$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd0e0fa6-688d-3648-93d7-653c978b65c5.roa File: cd0e0fa6-688d-3648-93d7-653c978b65c5.roa (raw, json) Hash identifier: KYdtIwGDV9L8Qg/aJwRccscKni1JADYH4ZuZrS8p4jI= Subject key identifier: 35:B3:B8:F6:73:55:80:01:DA:2A:64:A9:D8:F5:67:D6:A8:CD:0D:7E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EE22752D0D2A66805A96F7B00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd0e0fa6-688d-3648-93d7-653c978b65c5.roa Signing time: Wed 19 Aug 2026 01:00:12 +0000 ROA not before: Wed 19 Aug 2026 01:00:12 +0000 ROA not after: Tue 17 Nov 2026 02:00:12 +0000 asID: 40717 IP address blocks: 2001:503:231d::2:30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e2:27:52:d0:d2:a6:68:05:a9:6f:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 19 01:00:12 2026 GMT Not After : Nov 17 02:00:12 2026 GMT Subject: CN=4edd1cf5-fe79-405a-8457-e91570da87d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:50:93:06:dd:8b:68:9a:44:68:ad:bf:3f:ab: 48:97:77:07:2e:02:c1:ce:fc:e2:da:b8:ab:0f:25: ae:51:fe:d5:10:3c:dd:1a:d1:15:6a:b5:94:8d:8f: 11:04:d8:fa:31:90:dc:b1:9d:ee:70:e0:d2:4b:81: 30:e9:07:e5:c5:60:5f:0d:b6:1c:23:c0:1a:b1:70: 46:7f:c1:8f:1c:0c:6f:4c:b9:36:38:6f:b2:7b:3b: ab:13:81:38:ef:fa:ba:2d:be:d7:b3:11:65:95:55: 1e:36:ab:41:2d:5b:e3:8f:ba:35:15:f2:7d:c8:b4: e6:d9:8c:f4:b1:a0:86:b4:65:07:20:81:86:27:e7: ba:e9:a9:fd:c0:69:b0:60:f2:ce:03:aa:b1:d6:9d: 6d:47:b1:01:a9:bd:4e:c7:b6:41:83:ec:b1:c2:a8: 29:34:54:0f:63:90:b4:8e:05:3e:18:02:12:b6:4a: 83:7b:91:8e:18:3b:1d:90:96:75:a0:69:09:c0:59: 28:40:0f:bb:9d:d2:80:cd:57:36:4b:4c:ae:a1:33: fd:b0:67:ab:08:2b:07:42:ec:27:b9:f8:a1:fd:b4: 19:08:9c:8a:5b:1c:db:33:bd:a4:d8:9e:11:6a:85: c7:22:f7:84:6e:48:76:5a:1f:20:1b:87:33:66:1c: e2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B3:B8:F6:73:55:80:01:DA:2A:64:A9:D8:F5:67:D6:A8:CD:0D:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd0e0fa6-688d-3648-93d7-653c978b65c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:231d:0:0:0:2:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:0d:f0:e9:f5:dd:10:41:74:71:8c:85:17:47:22:0e:f2:c2: 07:3d:f2:b7:cc:75:37:a3:a1:16:46:4b:44:b0:83:cb:22:1b: ec:cc:5b:ec:19:27:f4:43:39:b7:17:6a:2b:7a:cd:16:83:99: ff:93:6b:0b:4d:1a:7b:14:88:90:27:cc:b8:da:be:4f:bf:1a: c1:40:2e:27:93:ef:5a:25:ea:c9:f7:c6:bd:76:fe:e5:ec:b8: a5:40:19:b6:b4:46:7d:22:a8:e6:0d:67:39:a2:ed:fd:41:23: cc:4c:20:fb:7a:ef:ba:a7:ea:cc:79:f0:dc:2a:5f:bb:31:c3: e8:ae:df:54:4c:7b:44:48:0c:52:67:7b:66:5f:ce:14:ae:bd: 6c:21:67:56:d4:4b:f0:a0:36:9f:f9:f2:9e:5e:89:91:79:40: dd:b3:74:2a:f6:3c:df:80:f9:c5:34:b4:fd:3e:a8:98:c9:c6: 90:0a:5d:fe:f3:12:d2:f4:7a:0d:f4:b9:c7:c6:fd:8a:c4:3f: f7:63:68:47:cd:ce:96:6d:d2:61:ec:eb:3c:36:a6:75:2c:4a: de:6e:88:dc:68:a6:3e:05:2e:81:ff:7c:4c:4a:af:75:b5:62: 5e:e2:af:b3:b0:f4:91:cb:8e:e8:55:a3:06:b9:b2:af:43:a3: 88:05:d2:c0 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE7iJ1LQ0qZoBalvewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgxOTAxMDAxMloXDTI2MTExNzAyMDAxMlowLzEtMCsGA1UEAxMk NGVkZDFjZjUtZmU3OS00MDVhLTg0NTctZTkxNTcwZGE4N2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FCTBt2LaJpEaK2/P6tIl3cHLgLBzvzi2rir DyWuUf7VEDzdGtEVarWUjY8RBNj6MZDcsZ3ucODSS4Ew6QflxWBfDbYcI8AasXBG f8GPHAxvTLk2OG+yezurE4E47/q6Lb7XsxFllVUeNqtBLVvjj7o1FfJ9yLTm2Yz0 saCGtGUHIIGGJ+e66an9wGmwYPLOA6qx1p1tR7EBqb1Ox7ZBg+yxwqgpNFQPY5C0 jgU+GAIStkqDe5GOGDsdkJZ1oGkJwFkoQA+7ndKAzVc2S0yuoTP9sGerCCsHQuwn ufih/bQZCJyKWxzbM72k2J4RaoXHIveEbkh2Wh8gG4czZhziswIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDWzuPZzVYAB2ipkqdj1Z9aozQ1+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2QwZTBmYTYtNjg4ZC0z NjQ4LTkzZDctNjUzYzk3OGI2NWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAyMd AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB3DfDp9d0QQXRxjIUXRyIO8sIHPfK3zHU3o6EW RktEsIPLIhvszFvsGSf0Qzm3F2ores0Wg5n/k2sLTRp7FIiQJ8y42r5PvxrBQC4n k+9aJerJ98a9dv7l7LilQBm2tEZ9IqjmDWc5ou39QSPMTCD7eu+6p+rMefDcKl+7 McPort9UTHtESAxSZ3tmX84Urr1sIWdW1EvwoDaf+fKeXomReUDds3Qq9jzfgPnF NLT9PqiYycaQCl3+8xLS9HoN9LnHxv2KxD/3Y2hHzc6WbdJh7Os8NqZ1LErebojc aKY+BS6B/3xMSq91tWJe4q+zsPSRy47oVaMGubKvQ6OIBdLA -----END CERTIFICATE-----Generated at Wed Aug 19 20:26:06 2026 by rpki-client