$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca38c6f6-2161-3c4a-9496-49daa29636ca.roa File: ca38c6f6-2161-3c4a-9496-49daa29636ca.roa (raw, json) Hash identifier: r2gbIVQfpn4OMKkP6VadEt+tD92JglL7ha7DtER3xGI= Subject key identifier: A7:23:5B:02:52:61:13:03:EB:E5:37:1F:24:04:5C:B2:94:A8:09:9C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E815FB96BA0610D17A841CC00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca38c6f6-2161-3c4a-9496-49daa29636ca.roa Signing time: Wed 15 Jul 2026 09:00:13 +0000 ROA not before: Wed 15 Jul 2026 09:00:13 +0000 ROA not after: Tue 13 Oct 2026 09:00:13 +0000 asID: 36628 IP address blocks: 2001:501:8a29::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:81:5f:b9:6b:a0:61:0d:17:a8:41:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 15 09:00:13 2026 GMT Not After : Oct 13 09:00:13 2026 GMT Subject: CN=00589777-a483-4507-b514-bfe5c5f01efe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fb:d1:4b:fc:23:39:b2:d5:ff:16:e6:c8:76: ba:d4:bd:e2:c4:19:f0:11:dd:40:7a:ef:53:94:14: 1d:60:f1:7d:5c:57:28:ca:7d:4f:f1:38:46:fb:fe: 90:aa:ae:a2:cc:54:e6:cb:20:19:c7:c9:cf:4d:b7: 1c:1d:0c:47:4b:14:ed:1f:e4:ac:f6:29:86:b1:06: f9:62:97:c8:8b:3f:0b:66:86:b6:54:02:81:0b:4f: 07:71:a9:a4:ef:6f:57:c2:89:00:86:96:af:83:1c: d7:8c:9b:50:2f:35:00:c6:0e:29:d8:ad:68:55:35: 2d:0e:f3:bc:43:f8:c2:c0:ab:3b:67:88:3d:39:ac: b7:d1:57:1a:23:2b:08:44:f1:f0:10:47:58:b6:d5: 57:af:5a:b4:3f:79:d5:64:ae:8e:74:f9:d4:82:86: 5f:f1:b8:77:c8:33:03:23:3a:02:52:f9:62:64:61: 51:6c:14:b2:6f:27:56:95:7f:5e:65:b0:5d:c6:fc: 23:cb:b6:42:0c:83:68:ef:33:f7:38:55:ee:00:28: 10:d7:a1:1a:e7:f5:38:9b:a4:b8:95:2c:b0:2a:e9: c3:54:41:e3:37:6e:a5:0b:99:81:87:d3:06:85:87: b7:2e:26:9c:09:b0:88:49:60:0b:10:b2:db:66:5a: e6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:23:5B:02:52:61:13:03:EB:E5:37:1F:24:04:5C:B2:94:A8:09:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca38c6f6-2161-3c4a-9496-49daa29636ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:25:b2:f8:14:fa:be:94:b2:02:de:5f:ae:68:e3:e5:11:95: bc:bf:a2:76:ea:d1:6b:28:61:49:f8:af:41:65:95:73:81:91: 50:93:f9:0d:c2:8b:32:93:d4:b0:77:52:13:e5:fc:b5:54:1b: 59:b2:35:f4:83:f4:b9:2d:5c:88:3e:87:a8:12:a3:9e:af:ff: 49:d4:56:cb:1e:e3:f4:5f:6b:f0:00:12:88:63:e7:e9:4f:22: fb:84:2d:3e:20:8a:4a:9c:d0:5b:ce:38:1c:5b:34:45:2b:c1: 95:32:2f:be:51:32:8b:87:ce:43:70:fb:ce:aa:3e:4a:85:ac: ab:e4:ad:cc:81:56:88:33:1a:56:b8:6d:a0:fe:e4:63:70:c1: 9f:6e:0e:d1:3f:3d:2f:c4:a9:90:02:fc:c9:d3:20:d2:4f:e8: 7e:eb:69:70:24:3c:16:a9:97:87:d8:bf:df:ff:6d:f2:3c:20: 00:93:fb:31:bc:81:6b:ab:b7:cd:1e:e5:57:e5:89:02:6d:59: a8:f6:97:65:ee:14:40:44:0c:aa:96:ed:82:89:ae:12:40:3d: 91:7b:0a:25:63:30:93:58:43:81:52:ad:d6:b5:6a:b2:19:d7: c3:ff:bd:1e:68:38:c1:b4:05:37:ac:67:65:ff:ca:44:9e:87: 72:d2:27:b7 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE6BX7lroGENF6hBzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcxNTA5MDAxM1oXDTI2MTAxMzA5MDAxM1owLzEtMCsGA1UEAxMk MDA1ODk3NzctYTQ4My00NTA3LWI1MTQtYmZlNWM1ZjAxZWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfvRS/wjObLV/xbmyHa61L3ixBnwEd1Aeu9T lBQdYPF9XFcoyn1P8ThG+/6Qqq6izFTmyyAZx8nPTbccHQxHSxTtH+Ss9imGsQb5 YpfIiz8LZoa2VAKBC08Hcamk729XwokAhpavgxzXjJtQLzUAxg4p2K1oVTUtDvO8 Q/jCwKs7Z4g9Oay30VcaIysIRPHwEEdYttVXr1q0P3nVZK6OdPnUgoZf8bh3yDMD IzoCUvliZGFRbBSybydWlX9eZbBdxvwjy7ZCDINo7zP3OFXuACgQ16Ea5/U4m6S4 lSywKunDVEHjN26lC5mBh9MGhYe3LiacCbCISWALELLbZlrmLwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKcjWwJSYRMD6+U3HyQEXLKUqAmcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2EzOGM2ZjYtMjE2MS0z YzRhLTk0OTYtNDlkYWEyOTYzNmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBiJbL4FPq+lLIC3l+uaOPlEZW8v6J26tFrKGFJ +K9BZZVzgZFQk/kNwosyk9Swd1IT5fy1VBtZsjX0g/S5LVyIPoeoEqOer/9J1FbL HuP0X2vwABKIY+fpTyL7hC0+IIpKnNBbzjgcWzRFK8GVMi++UTKLh85DcPvOqj5K hayr5K3MgVaIMxpWuG2g/uRjcMGfbg7RPz0vxKmQAvzJ0yDST+h+62lwJDwWqZeH 2L/f/23yPCAAk/sxvIFrq7fNHuVX5YkCbVmo9pdl7hRARAyqlu2Cia4SQD2Rewol YzCTWEOBUq3WtWqyGdfD/70eaDjBtAU3rGdl/8pEnody0ie3 -----END CERTIFICATE-----Generated at Fri Jul 24 11:35:55 2026 by rpki-client