$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f3487ac-1935-3cd6-a797-448cfbfd2c17.roa File: 3f3487ac-1935-3cd6-a797-448cfbfd2c17.roa (raw, json) Hash identifier: ShzfN5doDQp8eMY3Xp5BS0CIze4/8ZbT0rQ+VokGdPE= Subject key identifier: 80:05:14:45:FB:2B:BE:5F:A7:10:E7:7D:A2:85:D9:CD:2D:F0:A1:D7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EAD1C3E225F5334C9142D0D00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f3487ac-1935-3cd6-a797-448cfbfd2c17.roa Signing time: Fri 31 Jul 2026 01:00:11 +0000 ROA not before: Fri 31 Jul 2026 01:00:11 +0000 ROA not after: Thu 29 Oct 2026 01:00:11 +0000 asID: 397195 IP address blocks: 2001:503:231d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ad:1c:3e:22:5f:53:34:c9:14:2d:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 31 01:00:11 2026 GMT Not After : Oct 29 01:00:11 2026 GMT Subject: CN=e97bcd6d-a122-425a-83c7-63bc8ea8d7de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:07:3a:2a:4a:76:9e:fa:74:67:b4:21:f7:7a: 1c:39:76:32:bb:d3:fc:95:f7:de:f9:6b:20:46:63: 87:84:32:df:72:d4:68:30:b2:da:da:bb:c8:26:c5: 4f:24:7d:a3:e6:01:54:15:07:38:2b:68:0e:3c:ca: dd:03:e6:88:6d:1a:09:3a:a7:33:55:ac:3c:0b:e0: a2:5f:e3:e7:19:5f:41:08:d9:e3:ff:dc:8e:a2:d0: 92:69:39:36:61:bf:fc:47:2f:97:04:ea:33:cf:64: f0:91:96:21:52:e2:34:ce:88:86:c8:c0:b0:71:2f: a6:52:6c:16:ea:b2:7a:77:e1:15:70:f5:27:94:dc: 66:83:87:86:29:31:d1:3b:f8:15:55:6f:2a:ea:dd: 4b:8b:fa:00:40:f6:93:86:ec:9b:50:e1:f2:4e:28: 3a:f4:c9:33:fa:ca:3c:91:9a:27:75:2d:41:f9:46: e2:cd:5e:8a:87:bc:d2:f6:f1:2b:e2:d4:f7:1b:1b: 6c:d4:20:59:c5:43:66:05:24:7e:da:0a:b9:1e:5a: 82:f6:3d:0b:66:81:92:41:bd:7f:83:81:8a:b0:20: 0f:81:1f:26:77:ce:76:c4:ed:6d:e8:14:0d:1f:1f: 94:8e:d8:f4:f0:ab:a8:29:07:4d:31:28:46:f3:e3: d5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:05:14:45:FB:2B:BE:5F:A7:10:E7:7D:A2:85:D9:CD:2D:F0:A1:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f3487ac-1935-3cd6-a797-448cfbfd2c17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:231d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:db:ab:f1:39:6a:69:ed:a5:6e:7b:3b:80:bb:13:53:34:d9: d5:9b:c5:5c:1e:57:52:e5:14:94:66:0b:6c:d6:a7:b2:31:06: 01:4a:d1:2b:e0:d7:0e:ca:48:ad:eb:3f:96:5b:95:02:4b:1e: b1:d3:06:90:b4:76:d6:6b:e4:74:e6:73:7f:05:18:3c:d7:3e: d8:55:67:d1:bb:1c:ba:0d:d9:96:e5:9a:00:d5:d9:66:55:f8: 1d:71:3b:14:09:90:f3:df:a4:b7:26:1c:c4:11:82:b0:98:a8: 5d:e1:b9:4b:81:36:07:f9:32:12:8a:09:d6:42:d4:5f:13:ec: 2b:7c:f0:79:60:73:9c:48:ca:05:01:01:54:a1:5d:dc:23:6b: cc:87:8b:d2:cb:40:50:28:66:31:91:60:a5:c5:fa:73:4b:96: 45:a9:9d:84:fa:17:ce:ce:29:8d:32:77:93:08:5e:25:9b:83: c2:6a:27:f8:53:e6:9f:ee:e9:1b:b8:8a:d9:00:70:fd:4d:ac: d1:e9:a3:95:75:23:f9:3e:9c:41:a6:52:82:59:56:c6:23:84: c0:c8:61:66:63:f6:3e:bb:8a:9e:9a:da:f4:da:bf:1e:78:63: f9:b6:60:35:c1:46:0f:a6:37:51:14:1f:41:1c:1f:eb:91:9c: 01:0e:da:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6tHD4iX1M0yRQtDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDczMTAxMDAxMVoXDTI2MTAyOTAxMDAxMVowLzEtMCsGA1UEAxMk ZTk3YmNkNmQtYTEyMi00MjVhLTgzYzctNjNiYzhlYThkN2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwc6Kkp2nvp0Z7Qh93ocOXYyu9P8lffe+Wsg RmOHhDLfctRoMLLa2rvIJsVPJH2j5gFUFQc4K2gOPMrdA+aIbRoJOqczVaw8C+Ci X+PnGV9BCNnj/9yOotCSaTk2Yb/8Ry+XBOozz2TwkZYhUuI0zoiGyMCwcS+mUmwW 6rJ6d+EVcPUnlNxmg4eGKTHRO/gVVW8q6t1Li/oAQPaThuybUOHyTig69Mkz+so8 kZondS1B+UbizV6Kh7zS9vEr4tT3Gxts1CBZxUNmBSR+2gq5HlqC9j0LZoGSQb1/ g4GKsCAPgR8md852xO1t6BQNHx+Ujtj08KuoKQdNMShG8+PVSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIAFFEX7K75fpxDnfaKF2c0t8KHXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2YzNDg3YWMtMTkzNS0z Y2Q2LWE3OTctNDQ4Y2ZiZmQyYzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAyMd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACnbq/E5amntpW57O4C7E1M02dWbxVweV1LlFJRmC2zWp7IxBgFK 0Svg1w7KSK3rP5ZblQJLHrHTBpC0dtZr5HTmc38FGDzXPthVZ9G7HLoN2ZblmgDV 2WZV+B1xOxQJkPPfpLcmHMQRgrCYqF3huUuBNgf5MhKKCdZC1F8T7Ct88Hlgc5xI ygUBAVShXdwja8yHi9LLQFAoZjGRYKXF+nNLlkWpnYT6F87OKY0yd5MIXiWbg8Jq J/hT5p/u6Ru4itkAcP1NrNHpo5V1I/k+nEGmUoJZVsYjhMDIYWZj9j67ip6a2vTa vx54Y/m2YDXBRg+mN1EUH0EcH+uRnAEO2mk= -----END CERTIFICATE-----Generated at Wed Aug 19 17:05:41 2026 by rpki-client