$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33a1eb5c-1d69-3add-9aa4-e55163f8de48.roa File: 33a1eb5c-1d69-3add-9aa4-e55163f8de48.roa (raw, json) Hash identifier: XQKyr7aOrafiHvI0omg9tfHlamivql6qW6rW+RspC+I= Subject key identifier: AA:58:B2:3E:2D:06:71:0F:28:E5:6B:35:39:0E:52:32:A7:90:60:90 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F15CCF8F68C6B96A169D55680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33a1eb5c-1d69-3add-9aa4-e55163f8de48.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 40717 IP address blocks: 2001:502:cbe4::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cc:f8:f6:8c:6b:96:a1:69:d5:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=df2e4108-4ac7-49c7-9b17-b3099aaf1baf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a9:95:00:05:f2:e0:d0:f1:09:48:89:68:cd: 53:7c:69:59:57:21:76:cb:71:29:12:65:39:2c:32: a7:75:9b:97:fc:fd:2c:a3:20:08:70:96:ef:4f:45: 70:42:cd:75:63:07:e2:43:02:84:45:c0:39:39:dc: 9d:33:9a:b5:06:54:ea:18:71:93:19:a5:55:75:4f: 7c:50:d3:a2:25:c6:74:81:4c:12:aa:26:c7:7f:89: 8c:fc:6b:3c:e4:ab:7b:83:2e:28:30:c0:ae:b2:fb: 30:aa:86:0e:9a:43:d2:61:35:5d:9a:f9:4e:b7:30: 59:d1:2f:e4:f9:cd:2b:d9:c3:02:71:71:7b:82:8e: 2d:17:fb:58:1a:46:87:1b:6d:f1:67:9b:c4:bb:dd: 8f:c2:29:ee:36:f1:c8:25:c1:15:c6:29:6b:05:c9: 1a:e5:5d:18:e8:07:00:4c:3b:cf:30:4a:34:71:01: e0:37:87:e5:d0:71:9e:f9:ea:5d:67:a5:63:99:2b: e9:c5:8a:cd:ae:00:35:59:12:d2:87:66:89:3a:58: 27:d5:0e:82:19:42:50:64:47:15:cf:d7:07:74:8d: 76:34:62:7f:99:d4:f9:84:db:3a:cb:2c:a3:6e:a9: 3b:e0:8a:f6:43:cd:f7:1a:f0:68:06:d6:a0:19:fd: 09:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:58:B2:3E:2D:06:71:0F:28:E5:6B:35:39:0E:52:32:A7:90:60:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33a1eb5c-1d69-3add-9aa4-e55163f8de48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:5e:2b:de:b4:8c:78:2e:28:55:0c:ff:fe:6b:13:46:81:ba: 99:6e:07:ac:18:c9:d2:a0:98:7f:f9:0c:b1:cd:cf:49:64:08: 4c:eb:6a:f6:ac:53:22:70:b1:50:cb:16:6a:23:bc:8f:59:63: 0f:0d:17:52:9d:ac:99:f8:8d:6e:1c:ce:94:a1:c0:0f:d5:19: d4:77:fd:2f:74:e8:23:ff:09:8c:17:a3:09:25:9c:d1:df:10: 3e:b6:39:8c:2b:be:1b:c8:53:7d:54:55:c3:58:17:41:90:be: e1:01:54:84:67:38:f3:18:a3:84:92:7a:28:c4:e5:0f:03:f5: 55:06:aa:3b:98:29:ef:1f:63:e4:86:ea:7d:91:d4:c1:22:af: ca:b2:d0:ba:76:0c:86:54:24:bf:61:23:9f:e4:5f:9c:a6:b3: 10:cc:7f:1e:0e:24:c8:68:9c:ee:e0:41:82:d1:86:d0:6e:cf: 96:5b:21:63:29:24:6a:7d:63:93:48:ca:4c:52:ca:7e:81:a8: c7:81:80:c2:25:b6:25:7d:ce:c3:ab:f3:17:4c:62:af:f0:ae: 70:03:60:a5:3e:e2:f1:50:82:db:b5:cc:ef:3f:dd:86:b5:33: 1a:fc:7a:e7:97:57:9e:4e:25:c8:7a:59:fd:2c:6a:d3:de:c1: e9:14:4a:50 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8VzPj2jGuWoWnVVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk ZGYyZTQxMDgtNGFjNy00OWM3LTliMTctYjMwOTlhYWYxYmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmamVAAXy4NDxCUiJaM1TfGlZVyF2y3EpEmU5 LDKndZuX/P0soyAIcJbvT0VwQs11YwfiQwKERcA5OdydM5q1BlTqGHGTGaVVdU98 UNOiJcZ0gUwSqibHf4mM/Gs85Kt7gy4oMMCusvswqoYOmkPSYTVdmvlOtzBZ0S/k +c0r2cMCcXF7go4tF/tYGkaHG23xZ5vEu92PwinuNvHIJcEVxilrBcka5V0Y6AcA TDvPMEo0cQHgN4fl0HGe+epdZ6VjmSvpxYrNrgA1WRLSh2aJOlgn1Q6CGUJQZEcV z9cHdI12NGJ/mdT5hNs6yyyjbqk74Ir2Q833GvBoBtagGf0JowIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKpYsj4tBnEPKOVrNTkOUjKnkGCQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzNhMWViNWMtMWQ2OS0z YWRkLTlhYTQtZTU1MTYzZjhkZTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAxXivetIx4LihVDP/+axNGgbqZbgesGMnSoJh/ +Qyxzc9JZAhM62r2rFMicLFQyxZqI7yPWWMPDRdSnayZ+I1uHM6UocAP1RnUd/0v dOgj/wmMF6MJJZzR3xA+tjmMK74byFN9VFXDWBdBkL7hAVSEZzjzGKOEknooxOUP A/VVBqo7mCnvH2Pkhup9kdTBIq/KstC6dgyGVCS/YSOf5F+cprMQzH8eDiTIaJzu 4EGC0YbQbs+WWyFjKSRqfWOTSMpMUsp+gajHgYDCJbYlfc7Dq/MXTGKv8K5wA2Cl PuLxUILbtczvP92GtTMa/Hrnl1eeTiXIeln9LGrT3sHpFEpQ -----END CERTIFICATE-----Generated at Tue Sep 22 09:12:31 2026 by rpki-client