:32: 14:a6:e1:6c:24:43:7c:69:9d:b4:75:9f:cb:36:32:97:6d:8d: 21:3f:54:6a:b2:ef:c8:81:10:75:d4:60:8d:61:15:64:1e:38: 79:7e:71:72:bc:f9:a7:06:f1:5f:ad:24:34:43:71:ce:30:12: c5:ad:32:58:a8:b0:0c:17:f5:61:7c:01:e6:54:c7:a0:4b:be: 6a:a3:5b:7d:b6:c1:b1:e0:2f:e8:9f:af:fc:13:7c:89:14:40: c4:b0:0b:20:94:2b:f3:fa:eb:06:40:3e:25:e9:dd:c8:55:fa: 3a:c1:94:a5:0f:dd:1b:f0:7b:d0:22:8e:a7:d1:3c:5e:c2:7b: 42:39:41:67:c2:75:e1:20:bc:f9:1b:75:69:60:d5:4b:e7:4c: 2b:45:47:40 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE53mh8fGfVKC1uJG4gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcxMTIxMDAxMVoXDTI2MTAwOTIxMDAxMVowLzEtMCsGA1UEAxMk NjZhMjhjYWEtMmE5MS00ZTY4LTgyZWUtNzAwNTZhZjljNDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPzHwaXAZmTxOZnM0muMw9Xneq04fIVxe7Cb sUiPx1pf1PJQXIUyKbUE+TtcXq7y6LqLd+4L5UcBf+h81ZOshkh4xqtbXRulIbdp GkcCIinhurP1L8iBJXym5meCtTSIIBZGbvmHbLcDgaCmVg4+NX0oLocj8dK5xZCc lgjkX6goeVCLFyd6GrrzEhGWDteFC8qJ6h2k0efKXt19Mo1bTU7tb4hJr6LvCDzI SVnz3CWB6gFCyIHO5SgU86+VH3OsLAVe+HhcDyLsxZgv5dpxK7W9ZH3RSvd3/vZK 2SPb+NVsU90ZB3LQ6i4jsgrhfk6oXsMzlmC4S0bn7RfJHELyuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLFmY5FUBTT9QbpwL8jRU4qeVF8ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjhhZmI5NWItZDMxZi0z NTZiLWJkMTItMTFkNGYwOWUzMWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAHln MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHOVzyFejCPAO/OKQC5qhzu4HMcPAdfQmykvSdw0WGaue7ME3tLc 8XxkgPhMA2V1r9hYQvmuCud9IcnAMBIh5RkGoogUmwq6IMTMXTbG35DBqCPqEH9k fqMPdw8zm9tRHKEXJkuT52F1RRIiMhSm4WwkQ3xpnbR1n8s2MpdtjSE/VGqy78iB EHXUYI1hFWQeOHl+cXK8+acG8V+tJDRDcc4wEsWtMliosAwX9WF8AeZUx6BLvmqj W322wbHgL+ifr/wTfIkUQMSwCyCUK/P66wZAPiXp3chV+jrBlKUP3Rvwe9AijqfR PF7Ce0I5QWfCdeEgvPkbdWlg1UvnTCtFR0A= -----END CERTIFICATE-----Generated at Fri Jul 24 06:40:20 2026 by rpki-client