$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cdf707b1-d1ba-3cc3-9c16-11b92232a270.roa File: cdf707b1-d1ba-3cc3-9c16-11b92232a270.roa (raw, json) Hash identifier: knCQcno4YwbauOygBy2OZKJwwK4UsbqEF4NhvtpE75E= Subject key identifier: 75:CA:1A:3D:D0:F8:13:7C:2A:4C:5D:6C:E7:AB:08:FD:2A:03:2C:65 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EAD1C417B6EA3F08334DFF400 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cdf707b1-d1ba-3cc3-9c16-11b92232a270.roa Signing time: Fri 31 Jul 2026 01:00:11 +0000 ROA not before: Fri 31 Jul 2026 01:00:11 +0000 ROA not after: Thu 29 Oct 2026 01:00:11 +0000 asID: 396588 IP address blocks: 2001:503:231d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ad:1c:41:7b:6e:a3:f0:83:34:df:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 31 01:00:11 2026 GMT Not After : Oct 29 01:00:11 2026 GMT Subject: CN=732d788c-7f5c-4e33-9ed1-069990927c54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4e:b4:7e:49:20:9f:34:5d:65:71:c0:26:aa: 83:1f:a5:c6:8d:61:4c:e0:71:1a:af:19:27:2f:a5: 7b:d5:07:59:99:7d:53:0a:cc:30:f8:33:3a:38:ef: 38:c4:ef:2a:c4:a1:44:82:2a:c9:4b:65:de:70:da: 3f:8f:6f:de:53:56:2b:0b:7e:3f:65:d8:c6:82:b7: 62:25:69:54:ba:9c:1a:ab:dd:98:2f:6f:8c:da:fe: 3c:b3:b3:7f:dc:00:b6:d6:fd:d0:c2:01:2a:8c:23: 9e:2e:03:95:3f:2e:15:32:46:0a:1d:84:45:d3:39: 0a:06:17:bd:f0:da:3a:aa:b4:90:b0:f7:08:8c:d2: 23:ea:44:ed:76:78:86:38:9d:11:bc:3d:1c:51:ff: 5f:91:65:d3:fe:3a:bd:91:94:56:b5:09:0d:fb:4a: a1:00:8d:7e:ba:cf:36:49:ad:70:d4:31:34:8d:1d: 12:2b:0c:8b:ff:a3:01:28:2d:a4:b7:63:62:db:68: fc:ef:16:68:a4:21:2c:85:db:35:4a:33:ed:99:0b: 75:dd:17:2a:f2:13:2b:42:2f:e0:18:54:6d:ac:27: b3:98:a3:a7:7f:25:94:9e:97:2b:a6:a5:b5:36:5e: 0e:89:f7:9a:bc:74:e7:88:7f:75:02:ce:f2:fe:7b: d3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:CA:1A:3D:D0:F8:13:7C:2A:4C:5D:6C:E7:AB:08:FD:2A:03:2C:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cdf707b1-d1ba-3cc3-9c16-11b92232a270.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:231d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:a6:1e:d3:97:79:29:a0:ec:a8:18:a1:27:c7:28:39:69:fe: 5d:52:7e:c8:38:b2:56:b4:8f:d9:a8:13:58:22:69:da:cb:64: 69:e4:7b:ec:aa:57:ec:e6:b9:2a:77:1c:8a:02:9f:02:31:ba: 42:c3:5d:49:13:97:05:21:15:fc:92:5a:e6:2b:2c:40:b6:29: d5:14:93:c3:fa:eb:f7:77:4e:d7:6a:28:38:c9:dd:85:b3:04: 47:38:8b:02:33:c5:c7:1a:2a:e8:f8:62:34:d6:00:a5:56:ab: 50:13:97:94:67:6d:ae:27:3d:30:f8:99:41:5c:99:62:e3:97: 7c:61:f9:f3:cd:64:0d:af:1b:ae:41:18:2c:dd:fa:6a:31:f6: e4:05:f3:4d:bb:a1:88:68:ff:e4:e1:89:fe:32:0b:75:d3:3e: 0b:da:c3:b2:1f:24:90:aa:36:84:dd:36:48:23:67:ce:17:c2: b3:7f:23:e2:bb:7d:7b:82:f9:7a:cd:cc:ec:01:bc:79:ee:63: 74:4d:5c:d7:6a:b5:9d:66:c9:f9:dd:cc:b1:93:3b:cc:a7:4b: a8:96:34:41:b3:16:f3:e1:b8:2a:8b:10:63:2a:4e:83:32:82: c1:9f:b6:cb:34:c8:00:80:44:5a:4d:df:c6:92:d4:d9:49:37: f0:7d:4d:fd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6tHEF7bqPwgzTf9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDczMTAxMDAxMVoXDTI2MTAyOTAxMDAxMVowLzEtMCsGA1UEAxMk NzMyZDc4OGMtN2Y1Yy00ZTMzLTllZDEtMDY5OTkwOTI3YzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlE60fkkgnzRdZXHAJqqDH6XGjWFM4HEarxkn L6V71QdZmX1TCsww+DM6OO84xO8qxKFEgirJS2XecNo/j2/eU1YrC34/ZdjGgrdi JWlUupwaq92YL2+M2v48s7N/3AC21v3QwgEqjCOeLgOVPy4VMkYKHYRF0zkKBhe9 8No6qrSQsPcIjNIj6kTtdniGOJ0RvD0cUf9fkWXT/jq9kZRWtQkN+0qhAI1+us82 Sa1w1DE0jR0SKwyL/6MBKC2kt2Ni22j87xZopCEshds1SjPtmQt13Rcq8hMrQi/g GFRtrCezmKOnfyWUnpcrpqW1Nl4OifeavHTniH91As7y/nvTGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHXKGj3Q+BN8KkxdbOerCP0qAyxlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2RmNzA3YjEtZDFiYS0z Y2MzLTljMTYtMTFiOTIyMzJhMjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAyMd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHimHtOXeSmg7KgYoSfHKDlp/l1Sfsg4sla0j9moE1giadrLZGnk e+yqV+zmuSp3HIoCnwIxukLDXUkTlwUhFfySWuYrLEC2KdUUk8P66/d3TtdqKDjJ 3YWzBEc4iwIzxccaKuj4YjTWAKVWq1ATl5Rnba4nPTD4mUFcmWLjl3xh+fPNZA2v G65BGCzd+mox9uQF8027oYho/+Thif4yC3XTPgvaw7IfJJCqNoTdNkgjZ84XwrN/ I+K7fXuC+XrNzOwBvHnuY3RNXNdqtZ1myfndzLGTO8ynS6iWNEGzFvPhuCqLEGMq ToMygsGftss0yACARFpN38aS1NlJN/B9Tf0= -----END CERTIFICATE-----Generated at Wed Aug 19 19:35:23 2026 by rpki-client