$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e57b1af-5c0d-375f-a6c7-9fa5eae00e0e.roa File: 3e57b1af-5c0d-375f-a6c7-9fa5eae00e0e.roa (raw, json) Hash identifier: nXK7yUXpfYRCj29N57LDQg2XvAE6OZMli9W7kd3atho= Subject key identifier: 1B:E7:46:9B:22:5F:71:6B:C8:4B:6E:B9:49:AA:90:83:E6:79:ED:A4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F15CCF9E8D65E3FAECB391788 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e57b1af-5c0d-375f-a6c7-9fa5eae00e0e.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 36632 IP address blocks: 2001:502:cbe4::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cc:f9:e8:d6:5e:3f:ae:cb:39:17:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=5e7c88db-91e6-40b2-9db7-76a201914afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:07:7b:37:d6:5c:6a:a3:0f:72:c2:70:c8:80: 2e:4b:2c:90:80:96:a4:70:67:25:5d:6a:b8:ae:86: 29:68:79:2f:03:90:63:73:f8:7b:5b:f1:08:a9:17: 51:19:58:f5:43:48:a4:fd:d4:b1:1b:a0:48:2f:94: ff:8f:d1:68:68:36:25:9c:51:c3:66:7a:2a:46:7a: a4:44:33:c1:09:de:87:43:5c:03:17:fa:b6:19:a1: fb:12:4d:64:ae:ca:7d:4f:94:61:53:cc:cc:7f:53: 95:59:49:e7:db:25:8b:d3:0a:1e:d1:db:88:4f:a6: 4c:80:fe:fc:37:fc:23:e0:b6:2b:bc:b3:6b:5e:2c: f2:49:cd:ef:d3:71:cc:44:d9:a1:11:33:9f:b8:96: 60:1f:c8:e1:0f:4d:01:08:cc:65:d0:7a:9e:97:67: b1:9d:18:f1:91:65:fd:7d:12:d4:07:f3:df:fc:a8: a4:4b:9b:12:6e:f2:38:de:43:8b:91:93:8e:c9:b3: df:31:bb:96:1a:de:34:0c:b2:77:51:80:d7:aa:bc: dc:02:30:6c:38:f2:05:ff:b9:31:10:2c:4d:04:a6: 2c:c0:30:18:b4:0e:6e:13:51:37:60:06:02:74:60: 65:11:bf:94:19:ae:35:3f:14:b1:cf:e0:64:99:09: f4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E7:46:9B:22:5F:71:6B:C8:4B:6E:B9:49:AA:90:83:E6:79:ED:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e57b1af-5c0d-375f-a6c7-9fa5eae00e0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:65:50:26:fa:22:69:f8:4a:cc:ed:b5:42:da:c5:b6:6b:65: 22:84:63:29:cc:59:2e:3b:90:ca:d3:be:9c:b3:d5:d1:b4:5d: b6:b7:91:9e:d2:75:74:81:dd:3e:2c:b7:84:c6:68:d4:f1:45: f0:f4:bf:e8:06:15:0b:b1:97:01:23:cc:49:99:98:d5:a8:84: 23:1c:3d:28:df:cb:48:1e:dc:ab:93:c8:ea:4d:b3:2b:ef:40: 4a:35:23:5b:8d:dc:38:b1:f5:4c:dc:12:8e:78:b2:f2:33:e9: 40:ab:02:cf:1d:32:be:98:dd:ae:d4:c9:40:aa:65:74:40:09: 71:e5:a8:40:10:ae:af:86:54:63:69:9b:c3:ed:9c:f4:21:e6: 55:c6:0b:2c:ed:44:e6:9d:87:3f:5f:50:32:4a:2a:5d:bc:b8: fc:20:5c:1c:49:0e:ff:cb:58:30:00:41:1b:68:7f:4f:fc:ce: 83:bd:c2:af:9c:24:06:9b:0f:15:b3:39:88:17:d7:d4:d2:ee: d9:28:30:f3:c6:ef:8a:2c:76:21:db:16:6f:2a:65:17:7b:29: 05:1b:2d:b0:0a:b5:a7:fa:d8:a2:3e:01:9e:cc:6b:44:94:e0: e5:44:a8:3f:f9:d2:f7:a2:75:06:15:0d:fb:44:5a:0c:b1:11: ab:e0:f7:c4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8VzPno1l4/rss5F4gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk NWU3Yzg4ZGItOTFlNi00MGIyLTlkYjctNzZhMjAxOTE0YWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAd7N9ZcaqMPcsJwyIAuSyyQgJakcGclXWq4 roYpaHkvA5Bjc/h7W/EIqRdRGVj1Q0ik/dSxG6BIL5T/j9FoaDYlnFHDZnoqRnqk RDPBCd6HQ1wDF/q2GaH7Ek1krsp9T5RhU8zMf1OVWUnn2yWL0woe0duIT6ZMgP78 N/wj4LYrvLNrXizySc3v03HMRNmhETOfuJZgH8jhD00BCMxl0Hqel2exnRjxkWX9 fRLUB/Pf/KikS5sSbvI43kOLkZOOybPfMbuWGt40DLJ3UYDXqrzcAjBsOPIF/7kx ECxNBKYswDAYtA5uE1E3YAYCdGBlEb+UGa41PxSxz+BkmQn0wwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBvnRpsiX3FryEtuuUmqkIPmee2kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2U1N2IxYWYtNWMwZC0z NzVmLWE2YzctOWZhNWVhZTAwZTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQChZVAm+iJp+ErM7bVC2sW2a2UihGMpzFkuO5DK 076cs9XRtF22t5Ge0nV0gd0+LLeExmjU8UXw9L/oBhULsZcBI8xJmZjVqIQjHD0o 38tIHtyrk8jqTbMr70BKNSNbjdw4sfVM3BKOeLLyM+lAqwLPHTK+mN2u1MlAqmV0 QAlx5ahAEK6vhlRjaZvD7Zz0IeZVxgss7UTmnYc/X1AySipdvLj8IFwcSQ7/y1gw AEEbaH9P/M6DvcKvnCQGmw8VszmIF9fU0u7ZKDDzxu+KLHYh2xZvKmUXeykFGy2w CrWn+tiiPgGezGtElODlRKg/+dL3onUGFQ37RFoMsRGr4PfE -----END CERTIFICATE-----Generated at Tue Sep 22 18:17:33 2026 by rpki-client