$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18561a1d-d546-36e1-a943-80caedfd321b.roa File: 18561a1d-d546-36e1-a943-80caedfd321b.roa (raw, json) Hash identifier: MqEKQ0qXedNCZxaRa//8RX2jaBySLZbBqKPvy/HCjHY= Subject key identifier: 54:A6:B8:07:D0:45:68:71:0F:DD:4C:B8:A3:42:3D:78:27:B4:2A:1C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F0AA2290F3373A31222BB9880 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18561a1d-d546-36e1-a943-80caedfd321b.roa Signing time: Wed 02 Sep 2026 13:00:12 +0000 ROA not before: Wed 02 Sep 2026 13:00:12 +0000 ROA not after: Tue 01 Dec 2026 14:00:12 +0000 asID: 36630 IP address blocks: 2001:502:8cc::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:a2:29:0f:33:73:a3:12:22:bb:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 2 13:00:12 2026 GMT Not After : Dec 1 14:00:12 2026 GMT Subject: CN=c3df851f-b6bb-49ee-b45d-5cd4f1f5fed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b4:27:45:63:64:bc:cc:a2:91:49:90:a0:8e: 85:e1:da:e5:c0:8b:10:fb:8b:fa:0d:ff:1c:d4:85: 54:06:e0:e1:e1:d5:2a:54:64:45:68:14:b7:c0:fc: 7f:d0:67:3a:98:98:44:aa:00:a4:73:93:77:c2:83: 81:58:78:35:fc:50:6a:2c:8a:3e:34:ce:40:49:ef: 69:65:69:99:15:94:97:eb:44:8e:13:a0:d7:c9:04: a4:a3:96:ee:b6:02:57:bf:e9:f1:98:4d:f8:af:cd: e1:01:f0:ba:99:a6:76:e6:f1:6e:ad:80:6e:00:95: 7d:a2:f1:93:91:38:79:67:54:55:20:12:cd:94:35: 7f:3e:53:61:f6:fd:1a:f6:9b:75:7d:33:12:9f:d6: d9:4f:82:aa:8e:27:ca:f8:de:fd:d4:74:65:b1:00: 0f:6b:43:1d:c5:2b:f2:bc:95:98:00:72:e4:93:26: a0:ba:8e:b8:77:e5:07:67:a8:97:ec:6f:08:5b:cb: 8b:47:3c:08:8a:49:54:cc:70:c5:c9:ad:04:dd:49: 48:85:d1:17:0f:01:c7:3a:0f:5c:3b:da:78:20:08: aa:a9:1b:3e:e2:6b:31:22:01:87:52:9d:b1:12:07: 58:d6:d9:df:85:d0:3f:f7:36:37:4f:34:cb:dc:34: 15:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A6:B8:07:D0:45:68:71:0F:DD:4C:B8:A3:42:3D:78:27:B4:2A:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18561a1d-d546-36e1-a943-80caedfd321b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:5d:6b:01:9d:8e:b6:28:8b:01:50:d2:be:e2:64:7f:6c:1e: ea:ac:54:c2:2c:32:95:b4:db:44:ee:10:21:41:ee:15:da:7d: 1e:03:35:2d:d7:30:7e:2e:ae:56:27:bb:d7:23:a8:36:56:92: 7e:d0:bd:2c:fd:5c:7c:26:c9:70:dd:0b:c8:ac:f8:72:20:ce: 66:78:9f:0b:70:d9:b8:a7:79:fb:a0:9d:79:22:6c:fa:21:48: 58:c1:4f:28:89:f4:f9:77:a5:27:ea:f5:9a:f2:9f:31:56:20: ab:a2:7d:04:c4:83:a5:31:18:97:f2:56:76:ef:de:4b:81:8e: 9a:ea:17:61:d1:fb:b7:2e:99:9c:34:5e:7b:c7:d6:13:79:67: ba:43:a2:e8:38:ea:55:01:cc:5f:cd:f9:41:ad:54:f5:75:79: e1:d9:3f:a7:52:c4:f4:56:f9:9e:88:06:60:56:3a:a2:09:5c: fb:e5:af:58:99:46:fd:e2:f4:38:a2:af:34:b9:49:98:a1:e4: 22:b2:35:78:82:f2:1f:e2:c2:48:c4:9d:fe:b3:ce:3e:a9:0e: 5d:37:19:53:2a:94:f6:8a:50:d9:2e:04:e3:de:6c:8b:38:26: 50:fd:a9:08:0e:79:64:d3:c1:30:b5:e0:e6:3a:1b:be:5a:1b: 4e:10:4e:c6 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8KoikPM3OjEiK7mIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwMjEzMDAxMloXDTI2MTIwMTE0MDAxMlowLzEtMCsGA1UEAxMk YzNkZjg1MWYtYjZiYi00OWVlLWI0NWQtNWNkNGYxZjVmZWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLQnRWNkvMyikUmQoI6F4drlwIsQ+4v6Df8c 1IVUBuDh4dUqVGRFaBS3wPx/0Gc6mJhEqgCkc5N3woOBWHg1/FBqLIo+NM5ASe9p ZWmZFZSX60SOE6DXyQSko5butgJXv+nxmE34r83hAfC6maZ25vFurYBuAJV9ovGT kTh5Z1RVIBLNlDV/PlNh9v0a9pt1fTMSn9bZT4KqjifK+N791HRlsQAPa0MdxSvy vJWYAHLkkyaguo64d+UHZ6iX7G8IW8uLRzwIiklUzHDFya0E3UlIhdEXDwHHOg9c O9p4IAiqqRs+4msxIgGHUp2xEgdY1tnfhdA/9zY3TzTL3DQVDQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFSmuAfQRWhxD91MuKNCPXgntCocMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTg1NjFhMWQtZDU0Ni0z NmUxLWE5NDMtODBjYWVkZmQzMjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAgjM AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCyXWsBnY62KIsBUNK+4mR/bB7qrFTCLDKVtNtE 7hAhQe4V2n0eAzUt1zB+Lq5WJ7vXI6g2VpJ+0L0s/Vx8Jslw3QvIrPhyIM5meJ8L cNm4p3n7oJ15Imz6IUhYwU8oifT5d6Un6vWa8p8xViCron0ExIOlMRiX8lZ2795L gY6a6hdh0fu3LpmcNF57x9YTeWe6Q6LoOOpVAcxfzflBrVT1dXnh2T+nUsT0Vvme iAZgVjqiCVz75a9YmUb94vQ4oq80uUmYoeQisjV4gvIf4sJIxJ3+s84+qQ5dNxlT KpT2ilDZLgTj3myLOCZQ/akIDnlk08EwteDmOhu+WhtOEE7G -----END CERTIFICATE-----Generated at Tue Sep 22 16:56:01 2026 by rpki-client