$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1af5f36-f1b1-3689-a0df-0d4946950643.roa File: c1af5f36-f1b1-3689-a0df-0d4946950643.roa (raw, json) Hash identifier: b4JuaXcRoxWTVUNexDv3saTP600RsAyGedBG/l5AnsY= Subject key identifier: 98:11:BB:B9:8E:F2:A9:4A:B0:20:FD:CC:27:8A:BC:EC:AE:8D:F1:07 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EA7905D392B095A8ADF4EED00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1af5f36-f1b1-3689-a0df-0d4946950643.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 21313 IP address blocks: 2001:503:d414::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:5d:39:2b:09:5a:8a:df:4e:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4567bd67-7e79-433d-962b-1311040814b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:03:5e:00:06:d2:fb:97:5a:96:ed:7d:21:bf: 50:da:0e:ed:ca:ed:76:1a:f5:9a:8c:8b:21:8c:75: 68:44:ae:e4:5e:2c:4f:29:4a:93:be:3c:16:d1:5a: 6a:d9:75:75:bd:7f:c6:d3:1d:3c:8e:e5:dc:63:1e: c8:5c:fe:83:f7:00:a2:7f:b6:32:34:73:6a:0c:7f: 32:84:32:67:13:09:e2:60:92:ce:9a:3d:70:2a:ba: 6f:75:37:38:ce:67:da:89:f9:31:3f:19:64:b5:8e: dd:22:4a:3c:ae:0d:d8:aa:a2:99:63:2f:cf:5b:2b: c2:69:48:7d:09:dc:99:ad:40:09:85:4d:06:ca:bc: bf:db:c9:d0:71:99:09:be:95:dc:52:3c:83:af:74: 75:e1:81:6a:66:b9:90:66:7b:c2:14:5a:1f:14:70: 27:34:71:9d:9d:2e:06:bf:88:b5:ad:07:ef:4d:10: 40:06:9d:91:56:36:51:ae:c6:0c:07:72:fe:47:2f: 3b:8b:ae:da:da:d0:66:ea:6c:57:1d:68:4c:2b:63: ba:1b:e7:82:35:70:ac:0d:d9:6d:f7:41:81:9a:65: a9:ec:0d:b4:62:ae:e7:a4:1f:a7:ad:b2:70:1a:36: a9:a3:19:63:05:18:3f:a6:a1:d0:a0:b2:76:a5:ee: 35:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:11:BB:B9:8E:F2:A9:4A:B0:20:FD:CC:27:8A:BC:EC:AE:8D:F1:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1af5f36-f1b1-3689-a0df-0d4946950643.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:d414::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:00:1a:c6:55:01:0d:e9:c6:da:b7:07:b6:7e:67:01:47:bb: c5:0a:42:c4:21:4e:0e:32:bc:ee:c9:32:3e:73:07:49:ed:da: c4:bc:9a:a2:72:bb:ae:0a:55:67:e1:95:45:22:47:6c:51:03: be:ae:53:11:86:ed:07:8d:f8:02:ca:37:45:98:d9:3a:74:a9: 51:fc:f9:26:0a:e7:60:38:30:3a:58:cc:cd:ac:d7:8e:b5:2b: 31:5c:b5:e9:b9:f9:96:ef:e1:60:74:84:6e:e6:b1:c1:40:4d: eb:39:76:e3:ed:1c:1d:d5:e3:5b:4d:40:2e:7e:d1:e1:2b:67: 90:a6:80:6c:9f:01:27:89:4d:92:bc:2d:06:56:a4:65:4f:28: e7:75:79:d9:07:f0:de:1f:27:25:2e:fe:04:c7:6e:2b:17:04: bc:f8:5c:8c:60:96:6f:c9:b3:a2:b3:18:ed:40:9f:9c:66:cd: 05:08:da:b3:84:d6:0a:65:ba:78:2b:82:85:d9:50:ed:ff:06: a5:90:bf:cd:cf:a2:41:3c:9e:63:0b:39:b4:68:75:34:33:72: ff:47:b6:8e:48:3b:05:d2:2a:7d:9e:d4:b2:35:2d:05:c5:45: 29:ab:77:96:7f:c5:a0:28:cf:b2:41:74:7d:0f:32:c4:fa:c9: 7e:fb:bc:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nkF05Kwlait9O7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDU2N2JkNjctN2U3OS00MzNkLTk2MmItMTMxMTA0MDgxNGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQNeAAbS+5dalu19Ib9Q2g7tyu12GvWajIsh jHVoRK7kXixPKUqTvjwW0Vpq2XV1vX/G0x08juXcYx7IXP6D9wCif7YyNHNqDH8y hDJnEwniYJLOmj1wKrpvdTc4zmfaifkxPxlktY7dIko8rg3YqqKZYy/PWyvCaUh9 CdyZrUAJhU0Gyry/28nQcZkJvpXcUjyDr3R14YFqZrmQZnvCFFofFHAnNHGdnS4G v4i1rQfvTRBABp2RVjZRrsYMB3L+Ry87i67a2tBm6mxXHWhMK2O6G+eCNXCsDdlt 90GBmmWp7A20Yq7npB+nrbJwGjapoxljBRg/pqHQoLJ2pe41twIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJgRu7mO8qlKsCD9zCeKvOyujfEHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzFhZjVmMzYtZjFiMS0z Njg5LWEwZGYtMGQ0OTQ2OTUwNjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA9QU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIoAGsZVAQ3pxtq3B7Z+ZwFHu8UKQsQhTg4yvO7JMj5zB0nt2sS8 mqJyu64KVWfhlUUiR2xRA76uUxGG7QeN+ALKN0WY2Tp0qVH8+SYK52A4MDpYzM2s 1461KzFctem5+Zbv4WB0hG7mscFATes5duPtHB3V41tNQC5+0eErZ5CmgGyfASeJ TZK8LQZWpGVPKOd1edkH8N4fJyUu/gTHbisXBLz4XIxglm/Js6KzGO1An5xmzQUI 2rOE1gplungrgoXZUO3/BqWQv83PokE8nmMLObRodTQzcv9Hto5IOwXSKn2e1LI1 LQXFRSmrd5Z/xaAoz7JBdH0PMsT6yX77vEs= -----END CERTIFICATE-----Generated at Wed Jul 29 11:39:31 2026 by rpki-client