$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/afc3148e-b9bb-312e-98ee-8fe9cf5fcd70.roa File: afc3148e-b9bb-312e-98ee-8fe9cf5fcd70.roa (raw, json) Hash identifier: RGgD7rWgpqori2BfSUSHH1C+12BI0KqAMk8Y2b73BM8= Subject key identifier: 99:F8:F8:AF:4B:96:FD:D6:46:BB:D0:3B:5A:79:25:94:D4:12:AE:84 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E09F24E3E68A4D3C6CCBDD040 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/afc3148e-b9bb-312e-98ee-8fe9cf5fcd70.roa Signing time: Tue 02 Jun 2026 14:19:00 +0000 ROA not before: Tue 02 Jun 2026 14:19:00 +0000 ROA not after: Mon 31 Aug 2026 14:19:00 +0000 asID: 396550 IP address blocks: 2001:503:231d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:09:f2:4e:3e:68:a4:d3:c6:cc:bd:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 2 14:19:00 2026 GMT Not After : Aug 31 14:19:00 2026 GMT Subject: CN=228fd9dd-7732-4ca2-807f-52da91ac005e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:fa:7c:74:41:86:fa:7a:8e:ba:63:71:5d:11: e5:b2:78:38:da:b5:7b:45:48:d6:af:f7:b8:94:c1: 82:dc:8e:13:82:da:41:75:ea:b4:6d:6e:e4:77:2e: 43:82:d7:00:90:07:a9:1c:31:51:c4:0a:74:9a:95: 3e:59:0d:b1:d6:13:2a:cf:b6:cf:21:d3:44:36:81: b1:00:d9:12:17:94:2b:0c:fc:e9:ac:a0:63:b1:af: 76:aa:7c:c7:a3:38:3c:f4:dc:31:4a:3c:67:e3:60: e5:ed:86:b7:18:6d:87:f1:52:e4:e5:f3:b5:45:07: 6b:9a:ba:57:d0:be:17:ff:75:38:98:b5:bb:b8:bf: 4a:96:69:2f:10:09:46:7f:7a:6b:dc:91:1a:ec:06: 91:db:25:cc:d4:29:3b:00:1c:94:a0:16:c0:25:2b: 33:0b:3b:5c:66:e2:99:82:21:42:5b:c9:a7:34:88: f8:35:13:76:66:37:eb:1f:d9:23:da:8b:76:9a:c4: 1c:06:be:f9:c5:32:40:8b:29:76:56:b2:7b:68:89: 6d:58:96:ba:3f:34:17:f3:73:6f:2c:e8:a9:49:97: 30:b1:51:2e:31:49:12:d9:29:eb:17:af:65:ed:2a: 28:7f:f6:85:4c:f3:c8:61:f2:65:72:26:15:46:8a: d5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F8:F8:AF:4B:96:FD:D6:46:BB:D0:3B:5A:79:25:94:D4:12:AE:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/afc3148e-b9bb-312e-98ee-8fe9cf5fcd70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:231d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:eb:4e:fc:eb:a4:41:6a:82:ed:98:bf:77:d3:ca:b4:43:b9: f4:60:13:e9:4a:44:bf:36:1b:f0:28:b5:54:4f:cd:c0:5b:d8: 90:b1:f7:4b:dd:5d:67:1b:92:5b:f2:16:46:f1:dd:70:47:05: 03:b9:fe:84:30:25:e9:5f:15:3f:36:94:8d:71:4f:e2:0d:0c: 25:9d:2a:0f:b4:ef:8d:4a:92:e7:a6:71:6c:1c:c6:5d:29:e9: 44:55:8d:51:2e:57:44:0c:d0:41:ff:db:7c:f6:37:16:63:82: 01:73:e6:8c:34:2e:90:06:11:a9:d5:b0:6e:f2:95:32:b1:58: dd:12:85:28:11:2c:d8:a8:fb:a3:65:72:15:b5:52:bc:3c:6c: b5:43:84:47:a2:0b:93:e4:ce:bb:44:61:42:6c:08:20:69:47: aa:d6:0f:f3:d0:67:63:1f:1b:6f:69:0b:e7:30:aa:19:02:84: 75:49:19:5e:99:4e:c2:22:e8:d7:67:23:86:d7:4b:e6:be:e9: c8:ae:f7:e5:37:31:d7:e4:f2:4f:60:b1:d8:56:93:d3:5a:d8: 73:28:c5:17:61:07:f9:da:9d:4f:4b:b9:47:32:90:46:54:e6: d9:5e:d4:6c:b1:14:1d:1f:ac:a7:54:92:a8:94:c5:59:bd:22: d9:59:2c:24 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4J8k4+aKTTxsy90EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDYwMjE0MTkwMFoXDTI2MDgzMTE0MTkwMFowLzEtMCsGA1UEAxMk MjI4ZmQ5ZGQtNzczMi00Y2EyLTgwN2YtNTJkYTkxYWMwMDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvp8dEGG+nqOumNxXRHlsng42rV7RUjWr/e4 lMGC3I4TgtpBdeq0bW7kdy5DgtcAkAepHDFRxAp0mpU+WQ2x1hMqz7bPIdNENoGx ANkSF5QrDPzprKBjsa92qnzHozg89NwxSjxn42Dl7Ya3GG2H8VLk5fO1RQdrmrpX 0L4X/3U4mLW7uL9KlmkvEAlGf3pr3JEa7AaR2yXM1Ck7AByUoBbAJSszCztcZuKZ giFCW8mnNIj4NRN2ZjfrH9kj2ot2msQcBr75xTJAiyl2VrJ7aIltWJa6PzQX83Nv LOipSZcwsVEuMUkS2SnrF69l7Soof/aFTPPIYfJlciYVRorVzQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJn4+K9Llv3WRrvQO1p5JZTUEq6EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWZjMzE0OGUtYjliYi0z MTJlLTk4ZWUtOGZlOWNmNWZjZDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAyMd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKXrTvzrpEFqgu2Yv3fTyrRDufRgE+lKRL82G/AotVRPzcBb2JCx 90vdXWcbklvyFkbx3XBHBQO5/oQwJelfFT82lI1xT+INDCWdKg+0741KkuemcWwc xl0p6URVjVEuV0QM0EH/23z2NxZjggFz5ow0LpAGEanVsG7ylTKxWN0ShSgRLNio +6NlchW1Urw8bLVDhEeiC5PkzrtEYUJsCCBpR6rWD/PQZ2MfG29pC+cwqhkChHVJ GV6ZTsIi6NdnI4bXS+a+6ciu9+U3Mdfk8k9gsdhWk9Na2HMoxRdhB/nanU9LuUcy kEZU5tle1GyxFB0frKdUkqiUxVm9ItlZLCQ= -----END CERTIFICATE-----Generated at Sat Jun 13 16:10:15 2026 by rpki-client