$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfe50f61-539e-3852-b1c4-5a25c33bf96a.roa File: cfe50f61-539e-3852-b1c4-5a25c33bf96a.roa (raw, json) Hash identifier: 19/MiUmYkH4CQmqO23TGBeYoC4Tc7MgF9nJjJabtCes= Subject key identifier: 6F:06:F9:4C:93:78:5D:CE:F5:EC:0B:47:9A:9F:AE:48:D4:7A:29:ED Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EA788CD4758B3366537D64600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfe50f61-539e-3852-b1c4-5a25c33bf96a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 25485 IP address blocks: 2001:501:8a29::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:cd:47:58:b3:36:65:37:d6:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=2f1c0c61-0201-438a-beba-afcb7bedf8d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a0:2c:5b:d0:ab:f5:7e:9c:19:a7:06:25:a0: fa:82:41:7e:18:e7:94:67:5a:3d:d9:02:dd:30:f0: 05:c8:47:56:91:ff:33:49:af:e0:52:b2:71:6f:69: 55:64:9d:53:d9:fa:cb:00:58:10:61:96:a0:34:10: 72:13:a6:94:dc:1d:da:8a:88:ec:58:50:ce:f3:68: 41:f7:18:20:b9:04:05:02:fc:22:f3:84:43:87:21: ed:78:b5:53:b9:e4:eb:8f:db:1e:f8:55:7b:f4:ec: 58:61:bf:7f:c0:54:62:5a:fa:1c:40:34:5c:c4:21: 0b:c9:1b:14:2c:72:bc:37:e5:8e:90:00:4c:77:28: 4c:50:38:e2:7e:c0:eb:0d:ae:64:d5:2e:88:36:66: e7:ed:93:cd:3c:90:91:35:c5:c1:72:f7:5a:f2:07: 87:91:b8:25:27:9a:b7:75:6a:9b:e3:3d:a6:d1:b9: 6e:a0:be:34:8c:df:98:7d:55:cd:11:7c:e7:98:0c: f9:8e:2c:81:4b:c2:1e:6b:f9:b5:80:da:f8:8a:4d: ec:03:d0:74:32:da:39:b9:3c:02:69:fa:63:6b:49: 07:f2:ad:47:c3:e1:f9:c1:be:1a:39:18:1b:fb:2d: 24:d8:d8:79:48:61:fb:13:d9:e6:ff:d0:22:f1:89: 56:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:06:F9:4C:93:78:5D:CE:F5:EC:0B:47:9A:9F:AE:48:D4:7A:29:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfe50f61-539e-3852-b1c4-5a25c33bf96a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:8e:89:56:0e:e0:44:cd:fb:bf:ef:fa:a7:6e:89:0b:06:69: de:6b:fb:5e:15:bf:7c:75:14:cb:3e:4c:27:92:a5:39:51:14: 98:f5:0f:dd:31:57:50:73:8c:ff:22:33:38:5c:3e:48:42:2c: 91:3d:14:dd:4b:e0:1e:5a:f5:c1:5b:76:5f:da:b7:73:92:dd: 38:7e:66:9a:65:a5:61:02:c2:22:0d:68:be:4a:c2:6c:dc:f9: ef:2d:88:67:ff:9a:c9:dc:10:2e:3d:cf:27:69:75:32:e0:01: 59:b9:bf:c8:15:44:08:ea:b9:9f:31:b9:9c:06:f5:b5:62:8f: db:05:0d:9f:a9:66:73:b5:10:f2:7c:f5:d2:d9:0b:da:b3:44: 2f:ca:63:70:99:13:68:0b:00:11:86:93:d0:6c:13:6d:df:e8: c8:8b:c0:13:50:3a:c1:ed:ed:63:51:3e:ec:2c:39:4c:0c:74: 9e:36:9f:73:d3:05:e3:86:d5:13:c9:09:42:64:31:48:c1:ba: 64:b6:2a:d7:31:24:bb:53:1a:55:c3:31:37:12:23:fb:58:65: dc:39:25:b5:ab:0b:f5:76:11:76:79:bf:51:b2:56:a4:6c:38: be:09:f3:29:58:0b:94:83:97:ea:b8:e4:7c:94:73:9a:a3:9c: f6:06:ff:82 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6niM1HWLM2ZTfWRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MmYxYzBjNjEtMDIwMS00MzhhLWJlYmEtYWZjYjdiZWRmOGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6AsW9Cr9X6cGacGJaD6gkF+GOeUZ1o92QLd MPAFyEdWkf8zSa/gUrJxb2lVZJ1T2frLAFgQYZagNBByE6aU3B3aiojsWFDO82hB 9xgguQQFAvwi84RDhyHteLVTueTrj9se+FV79OxYYb9/wFRiWvocQDRcxCELyRsU LHK8N+WOkABMdyhMUDjifsDrDa5k1S6INmbn7ZPNPJCRNcXBcvda8geHkbglJ5q3 dWqb4z2m0bluoL40jN+YfVXNEXznmAz5jiyBS8Iea/m1gNr4ik3sA9B0Mto5uTwC afpja0kH8q1Hw+H5wb4aORgb+y0k2Nh5SGH7E9nm/9Ai8YlWnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG8G+UyTeF3O9ewLR5qfrkjUeintMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2ZlNTBmNjEtNTM5ZS0z ODUyLWIxYzQtNWEyNWMzM2JmOTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAYop MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGuOiVYO4ETN+7/v+qduiQsGad5r+14Vv3x1FMs+TCeSpTlRFJj1 D90xV1BzjP8iMzhcPkhCLJE9FN1L4B5a9cFbdl/at3OS3Th+ZpplpWECwiINaL5K wmzc+e8tiGf/msncEC49zydpdTLgAVm5v8gVRAjquZ8xuZwG9bVij9sFDZ+pZnO1 EPJ89dLZC9qzRC/KY3CZE2gLABGGk9BsE23f6MiLwBNQOsHt7WNRPuwsOUwMdJ42 n3PTBeOG1RPJCUJkMUjBumS2KtcxJLtTGlXDMTcSI/tYZdw5JbWrC/V2EXZ5v1Gy VqRsOL4J8ylYC5SDl+q45HyUc5qjnPYG/4I= -----END CERTIFICATE-----Generated at Wed Jul 29 04:55:29 2026 by rpki-client