$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a8f48db-afed-3168-a5e8-1f18705c825a.roa File: 3a8f48db-afed-3168-a5e8-1f18705c825a.roa (raw, json) Hash identifier: 1GL9rwmQWFv/mKB6HjViwe9EtNI9kwC6NdIn27jIbO0= Subject key identifier: 42:3C:E0:E4:EC:39:FD:A9:6B:4F:8C:62:4E:E0:67:0F:F4:D3:81:3D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EAD1C38288FEF73DB566A0580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a8f48db-afed-3168-a5e8-1f18705c825a.roa Signing time: Fri 31 Jul 2026 01:00:11 +0000 ROA not before: Fri 31 Jul 2026 01:00:11 +0000 ROA not after: Thu 29 Oct 2026 01:00:11 +0000 asID: 396604 IP address blocks: 2001:503:231d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ad:1c:38:28:8f:ef:73:db:56:6a:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 31 01:00:11 2026 GMT Not After : Oct 29 01:00:11 2026 GMT Subject: CN=68356b3e-a6ee-49e6-992c-4151dc98c8b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:83:fe:b0:a0:78:73:13:1b:fc:ca:1f:fe:e8: cc:d9:5f:e0:0d:46:a6:f5:56:73:49:c0:6e:c4:d8: 3e:fe:0f:5b:1a:f1:87:22:52:f3:4a:e2:fd:94:9f: 9f:3e:a7:a7:54:0f:25:f7:59:a6:93:ed:0b:60:c1: 23:28:4d:21:1e:3c:d8:bb:f2:ee:8a:7b:7a:a6:96: 47:79:d9:de:b9:ff:53:c8:02:ea:83:4c:e4:bf:5a: f6:f3:ad:fc:f4:7c:da:23:1c:3b:22:c3:ce:99:d9: 03:42:9c:46:ae:1b:3f:b2:7b:2b:a3:ee:b1:0d:7b: eb:c6:b7:a2:5a:b6:b8:01:1d:40:d4:a3:7e:73:53: 5e:a1:36:12:af:60:97:ef:7b:2d:4f:2d:85:7f:cd: 21:41:c9:45:ab:1c:75:3b:83:d0:4c:d2:cf:72:a7: 8a:f9:d7:23:70:5a:6d:24:68:bb:3a:fa:45:d1:f9: 49:32:00:2e:aa:f2:87:50:fc:1f:36:3a:7a:19:98: a7:e2:05:6b:d6:7b:58:6d:b9:2c:5c:78:a1:8a:b8: ed:14:02:e7:29:e7:c2:e5:3d:bc:7c:be:d4:73:55: cb:c5:a9:35:7f:a5:a7:07:9f:7c:9b:5a:03:1e:99: 6f:e1:a0:44:e3:92:53:60:81:c2:d3:f6:6b:20:7e: 5a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:3C:E0:E4:EC:39:FD:A9:6B:4F:8C:62:4E:E0:67:0F:F4:D3:81:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a8f48db-afed-3168-a5e8-1f18705c825a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:231d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:8c:48:b4:44:9d:7d:b4:5f:6b:57:5a:56:cb:35:c0:e1:87: 4f:d0:aa:1b:15:c8:8e:19:38:af:f7:4c:6b:9c:78:0a:89:c3: 58:30:62:a3:fd:c7:de:59:07:98:85:c1:fe:73:77:97:61:f7: da:ce:f5:68:b3:c4:d4:3b:b1:f6:ea:ea:ab:e2:de:19:a2:a7: cb:41:14:0c:5c:77:8e:f9:45:50:5e:d5:3d:22:97:9e:ea:e2: 0a:21:98:f5:47:0e:f5:28:f4:db:f8:b9:d3:1f:f6:ae:c2:d5: a9:1d:06:3f:49:f9:7e:1e:59:04:cb:64:8f:33:1d:3b:e0:63: 3b:13:8e:c0:4d:27:30:e6:e8:dd:71:c3:49:aa:f7:a1:ee:02: 81:a2:e6:d3:3f:d1:23:3b:7b:4a:d0:18:82:c5:d0:b7:71:42: 7c:2f:9d:12:aa:2c:55:49:9f:4d:2b:78:42:97:d7:cb:a5:7a: f1:ce:38:39:89:04:80:82:28:b7:8d:69:3b:9b:5f:0b:dc:44: 70:63:ae:0f:47:ec:9e:ec:f4:79:b2:19:a1:7a:ac:4a:6e:df: a1:be:7a:15:1b:bf:51:7d:f8:88:c2:f7:52:8e:7c:f8:57:b3: d7:7f:b4:9b:13:8f:4c:22:77:5d:8e:14:fe:d5:c8:4c:f1:27: f8:5a:e0:79 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6tHDgoj+9z21ZqBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDczMTAxMDAxMVoXDTI2MTAyOTAxMDAxMVowLzEtMCsGA1UEAxMk NjgzNTZiM2UtYTZlZS00OWU2LTk5MmMtNDE1MWRjOThjOGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIP+sKB4cxMb/Mof/ujM2V/gDUam9VZzScBu xNg+/g9bGvGHIlLzSuL9lJ+fPqenVA8l91mmk+0LYMEjKE0hHjzYu/Luint6ppZH edneuf9TyALqg0zkv1r286389HzaIxw7IsPOmdkDQpxGrhs/snsro+6xDXvrxrei Wra4AR1A1KN+c1NeoTYSr2CX73stTy2Ff80hQclFqxx1O4PQTNLPcqeK+dcjcFpt JGi7OvpF0flJMgAuqvKHUPwfNjp6GZin4gVr1ntYbbksXHihirjtFALnKefC5T28 fL7Uc1XLxak1f6WnB598m1oDHplv4aBE45JTYIHC0/ZrIH5awQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEI84OTsOf2pa0+MYk7gZw/004E9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2E4ZjQ4ZGItYWZlZC0z MTY4LWE1ZTgtMWYxODcwNWM4MjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAyMd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADyMSLREnX20X2tXWlbLNcDhh0/QqhsVyI4ZOK/3TGuceAqJw1gw YqP9x95ZB5iFwf5zd5dh99rO9WizxNQ7sfbq6qvi3hmip8tBFAxcd475RVBe1T0i l57q4gohmPVHDvUo9Nv4udMf9q7C1akdBj9J+X4eWQTLZI8zHTvgYzsTjsBNJzDm 6N1xw0mq96HuAoGi5tM/0SM7e0rQGILF0LdxQnwvnRKqLFVJn00reEKX18ulevHO ODmJBICCKLeNaTubXwvcRHBjrg9H7J7s9HmyGaF6rEpu36G+ehUbv1F9+IjC91KO fPhXs9d/tJsTj0wid12OFP7VyEzxJ/ha4Hk= -----END CERTIFICATE-----Generated at Wed Aug 19 17:06:01 2026 by rpki-client