$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2884184f-ee2d-36b9-af06-acd53228cbb2.roa File: 2884184f-ee2d-36b9-af06-acd53228cbb2.roa (raw, json) Hash identifier: /xeGK+b/gWNWvQIWyJmIJbtd6z04EmJ2oUxa3ojT9iQ= Subject key identifier: 8B:13:75:D9:33:5B:EB:D1:09:6A:11:AE:AA:1B:04:FD:51:8B:2F:DA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F49894D4D17E80DA61F7BCD80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2884184f-ee2d-36b9-af06-acd53228cbb2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36630 IP address blocks: 2001:501:8a29::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:4d:4d:17:e8:0d:a6:1f:7b:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fb57410e-1490-430a-a847-5a262c1f3eec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:98:52:21:32:41:26:cc:61:ff:49:0d:75:98: fa:93:57:64:92:60:7a:8d:15:cc:e1:2a:e9:64:63: 4e:be:11:b7:ee:16:e6:b3:68:92:f5:61:49:1a:f8: 98:7c:b0:0d:dc:9d:5c:55:cc:3f:16:8a:7f:70:31: d6:01:e0:99:c0:73:f5:6e:ba:a0:f5:44:27:bf:fd: e2:45:84:7c:64:77:4b:88:69:52:3e:53:c6:84:cf: 9a:a1:32:43:e9:d5:b3:fb:e3:30:43:50:c8:87:aa: de:4b:89:1d:92:f0:ce:65:a4:aa:e1:17:02:15:77: 0e:b7:41:fe:0d:25:2f:a0:d0:9f:e4:d8:3d:44:0f: d3:8c:af:33:29:34:1b:f8:c9:1a:b4:54:75:00:7e: 21:14:98:05:f9:77:ba:af:c9:0e:6b:d9:a0:fc:ec: b3:4a:27:10:71:65:e3:18:be:f5:75:c0:65:b0:76: 42:1f:ae:48:7f:82:9e:e3:a9:87:40:58:c4:e3:0c: d3:2e:5d:f9:68:97:ff:ce:a8:0d:77:27:f8:b2:e3: 7d:e2:26:cc:c1:45:1f:c7:2d:c3:1c:28:7f:b7:7d: be:dd:88:46:f8:b7:92:21:40:0f:a6:0a:ba:74:06: 3a:5c:3b:82:69:09:cc:97:5a:a0:0f:23:53:bd:b6: 5d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:13:75:D9:33:5B:EB:D1:09:6A:11:AE:AA:1B:04:FD:51:8B:2F:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2884184f-ee2d-36b9-af06-acd53228cbb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:6e:d3:ee:c6:40:bc:27:d4:04:9f:80:42:8c:a8:05:43:39: b9:08:ad:71:1a:c5:f4:c8:74:e6:4c:4b:5a:6b:db:7f:01:da: 87:7b:d2:a2:19:c0:ab:2b:c1:33:45:17:b6:a0:9b:90:a1:e8: 74:5b:e6:1c:ec:50:2a:16:2b:4f:37:f6:d7:96:e8:54:08:4c: 21:4c:23:e5:e7:c7:48:0b:7f:34:fb:a8:51:24:7b:a9:ce:b3: fe:9c:04:b8:64:3b:43:2b:b1:3a:b1:96:ed:56:6f:77:ae:a8: 22:55:57:ad:6a:ae:fc:a2:83:96:1d:81:56:e2:2e:6a:4b:b6: b3:10:a2:e9:33:5c:a1:cb:7a:d6:f0:cc:6f:d0:f3:1b:87:6e: d2:ad:ad:83:04:3a:75:51:03:e3:19:74:9e:13:72:dd:17:0d: 27:1d:4a:70:39:f3:aa:33:03:95:37:16:3a:fe:b4:8b:79:2e: 0c:9e:58:45:15:78:dd:ed:13:ee:08:e0:2c:70:f0:98:e9:36: a2:40:d7:07:c5:84:be:1c:b9:0c:3f:78:6c:93:79:83:74:cc: 1f:66:1c:88:7a:32:7c:5b:bf:80:db:cd:78:2b:67:05:d1:b1: e3:2b:09:2b:de:5b:ce:58:ef:a5:2d:43:99:30:68:79:ae:f8: 02:66:d1:5c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JiU1NF+gNph97zYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmI1NzQxMGUtMTQ5MC00MzBhLWE4NDctNWEyNjJjMWYzZWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJhSITJBJsxh/0kNdZj6k1dkkmB6jRXM4Srp ZGNOvhG37hbms2iS9WFJGviYfLAN3J1cVcw/Fop/cDHWAeCZwHP1brqg9UQnv/3i RYR8ZHdLiGlSPlPGhM+aoTJD6dWz++MwQ1DIh6reS4kdkvDOZaSq4RcCFXcOt0H+ DSUvoNCf5Ng9RA/TjK8zKTQb+MkatFR1AH4hFJgF+Xe6r8kOa9mg/OyzSicQcWXj GL71dcBlsHZCH65If4Ke46mHQFjE4wzTLl35aJf/zqgNdyf4suN94ibMwUUfxy3D HCh/t32+3YhG+LeSIUAPpgq6dAY6XDuCaQnMl1qgDyNTvbZdOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIsTddkzW+vRCWoRrqobBP1Riy/aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjg4NDE4NGYtZWUyZC0z NmI5LWFmMDYtYWNkNTMyMjhjYmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAYop MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALdu0+7GQLwn1ASfgEKMqAVDObkIrXEaxfTIdOZMS1pr238B2od7 0qIZwKsrwTNFF7agm5Ch6HRb5hzsUCoWK0839teW6FQITCFMI+Xnx0gLfzT7qFEk e6nOs/6cBLhkO0MrsTqxlu1Wb3euqCJVV61qrvyig5YdgVbiLmpLtrMQoukzXKHL etbwzG/Q8xuHbtKtrYMEOnVRA+MZdJ4Tct0XDScdSnA586ozA5U3Fjr+tIt5Lgye WEUVeN3tE+4I4Cxw8JjpNqJA1wfFhL4cuQw/eGyTeYN0zB9mHIh6Mnxbv4DbzXgr ZwXRseMrCSveW85Y76UtQ5kwaHmu+AJm0Vw= -----END CERTIFICATE-----Generated at Sat Sep 26 08:30:15 2026 by rpki-client