$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21f43cd8-0619-3e19-a91e-35a11ef54f56.roa File: 21f43cd8-0619-3e19-a91e-35a11ef54f56.roa (raw, json) Hash identifier: Q+bsdEH0T6bgjf5zdJVE0N5ytKOZedxlqUiUMsrk2AM= Subject key identifier: 9D:66:3E:D8:B2:50:9E:14:16:92:9D:76:2D:30:DD:B2:A3:82:C4:79 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EA78EF32EAA3D48DDD56690C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21f43cd8-0619-3e19-a91e-35a11ef54f56.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396617 IP address blocks: 2001:501:8a29::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8e:f3:2e:aa:3d:48:dd:d5:66:90:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=dc9e39ba-a67f-4354-b5fa-b3c0cafb22d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:98:18:32:fe:f3:37:14:1e:93:38:4e:57:5d: 84:34:4e:7a:b2:30:e3:7a:fb:20:fc:50:3a:11:c6: 6d:fe:ba:7d:93:40:e3:3e:ec:2e:0d:3d:d4:fd:0c: 1e:d4:bd:9d:75:22:09:66:de:87:19:56:81:11:4c: 22:57:4b:74:ce:dd:ff:eb:8e:3a:a9:83:8e:d1:a5: 33:9b:d8:97:ce:f0:c6:5f:56:f1:a9:1a:b4:da:55: d6:30:35:70:85:71:36:26:44:99:89:9b:cc:db:58: 1e:98:f0:f2:ef:3a:b8:1f:51:23:41:74:69:64:a2: 4a:ab:7f:c2:dd:b8:a6:fd:34:f9:42:22:00:7d:ae: f1:b1:bc:de:78:6e:34:11:b8:23:31:dd:b5:af:2c: 25:33:80:e5:48:69:48:ce:a7:2a:21:dc:ac:8f:19: 47:29:86:44:14:39:c1:08:61:08:b8:bb:2e:83:8a: 3d:83:82:1e:36:ce:93:bd:41:64:7b:88:3f:0b:74: 0b:e6:74:d3:00:81:eb:4b:e6:9d:58:cb:89:43:f6: d5:15:0b:36:bf:48:34:93:7b:6e:d9:7c:50:41:22: 43:68:7d:b8:24:06:8e:36:98:eb:a1:70:60:38:10: 5a:ee:79:4f:72:f6:8d:43:e8:32:4a:2e:aa:67:e5: ef:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:66:3E:D8:B2:50:9E:14:16:92:9D:76:2D:30:DD:B2:A3:82:C4:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21f43cd8-0619-3e19-a91e-35a11ef54f56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:d6:32:e0:40:22:d2:db:70:3c:92:ae:81:6e:ef:25:a8:d5: ae:a9:98:80:db:e5:e7:3d:3c:59:3e:64:92:e3:83:f1:42:c9: 12:76:99:f6:75:39:5d:e2:61:4a:96:54:46:91:6e:d4:14:0a: 06:56:2e:9c:f0:52:3f:46:57:07:e0:26:01:04:b3:0f:2c:ac: 25:24:6e:9e:bb:03:9a:d4:03:6b:b1:49:3c:7e:9a:1a:3a:a0: a5:bf:0f:92:b3:2a:6a:65:cd:3b:ed:2b:4a:8d:6b:74:d8:68: 78:c6:ac:3d:f4:16:94:de:93:86:8c:ad:83:e5:07:6d:c6:89: b2:19:22:3d:96:b2:6d:50:9c:6f:15:e2:c9:63:ad:f7:4a:11: 11:17:22:84:cc:a4:6a:1d:bf:c3:05:a0:6f:5e:05:75:95:93: 8d:5f:c5:ca:48:8c:07:63:ee:78:0b:33:52:b3:81:1c:b8:4e: 96:4e:33:dc:be:b8:f0:60:5a:bb:18:b8:86:b8:a2:f9:53:7d: 3d:6a:e5:97:ce:d6:3e:1d:ad:83:0a:67:6e:28:b5:05:4e:f2: a4:07:fe:34:a1:8d:65:3d:63:02:f8:b7:a3:72:ed:17:8e:27: 11:9a:10:19:98:1c:fb:f9:57:2d:e9:15:a9:4c:3e:f9:3f:96: a5:67:4b:78 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6njvMuqj1I3dVmkMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZGM5ZTM5YmEtYTY3Zi00MzU0LWI1ZmEtYjNjMGNhZmIyMmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5gYMv7zNxQekzhOV12ENE56sjDjevsg/FA6 EcZt/rp9k0DjPuwuDT3U/Qwe1L2ddSIJZt6HGVaBEUwiV0t0zt3/6446qYOO0aUz m9iXzvDGX1bxqRq02lXWMDVwhXE2JkSZiZvM21gemPDy7zq4H1EjQXRpZKJKq3/C 3bim/TT5QiIAfa7xsbzeeG40EbgjMd21rywlM4DlSGlIzqcqIdysjxlHKYZEFDnB CGEIuLsug4o9g4IeNs6TvUFke4g/C3QL5nTTAIHrS+adWMuJQ/bVFQs2v0g0k3tu 2XxQQSJDaH24JAaONpjroXBgOBBa7nlPcvaNQ+gySi6qZ+XvdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ1mPtiyUJ4UFpKddi0w3bKjgsR5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjFmNDNjZDgtMDYxOS0z ZTE5LWE5MWUtMzVhMTFlZjU0ZjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAYop MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABfWMuBAItLbcDySroFu7yWo1a6pmIDb5ec9PFk+ZJLjg/FCyRJ2 mfZ1OV3iYUqWVEaRbtQUCgZWLpzwUj9GVwfgJgEEsw8srCUkbp67A5rUA2uxSTx+ mho6oKW/D5KzKmplzTvtK0qNa3TYaHjGrD30FpTek4aMrYPlB23GibIZIj2Wsm1Q nG8V4sljrfdKEREXIoTMpGodv8MFoG9eBXWVk41fxcpIjAdj7ngLM1KzgRy4TpZO M9y+uPBgWrsYuIa4ovlTfT1q5ZfO1j4drYMKZ24otQVO8qQH/jShjWU9YwL4t6Ny 7ReOJxGaEBmYHPv5Vy3pFalMPvk/lqVnS3g= -----END CERTIFICATE-----Generated at Wed Jul 29 05:07:40 2026 by rpki-client