$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67d1aae1-b036-3ed3-92f7-4a2ede51342c.roa File: 67d1aae1-b036-3ed3-92f7-4a2ede51342c.roa (raw, json) Hash identifier: yfOvT8Hef222ZzRG3gcrbIS2oDOvWDsvARhHDt8FRtg= Subject key identifier: F2:D9:E0:66:38:B5:6E:1B:53:DE:85:5F:B4:BA:35:E7:1C:56:A7:2A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EAD1C3E89E0CC9408540CFFA0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67d1aae1-b036-3ed3-92f7-4a2ede51342c.roa Signing time: Fri 31 Jul 2026 01:00:11 +0000 ROA not before: Fri 31 Jul 2026 01:00:11 +0000 ROA not after: Thu 29 Oct 2026 01:00:11 +0000 asID: 396615 IP address blocks: 2001:503:231d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ad:1c:3e:89:e0:cc:94:08:54:0c:ff:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 31 01:00:11 2026 GMT Not After : Oct 29 01:00:11 2026 GMT Subject: CN=1f3cb137-cd83-45a0-bde0-50e7925cdb6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ac:0d:13:fc:1b:57:36:97:8f:86:00:16:fb: d1:44:25:3d:aa:6f:a4:85:11:3d:15:48:dd:f7:54: 4c:46:4a:3f:7d:65:b6:d8:c4:d3:5c:33:19:2b:bf: e9:5a:05:35:60:82:bd:45:3c:10:a2:d1:2f:1b:c4: 3a:5c:03:3f:5c:4a:a8:72:f6:1e:5d:bd:14:46:c1: f9:6d:09:95:f6:96:17:e9:d9:91:ee:ab:02:83:62: 80:fe:cd:78:7f:1c:ce:d0:e8:a7:56:00:2e:58:6a: de:a1:b1:0c:b6:31:04:2f:76:f6:b8:3c:28:ad:99: f7:f3:7b:f9:c1:6b:8f:95:fa:ac:a1:2d:75:fd:03: a0:6c:e6:eb:07:8e:80:52:b0:df:9c:fe:35:a6:61: e2:ad:66:18:34:0a:c1:43:47:e3:67:37:79:2a:6c: 15:0c:a5:67:ac:22:e0:12:7c:27:94:cb:e8:8f:51: 88:ad:1e:6c:8d:99:8c:bb:dc:37:59:7d:c4:6d:60: c2:fc:14:82:6a:c8:dc:56:3b:cb:4e:50:09:60:fb: 73:27:c1:be:09:e2:54:ac:6e:be:ec:22:24:92:15: 72:41:8e:47:37:50:79:43:99:67:7f:bd:71:0a:c3: 8f:88:c4:92:9b:18:56:09:6f:94:5e:25:ba:52:6e: 4b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:D9:E0:66:38:B5:6E:1B:53:DE:85:5F:B4:BA:35:E7:1C:56:A7:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67d1aae1-b036-3ed3-92f7-4a2ede51342c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:231d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:f7:0e:da:c6:e8:fb:03:3b:90:e7:9e:ba:52:93:3c:c4:31: ea:7c:d1:34:14:fd:19:08:b4:89:fd:16:f2:42:b2:19:8c:27: b6:15:30:1b:c9:50:c2:20:20:22:aa:35:c1:b0:1b:a5:bf:42: b9:a5:35:e0:c5:e7:61:51:0d:58:4e:84:fa:f3:04:ab:a3:a5: 54:f4:19:4c:80:c5:84:69:49:e9:99:15:06:0c:94:ba:88:bd: 12:9f:bb:39:f8:db:98:10:88:69:bb:28:05:74:6c:06:32:78: 16:99:47:fd:ac:37:b8:76:65:cb:1f:d7:c3:a1:c5:9c:20:f3: 7f:12:0c:1a:db:87:ed:1b:f2:69:cb:89:06:1c:06:74:1e:ce: e7:5c:df:41:e2:dc:cf:28:15:ac:ad:56:d4:4c:d2:06:ec:79: bb:07:11:c0:d2:41:1f:24:96:6e:40:d6:22:b0:a1:89:45:9d: 98:52:53:f7:0d:f8:4b:7c:e2:b2:e0:f4:8b:07:91:1f:07:6a: 20:29:45:8f:3e:e4:39:42:4e:67:8a:ec:89:3a:bf:f9:4c:d6: e3:82:33:e1:22:4e:9a:29:72:32:fb:31:e8:a1:23:13:19:af: e0:c9:a3:f2:7a:53:e8:7b:48:19:4a:4e:ef:04:3e:13:71:06: 91:34:05:ca -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6tHD6J4MyUCFQM/6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDczMTAxMDAxMVoXDTI2MTAyOTAxMDAxMVowLzEtMCsGA1UEAxMk MWYzY2IxMzctY2Q4My00NWEwLWJkZTAtNTBlNzkyNWNkYjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqwNE/wbVzaXj4YAFvvRRCU9qm+khRE9FUjd 91RMRko/fWW22MTTXDMZK7/pWgU1YIK9RTwQotEvG8Q6XAM/XEqocvYeXb0URsH5 bQmV9pYX6dmR7qsCg2KA/s14fxzO0OinVgAuWGreobEMtjEEL3b2uDworZn383v5 wWuPlfqsoS11/QOgbObrB46AUrDfnP41pmHirWYYNArBQ0fjZzd5KmwVDKVnrCLg EnwnlMvoj1GIrR5sjZmMu9w3WX3EbWDC/BSCasjcVjvLTlAJYPtzJ8G+CeJUrG6+ 7CIkkhVyQY5HN1B5Q5lnf71xCsOPiMSSmxhWCW+UXiW6Um5LiQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPLZ4GY4tW4bU96FX7S6NeccVqcqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjdkMWFhZTEtYjAzNi0z ZWQzLTkyZjctNGEyZWRlNTEzNDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAyMd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKD3DtrG6PsDO5DnnrpSkzzEMep80TQU/RkItIn9FvJCshmMJ7YV MBvJUMIgICKqNcGwG6W/QrmlNeDF52FRDVhOhPrzBKujpVT0GUyAxYRpSemZFQYM lLqIvRKfuzn425gQiGm7KAV0bAYyeBaZR/2sN7h2Zcsf18OhxZwg838SDBrbh+0b 8mnLiQYcBnQezudc30Hi3M8oFaytVtRM0gbsebsHEcDSQR8klm5A1iKwoYlFnZhS U/cN+Et84rLg9IsHkR8HaiApRY8+5DlCTmeK7Ik6v/lM1uOCM+EiTpopcjL7Meih IxMZr+DJo/J6U+h7SBlKTu8EPhNxBpE0Bco= -----END CERTIFICATE-----Generated at Wed Aug 19 18:45:38 2026 by rpki-client