$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3171a683-8d1d-30d4-830f-58f1e4cdb652.roa File: 3171a683-8d1d-30d4-830f-58f1e4cdb652.roa (raw, json) Hash identifier: jHhTxQE2sArb4bE4R4Y5OPANcdN8Z6cItmARP2KNS1k= Subject key identifier: 39:32:07:B7:30:03:73:26:9D:B5:C2:2F:2C:A0:CF:F8:E3:66:F9:31 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EA7883EA5941D072166380F00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3171a683-8d1d-30d4-830f-58f1e4cdb652.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396580 IP address blocks: 2001:500:856e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:3e:a5:94:1d:07:21:66:38:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ddbeded5-b7fb-47f7-bf15-e91a2401befe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6c:c0:58:cd:d0:7b:69:93:9e:57:22:6b:29: cb:95:e0:c2:8b:12:d7:54:06:74:05:40:27:55:07: ad:80:5a:54:1c:ee:73:90:41:a8:ac:f2:1b:54:c5: d3:45:4c:8f:0c:6b:6d:79:2f:ba:9b:bc:8a:39:a6: bb:39:25:26:d1:aa:99:de:9e:92:db:ca:fc:3b:e0: db:c3:ab:86:ce:e4:4c:58:e5:3d:0c:0d:85:8b:c3: ab:07:2f:f2:eb:91:e8:7a:44:95:21:54:66:b6:07: 21:1b:e8:6f:c7:f6:3d:b0:fa:80:3a:46:04:51:00: 9c:59:d9:d7:95:0a:6d:30:b6:39:24:17:cc:4d:5b: e7:13:fd:68:09:2d:c6:18:9b:b8:08:81:15:10:9f: d6:43:3c:ff:7e:06:33:95:a3:51:d2:82:68:3f:09: 1a:65:e7:19:30:28:7f:6f:9b:52:67:ae:35:70:dd: 5c:c0:3c:b7:1d:7c:00:d0:b4:74:b5:3a:27:a0:d8: 9f:e0:c0:d3:78:16:43:d7:ec:ff:41:e9:35:4d:2c: e9:9b:b1:17:37:47:33:89:32:88:81:0c:dc:4a:e9: bc:90:78:3d:a8:a2:de:73:5f:f1:86:03:b9:6d:88: 8d:9f:df:cd:73:c2:61:6c:75:b3:44:8f:74:ea:05: a2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:32:07:B7:30:03:73:26:9D:B5:C2:2F:2C:A0:CF:F8:E3:66:F9:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3171a683-8d1d-30d4-830f-58f1e4cdb652.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:856e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:d1:4e:21:6d:71:fe:62:2d:45:65:3c:93:0a:6c:7c:24:1f: ad:5a:97:b6:ab:33:0b:f1:ec:cd:0e:bb:b7:9d:37:1c:c6:4d: 36:4b:26:69:46:a8:cd:03:65:5c:b0:4e:60:39:ae:3f:e7:87: 6e:8c:b3:ab:05:34:52:39:91:00:40:84:96:8b:4b:d2:f3:9d: 16:d3:40:77:00:9c:28:e0:27:f2:ec:47:30:57:14:d1:a8:24: dc:17:32:65:80:19:ba:a6:86:a4:f9:2c:2b:b9:14:f8:69:b4: c4:97:a3:cb:cc:7e:35:15:df:5e:ce:a1:3e:91:d4:6b:e9:81: 25:88:4c:38:c3:c1:f5:00:39:1c:92:e4:f5:4e:bf:bf:81:a0: d4:53:3c:ac:82:b9:32:4a:21:47:1e:cc:5b:44:aa:83:8c:5a: 99:23:26:00:23:1a:5d:00:ac:05:4a:6c:7c:c8:4b:83:2f:07: 72:c0:83:79:28:b0:96:d5:60:2e:6a:28:21:b0:75:e9:66:58: 76:f3:ba:22:c7:ca:7f:7b:30:3b:7a:63:b7:b4:d4:ad:14:76: 06:87:a1:4f:3e:8d:2c:18:3d:2d:9b:c6:2e:6c:5d:7b:ae:c2: bd:89:d7:b4:f6:11:36:c4:4b:f5:b0:03:63:88:f0:10:d2:0c: 06:6e:56:a4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6niD6llB0HIWY4DwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZGRiZWRlZDUtYjdmYi00N2Y3LWJmMTUtZTkxYTI0MDFiZWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WzAWM3Qe2mTnlciaynLleDCixLXVAZ0BUAn VQetgFpUHO5zkEGorPIbVMXTRUyPDGtteS+6m7yKOaa7OSUm0aqZ3p6S28r8O+Db w6uGzuRMWOU9DA2Fi8OrBy/y65HoekSVIVRmtgchG+hvx/Y9sPqAOkYEUQCcWdnX lQptMLY5JBfMTVvnE/1oCS3GGJu4CIEVEJ/WQzz/fgYzlaNR0oJoPwkaZecZMCh/ b5tSZ641cN1cwDy3HXwA0LR0tTonoNif4MDTeBZD1+z/Qek1TSzpm7EXN0cziTKI gQzcSum8kHg9qKLec1/xhgO5bYiNn9/Nc8JhbHWzRI906gWimQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDkyB7cwA3MmnbXCLyygz/jjZvkxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzE3MWE2ODMtOGQxZC0z MGQ0LTgzMGYtNThmMWU0Y2RiNjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAIVu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH7RTiFtcf5iLUVlPJMKbHwkH61al7arMwvx7M0Ou7edNxzGTTZL JmlGqM0DZVywTmA5rj/nh26Ms6sFNFI5kQBAhJaLS9LznRbTQHcAnCjgJ/LsRzBX FNGoJNwXMmWAGbqmhqT5LCu5FPhptMSXo8vMfjUV317OoT6R1GvpgSWITDjDwfUA ORyS5PVOv7+BoNRTPKyCuTJKIUcezFtEqoOMWpkjJgAjGl0ArAVKbHzIS4MvB3LA g3kosJbVYC5qKCGwdelmWHbzuiLHyn97MDt6Y7e01K0UdgaHoU8+jSwYPS2bxi5s XXuuwr2J17T2ETbES/WwA2OI8BDSDAZuVqQ= -----END CERTIFICATE-----Generated at Wed Jul 29 03:51:19 2026 by rpki-client