$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a757c30-6c18-3320-b532-4692aa3c9519.roa File: 2a757c30-6c18-3320-b532-4692aa3c9519.roa (raw, json) Hash identifier: hBgK++f2int3b65zFje1ENeTsPqjpiGeL5H/JF3Gs+U= Subject key identifier: A1:EA:F1:17:DA:3B:17:3F:4E:34:B3:78:BC:6B:F9:23:4F:92:AD:9A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EA796037F80BB7BC2A965C640 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a757c30-6c18-3320-b532-4692aa3c9519.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396580 IP address blocks: 2001:503:ba3e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:96:03:7f:80:bb:7b:c2:a9:65:c6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8f1d3f9e-7d6f-41b0-8eb2-3c7ad68a7834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ce:af:bc:17:3e:23:3e:8d:55:20:dd:72:47: c5:02:91:4f:fd:29:5f:e9:4f:6d:d6:7d:c5:ec:94: ec:44:0d:25:da:0a:f2:4b:a3:47:eb:33:76:40:da: dc:90:f8:55:d3:d0:6f:c1:02:d4:ad:35:75:2c:4b: 59:68:47:fc:25:f7:0f:9d:92:33:d8:ae:35:a9:51: d1:d0:fe:40:42:1d:aa:a5:45:00:74:36:09:c4:c3: e2:1b:15:14:49:43:d8:a6:34:a0:70:3f:0d:b3:b2: 11:d1:da:17:4f:d1:ed:f4:44:7e:92:a1:00:7a:c0: 76:c2:6a:6e:44:22:65:df:38:e4:b7:8d:a7:cd:dc: 53:34:43:ad:dc:c7:5a:83:55:f9:1e:75:46:38:c9: c1:dd:82:c0:da:49:fe:89:d3:8a:17:89:5e:b5:67: 0d:ef:74:37:48:70:ba:3e:12:97:44:94:4e:bb:b4: f8:b7:b7:a1:f0:97:1b:07:99:90:47:06:ee:c3:dd: 1b:8d:53:9d:cf:51:9c:71:76:91:01:f5:df:cb:03: 47:4a:24:55:df:76:46:9a:1e:d9:8f:c8:45:dd:71: 8f:25:23:d4:4e:71:84:25:93:e2:90:0a:0a:0e:42: 02:78:d4:78:13:56:62:65:79:a9:c2:84:ea:aa:c6: 11:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:EA:F1:17:DA:3B:17:3F:4E:34:B3:78:BC:6B:F9:23:4F:92:AD:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a757c30-6c18-3320-b532-4692aa3c9519.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:f2:67:5a:c9:5f:7c:ed:3b:8f:a0:a8:b6:bd:4e:68:8e:bb: 66:2c:ca:47:72:1e:9a:ed:fe:77:5f:12:0d:d6:7a:a6:3c:40: fb:bf:60:94:3c:6f:ca:22:c6:f9:74:ca:56:52:1a:7d:70:cc: cb:27:4b:96:e4:e5:84:66:c1:9d:eb:73:74:6e:e1:90:57:bf: 44:f3:cb:28:08:96:4d:7e:13:91:fe:89:2d:72:2a:03:9a:5e: 88:72:09:ac:1e:fb:b7:86:32:b9:88:2d:d8:f4:2b:f8:53:a1: de:9b:57:dc:5f:8e:9d:7c:1e:2b:a0:6b:32:bc:93:cf:13:80: c6:c8:d2:44:c6:5e:38:d5:43:9c:e1:5e:fa:ab:38:b1:eb:00: 6a:8d:5b:ea:2e:f8:d2:f6:48:20:d2:32:48:53:1b:2b:a8:0c: ff:53:ac:ef:09:9e:52:5f:33:b8:d3:89:ee:6f:90:2d:72:15: 41:82:db:6f:c9:a8:fb:5c:ef:4b:20:17:49:c6:f3:07:0c:2e: 89:ed:ba:26:85:37:ca:9c:98:d2:59:c0:30:ad:a8:4c:49:8e: 06:15:f7:f3:7e:18:e8:46:df:96:df:4d:6f:ed:64:2e:e7:11: 50:a8:6b:fd:0d:7b:49:40:83:72:45:a1:b4:20:63:97:ad:06: de:fb:fb:ae -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nlgN/gLt7wqllxkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OGYxZDNmOWUtN2Q2Zi00MWIwLThlYjItM2M3YWQ2OGE3ODM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3s6vvBc+Iz6NVSDdckfFApFP/Slf6U9t1n3F 7JTsRA0l2gryS6NH6zN2QNrckPhV09BvwQLUrTV1LEtZaEf8JfcPnZIz2K41qVHR 0P5AQh2qpUUAdDYJxMPiGxUUSUPYpjSgcD8Ns7IR0doXT9Ht9ER+kqEAesB2wmpu RCJl3zjkt42nzdxTNEOt3Mdag1X5HnVGOMnB3YLA2kn+idOKF4letWcN73Q3SHC6 PhKXRJROu7T4t7eh8JcbB5mQRwbuw90bjVOdz1GccXaRAfXfywNHSiRV33ZGmh7Z j8hF3XGPJSPUTnGEJZPikAoKDkICeNR4E1ZiZXmpwoTqqsYR/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKHq8RfaOxc/TjSzeLxr+SNPkq2aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmE3NTdjMzAtNmMxOC0z MzIwLWI1MzItNDY5MmFhM2M5NTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA7o+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHDyZ1rJX3ztO4+gqLa9TmiOu2YsykdyHprt/ndfEg3WeqY8QPu/ YJQ8b8oixvl0ylZSGn1wzMsnS5bk5YRmwZ3rc3Ru4ZBXv0TzyygIlk1+E5H+iS1y KgOaXohyCawe+7eGMrmILdj0K/hTod6bV9xfjp18HiugazK8k88TgMbI0kTGXjjV Q5zhXvqrOLHrAGqNW+ou+NL2SCDSMkhTGyuoDP9TrO8JnlJfM7jTie5vkC1yFUGC 22/JqPtc70sgF0nG8wcMLontuiaFN8qcmNJZwDCtqExJjgYV9/N+GOhG35bfTW/t ZC7nEVCoa/0Ne0lAg3JFobQgY5etBt77+64= -----END CERTIFICATE-----Generated at Wed Jul 29 08:40:34 2026 by rpki-client