$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a8b7a38-1f99-33b4-b881-5a3f9df9b3f8.roa File: 5a8b7a38-1f99-33b4-b881-5a3f9df9b3f8.roa (raw, json) Hash identifier: E2n4dZVOozgLCOc9Mfg8XojygvgnkdKzwuj5iXQx6Lc= Subject key identifier: D5:F7:A7:8E:7A:28:EA:74:32:C5:DA:BC:95:5D:E5:A2:17:A3:1A:40 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EAD1C396E5F4C1696AEBFFA00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a8b7a38-1f99-33b4-b881-5a3f9df9b3f8.roa Signing time: Fri 31 Jul 2026 01:00:11 +0000 ROA not before: Fri 31 Jul 2026 01:00:11 +0000 ROA not after: Thu 29 Oct 2026 01:00:11 +0000 asID: 396743 IP address blocks: 2001:503:231d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ad:1c:39:6e:5f:4c:16:96:ae:bf:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 31 01:00:11 2026 GMT Not After : Oct 29 01:00:11 2026 GMT Subject: CN=605cba9d-d644-46ca-8329-125a23006e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:99:9a:92:10:ef:98:15:55:09:25:a4:a0:be: 91:a8:fb:eb:4d:a1:e7:76:b1:04:30:e6:ce:ce:26: 52:3d:4b:ba:03:da:70:f2:0f:0c:a2:09:02:69:3d: 40:c0:31:ea:31:07:4d:80:16:53:cf:78:68:68:38: 2a:e2:33:7f:6c:b4:87:d8:54:f5:27:6f:c5:de:31: 93:87:7c:fc:99:84:87:7c:c5:dd:77:c2:e3:bc:fa: 48:04:51:7b:4c:54:fc:ca:82:9e:2d:ac:5e:ea:4e: 67:c3:a0:22:be:64:f4:d7:57:43:82:25:32:ae:77: 08:92:19:cf:b8:c9:4e:17:2c:fd:e3:de:4a:64:2a: 12:2d:17:b5:56:f7:e2:68:73:67:22:fd:14:b4:9d: cc:89:fb:d5:a0:bb:e6:4c:07:0e:91:06:52:7c:6c: a6:10:7c:98:7a:41:d6:d6:32:66:ea:42:64:88:36: ef:fb:43:7b:5b:59:78:b4:b3:21:d9:0c:c4:f7:ce: 68:c0:2b:73:2a:4e:16:2e:f8:48:af:8d:2b:c1:73: 5f:ef:7d:56:05:46:13:9d:72:3d:4c:9d:6e:30:f9: 74:44:02:b1:42:0d:85:b1:f8:05:c0:b8:d2:eb:79: b9:2a:5b:92:45:df:b1:d2:70:32:3f:1f:c7:71:6a: 25:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F7:A7:8E:7A:28:EA:74:32:C5:DA:BC:95:5D:E5:A2:17:A3:1A:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a8b7a38-1f99-33b4-b881-5a3f9df9b3f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:231d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:68:a7:b3:ed:cd:eb:32:63:f4:4e:41:2a:fc:5f:9c:8b:cf: 06:1f:b0:ae:f8:76:5b:fe:6d:7a:8d:40:1e:89:31:98:1f:85: 91:6f:16:de:54:9d:99:16:99:f1:da:c3:ee:ac:c9:44:b3:4a: f3:ed:12:dc:78:6d:0a:ed:48:fc:95:8a:87:be:d8:54:7f:3c: 34:55:ca:aa:9c:f1:a3:35:f6:30:35:17:60:0b:5b:3b:db:84: d0:25:f5:d6:f1:53:ee:f0:a5:43:2d:6f:f4:f5:fa:3f:8f:b7: c7:1b:7b:ed:ed:9f:57:eb:34:f7:7f:1c:44:8d:3a:67:d0:36: 57:4c:c9:b3:e4:36:5d:c1:01:93:98:a0:ef:b2:85:bf:70:87: cc:c2:f4:42:c4:3e:af:a5:3d:02:75:19:3b:9d:54:ba:54:d3: 39:ff:18:af:97:6f:69:9e:e1:fb:00:b3:3a:8a:1f:be:c8:c4: ca:88:f8:fe:40:63:85:e7:44:b7:ab:d9:a1:6a:5c:cc:d4:d9: 47:75:ff:4b:5f:fe:03:40:17:c1:0b:1f:b1:cc:20:1d:8b:46: 75:1e:60:b4:77:47:a7:b6:44:ec:50:b3:ae:5d:9b:a7:f2:88: f8:92:68:5d:a0:ea:2c:e1:54:fc:e9:d0:a7:d6:13:64:ff:63: f4:42:fd:04 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6tHDluX0wWlq6/+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDczMTAxMDAxMVoXDTI2MTAyOTAxMDAxMVowLzEtMCsGA1UEAxMk NjA1Y2JhOWQtZDY0NC00NmNhLTgzMjktMTI1YTIzMDA2ZTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpmakhDvmBVVCSWkoL6RqPvrTaHndrEEMObO ziZSPUu6A9pw8g8MogkCaT1AwDHqMQdNgBZTz3hoaDgq4jN/bLSH2FT1J2/F3jGT h3z8mYSHfMXdd8LjvPpIBFF7TFT8yoKeLaxe6k5nw6AivmT011dDgiUyrncIkhnP uMlOFyz9495KZCoSLRe1VvfiaHNnIv0UtJ3MifvVoLvmTAcOkQZSfGymEHyYekHW 1jJm6kJkiDbv+0N7W1l4tLMh2QzE985owCtzKk4WLvhIr40rwXNf731WBUYTnXI9 TJ1uMPl0RAKxQg2FsfgFwLjS63m5KluSRd+x0nAyPx/HcWolrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNX3p456KOp0MsXavJVd5aIXoxpAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWE4YjdhMzgtMWY5OS0z M2I0LWI4ODEtNWEzZjlkZjliM2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAyMd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABNop7PtzesyY/ROQSr8X5yLzwYfsK74dlv+bXqNQB6JMZgfhZFv Ft5UnZkWmfHaw+6syUSzSvPtEtx4bQrtSPyVioe+2FR/PDRVyqqc8aM19jA1F2AL WzvbhNAl9dbxU+7wpUMtb/T1+j+Pt8cbe+3tn1frNPd/HESNOmfQNldMybPkNl3B AZOYoO+yhb9wh8zC9ELEPq+lPQJ1GTudVLpU0zn/GK+Xb2me4fsAszqKH77IxMqI +P5AY4XnRLer2aFqXMzU2Ud1/0tf/gNAF8ELH7HMIB2LRnUeYLR3R6e2ROxQs65d m6fyiPiSaF2g6izhVPzp0KfWE2T/Y/RC/QQ= -----END CERTIFICATE-----Generated at Wed Aug 19 19:53:10 2026 by rpki-client