$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22ea1a63-60b9-39f1-8482-27305933a20e.roa File: 22ea1a63-60b9-39f1-8482-27305933a20e.roa (raw, json) Hash identifier: em2SqJpCAP+gopx7jQZk+UmKLhmV6m0IwxrOKlEMfy0= Subject key identifier: 7D:E9:20:BD:FB:0F:C2:B6:43:41:20:5E:8C:EF:5A:A8:75:D1:A8:C4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F2D87B3F56D66EF0861222900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22ea1a63-60b9-39f1-8482-27305933a20e.roa Signing time: Tue 15 Sep 2026 01:00:12 +0000 ROA not before: Tue 15 Sep 2026 01:00:12 +0000 ROA not after: Mon 14 Dec 2026 02:00:12 +0000 asID: 397211 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2d:87:b3:f5:6d:66:ef:08:61:22:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 15 01:00:12 2026 GMT Not After : Dec 14 02:00:12 2026 GMT Subject: CN=2afe8e3f-61cd-4f5e-872b-d62c1996cfae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1e:e4:96:1d:1a:b1:36:e5:1b:0d:a5:2d:27: f8:c6:50:af:e4:2a:bc:17:80:77:64:68:61:f5:2d: 56:2e:cd:85:4a:c6:01:f5:89:37:dc:2b:7e:bf:de: 6f:38:3c:26:7d:ee:f9:f4:4e:52:2f:25:6f:c5:53: 69:bb:6d:e6:35:9c:7c:11:b9:04:70:cf:7b:e9:9b: 06:ea:2a:88:d3:1d:e9:ad:2f:9b:cb:56:9c:12:e1: eb:f2:c2:0c:51:9c:14:3a:25:e7:58:4d:f5:dd:d4: 70:7a:37:64:cf:a0:83:6c:23:8b:ba:cb:2f:00:e6: 45:23:1c:30:0b:7f:ac:96:76:4d:33:5f:99:1a:86: e7:b4:62:7d:4e:57:78:92:9e:2a:c5:03:2a:b0:60: f7:69:b9:81:30:d3:9c:af:7d:9d:53:6a:fd:7d:fd: df:31:ad:30:23:38:7a:08:77:5d:73:86:1b:9e:6c: 3e:ca:64:37:1a:d9:04:b3:a5:91:99:d0:12:53:54: 97:86:ed:6a:43:6b:7c:71:a2:f2:ab:8c:12:0f:81: b3:03:af:a3:ef:d7:9d:6b:4a:95:e0:18:d2:a2:85: e9:e8:f9:72:95:24:6c:e0:ac:7b:98:fe:c9:71:d6: 6e:a2:d2:44:27:52:62:92:87:19:1d:54:30:70:4d: aa:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E9:20:BD:FB:0F:C2:B6:43:41:20:5E:8C:EF:5A:A8:75:D1:A8:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22ea1a63-60b9-39f1-8482-27305933a20e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:6f:e7:9f:09:f6:49:3f:8a:ef:6f:c1:d8:ad:f3:fa:72:01: 5b:27:4d:62:47:30:55:a7:de:ec:c2:9c:bd:71:00:48:c6:3f: b7:a5:0b:0c:45:a0:55:6e:02:1d:5d:99:a6:23:af:1a:94:51: dc:b5:7e:21:20:b3:f5:5c:d4:00:90:f9:cc:e4:56:0f:3c:e6: 32:c2:c4:48:bd:2c:fb:d9:63:06:a6:0a:77:5a:87:80:48:a8: 37:04:1b:99:8d:24:85:ac:61:72:e1:b8:82:82:0d:a2:f5:6c: ef:91:d7:60:ea:a0:bf:5b:6e:14:74:aa:bf:96:a8:70:4b:c8: f7:64:68:39:0b:14:64:c1:f0:af:b1:89:33:a4:de:53:85:38: 47:b6:1b:b8:1f:e3:f2:27:b3:83:82:c5:e4:1d:fc:2a:7b:ca: b7:40:38:73:54:46:c7:39:0b:ec:ee:60:ab:26:c1:a9:1b:b0: 92:d4:3b:d4:31:3e:97:d6:19:a4:de:19:ee:4c:2f:4a:39:01: 4b:1c:03:5a:45:4e:3f:cf:23:02:6a:ca:65:65:cf:95:16:83: ae:8a:bf:71:56:77:a7:4e:1e:d5:55:27:c5:32:33:02:5c:e9: d9:ab:41:2b:0e:0c:be:e9:13:81:78:bf:f0:61:36:1d:55:4e: bb:be:0a:b9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8th7P1bWbvCGEiKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkxNTAxMDAxMloXDTI2MTIxNDAyMDAxMlowLzEtMCsGA1UEAxMk MmFmZThlM2YtNjFjZC00ZjVlLTg3MmItZDYyYzE5OTZjZmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAox7klh0asTblGw2lLSf4xlCv5Cq8F4B3ZGhh 9S1WLs2FSsYB9Yk33Ct+v95vODwmfe759E5SLyVvxVNpu23mNZx8EbkEcM976ZsG 6iqI0x3prS+by1acEuHr8sIMUZwUOiXnWE313dRwejdkz6CDbCOLussvAOZFIxww C3+slnZNM1+ZGobntGJ9Tld4kp4qxQMqsGD3abmBMNOcr32dU2r9ff3fMa0wIzh6 CHddc4Ybnmw+ymQ3GtkEs6WRmdASU1SXhu1qQ2t8caLyq4wSD4GzA6+j79eda0qV 4BjSooXp6PlylSRs4Kx7mP7JcdZuotJEJ1JikocZHVQwcE2qFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH3pIL37D8K2Q0EgXozvWqh10ajEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjJlYTFhNjMtNjBiOS0z OWYxLTg0ODItMjczMDU5MzNhMjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB9v558J9kk/iu9vwdit8/pyAVsnTWJHMFWn3uzCnL1xAEjGP7el CwxFoFVuAh1dmaYjrxqUUdy1fiEgs/Vc1ACQ+czkVg885jLCxEi9LPvZYwamCnda h4BIqDcEG5mNJIWsYXLhuIKCDaL1bO+R12DqoL9bbhR0qr+WqHBLyPdkaDkLFGTB 8K+xiTOk3lOFOEe2G7gf4/Ins4OCxeQd/Cp7yrdAOHNURsc5C+zuYKsmwakbsJLU O9QxPpfWGaTeGe5ML0o5AUscA1pFTj/PIwJqymVlz5UWg66Kv3FWd6dOHtVVJ8Uy MwJc6dmrQSsODL7pE4F4v/BhNh1VTru+Crk= -----END CERTIFICATE-----Generated at Tue Oct 6 07:07:21 2026 by rpki-client