$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9f2b6e3-aa4e-3171-99c2-610e6ccace8a.roa File: d9f2b6e3-aa4e-3171-99c2-610e6ccace8a.roa (raw, json) Hash identifier: 6/mc2mYz1KwtqZTL0SISKnmnr+z9Or30zxRrVO/EhKw= Subject key identifier: 13:F4:50:29:4E:0A:5D:D5:BB:5C:D6:A1:F0:C7:72:D9:64:97:FD:1E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EAD1C420D43A5BC85E366D600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9f2b6e3-aa4e-3171-99c2-610e6ccace8a.roa Signing time: Fri 31 Jul 2026 01:00:11 +0000 ROA not before: Fri 31 Jul 2026 01:00:11 +0000 ROA not after: Thu 29 Oct 2026 01:00:11 +0000 asID: 396625 IP address blocks: 2001:503:231d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ad:1c:42:0d:43:a5:bc:85:e3:66:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 31 01:00:11 2026 GMT Not After : Oct 29 01:00:11 2026 GMT Subject: CN=c86b62bb-89cb-4303-a042-b205e2ba0bbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d0:43:9f:d0:84:4f:5d:a8:9e:ae:1c:28:23: 91:5c:50:f7:1f:7a:aa:0b:d0:c0:c2:e7:93:8f:bb: 25:3c:d6:5a:19:6b:d9:ed:e1:0d:63:ec:56:cf:97: ce:68:39:04:b1:14:de:8c:95:56:2e:57:13:2d:a1: 4f:6a:82:49:0a:77:b3:e0:d3:50:3a:de:75:ac:11: c8:4e:f7:4b:a4:70:a9:9c:72:96:e3:f6:ac:67:a2: 53:14:27:dc:fd:eb:fa:21:08:3a:d5:15:94:fb:8d: 21:13:d4:f6:83:e9:96:2f:13:c8:d9:2e:9f:2d:a4: 0b:a6:a5:dd:b4:16:a9:59:0a:c2:eb:59:8e:49:58: 0f:fd:27:30:66:2c:ba:b4:26:66:ca:79:96:52:ed: 85:6e:e0:7d:84:9d:77:42:fc:17:9f:41:32:42:70: bf:ed:02:55:08:e5:9a:51:f3:15:43:79:76:4c:7d: 30:47:13:7f:02:10:dd:92:23:9c:b7:2a:6c:17:bc: 3f:d3:f8:1a:e6:32:38:1d:6a:ea:b8:9e:5f:16:a2: 6f:fe:4f:bb:82:fa:1d:60:d6:e9:47:73:77:9f:86: 32:db:76:1e:0d:03:9c:02:78:a6:60:d9:5e:13:b2: 32:70:5a:81:f8:81:45:f9:95:20:d8:8f:f7:c0:b3: 39:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:F4:50:29:4E:0A:5D:D5:BB:5C:D6:A1:F0:C7:72:D9:64:97:FD:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9f2b6e3-aa4e-3171-99c2-610e6ccace8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:231d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:1b:c6:f8:2c:1f:77:19:ed:af:77:e8:1a:fc:31:dc:bb:9c: 9e:ee:71:a8:16:da:cc:5d:31:3c:39:75:f7:a6:30:f9:d6:9d: 68:35:6b:d6:14:95:4e:25:a5:10:1c:d3:d6:ac:cd:a0:4f:44: 39:d0:23:23:75:18:1c:9b:cd:3d:91:5d:45:65:b6:49:4b:5e: 58:f1:a2:83:ec:7a:d8:b4:75:f3:27:fa:95:cc:43:32:80:d7: 5b:e4:8f:b5:e4:98:01:d5:0a:49:3a:cf:bb:f8:d3:e1:24:d3: 4e:58:be:c5:0b:77:98:6c:01:fa:96:39:96:a9:eb:07:6f:49: d9:83:52:50:1f:ea:8a:d5:0c:5c:5c:cb:c9:cc:ca:0e:67:00: c1:b4:16:68:63:ab:db:ab:ba:a7:9d:66:d6:1c:d7:86:13:ca: b5:72:21:18:29:7e:c0:a7:a7:03:49:ab:1f:66:d8:48:77:4a: a2:e2:00:db:ed:67:14:ea:1f:5b:a8:70:8e:34:16:2b:ba:a4: f6:d0:7d:97:a8:23:b3:91:7f:60:89:de:a3:2b:7e:1f:40:a6: 38:3e:d2:50:d5:a1:58:c3:cd:ed:04:bd:34:cc:ae:6e:95:66: 52:f3:25:29:69:4b:9d:a4:53:26:5f:ab:a3:e6:48:40:1c:dc: ab:2e:78:e3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6tHEINQ6W8heNm1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDczMTAxMDAxMVoXDTI2MTAyOTAxMDAxMVowLzEtMCsGA1UEAxMk Yzg2YjYyYmItODljYi00MzAzLWEwNDItYjIwNWUyYmEwYmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitBDn9CET12onq4cKCORXFD3H3qqC9DAwueT j7slPNZaGWvZ7eENY+xWz5fOaDkEsRTejJVWLlcTLaFPaoJJCnez4NNQOt51rBHI TvdLpHCpnHKW4/asZ6JTFCfc/ev6IQg61RWU+40hE9T2g+mWLxPI2S6fLaQLpqXd tBapWQrC61mOSVgP/ScwZiy6tCZmynmWUu2FbuB9hJ13QvwXn0EyQnC/7QJVCOWa UfMVQ3l2TH0wRxN/AhDdkiOctypsF7w/0/ga5jI4HWrquJ5fFqJv/k+7gvodYNbp R3N3n4Yy23YeDQOcAnimYNleE7IycFqB+IFF+ZUg2I/3wLM5lwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBP0UClOCl3Vu1zWofDHctlkl/0eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDlmMmI2ZTMtYWE0ZS0z MTcxLTk5YzItNjEwZTZjY2FjZThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAyMd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKobxvgsH3cZ7a936Br8Mdy7nJ7ucagW2sxdMTw5dfemMPnWnWg1 a9YUlU4lpRAc09aszaBPRDnQIyN1GBybzT2RXUVltklLXljxooPseti0dfMn+pXM QzKA11vkj7XkmAHVCkk6z7v40+Ek005YvsULd5hsAfqWOZap6wdvSdmDUlAf6orV DFxcy8nMyg5nAMG0Fmhjq9uruqedZtYc14YTyrVyIRgpfsCnpwNJqx9m2Eh3SqLi ANvtZxTqH1uocI40Fiu6pPbQfZeoI7ORf2CJ3qMrfh9Apjg+0lDVoVjDze0EvTTM rm6VZlLzJSlpS52kUyZfq6PmSEAc3KsueOM= -----END CERTIFICATE-----Generated at Wed Aug 19 19:52:12 2026 by rpki-client