$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba4fde7d-25fd-3235-976a-678d8565990c.roa File: ba4fde7d-25fd-3235-976a-678d8565990c.roa (raw, json) Hash identifier: wyy/0Tm9k7FnjfY8fjASr5Zh1ktwM6M0PjMKla0YSCg= Subject key identifier: 20:56:C0:C9:54:97:EA:A0:03:90:0C:2E:A9:36:F0:76:12:3E:A2:28 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EAD1C423336C129071A215E00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba4fde7d-25fd-3235-976a-678d8565990c.roa Signing time: Fri 31 Jul 2026 01:00:11 +0000 ROA not before: Fri 31 Jul 2026 01:00:11 +0000 ROA not after: Thu 29 Oct 2026 01:00:11 +0000 asID: 396606 IP address blocks: 2001:503:231d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ad:1c:42:33:36:c1:29:07:1a:21:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 31 01:00:11 2026 GMT Not After : Oct 29 01:00:11 2026 GMT Subject: CN=446581f9-6907-4866-aba4-cfbccaec1ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bb:10:38:9d:47:52:26:62:3c:4f:e8:76:eb: 2e:f0:04:14:cb:ae:ab:3d:a4:e7:d5:bb:43:ad:c1: c6:79:2d:72:7c:c9:5d:20:db:23:11:99:a1:a3:c0: bc:65:72:b8:c5:6b:cd:4f:35:3d:76:00:61:26:f4: 05:16:a7:8f:77:50:dd:4d:fa:a9:f4:0a:73:32:a3: 57:d1:e5:a8:e2:28:db:05:01:eb:56:40:26:eb:b6: 6f:d3:b5:a5:71:38:dc:8c:4f:18:b1:35:b4:64:2d: 15:68:47:e1:37:80:ec:75:ed:3b:d7:71:f8:81:1f: df:6e:1a:8b:ba:5a:2b:0d:23:03:ac:da:e0:46:8d: 73:ea:cd:95:c3:47:e9:2f:8c:a0:a7:5a:b7:f7:4a: b6:83:92:7a:d0:61:43:b5:aa:dc:b0:a8:49:1a:1d: a2:7e:94:12:fb:72:d3:07:ca:96:2e:36:a6:f6:98: b0:1a:fa:96:5d:cc:b7:77:78:f4:09:9e:20:3e:d4: 4f:53:a6:b8:c4:e4:75:9b:dc:fa:14:b8:b8:be:7a: e9:31:6d:f8:0c:e4:26:61:f6:20:a4:ee:4f:c0:32: 40:ae:13:22:a9:bd:09:c5:03:e0:c7:08:d3:52:54: 6f:39:b7:5a:f4:6f:48:e4:9e:4b:42:b8:07:56:33: d5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:56:C0:C9:54:97:EA:A0:03:90:0C:2E:A9:36:F0:76:12:3E:A2:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba4fde7d-25fd-3235-976a-678d8565990c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:231d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:e1:b7:ef:b1:bc:0f:73:12:7c:f1:c6:d7:ae:e0:5a:c5:e2: 90:45:6a:91:4e:49:d2:78:21:b2:77:51:0e:e9:2f:a3:08:db: 18:81:c4:b5:ee:ba:1a:08:74:f2:d7:59:3d:16:22:92:14:c0: aa:c3:60:cb:54:38:b0:16:d3:07:f9:d3:c2:7b:f1:2f:48:43: ac:b9:8f:58:80:b9:26:8b:16:85:4b:42:14:50:1b:b4:5a:39: 5b:34:6f:1c:f1:be:e2:76:3d:ff:7e:40:ac:27:40:81:8c:39: ab:14:79:f8:92:9c:97:ef:26:d7:9e:2e:63:02:e1:3d:3e:94: 25:d6:ff:fe:fe:63:6c:28:6f:96:6b:e9:11:14:4f:09:80:0c: ce:23:23:ce:63:67:2e:ec:38:77:7d:b8:ff:35:6c:7e:7d:b8: 8a:ae:17:75:98:0e:47:b9:14:65:a4:c5:73:21:0e:de:2f:76: 7e:30:a9:f6:75:d1:6f:a3:83:94:67:37:d5:a8:ff:a2:f7:86: d7:26:dd:5a:31:e8:6d:a5:75:32:53:83:0a:9b:75:b9:8f:e4: 87:36:53:ed:dc:87:6f:ee:dd:24:f9:c8:f5:74:a0:95:a4:a2: 37:9c:26:21:64:aa:dd:4b:25:67:fa:91:49:69:9c:23:cc:60: 99:8c:09:67 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6tHEIzNsEpBxohXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDczMTAxMDAxMVoXDTI2MTAyOTAxMDAxMVowLzEtMCsGA1UEAxMk NDQ2NTgxZjktNjkwNy00ODY2LWFiYTQtY2ZiY2NhZWMxZWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLsQOJ1HUiZiPE/odusu8AQUy66rPaTn1btD rcHGeS1yfMldINsjEZmho8C8ZXK4xWvNTzU9dgBhJvQFFqePd1DdTfqp9ApzMqNX 0eWo4ijbBQHrVkAm67Zv07WlcTjcjE8YsTW0ZC0VaEfhN4Dsde0713H4gR/fbhqL ulorDSMDrNrgRo1z6s2Vw0fpL4ygp1q390q2g5J60GFDtarcsKhJGh2ifpQS+3LT B8qWLjam9piwGvqWXcy3d3j0CZ4gPtRPU6a4xOR1m9z6FLi4vnrpMW34DOQmYfYg pO5PwDJArhMiqb0JxQPgxwjTUlRvObda9G9I5J5LQrgHVjPVOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCBWwMlUl+qgA5AMLqk28HYSPqIoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmE0ZmRlN2QtMjVmZC0z MjM1LTk3NmEtNjc4ZDg1NjU5OTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAyMd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABDht++xvA9zEnzxxteu4FrF4pBFapFOSdJ4IbJ3UQ7pL6MI2xiB xLXuuhoIdPLXWT0WIpIUwKrDYMtUOLAW0wf508J78S9IQ6y5j1iAuSaLFoVLQhRQ G7RaOVs0bxzxvuJ2Pf9+QKwnQIGMOasUefiSnJfvJteeLmMC4T0+lCXW//7+Y2wo b5Zr6REUTwmADM4jI85jZy7sOHd9uP81bH59uIquF3WYDke5FGWkxXMhDt4vdn4w qfZ10W+jg5RnN9Wo/6L3htcm3Vox6G2ldTJTgwqbdbmP5Ic2U+3ch2/u3ST5yPV0 oJWkojecJiFkqt1LJWf6kUlpnCPMYJmMCWc= -----END CERTIFICATE-----Generated at Wed Aug 19 19:34:47 2026 by rpki-client