$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cff2dc44-9d1f-3cd8-8ac3-84f1e67f712d.roa File: cff2dc44-9d1f-3cd8-8ac3-84f1e67f712d.roa (raw, json) Hash identifier: baQ04bBnGc4Lr7kpFsSIvhn3PL/SzFf7RX8NmLt3lks= Subject key identifier: BF:D2:C9:09:E5:5A:35:BB:C5:4E:26:98:68:FD:AD:49:6B:4D:91:17 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EA78876176B355B6D09F11800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cff2dc44-9d1f-3cd8-8ac3-84f1e67f712d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396544 IP address blocks: 2001:503:a83e::2:30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:76:17:6b:35:5b:6d:09:f1:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=03a830b6-74b7-4c74-abd0-68ddabcf339a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:74:dc:28:5b:42:49:27:9d:bc:0c:52:9a:ba: 19:81:c3:bb:18:45:e0:47:42:79:61:ab:ff:83:c3: d7:cc:53:a0:99:b4:16:92:47:b3:35:9c:e5:a1:3a: 06:68:67:f8:7b:06:60:72:bd:08:35:74:7e:88:9a: d1:ba:cc:e6:9d:67:f4:0b:16:b6:1c:11:07:e7:aa: de:89:c7:5c:95:32:bb:44:ee:d9:30:45:77:50:94: 63:ef:00:66:bf:3b:f4:b5:ea:32:6b:3b:96:ae:47: 72:30:57:0f:1d:9f:dd:a8:9c:c3:50:3e:55:18:6d: 59:20:fd:af:88:dd:45:46:2b:5e:c9:e7:11:05:cb: a3:01:98:8d:8e:b1:40:b8:5e:e3:0e:04:93:a5:7b: cd:38:16:13:97:06:36:e5:f8:10:3c:a7:8d:5f:47: 51:0e:bc:2d:4a:0b:f1:95:22:9f:f3:ed:d2:ff:6c: b1:c2:a1:7d:e6:03:22:a7:c9:3d:bc:22:53:c2:a5: 76:a7:d7:1d:66:e2:7f:fc:4d:25:0d:a0:6b:7d:57: 7d:bc:4e:3d:97:90:00:27:f9:60:50:44:32:5b:c0: ab:fd:3c:29:7d:77:38:69:5b:f8:86:60:03:92:fe: bc:43:2f:c3:37:cc:7c:38:50:68:8f:42:7e:dd:69: 4a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D2:C9:09:E5:5A:35:BB:C5:4E:26:98:68:FD:AD:49:6B:4D:91:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cff2dc44-9d1f-3cd8-8ac3-84f1e67f712d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:a83e:0:0:0:2:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:42:e7:74:ac:75:08:b3:1a:66:f2:49:14:1c:6b:02:50:1a: d4:0e:17:97:16:9a:99:5e:40:1b:5e:cb:c8:71:96:b6:98:26: f8:1d:11:ce:48:24:e3:43:9d:8c:e8:e0:10:ec:8a:63:81:83: 43:4f:4c:e5:2f:8c:a4:83:db:18:2b:ab:f0:3e:5f:e4:04:5b: 71:8a:05:17:39:c3:7f:a0:c0:bf:63:9d:5a:7f:df:94:8b:7d: 92:fc:a6:d5:d3:3f:88:3e:64:c1:f3:26:17:e5:3e:27:2a:d4: 3b:a0:8e:46:ef:56:b5:61:9b:74:2d:40:0e:c0:e0:87:91:30: 03:15:62:fe:46:3d:1c:99:81:87:23:79:9c:ab:58:0a:0e:83: 9b:40:05:c1:32:dd:23:80:f4:c3:f2:08:22:83:80:dd:e2:81: 56:c0:71:5b:86:37:3d:9b:ea:07:43:cd:ff:c8:6e:59:85:f8: 34:d8:df:51:47:3d:e9:d2:7b:ac:40:be:ee:10:f8:d8:27:e8: fc:bd:ca:dc:22:ab:f4:2c:09:64:82:6a:9d:18:f4:d2:31:88: f7:27:13:43:6f:55:30:ef:33:c6:f4:4d:d7:b5:47:73:d2:bc: ec:ea:89:10:0b:ac:bc:e5:cf:d6:f7:7c:ee:a6:ae:5d:c1:25: 32:06:b4:f4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE6niHYXazVbbQnxGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDNhODMwYjYtNzRiNy00Yzc0LWFiZDAtNjhkZGFiY2YzMzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHTcKFtCSSedvAxSmroZgcO7GEXgR0J5Yav/ g8PXzFOgmbQWkkezNZzloToGaGf4ewZgcr0INXR+iJrRuszmnWf0Cxa2HBEH56re icdclTK7RO7ZMEV3UJRj7wBmvzv0teoyazuWrkdyMFcPHZ/dqJzDUD5VGG1ZIP2v iN1FRiteyecRBcujAZiNjrFAuF7jDgSTpXvNOBYTlwY25fgQPKeNX0dRDrwtSgvx lSKf8+3S/2yxwqF95gMip8k9vCJTwqV2p9cdZuJ//E0lDaBrfVd9vE49l5AAJ/lg UEQyW8Cr/TwpfXc4aVv4hmADkv68Qy/DN8x8OFBoj0J+3WlK+QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFL/SyQnlWjW7xU4mmGj9rUlrTZEXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2ZmMmRjNDQtOWQxZi0z Y2Q4LThhYzMtODRmMWU2N2Y3MTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFA6g+ AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQASQud0rHUIsxpm8kkUHGsCUBrUDheXFpqZXkAb XsvIcZa2mCb4HRHOSCTjQ52M6OAQ7IpjgYNDT0zlL4ykg9sYK6vwPl/kBFtxigUX OcN/oMC/Y51af9+Ui32S/KbV0z+IPmTB8yYX5T4nKtQ7oI5G71a1YZt0LUAOwOCH kTADFWL+Rj0cmYGHI3mcq1gKDoObQAXBMt0jgPTD8ggig4Dd4oFWwHFbhjc9m+oH Q83/yG5Zhfg02N9RRz3p0nusQL7uEPjYJ+j8vcrcIqv0LAlkgmqdGPTSMYj3JxND b1Uw7zPG9E3XtUdz0rzs6okQC6y85c/W93zupq5dwSUyBrT0 -----END CERTIFICATE-----Generated at Wed Aug 19 18:43:09 2026 by rpki-client