$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b6bbc47-5df2-36bf-bad5-98489cc74a1e.roa File: 3b6bbc47-5df2-36bf-bad5-98489cc74a1e.roa (raw, json) Hash identifier: /2I8m5yVMFvrQaxXup8moKSM1fbNnIYVa4wnkE6Cd7Y= Subject key identifier: 5B:89:5C:64:8B:1C:2F:3F:26:82:09:8C:55:79:AF:96:02:D4:CF:B2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EA7883D6642E84B817644DD40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b6bbc47-5df2-36bf-bad5-98489cc74a1e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396575 IP address blocks: 2001:500:856e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:3d:66:42:e8:4b:81:76:44:dd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=6b650a7e-d3ff-4e20-bd85-3a0b6e5c2c30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ff:86:22:34:34:7a:14:41:3c:e0:76:78:a4: a4:53:76:17:19:2d:30:99:58:ba:4e:92:99:0b:cc: c3:56:d6:00:0b:d7:0f:6f:b3:31:70:40:27:c2:d0: 4d:6f:db:68:2d:22:57:6b:12:18:10:ce:0b:fb:2e: 7a:e1:f3:4b:8b:97:76:d5:f6:8c:58:81:ab:41:69: 40:50:13:4b:a9:79:88:a0:7e:07:cf:f1:66:65:0d: 29:63:5a:74:62:d0:ee:ba:68:59:e9:4b:f3:15:68: 46:cb:1c:19:20:68:65:85:38:ce:51:9d:1f:04:92: d8:3a:b1:8d:b7:af:91:06:05:ce:37:71:4b:1c:0c: 3b:29:3a:5e:85:80:2b:f3:4d:3c:4e:16:c5:5f:6c: 62:46:ed:25:86:59:d8:1a:51:59:7e:dc:9f:05:ad: cb:6d:ca:40:3b:ad:bf:12:bf:5f:8e:5b:dc:ce:8a: d3:ee:72:cb:33:9d:00:69:02:56:30:3c:c6:39:b2: d6:ab:bf:e1:21:2f:2e:d2:3d:a1:bd:f4:92:55:40: 62:9b:07:4e:5c:84:a6:34:c5:82:6a:37:4f:92:24: 76:73:8e:a0:b1:e9:db:58:57:7c:38:ce:9c:b2:82: 97:c1:c1:6a:46:90:cd:8a:ed:2c:24:61:0f:82:da: b4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:89:5C:64:8B:1C:2F:3F:26:82:09:8C:55:79:AF:96:02:D4:CF:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b6bbc47-5df2-36bf-bad5-98489cc74a1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:856e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:df:24:a9:c8:c5:b1:24:8e:d5:06:af:a2:d2:2f:69:54:7d: d0:96:ec:3c:a8:15:ea:b9:1d:de:0c:34:48:1a:98:2f:a9:63: ac:95:43:3c:8a:5d:2b:e8:8d:4c:2a:f8:d5:84:71:d1:9f:3a: 93:a6:3f:ea:6e:82:78:e1:bd:e0:03:0e:f5:26:2e:9b:78:83: 94:e3:08:53:35:46:e4:8e:f3:94:2e:ca:18:d0:e5:2d:62:9f: 88:2b:99:ea:96:b9:73:24:c1:8a:f2:b8:13:72:53:a0:99:e4: 53:c5:bd:af:ff:ac:72:aa:2c:13:2b:c2:cc:64:da:1f:cc:98: e5:ec:f4:41:64:9e:a2:76:f2:da:2d:59:aa:60:38:75:4d:11: e8:c9:32:aa:3e:7e:7a:7f:60:e6:30:d0:0b:ee:06:a2:6c:f2: 3e:fe:ca:b9:5b:2b:ec:77:e7:67:97:b7:d2:9d:5c:bd:76:82: da:c2:86:42:23:52:ee:a5:6c:55:33:6a:ae:c8:5e:21:81:d5: f3:f2:a9:6c:60:be:28:33:c1:5a:c4:11:97:c0:d8:43:84:2b: de:d1:71:3e:0e:c4:2f:62:ba:6e:d5:5f:ad:b5:0a:11:3a:70: 8f:df:f3:dd:57:e2:94:34:98:7c:49:1b:04:a5:69:e5:1e:df: 14:79:46:a2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6niD1mQuhLgXZE3UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NmI2NTBhN2UtZDNmZi00ZTIwLWJkODUtM2EwYjZlNWMyYzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoP+GIjQ0ehRBPOB2eKSkU3YXGS0wmVi6TpKZ C8zDVtYAC9cPb7MxcEAnwtBNb9toLSJXaxIYEM4L+y564fNLi5d21faMWIGrQWlA UBNLqXmIoH4Hz/FmZQ0pY1p0YtDuumhZ6UvzFWhGyxwZIGhlhTjOUZ0fBJLYOrGN t6+RBgXON3FLHAw7KTpehYAr8008ThbFX2xiRu0lhlnYGlFZftyfBa3LbcpAO62/ Er9fjlvczorT7nLLM50AaQJWMDzGObLWq7/hIS8u0j2hvfSSVUBimwdOXISmNMWC ajdPkiR2c46gsenbWFd8OM6csoKXwcFqRpDNiu0sJGEPgtq07wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFuJXGSLHC8/JoIJjFV5r5YC1M+yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2I2YmJjNDctNWRmMi0z NmJmLWJhZDUtOTg0ODljYzc0YTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAIVu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAArfJKnIxbEkjtUGr6LSL2lUfdCW7DyoFeq5Hd4MNEgamC+pY6yV QzyKXSvojUwq+NWEcdGfOpOmP+pugnjhveADDvUmLpt4g5TjCFM1RuSO85QuyhjQ 5S1in4grmeqWuXMkwYryuBNyU6CZ5FPFva//rHKqLBMrwsxk2h/MmOXs9EFknqJ2 8totWapgOHVNEejJMqo+fnp/YOYw0AvuBqJs8j7+yrlbK+x352eXt9KdXL12gtrC hkIjUu6lbFUzaq7IXiGB1fPyqWxgvigzwVrEEZfA2EOEK97RcT4OxC9ium7VX621 ChE6cI/f891X4pQ0mHxJGwSlaeUe3xR5RqI= -----END CERTIFICATE-----Generated at Wed Jul 29 05:49:59 2026 by rpki-client