$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3071f568-965b-3ee5-ae68-d1e14f08d684.roa File: 3071f568-965b-3ee5-ae68-d1e14f08d684.roa (raw, json) Hash identifier: vVehmYafWjMiw7YAD4ZY9p//Bd4hetGilkAFJB7Z56E= Subject key identifier: 02:49:D9:71:87:47:F2:67:9D:A6:55:5F:05:71:47:19:36:42:25:90 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EF01CC446F086EFDD18456A40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3071f568-965b-3ee5-ae68-d1e14f08d684.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 396553 IP address blocks: 2001:500:13f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:c4:46:f0:86:ef:dd:18:45:6a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=6f56aae7-6734-46a7-8c8b-c4e3a6f59df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7e:dc:34:16:b0:08:ea:53:76:a5:79:b4:9e: 4a:78:f3:bd:14:c8:f3:38:d0:9f:7f:ee:22:e9:4f: 47:a2:9c:63:ed:16:24:7e:4c:8d:5f:59:b5:fd:21: 09:aa:ae:41:7c:91:56:8a:a5:36:2e:57:25:59:61: 14:65:f4:f2:3e:b1:3c:74:80:e5:09:6b:d5:aa:19: d1:d1:83:75:b9:3f:4a:0e:58:09:76:bb:59:b0:94: ee:74:7c:c4:59:e0:82:83:92:eb:c8:8c:35:af:ae: de:07:62:5d:e1:1c:cb:8e:d2:43:bf:81:a0:c0:9f: 51:89:0b:95:dd:f6:bc:61:6e:ea:d8:06:15:d3:62: 76:34:88:6d:d8:e6:84:78:61:c5:40:f7:05:c0:c7: 44:7a:8e:c3:4b:29:63:a3:d1:1d:9c:06:b7:af:06: 7d:57:df:0e:cb:60:06:e8:ed:70:9b:62:a3:d0:1f: 93:0b:90:6f:60:61:af:02:75:23:d4:c5:7e:88:52: 0f:5e:e1:37:92:f6:81:19:37:79:d2:c0:b0:e8:93: 80:a5:af:2c:83:2d:c6:94:16:31:3b:d9:67:6e:ae: 50:85:c7:ab:cd:3e:ca:75:4f:61:4c:6c:29:a9:67: 90:15:51:cc:6f:55:cd:d9:20:05:e1:1b:e4:41:61: f8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:49:D9:71:87:47:F2:67:9D:A6:55:5F:05:71:47:19:36:42:25:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3071f568-965b-3ee5-ae68-d1e14f08d684.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:13f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:16:3e:fa:32:8e:0c:96:85:65:4b:7a:e2:a3:ea:13:1f:c9: 4a:4e:51:c7:5c:64:2f:11:69:53:97:07:17:d8:c9:f6:a4:82: e3:d5:17:0e:de:2f:2d:af:9e:bb:f4:b4:5b:71:13:12:8a:70: 4c:17:9a:b5:93:43:95:21:b9:df:ec:36:e4:f6:31:ac:68:f9: 0f:b3:bf:75:0b:11:b9:96:ad:a9:0f:51:f8:c0:21:84:18:92: 0d:4c:20:3b:40:82:a2:03:50:f8:96:3c:ca:19:ce:2a:13:71: 15:63:d4:e4:70:7e:6b:a0:10:94:a7:22:ed:62:fd:21:30:fb: f4:91:63:6d:e2:b4:87:32:57:03:4b:4d:fc:52:82:12:f9:a1: ac:1e:4c:eb:97:17:24:19:c2:92:d5:ef:ed:1f:34:f7:09:38: 30:8e:2b:a7:38:11:2d:fc:48:55:59:70:e0:b5:02:1f:7f:db: 02:9d:fb:22:37:2e:6c:62:38:64:7d:55:12:b9:14:f1:54:67: 7c:1e:f2:5b:05:7b:c2:d4:ac:0e:e4:49:c2:a6:8d:16:53:db: 39:e6:83:bc:bf:58:8c:65:53:f5:a0:a0:e3:3c:75:dc:84:d6: c3:5e:b0:8f:d5:1f:3e:15:3f:29:84:11:b9:38:fe:ce:80:f3: b0:07:30:f7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7wHMRG8Ibv3RhFakAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk NmY1NmFhZTctNjczNC00NmE3LThjOGItYzRlM2E2ZjU5ZGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiX7cNBawCOpTdqV5tJ5KePO9FMjzONCff+4i 6U9Hopxj7RYkfkyNX1m1/SEJqq5BfJFWiqU2LlclWWEUZfTyPrE8dIDlCWvVqhnR 0YN1uT9KDlgJdrtZsJTudHzEWeCCg5LryIw1r67eB2Jd4RzLjtJDv4GgwJ9RiQuV 3fa8YW7q2AYV02J2NIht2OaEeGHFQPcFwMdEeo7DSyljo9EdnAa3rwZ9V98Oy2AG 6O1wm2Kj0B+TC5BvYGGvAnUj1MV+iFIPXuE3kvaBGTd50sCw6JOApa8sgy3GlBYx O9lnbq5QhcerzT7KdU9hTGwpqWeQFVHMb1XN2SAF4RvkQWH4pQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAJJ2XGHR/JnnaZVXwVxRxk2QiWQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzA3MWY1NjgtOTY1Yi0z ZWU1LWFlNjgtZDFlMTRmMDhkNjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALUWPvoyjgyWhWVLeuKj6hMfyUpOUcdcZC8RaVOXBxfYyfakguPV Fw7eLy2vnrv0tFtxExKKcEwXmrWTQ5Uhud/sNuT2Maxo+Q+zv3ULEbmWrakPUfjA IYQYkg1MIDtAgqIDUPiWPMoZzioTcRVj1ORwfmugEJSnIu1i/SEw+/SRY23itIcy VwNLTfxSghL5oaweTOuXFyQZwpLV7+0fNPcJODCOK6c4ES38SFVZcOC1Ah9/2wKd +yI3LmxiOGR9VRK5FPFUZ3we8lsFe8LUrA7kScKmjRZT2znmg7y/WIxlU/WgoOM8 ddyE1sNesI/VHz4VPymEEbk4/s6A87AHMPc= -----END CERTIFICATE-----Generated at Tue Sep 22 00:23:40 2026 by rpki-client