$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f348af2-a7ac-3452-8df5-a4880c77a244.roa File: 1f348af2-a7ac-3452-8df5-a4880c77a244.roa (raw, json) Hash identifier: U6+jI/7NfAqfGk+RxcAk9N7ve3u2E+XRYTC5aU5fU1M= Subject key identifier: 18:2E:D5:15:80:21:20:AD:40:A5:D2:34:58:0F:25:40:09:21:0D:42 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F119CE46483BE69B1EF14A780 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f348af2-a7ac-3452-8df5-a4880c77a244.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 397205 IP address blocks: 2001:502:8cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:e4:64:83:be:69:b1:ef:14:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=2c427aec-c6b5-4dad-9280-9c8e6bb51077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:86:ba:4c:5b:91:f4:31:ac:dc:9c:c3:7f:4a: e2:1d:a7:9a:b5:d4:b5:c8:bf:87:a2:45:20:7e:d2: ca:b3:3d:02:71:e3:b1:83:db:82:ea:e5:b1:b9:e6: 60:de:92:37:d6:bf:fc:3f:fc:92:00:ad:e0:82:31: d2:4d:9b:31:f6:63:72:7e:6a:96:40:f0:c4:0c:a9: ce:e1:2e:77:fa:f1:33:f8:d2:67:98:00:35:b9:2d: db:10:23:a6:87:40:92:67:35:26:7e:fd:66:38:1e: b0:b5:59:58:26:82:6b:80:05:a4:7c:8f:9e:6b:9d: bc:ec:bc:06:b2:84:6d:a9:81:3a:96:eb:e0:ce:dd: 4f:46:35:e6:17:35:74:f0:b9:04:50:62:57:36:48: 39:00:5e:36:6e:57:48:17:63:80:79:0e:8d:3f:56: 0c:fc:0e:63:c7:32:44:36:da:9d:00:34:cb:9e:41: dd:ef:ef:33:9d:0d:4f:19:21:43:ac:9f:1f:2f:f4: 31:67:5e:60:b3:8d:7a:4b:9a:e8:e1:5b:80:53:3d: c9:ed:84:27:9d:c0:aa:30:00:26:d4:f1:27:d4:28: 88:10:17:8b:2e:99:da:0c:f6:78:7e:d3:ee:d6:63: 09:e1:9a:09:d8:f4:db:e4:47:d5:86:06:f6:a6:22: 32:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:2E:D5:15:80:21:20:AD:40:A5:D2:34:58:0F:25:40:09:21:0D:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f348af2-a7ac-3452-8df5-a4880c77a244.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:72:b7:6d:2a:83:df:ec:3d:c3:b5:75:38:1b:0b:11:a0:5f: 65:52:79:bb:4e:85:b5:db:fb:5c:93:25:fc:c5:f1:f4:58:74: ea:90:4f:ef:ab:e1:10:95:90:97:fa:23:23:05:67:c9:14:7d: 85:2a:ce:46:85:4a:d2:65:9b:20:03:09:9a:d7:3e:b2:4c:98: 61:5a:1c:49:d8:f6:43:25:14:1c:6c:96:87:e6:4d:d3:df:05: a4:6a:42:05:1f:cd:50:ed:b3:8d:af:31:c5:1d:43:85:3e:0a: 30:37:bd:42:8b:4c:7b:09:37:01:53:6b:f9:8e:56:93:b1:04: b5:e5:d0:07:ab:09:61:94:0c:e4:87:cf:9e:a4:49:c5:f4:f9: b5:8b:3a:98:4c:24:59:9f:d9:35:f1:9c:81:76:9a:ff:31:9b: 3b:04:b4:b6:7c:57:da:86:a3:9f:42:41:01:3d:58:d1:82:94: 49:19:e2:fd:49:89:5e:2f:d4:21:0c:ae:01:9c:1b:9c:4c:a1: d5:3b:67:71:c2:81:4a:6b:cc:9a:5c:1c:c4:9a:04:ca:fc:af: dc:03:5f:86:a7:3b:bf:f9:0d:3a:f6:ae:6b:fc:9c:a2:5d:82: 0b:c2:cf:51:8e:08:f2:7c:a9:fd:6d:66:fc:63:9d:37:9f:0f: 88:b4:37:e9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8RnORkg75pse8Up4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MmM0MjdhZWMtYzZiNS00ZGFkLTkyODAtOWM4ZTZiYjUxMDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4a6TFuR9DGs3JzDf0riHaeatdS1yL+HokUg ftLKsz0CceOxg9uC6uWxueZg3pI31r/8P/ySAK3ggjHSTZsx9mNyfmqWQPDEDKnO 4S53+vEz+NJnmAA1uS3bECOmh0CSZzUmfv1mOB6wtVlYJoJrgAWkfI+ea5287LwG soRtqYE6luvgzt1PRjXmFzV08LkEUGJXNkg5AF42bldIF2OAeQ6NP1YM/A5jxzJE NtqdADTLnkHd7+8znQ1PGSFDrJ8fL/QxZ15gs416S5ro4VuAUz3J7YQnncCqMAAm 1PEn1CiIEBeLLpnaDPZ4ftPu1mMJ4ZoJ2PTb5EfVhgb2piIyVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBgu1RWAISCtQKXSNFgPJUAJIQ1CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWYzNDhhZjItYTdhYy0z NDUyLThkZjUtYTQ4ODBjNzdhMjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAgjM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGpyt20qg9/sPcO1dTgbCxGgX2VSebtOhbXb+1yTJfzF8fRYdOqQ T++r4RCVkJf6IyMFZ8kUfYUqzkaFStJlmyADCZrXPrJMmGFaHEnY9kMlFBxslofm TdPfBaRqQgUfzVDts42vMcUdQ4U+CjA3vUKLTHsJNwFTa/mOVpOxBLXl0AerCWGU DOSHz56kScX0+bWLOphMJFmf2TXxnIF2mv8xmzsEtLZ8V9qGo59CQQE9WNGClEkZ 4v1JiV4v1CEMrgGcG5xModU7Z3HCgUprzJpcHMSaBMr8r9wDX4anO7/5DTr2rmv8 nKJdggvCz1GOCPJ8qf1tZvxjnTefD4i0N+k= -----END CERTIFICATE-----Generated at Sat Sep 26 14:57:46 2026 by rpki-client