$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4dd18853-9849-3b14-af0e-6f802d6338d4.roa File: 4dd18853-9849-3b14-af0e-6f802d6338d4.roa (raw, json) Hash identifier: X7DmN+jx+RzzeImckeCs/K+BAAUnxd7ExQ7o11YsdY8= Subject key identifier: F1:2D:D9:78:58:9F:15:B8:9D:A5:D9:CE:5C:31:5D:A1:F0:34:65:7E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EA78EF24140F25CFEB75C2980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4dd18853-9849-3b14-af0e-6f802d6338d4.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396587 IP address blocks: 2001:503:39c1::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8e:f2:41:40:f2:5c:fe:b7:5c:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=7e361588-0e24-4339-b901-06239250128c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:09:d9:e7:09:79:6e:98:91:2b:71:bd:7f:20: 79:e0:f0:eb:90:5c:54:d3:b4:fa:22:8e:dd:08:08: d0:9b:10:30:a9:f6:ab:ca:87:df:48:ec:7e:1d:d6: 9c:17:c0:09:cf:6a:81:98:c0:73:d0:9e:cb:7b:b0: 99:b6:33:54:c4:da:79:b6:e0:f9:c0:ba:ff:ff:6c: 50:2e:89:15:5b:8a:d2:e5:ff:79:7e:38:47:fb:76: f0:fe:f9:19:51:eb:74:a9:a6:5f:84:15:b1:93:ec: c2:80:b9:e2:ab:fc:00:2b:3c:fc:42:26:e3:f8:62: 9e:6e:c0:a2:57:da:fb:28:ba:42:37:61:30:0c:a4: c2:f7:c7:bf:8e:4c:57:b4:16:36:e4:46:49:05:35: 63:da:d5:7a:85:52:03:fb:d9:e5:cf:0b:d1:c2:bd: 17:07:b8:76:14:1a:11:d8:08:b2:0a:f4:a0:1e:5a: 19:88:aa:9a:03:e2:0f:85:7e:9b:00:84:04:10:b1: 7c:a9:d9:5a:93:f2:c7:d6:ee:00:72:8a:a3:8c:30: a9:3b:72:1c:7b:3d:61:09:1b:4c:5d:71:1c:9d:1c: b2:ee:dd:9b:e7:96:db:c3:8a:79:b8:f4:84:4b:16: 41:c4:92:35:34:62:42:e7:50:b2:9e:c3:aa:ca:a3: 2c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:2D:D9:78:58:9F:15:B8:9D:A5:D9:CE:5C:31:5D:A1:F0:34:65:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4dd18853-9849-3b14-af0e-6f802d6338d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:39c1:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:bf:7a:41:bc:8d:7d:10:e8:3c:b9:98:4c:e1:1b:33:f5:31: a5:c6:be:f0:81:dd:9e:3a:26:b0:04:7e:75:38:d8:46:67:b5: f2:83:5d:22:8c:81:cb:86:31:e3:dc:34:ea:2d:65:df:e1:2a: eb:0b:37:ac:a8:81:af:52:04:1d:5e:4e:35:ac:dc:8c:ef:e8: ce:77:88:19:8d:80:6f:fe:21:69:c0:39:18:e2:ea:25:4f:cb: d0:7e:c3:f1:21:96:7c:fb:46:5d:67:87:1f:4d:0f:17:aa:c8: d4:3c:74:6e:60:09:74:37:6b:b0:ec:af:00:82:b9:16:bb:38: b5:09:6c:bb:44:ee:eb:6e:7c:4b:1a:60:bc:35:fe:c4:d1:58: 25:6b:77:57:f4:50:16:32:6f:60:29:b1:9f:5f:21:dc:ab:31: 89:27:f0:87:d8:04:44:69:d2:b8:97:d3:42:d5:be:a5:62:32: c0:d1:6b:3b:8e:b6:e5:d0:97:35:75:97:00:22:d3:4e:2c:2a: fc:1e:13:c5:f6:7b:d5:b1:96:8b:b1:9a:ab:70:74:e3:08:a7: aa:45:8f:66:03:ff:fa:be:4f:9f:22:fb:94:7f:9c:02:30:b4: 8c:e2:16:af:40:17:d4:7c:ac:9e:06:21:78:06:01:2f:53:88: 9d:91:7a:86 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE6njvJBQPJc/rdcKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk N2UzNjE1ODgtMGUyNC00MzM5LWI5MDEtMDYyMzkyNTAxMjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwnZ5wl5bpiRK3G9fyB54PDrkFxU07T6Io7d CAjQmxAwqfaryoffSOx+HdacF8AJz2qBmMBz0J7Le7CZtjNUxNp5tuD5wLr//2xQ LokVW4rS5f95fjhH+3bw/vkZUet0qaZfhBWxk+zCgLniq/wAKzz8Qibj+GKebsCi V9r7KLpCN2EwDKTC98e/jkxXtBY25EZJBTVj2tV6hVID+9nlzwvRwr0XB7h2FBoR 2AiyCvSgHloZiKqaA+IPhX6bAIQEELF8qdlak/LH1u4AcoqjjDCpO3Icez1hCRtM XXEcnRyy7t2b55bbw4p5uPSESxZBxJI1NGJC51CynsOqyqMsGQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPEt2XhYnxW4naXZzlwxXaHwNGV+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGRkMTg4NTMtOTg0OS0z YjE0LWFmMGUtNmY4MDJkNjMzOGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAznB AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAov3pBvI19EOg8uZhM4Rsz9TGlxr7wgd2eOiaw BH51ONhGZ7Xyg10ijIHLhjHj3DTqLWXf4SrrCzesqIGvUgQdXk41rNyM7+jOd4gZ jYBv/iFpwDkY4uolT8vQfsPxIZZ8+0ZdZ4cfTQ8XqsjUPHRuYAl0N2uw7K8AgrkW uzi1CWy7RO7rbnxLGmC8Nf7E0Vgla3dX9FAWMm9gKbGfXyHcqzGJJ/CH2AREadK4 l9NC1b6lYjLA0Ws7jrbl0Jc1dZcAItNOLCr8HhPF9nvVsZaLsZqrcHTjCKeqRY9m A//6vk+fIvuUf5wCMLSM4havQBfUfKyeBiF4BgEvU4idkXqG -----END CERTIFICATE-----Generated at Wed Jul 29 03:58:59 2026 by rpki-client