$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/525189c6-c84a-3f5e-96bf-542ea3639c66.roa File: 525189c6-c84a-3f5e-96bf-542ea3639c66.roa (raw, json) Hash identifier: Eq2udVKkPgXv1rCtw+WMDToQcz8HqE/Bl9OspSByups= Subject key identifier: 94:29:0A:20:87:30:2C:D0:78:76:5B:5B:7A:C9:16:F2:E0:43:35:F0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EAD1C406BD98626D865075A00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/525189c6-c84a-3f5e-96bf-542ea3639c66.roa Signing time: Fri 31 Jul 2026 01:00:11 +0000 ROA not before: Fri 31 Jul 2026 01:00:11 +0000 ROA not after: Thu 29 Oct 2026 01:00:11 +0000 asID: 396645 IP address blocks: 2001:503:231d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ad:1c:40:6b:d9:86:26:d8:65:07:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 31 01:00:11 2026 GMT Not After : Oct 29 01:00:11 2026 GMT Subject: CN=22bf8e79-a399-41a4-acff-7bd48d9cdd19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:7a:02:01:a5:aa:b5:e5:bf:2b:7e:2f:19:49: 25:cc:a0:a4:ae:6e:a8:01:82:14:50:1f:bd:26:17: 4b:6a:62:0c:ef:19:d1:dd:4b:6c:b9:f6:59:a7:27: 06:50:a2:77:c6:f9:84:12:76:c4:5a:48:21:bb:8e: 83:66:dc:a6:57:ba:0e:cc:39:62:96:d4:e2:92:7a: 63:9a:82:30:17:28:13:b6:6d:1b:0b:7a:e0:f4:de: 11:56:bd:23:77:fd:85:97:73:95:6b:a3:9d:ae:dc: 8a:38:2e:ea:0e:3c:1c:01:06:f7:00:1f:52:84:63: b8:3d:35:95:5b:5b:ea:88:83:a9:1d:80:23:e2:02: b4:76:cc:ed:bb:7a:36:64:7c:7e:6d:ac:cf:fb:19: d7:02:81:40:31:eb:7b:3d:7d:61:fb:c9:53:f7:02: 11:71:16:d5:20:16:4c:5b:09:5a:5c:7f:28:c8:27: 2c:7f:31:dc:8d:4d:46:e2:cd:ef:93:97:f3:05:24: 4e:16:7e:e5:bb:fa:48:ab:c2:b4:4d:c6:22:75:d1: 84:e2:b4:13:fc:68:50:d8:60:07:f4:5f:c1:d0:e4: bf:e2:7e:61:0e:cc:52:a8:4a:68:c7:1d:f9:41:d7: f1:85:50:a6:23:0f:c6:21:5f:3c:cf:5e:ff:27:73: fc:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:29:0A:20:87:30:2C:D0:78:76:5B:5B:7A:C9:16:F2:E0:43:35:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/525189c6-c84a-3f5e-96bf-542ea3639c66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:231d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:80:40:9d:9e:1c:1f:e7:89:a4:06:7b:0b:98:b7:e2:57:e8: 8d:3b:9c:36:ea:ae:43:c5:c8:be:bd:5b:b2:36:50:cb:71:e2: 4c:67:b9:f3:d4:33:45:21:c8:b7:52:94:b8:e8:64:46:49:ac: f3:2a:54:33:54:63:3a:4f:e0:61:2f:05:9a:4a:57:ef:99:15: 05:e7:e5:09:53:48:74:0e:29:ee:42:21:7b:24:07:20:3e:b4: b8:a6:12:08:a1:01:6d:d7:e7:9e:0e:2e:c9:ae:76:0e:72:26: 4b:7d:47:b4:8a:43:d8:d9:cb:c9:75:9d:c0:e2:51:c5:94:52: 28:ea:7c:d9:ea:4c:e2:cd:3b:65:4c:e1:21:61:8c:08:31:4f: fd:da:a9:39:44:ea:2a:2f:8f:56:bb:84:a3:15:dc:62:a3:bf: c6:62:26:17:98:ee:d9:4c:f7:45:28:44:27:75:be:a5:76:f6: 81:cc:e4:db:59:12:89:df:f0:06:1d:04:9d:c3:87:29:9b:6e: d6:10:3a:59:08:7e:bb:66:fc:fa:47:e1:58:d3:92:3d:04:d7: 8a:1c:7e:99:47:ab:9d:1d:f3:77:46:48:3c:02:3d:31:1b:30: 34:b9:29:81:bf:90:21:48:45:24:46:f6:ce:dc:00:fd:65:ac: cf:e7:6b:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6tHEBr2YYm2GUHWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDczMTAxMDAxMVoXDTI2MTAyOTAxMDAxMVowLzEtMCsGA1UEAxMk MjJiZjhlNzktYTM5OS00MWE0LWFjZmYtN2JkNDhkOWNkZDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83oCAaWqteW/K34vGUklzKCkrm6oAYIUUB+9 JhdLamIM7xnR3UtsufZZpycGUKJ3xvmEEnbEWkghu46DZtymV7oOzDliltTiknpj moIwFygTtm0bC3rg9N4RVr0jd/2Fl3OVa6OdrtyKOC7qDjwcAQb3AB9ShGO4PTWV W1vqiIOpHYAj4gK0dsztu3o2ZHx+bazP+xnXAoFAMet7PX1h+8lT9wIRcRbVIBZM WwlaXH8oyCcsfzHcjU1G4s3vk5fzBSROFn7lu/pIq8K0TcYiddGE4rQT/GhQ2GAH 9F/B0OS/4n5hDsxSqEpoxx35QdfxhVCmIw/GIV88z17/J3P8iwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJQpCiCHMCzQeHZbW3rJFvLgQzXwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTI1MTg5YzYtYzg0YS0z ZjVlLTk2YmYtNTQyZWEzNjM5YzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAyMd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAESAQJ2eHB/niaQGewuYt+JX6I07nDbqrkPFyL69W7I2UMtx4kxn ufPUM0UhyLdSlLjoZEZJrPMqVDNUYzpP4GEvBZpKV++ZFQXn5QlTSHQOKe5CIXsk ByA+tLimEgihAW3X554OLsmudg5yJkt9R7SKQ9jZy8l1ncDiUcWUUijqfNnqTOLN O2VM4SFhjAgxT/3aqTlE6iovj1a7hKMV3GKjv8ZiJheY7tlM90UoRCd1vqV29oHM 5NtZEonf8AYdBJ3DhymbbtYQOlkIfrtm/PpH4VjTkj0E14ocfplHq50d83dGSDwC PTEbMDS5KYG/kCFIRSRG9s7cAP1lrM/na2k= -----END CERTIFICATE-----Generated at Wed Aug 19 18:10:40 2026 by rpki-client