$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d8eec1a-6029-39fb-8dd2-616db950673b.roa File: 3d8eec1a-6029-39fb-8dd2-616db950673b.roa (raw, json) Hash identifier: yYEUtaDb06nrfBl4yYKwvDcPlMJHDMmJrByX43ld4KU= Subject key identifier: 52:A5:1A:F1:C3:27:1D:82:47:71:BD:99:76:BE:EC:41:B4:73:A6:5F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F23C282FE1DC98C001636F640 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d8eec1a-6029-39fb-8dd2-616db950673b.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 396541 IP address blocks: 2001:501:8a29::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:82:fe:1d:c9:8c:00:16:36:f6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=45ccd698-fd22-440f-aecf-071f959fc7b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b3:7e:c2:64:6c:fe:da:9d:6c:4c:02:4e:2d: 07:3a:d5:90:e3:80:60:68:3b:9d:c9:de:79:17:0b: c0:09:02:5d:9e:d6:85:3b:3b:90:b4:e4:84:5d:5a: 9b:7e:d6:08:61:e4:2d:69:d3:fb:08:5b:4f:17:5e: c1:f8:49:b1:56:68:c2:5d:7d:cc:3e:c5:dd:d5:93: db:78:9f:d6:d8:7b:53:50:20:0a:bb:8a:08:b1:d6: 5f:d9:10:50:1b:33:5e:de:45:b2:28:be:f9:8d:34: 65:75:e4:81:09:7d:3c:04:bd:0e:73:7a:9c:5c:b7: 1b:cf:22:ea:38:1f:b8:b6:81:28:36:2d:78:3a:3e: 61:02:7b:97:a4:60:7c:a6:ee:0a:35:e5:63:63:ea: 5c:36:64:16:83:10:7a:00:1e:55:14:e1:60:f4:d7: 11:be:6f:c0:38:3f:8b:7e:e9:68:30:3d:eb:08:4f: ea:a9:fb:47:9a:e0:69:9d:cb:ae:dd:0b:97:7f:32: f4:35:3f:4b:88:ad:33:23:bb:50:2a:c5:3e:f2:55: 74:3b:e6:f0:e5:75:c2:71:6e:08:e0:a4:5a:40:f7: 5f:9f:2c:ce:54:f6:cb:67:51:c7:3a:b0:d0:d0:d9: e3:25:b5:3f:3f:ae:f1:ec:c1:1b:c4:c3:81:7c:ef: c6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A5:1A:F1:C3:27:1D:82:47:71:BD:99:76:BE:EC:41:B4:73:A6:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d8eec1a-6029-39fb-8dd2-616db950673b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:9e:0d:78:db:ee:4d:13:60:ea:07:c3:5f:00:3e:81:f7:7e: 4b:dd:33:6c:5d:15:2a:04:7d:3f:f5:62:7e:f5:d2:d6:54:0c: 37:e0:1e:ff:e0:48:9d:b9:3e:a9:26:a2:8c:41:60:8c:27:25: fe:e0:a1:69:e2:4e:77:23:79:6f:ea:37:73:f8:07:e5:0c:7b: 79:4d:b2:25:71:02:af:d9:f6:3d:91:a0:7d:f3:d1:ae:27:e7: a3:9c:08:30:c3:c9:32:d3:73:a2:62:8a:03:14:75:41:b6:59: 9f:33:7c:1f:a0:e4:06:1b:08:d1:58:e0:eb:14:ba:7c:eb:fd: fb:e7:d7:c7:a8:98:7b:24:42:b4:f5:f0:6b:73:0f:11:5e:a7: 93:dc:3c:fe:c0:e8:49:5c:ae:13:0e:73:8a:c6:fb:fb:1b:e1: 4e:08:13:f5:5f:6a:50:d4:06:3e:47:2a:71:1c:9d:8b:3d:6c: c6:b9:06:af:f4:f6:3f:74:47:ad:72:02:03:c8:42:fd:c1:d2: 3b:77:96:36:37:43:9c:d9:e0:ea:c5:64:f1:a9:58:38:e6:66: 50:e3:c4:e4:b8:55:65:a4:65:ed:8e:64:03:76:7c:fc:40:55: 5e:5c:75:79:0a:37:cc:93:fb:11:b4:a9:0f:20:25:54:28:f0: c9:1c:11:1d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8jwoL+HcmMABY29kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk NDVjY2Q2OTgtZmQyMi00NDBmLWFlY2YtMDcxZjk1OWZjN2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7N+wmRs/tqdbEwCTi0HOtWQ44BgaDudyd55 FwvACQJdntaFOzuQtOSEXVqbftYIYeQtadP7CFtPF17B+EmxVmjCXX3MPsXd1ZPb eJ/W2HtTUCAKu4oIsdZf2RBQGzNe3kWyKL75jTRldeSBCX08BL0Oc3qcXLcbzyLq OB+4toEoNi14Oj5hAnuXpGB8pu4KNeVjY+pcNmQWgxB6AB5VFOFg9NcRvm/AOD+L fuloMD3rCE/qqftHmuBpncuu3QuXfzL0NT9LiK0zI7tQKsU+8lV0O+bw5XXCcW4I 4KRaQPdfnyzOVPbLZ1HHOrDQ0NnjJbU/P67x7MEbxMOBfO/GewIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFKlGvHDJx2CR3G9mXa+7EG0c6ZfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2Q4ZWVjMWEtNjAyOS0z OWZiLThkZDItNjE2ZGI5NTA2NzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA4ng142+5NE2DqB8NfAD6B935L3TNsXRUqBH0/ 9WJ+9dLWVAw34B7/4EiduT6pJqKMQWCMJyX+4KFp4k53I3lv6jdz+AflDHt5TbIl cQKv2fY9kaB989GuJ+ejnAgww8ky03OiYooDFHVBtlmfM3wfoOQGGwjRWODrFLp8 6/3759fHqJh7JEK09fBrcw8RXqeT3Dz+wOhJXK4TDnOKxvv7G+FOCBP1X2pQ1AY+ RypxHJ2LPWzGuQav9PY/dEetcgIDyEL9wdI7d5Y2N0Oc2eDqxWTxqVg45mZQ48Tk uFVlpGXtjmQDdnz8QFVeXHV5CjfMk/sRtKkPICVUKPDJHBEd -----END CERTIFICATE-----Generated at Tue Sep 22 14:06:13 2026 by rpki-client