$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40899042-bbea-3e77-a037-fdd51a07c00a.roa File: 40899042-bbea-3e77-a037-fdd51a07c00a.roa (raw, json) Hash identifier: RaJq83fNQ1vjO1/JTJf6WhYW7kNCpH7IbORYUVQmZL8= Subject key identifier: 1F:3C:98:1A:02:78:89:CD:81:D5:FE:7A:7C:6C:22:1E:FF:A5:87:AE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F0AA22AD2BF7B2DB8FA9DC460 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40899042-bbea-3e77-a037-fdd51a07c00a.roa Signing time: Wed 02 Sep 2026 13:00:12 +0000 ROA not before: Wed 02 Sep 2026 13:00:12 +0000 ROA not after: Tue 01 Dec 2026 14:00:12 +0000 asID: 396588 IP address blocks: 2001:502:8cc::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:a2:2a:d2:bf:7b:2d:b8:fa:9d:c4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 2 13:00:12 2026 GMT Not After : Dec 1 14:00:12 2026 GMT Subject: CN=da6acdea-ec60-4bb4-b9a2-9bb9ab7c7026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:98:b6:99:14:1a:fe:65:40:ed:22:be:fc:e5: 6f:cf:b6:5c:62:fc:ca:e4:68:e1:92:94:7e:5c:36: 41:81:22:b8:ee:73:68:7c:df:ad:32:69:4e:21:8a: 5d:27:89:b1:f4:84:08:f9:f9:96:26:45:9e:b7:47: c9:1b:28:9f:22:ec:1e:fe:a2:77:ff:02:2d:6b:7d: 0b:8c:de:c1:1e:63:b4:47:be:7b:c6:28:49:65:f7: a2:f9:1b:e5:a9:c4:39:46:cd:9c:d6:61:09:d4:ce: 76:de:7d:67:40:62:30:5d:d4:43:35:32:17:b8:2c: be:36:26:2c:4d:c7:9d:f7:23:52:4b:dc:6b:e6:ab: f6:e9:33:5d:f7:78:cf:f2:22:83:2c:f2:08:60:50: da:35:69:7e:a8:17:92:4c:a3:e6:79:b5:1f:f7:ed: d0:d4:65:16:e8:72:73:a1:39:f1:a6:0e:cd:91:a1: d1:dc:1b:ef:17:db:9a:5c:29:31:11:ac:d7:44:89: 66:63:ef:39:41:f0:3f:ec:c4:55:a8:48:7a:68:73: 3b:fd:2a:dc:27:de:39:c3:a5:6d:75:f4:f5:96:d3: da:7e:30:bc:ca:81:cf:8b:15:23:cc:a2:72:59:b6: 01:d9:be:2c:47:c6:3c:bc:c7:aa:19:99:5d:4a:7b: 6c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:3C:98:1A:02:78:89:CD:81:D5:FE:7A:7C:6C:22:1E:FF:A5:87:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40899042-bbea-3e77-a037-fdd51a07c00a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:f0:9b:2a:74:e3:e7:31:26:db:69:13:42:fa:ad:95:0a:97: 65:7b:b7:73:8e:8a:2b:0a:5e:84:05:5e:25:d6:2f:3c:6b:af: 16:c4:c1:a4:09:ec:82:0b:6d:ed:6f:45:3c:a5:fe:7e:ad:32: 31:95:ff:c3:8d:b7:e4:e9:44:32:b6:6c:b4:6a:51:bb:61:4f: b7:8f:e1:a1:4e:2e:ad:bf:44:8d:ae:16:ff:33:dd:a8:07:7b: ea:2d:5b:a4:a9:35:d4:61:69:4b:a2:76:21:c7:ee:0f:e7:c0: 43:de:be:a9:7e:bc:92:cb:b3:a1:08:11:6d:18:ab:69:38:08: 68:7f:90:90:b0:85:89:49:63:0f:8c:e3:8f:87:a6:46:ef:a4: be:21:8f:ae:49:57:c3:7b:52:d5:1e:fd:47:f6:e8:4b:12:99: f0:17:8c:2d:cb:df:e9:3a:cb:be:dc:75:da:66:7e:8f:23:7c: 83:5a:83:82:14:92:a6:8a:7b:31:47:54:38:eb:04:10:5b:82: 38:f2:7b:cc:c4:e6:7f:f0:05:fa:1c:d7:a4:d2:38:9d:0c:3f: 73:ef:b2:bf:8a:cd:86:a5:55:00:38:90:17:f6:1b:39:3f:38: 45:40:f3:74:24:56:fc:dd:27:a2:1b:a4:c8:3c:82:36:10:d9: d6:bd:cc:f9 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8KoirSv3stuPqdxGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwMjEzMDAxMloXDTI2MTIwMTE0MDAxMlowLzEtMCsGA1UEAxMk ZGE2YWNkZWEtZWM2MC00YmI0LWI5YTItOWJiOWFiN2M3MDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5i2mRQa/mVA7SK+/OVvz7ZcYvzK5GjhkpR+ XDZBgSK47nNofN+tMmlOIYpdJ4mx9IQI+fmWJkWet0fJGyifIuwe/qJ3/wIta30L jN7BHmO0R757xihJZfei+RvlqcQ5Rs2c1mEJ1M523n1nQGIwXdRDNTIXuCy+NiYs Tced9yNSS9xr5qv26TNd93jP8iKDLPIIYFDaNWl+qBeSTKPmebUf9+3Q1GUW6HJz oTnxpg7NkaHR3BvvF9uaXCkxEazXRIlmY+85QfA/7MRVqEh6aHM7/SrcJ945w6Vt dfT1ltPafjC8yoHPixUjzKJyWbYB2b4sR8Y8vMeqGZldSntsewIDAQABo4IDYjCC A14wHQYDVR0OBBYEFB88mBoCeInNgdX+enxsIh7/pYeuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDA4OTkwNDItYmJlYS0z ZTc3LWEwMzctZmRkNTFhMDdjMDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAgjM AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB/8JsqdOPnMSbbaRNC+q2VCpdle7dzjoorCl6E BV4l1i88a68WxMGkCeyCC23tb0U8pf5+rTIxlf/Djbfk6UQytmy0alG7YU+3j+Gh Ti6tv0SNrhb/M92oB3vqLVukqTXUYWlLonYhx+4P58BD3r6pfrySy7OhCBFtGKtp OAhof5CQsIWJSWMPjOOPh6ZG76S+IY+uSVfDe1LVHv1H9uhLEpnwF4wty9/pOsu+ 3HXaZn6PI3yDWoOCFJKminsxR1Q46wQQW4I48nvMxOZ/8AX6HNek0jidDD9z77K/ is2GpVUAOJAX9hs5PzhFQPN0JFb83SeiG6TIPII2ENnWvcz5 -----END CERTIFICATE-----Generated at Tue Sep 22 18:18:27 2026 by rpki-client