$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/866d4a40-9e6b-37ae-b3a7-ed51c668397c.roa File: 866d4a40-9e6b-37ae-b3a7-ed51c668397c.roa (raw, json) Hash identifier: ag/dGRIcYmZXADeEyuKa9QQ6Hz9AvRB90FvIe4slj44= Subject key identifier: 30:C4:28:5A:90:33:B9:F4:0A:6C:6A:D0:AE:10:EA:93:A6:92:FE:F5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E09F24FCCDABCC906BAB80680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/866d4a40-9e6b-37ae-b3a7-ed51c668397c.roa Signing time: Tue 02 Jun 2026 14:19:01 +0000 ROA not before: Tue 02 Jun 2026 14:19:01 +0000 ROA not after: Mon 31 Aug 2026 14:19:01 +0000 asID: 396593 IP address blocks: 2001:503:231d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:09:f2:4f:cc:da:bc:c9:06:ba:b8:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 2 14:19:01 2026 GMT Not After : Aug 31 14:19:01 2026 GMT Subject: CN=e2baf480-593a-428a-9e6c-63da8cc3a176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1b:ac:9a:e7:a5:3f:c6:ad:f5:48:ae:25:81: 09:f4:65:77:b5:3f:25:03:04:d2:fc:53:6c:a6:7f: c9:3f:1e:2c:ac:bc:45:79:31:9a:f5:80:75:bd:02: c6:50:ff:65:51:dd:f8:1d:b0:9b:45:1c:e0:d9:62: c3:08:8f:cb:f6:37:f3:d6:99:8e:f2:f4:48:99:77: 57:6a:a8:cd:2f:ae:48:3f:f1:fb:35:73:0c:79:b4: 9e:12:ac:24:78:b9:a2:f4:94:c1:c9:19:f1:e1:a8: 32:4e:45:6e:5a:f1:62:61:2d:ff:c8:a7:11:a4:a7: 11:12:4e:13:39:a3:41:a3:02:af:08:60:ae:21:a1: ac:20:2a:81:bb:63:58:56:ce:ae:30:78:b2:40:5e: a1:55:f0:1b:ae:af:13:91:11:f7:e8:2a:f5:89:3c: 99:cd:2e:e5:f4:6c:d1:ce:ee:9b:c4:c1:4c:54:9f: 16:4b:32:cd:fa:5b:a8:a0:cd:3a:01:ce:6e:5b:90: d5:72:59:2e:4e:58:46:1e:6d:ae:f6:7e:83:70:0d: 8f:76:df:86:e7:9e:49:ed:96:6a:99:f6:30:10:a8: 62:f0:07:f6:90:c4:b9:7b:c5:47:94:99:00:77:4b: 88:9b:55:5c:9c:83:1f:f9:88:99:5b:a7:13:40:2d: 0c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C4:28:5A:90:33:B9:F4:0A:6C:6A:D0:AE:10:EA:93:A6:92:FE:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/866d4a40-9e6b-37ae-b3a7-ed51c668397c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:231d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:81:33:b8:38:a1:e0:31:93:2c:42:51:4f:83:30:5a:65:33: 1d:7e:62:49:ac:82:67:b0:ab:75:93:e4:01:81:c6:32:f5:f6: 07:59:cf:47:34:f2:5f:8d:c3:b6:15:39:3f:35:6a:d5:35:bd: 3e:86:c3:84:cb:50:b6:4d:25:0c:56:c0:8f:1d:4e:05:75:87: 51:bf:a0:9b:7a:0a:bb:42:c0:82:c3:e1:1e:35:c7:af:02:45: 6b:79:e1:e6:6e:57:4d:84:50:59:26:f3:28:02:0c:65:4a:7b: 72:c3:5c:e0:9e:9f:75:31:3d:32:2e:29:e9:db:ba:7c:65:a9: 89:26:c3:98:c6:b2:63:79:82:8e:eb:43:68:5d:b0:e4:64:fe: ea:37:d2:14:6e:fd:5a:7d:f7:66:1e:42:1a:7b:ef:40:bc:f8: 0c:15:87:95:f3:b5:e1:41:48:f8:d8:cd:7f:76:ad:a1:6d:84: 82:85:fe:3e:13:dd:e8:22:16:9c:69:06:a9:cb:63:49:93:0a: 96:cf:0a:ff:8f:54:2a:cb:4c:7b:c9:6b:e4:c8:21:b5:dc:a9: bd:b6:61:5c:c5:f8:84:31:9d:3c:01:66:ab:32:0e:54:18:d1: 14:57:fd:21:15:1b:4c:11:99:45:c2:65:cc:7d:4e:1f:d1:89: a2:d5:43:a3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4J8k/M2rzJBrq4BoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDYwMjE0MTkwMVoXDTI2MDgzMTE0MTkwMVowLzEtMCsGA1UEAxMk ZTJiYWY0ODAtNTkzYS00MjhhLTllNmMtNjNkYThjYzNhMTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRusmuelP8at9UiuJYEJ9GV3tT8lAwTS/FNs pn/JPx4srLxFeTGa9YB1vQLGUP9lUd34HbCbRRzg2WLDCI/L9jfz1pmO8vRImXdX aqjNL65IP/H7NXMMebSeEqwkeLmi9JTByRnx4agyTkVuWvFiYS3/yKcRpKcREk4T OaNBowKvCGCuIaGsICqBu2NYVs6uMHiyQF6hVfAbrq8TkRH36Cr1iTyZzS7l9GzR zu6bxMFMVJ8WSzLN+luooM06Ac5uW5DVclkuTlhGHm2u9n6DcA2Pdt+G555J7ZZq mfYwEKhi8Af2kMS5e8VHlJkAd0uIm1VcnIMf+YiZW6cTQC0M4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDDEKFqQM7n0Cmxq0K4Q6pOmkv71MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODY2ZDRhNDAtOWU2Yi0z N2FlLWIzYTctZWQ1MWM2NjgzOTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAyMd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIyBM7g4oeAxkyxCUU+DMFplMx1+Ykmsgmewq3WT5AGBxjL19gdZ z0c08l+Nw7YVOT81atU1vT6Gw4TLULZNJQxWwI8dTgV1h1G/oJt6CrtCwILD4R41 x68CRWt54eZuV02EUFkm8ygCDGVKe3LDXOCen3UxPTIuKenbunxlqYkmw5jGsmN5 go7rQ2hdsORk/uo30hRu/Vp992YeQhp770C8+AwVh5XzteFBSPjYzX92raFthIKF /j4T3egiFpxpBqnLY0mTCpbPCv+PVCrLTHvJa+TIIbXcqb22YVzF+IQxnTwBZqsy DlQY0RRX/SEVG0wRmUXCZcx9Th/RiaLVQ6M= -----END CERTIFICATE-----Generated at Sat Jun 13 17:39:26 2026 by rpki-client