$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38c992e0-5bb7-3e22-9958-dfe918d240f5.roa File: 38c992e0-5bb7-3e22-9958-dfe918d240f5.roa (raw, json) Hash identifier: 89gufJLpRlnIbH3eeyNpF+eCmQu9bglM3nNewKppiL8= Subject key identifier: 77:B5:64:19:B4:E3:BA:76:96:5E:46:56:CA:7D:C4:63:5E:47:BD:E1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EA7883F139AED13B172656600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38c992e0-5bb7-3e22-9958-dfe918d240f5.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 397203 IP address blocks: 2001:500:856e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:3f:13:9a:ed:13:b1:72:65:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=65933ae0-4396-45b6-ab65-21cb7c592f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:be:1b:f3:b1:ee:2d:19:6b:d7:32:2e:de:81: 81:b0:22:87:d2:12:c3:fe:1b:59:68:e6:1e:47:17: cc:96:7c:ec:12:89:89:51:7a:c8:61:ae:a0:8f:6c: 75:26:8b:0f:4c:5a:f2:06:7a:e0:0e:e2:1a:5a:de: b1:93:0b:d1:f1:0c:e0:03:ba:31:a3:c4:a8:a6:57: 14:e6:a1:ce:ac:97:b8:cf:29:3c:00:a0:8d:0c:b3: 80:8f:39:f6:ff:53:47:8c:49:b1:a5:a1:17:36:5d: d3:fc:90:f3:6c:5c:bc:30:c2:c9:e3:91:a8:17:09: 8f:7c:0c:69:06:f9:e2:ab:bd:40:4b:48:05:67:ec: f6:54:9b:74:dd:c7:0f:30:02:00:6d:91:0e:77:1a: 8a:d0:91:cd:84:aa:80:7e:fb:0a:d0:71:0a:66:4c: b0:2f:e7:d3:79:52:5b:60:d8:07:b3:be:c5:53:6c: 50:a0:29:f1:75:25:76:ee:d8:57:34:97:a2:b3:bb: b5:1d:28:5e:6c:4d:cc:b0:8e:72:cb:fd:ba:61:b9: 44:cf:77:4e:c9:95:09:cb:c9:56:57:4b:e0:df:10: 1e:df:2d:3b:f5:03:a4:64:31:1e:f9:27:a4:0d:df: c9:71:bd:16:54:a0:f9:80:77:ab:32:f5:a4:05:c2: 45:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B5:64:19:B4:E3:BA:76:96:5E:46:56:CA:7D:C4:63:5E:47:BD:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38c992e0-5bb7-3e22-9958-dfe918d240f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:856e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:04:cc:cb:99:40:92:6d:5c:73:4e:e9:75:d5:78:09:0f:9e: 97:d9:ac:c2:1f:19:d8:a2:de:88:eb:c4:f9:07:85:5a:35:f0: a2:a0:06:32:3f:db:54:76:f0:82:90:7e:97:c8:bb:0a:e0:d5: e4:13:07:bf:f7:31:0b:d4:c5:0e:95:28:33:63:01:0e:c2:58: a8:fe:a7:d3:c8:a4:94:f0:59:ae:8c:15:fc:4f:56:29:16:16: f8:93:ad:89:b6:93:6e:ce:b2:6a:1a:39:ec:3f:c8:5b:df:0c: 78:19:9e:b6:44:c5:6c:4d:a5:49:1d:18:35:3c:07:ff:33:bf: 4b:2f:f8:95:ea:97:47:af:a0:f1:67:ed:09:89:59:af:4a:58: dd:aa:9d:a0:01:17:5d:5a:04:3b:3d:00:1e:78:74:9d:16:ca: 9a:68:f4:aa:18:2d:fd:d8:96:e0:f7:65:4e:25:b8:de:05:df: e7:b6:87:d6:12:0e:3b:18:c9:7d:04:76:2f:21:80:e8:d0:aa: 08:d8:80:72:d9:b2:32:df:31:ae:9d:46:27:9c:69:8e:59:3f: 7f:0d:84:99:84:d3:3e:e4:95:0b:e4:76:98:1e:89:b6:d0:05: 4f:23:27:ce:66:cd:ca:c7:b5:32:64:c2:17:01:14:a8:d9:76: a9:e9:21:8b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6niD8Tmu0TsXJlZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NjU5MzNhZTAtNDM5Ni00NWI2LWFiNjUtMjFjYjdjNTkyZjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL4b87HuLRlr1zIu3oGBsCKH0hLD/htZaOYe RxfMlnzsEomJUXrIYa6gj2x1JosPTFryBnrgDuIaWt6xkwvR8QzgA7oxo8SoplcU 5qHOrJe4zyk8AKCNDLOAjzn2/1NHjEmxpaEXNl3T/JDzbFy8MMLJ45GoFwmPfAxp Bvniq71AS0gFZ+z2VJt03ccPMAIAbZEOdxqK0JHNhKqAfvsK0HEKZkywL+fTeVJb YNgHs77FU2xQoCnxdSV27thXNJeis7u1HShebE3MsI5yy/26YblEz3dOyZUJy8lW V0vg3xAe3y079QOkZDEe+SekDd/Jcb0WVKD5gHerMvWkBcJFRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHe1ZBm047p2ll5GVsp9xGNeR73hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzhjOTkyZTAtNWJiNy0z ZTIyLTk5NTgtZGZlOTE4ZDI0MGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAIVu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGgEzMuZQJJtXHNO6XXVeAkPnpfZrMIfGdii3ojrxPkHhVo18KKg BjI/21R28IKQfpfIuwrg1eQTB7/3MQvUxQ6VKDNjAQ7CWKj+p9PIpJTwWa6MFfxP VikWFviTrYm2k27OsmoaOew/yFvfDHgZnrZExWxNpUkdGDU8B/8zv0sv+JXql0ev oPFn7QmJWa9KWN2qnaABF11aBDs9AB54dJ0Wyppo9KoYLf3YluD3ZU4luN4F3+e2 h9YSDjsYyX0Edi8hgOjQqgjYgHLZsjLfMa6dRiecaY5ZP38NhJmE0z7klQvkdpge ibbQBU8jJ85mzcrHtTJkwhcBFKjZdqnpIYs= -----END CERTIFICATE-----Generated at Wed Aug 19 17:06:07 2026 by rpki-client