$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf3651dd-0dfd-3e5f-9d03-d02dea2a2043.roa File: bf3651dd-0dfd-3e5f-9d03-d02dea2a2043.roa (raw, json) Hash identifier: pHii/NxPPuC0DA0MRgvMTYFpoZ3lL6KgcXrbhA6CEzo= Subject key identifier: 7C:7E:FC:47:21:DC:3E:57:F3:63:6C:87:1F:56:C2:C4:7E:56:C0:A8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EA790656975C2B80BF64D2780 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf3651dd-0dfd-3e5f-9d03-d02dea2a2043.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396591 IP address blocks: 2001:503:d414::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:65:69:75:c2:b8:0b:f6:4d:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8954453b-e6cd-4a4d-a945-6198123cafa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f3:48:b8:f2:45:3d:74:c5:42:ad:91:e4:90: 7a:1d:d0:3b:57:aa:8b:2b:b6:9f:4f:87:74:c4:2f: 21:ef:f7:76:b8:58:dd:e9:6c:13:cc:32:05:a2:d7: a5:90:a8:0a:a5:8a:c3:99:93:27:9a:1f:3f:45:58: 31:98:33:e9:7e:51:97:06:7e:48:64:b5:5a:7f:ab: fd:14:a3:e5:e2:97:cc:0a:01:52:e1:25:13:b6:7e: eb:48:71:27:90:48:b9:54:62:df:4b:80:c5:0b:36: 4f:9e:72:36:d6:ef:b0:f9:7f:7a:70:bb:29:dc:67: 05:79:c3:29:56:34:79:0a:c0:12:55:11:6a:17:73: 41:e0:8a:ad:41:70:bc:97:88:94:53:77:92:e0:b8: c0:0c:46:d9:db:52:a2:5a:40:1b:f4:75:25:d7:3f: fa:a7:d0:57:0f:b9:7d:ca:76:7b:21:ff:23:69:a9: 6d:5f:80:46:e4:9c:79:34:ef:3d:a6:d4:24:e7:b2: bf:f2:ce:80:4d:65:42:c8:72:3c:9c:88:3d:ee:14: 69:33:ad:eb:25:4f:d6:21:da:84:56:b5:aa:bc:d6: 87:3c:bc:bd:1e:df:76:6b:f8:d3:bd:d2:ed:02:5b: 6d:48:c3:e7:e1:d4:94:42:66:a2:13:c9:d0:2b:cf: 0a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:7E:FC:47:21:DC:3E:57:F3:63:6C:87:1F:56:C2:C4:7E:56:C0:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf3651dd-0dfd-3e5f-9d03-d02dea2a2043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:d414::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:93:ec:56:ca:54:7e:f7:06:ab:49:e5:40:8c:b8:ab:db:56: 48:63:2b:b7:4c:7d:98:0d:b0:ff:33:3e:27:50:ee:b4:7d:03: 43:54:a1:92:b4:24:8b:db:67:d8:2f:d1:7c:94:de:b6:27:7e: 56:91:83:d1:ce:5e:d3:50:47:95:59:50:80:2d:4e:b1:0e:da: 8c:87:9a:a4:83:da:da:55:ae:2c:3e:a5:54:7b:d0:db:1b:4d: 27:3e:d8:ca:9a:6f:be:19:7b:1e:51:6a:fd:28:57:98:93:1c: c8:01:e2:2b:86:d4:57:65:0d:e6:6c:b2:97:4a:2b:d2:49:dd: e5:e5:b4:d0:09:61:3a:96:4f:3c:f6:7d:58:05:58:8b:24:72: b7:cc:b1:da:3b:a1:18:ec:3f:71:a0:fd:73:f1:ff:8e:2a:9f: 0f:3f:c2:b5:e8:1a:29:fd:b7:56:8f:af:63:00:e9:de:d5:45: ad:60:6f:bc:6a:56:dc:14:14:e7:8a:be:79:f2:6e:49:4c:09: be:35:9a:fb:f9:51:4c:5e:1b:34:f8:39:c6:9a:5b:7c:ee:36: 26:dd:77:30:16:ea:41:a3:ad:31:31:9e:7c:30:81:28:db:2c: b0:22:a3:cc:20:6b:04:12:72:5f:12:9d:7d:0c:ec:18:2a:1e: 6c:cd:28:b2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nkGVpdcK4C/ZNJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODk1NDQ1M2ItZTZjZC00YTRkLWE5NDUtNjE5ODEyM2NhZmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifNIuPJFPXTFQq2R5JB6HdA7V6qLK7afT4d0 xC8h7/d2uFjd6WwTzDIFotelkKgKpYrDmZMnmh8/RVgxmDPpflGXBn5IZLVaf6v9 FKPl4pfMCgFS4SUTtn7rSHEnkEi5VGLfS4DFCzZPnnI21u+w+X96cLsp3GcFecMp VjR5CsASVRFqF3NB4IqtQXC8l4iUU3eS4LjADEbZ21KiWkAb9HUl1z/6p9BXD7l9 ynZ7If8jaaltX4BG5Jx5NO89ptQk57K/8s6ATWVCyHI8nIg97hRpM63rJU/WIdqE VrWqvNaHPLy9Ht92a/jTvdLtAlttSMPn4dSUQmaiE8nQK88KYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHx+/Ech3D5X82Nshx9WwsR+VsCoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmYzNjUxZGQtMGRmZC0z ZTVmLTlkMDMtZDAyZGVhMmEyMDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA9QU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABaT7FbKVH73BqtJ5UCMuKvbVkhjK7dMfZgNsP8zPidQ7rR9A0NU oZK0JIvbZ9gv0XyU3rYnflaRg9HOXtNQR5VZUIAtTrEO2oyHmqSD2tpVriw+pVR7 0NsbTSc+2Mqab74Zex5Rav0oV5iTHMgB4iuG1FdlDeZsspdKK9JJ3eXltNAJYTqW Tzz2fVgFWIskcrfMsdo7oRjsP3Gg/XPx/44qnw8/wrXoGin9t1aPr2MA6d7VRa1g b7xqVtwUFOeKvnnybklMCb41mvv5UUxeGzT4OcaaW3zuNibddzAW6kGjrTExnnww gSjbLLAio8wgawQScl8SnX0M7BgqHmzNKLI= -----END CERTIFICATE-----Generated at Wed Jul 29 04:28:09 2026 by rpki-client