$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04a889a6-3559-3083-8907-f22ae91f3ccf.roa File: 04a889a6-3559-3083-8907-f22ae91f3ccf.roa (raw, json) Hash identifier: 3KfqtGwKrN7MVQ80n1OIbehTIKn4BpOmSZfBW3IutY4= Subject key identifier: 21:2C:E2:DC:86:5D:D9:A5:EC:D0:1F:CA:10:6F:48:FC:58:C2:76:F9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EA7883CC289BAC858F9269140 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04a889a6-3559-3083-8907-f22ae91f3ccf.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 397205 IP address blocks: 2001:500:856e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:3c:c2:89:ba:c8:58:f9:26:91:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=891b8602-d327-4b7e-b4e7-5772daee96d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:69:8a:d7:37:19:31:cb:7e:0e:a6:ee:49:e2: d7:58:03:a2:d7:07:e0:1b:18:73:f8:67:d5:57:8e: 73:c0:f2:b1:6d:46:69:52:f4:1f:74:d3:03:81:8f: d5:82:ed:1b:84:ad:47:67:87:09:1f:5b:b7:a6:fc: 47:c6:46:9d:3f:56:08:76:32:b9:c5:be:f2:92:bc: 76:0f:3d:bb:55:05:93:9a:20:bd:31:62:c4:12:a1: 16:c7:18:a7:bb:8e:66:84:ff:7e:fc:4e:2e:6c:aa: ce:bf:3d:8d:d1:6f:cd:d0:30:5e:ae:e2:c9:60:09: 9a:1d:b1:3e:92:61:4b:c1:a5:60:57:9c:82:00:7c: f6:a1:82:9b:6f:9b:29:b8:d5:59:8e:c2:ef:0f:e4: c8:0f:9a:f1:15:91:f5:20:e3:49:50:01:96:c7:cd: 9d:20:9c:1e:6e:ef:93:4b:7b:7a:d8:52:05:ca:c0: 8d:2d:28:4e:d2:dd:39:fc:78:6d:27:00:44:a8:21: 50:1e:30:51:b0:5c:3d:4a:6f:c0:c3:cc:26:be:bb: 3c:8b:47:da:4a:94:79:ea:4b:d2:fa:5d:39:38:fb: f7:c2:5e:e4:39:d7:79:48:25:a8:54:c0:a9:cb:51: 59:3a:f8:74:ff:47:55:1c:f7:d8:37:e0:dd:49:c7: a8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:2C:E2:DC:86:5D:D9:A5:EC:D0:1F:CA:10:6F:48:FC:58:C2:76:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04a889a6-3559-3083-8907-f22ae91f3ccf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:856e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:be:02:00:a6:08:59:73:5f:49:f8:f3:42:84:40:11:98:e6: 52:8a:d4:2e:4b:91:21:9d:29:45:15:0b:40:91:5b:ae:fd:c9: e1:6b:4a:6b:5c:8c:1f:6b:ab:13:fc:e0:45:d3:d9:ab:5c:64: 07:dc:ac:76:e4:79:2f:5e:22:b7:47:0e:ec:d1:13:f7:84:6e: ee:18:c8:6c:d1:3b:37:cc:77:a0:a1:38:13:6f:4b:2f:65:39: 0d:42:ea:6c:42:eb:56:ea:da:70:01:e1:15:88:fb:69:f5:11: 87:ec:af:c0:a8:53:18:9a:a7:0a:6b:bd:cc:a6:8f:c9:ae:84: b6:de:20:a0:d7:9c:97:52:8e:e7:fc:64:e6:02:82:43:34:d8: 2b:da:1c:b4:f1:6c:9e:90:68:f8:b4:cc:3c:75:59:53:b0:14: 3f:d7:98:38:72:7f:b5:ea:c7:06:a3:37:fa:19:b6:ab:0f:59: 79:bd:55:11:ed:2a:b2:72:0e:8a:e9:e0:90:51:ce:83:30:7d: 42:70:bd:2b:31:15:7b:47:cc:50:50:5e:0e:63:87:1c:bc:74: 1e:ee:df:0c:ce:29:59:81:bc:11:2c:9b:91:d3:99:79:62:df: c0:89:f5:24:b0:ad:cd:c3:ae:aa:8c:8b:ce:d0:3d:4c:66:f4: e9:a9:36:54 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6niDzCibrIWPkmkUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODkxYjg2MDItZDMyNy00YjdlLWI0ZTctNTc3MmRhZWU5NmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WmK1zcZMct+DqbuSeLXWAOi1wfgGxhz+GfV V45zwPKxbUZpUvQfdNMDgY/Vgu0bhK1HZ4cJH1u3pvxHxkadP1YIdjK5xb7ykrx2 Dz27VQWTmiC9MWLEEqEWxxinu45mhP9+/E4ubKrOvz2N0W/N0DBeruLJYAmaHbE+ kmFLwaVgV5yCAHz2oYKbb5spuNVZjsLvD+TID5rxFZH1IONJUAGWx82dIJwebu+T S3t62FIFysCNLShO0t05/HhtJwBEqCFQHjBRsFw9Sm/Aw8wmvrs8i0faSpR56kvS +l05OPv3wl7kOdd5SCWoVMCpy1FZOvh0/0dVHPfYN+DdSceoXwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCEs4tyGXdml7NAfyhBvSPxYwnb5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDRhODg5YTYtMzU1OS0z MDgzLTg5MDctZjIyYWU5MWYzY2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAIVu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ6+AgCmCFlzX0n480KEQBGY5lKK1C5LkSGdKUUVC0CRW679yeFr SmtcjB9rqxP84EXT2atcZAfcrHbkeS9eIrdHDuzRE/eEbu4YyGzROzfMd6ChOBNv Sy9lOQ1C6mxC61bq2nAB4RWI+2n1EYfsr8CoUxiapwprvcymj8muhLbeIKDXnJdS juf8ZOYCgkM02CvaHLTxbJ6QaPi0zDx1WVOwFD/XmDhyf7XqxwajN/oZtqsPWXm9 VRHtKrJyDorp4JBRzoMwfUJwvSsxFXtHzFBQXg5jhxy8dB7u3wzOKVmBvBEsm5HT mXli38CJ9SSwrc3DrqqMi87QPUxm9OmpNlQ= -----END CERTIFICATE-----Generated at Wed Jul 29 06:31:13 2026 by rpki-client