$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4736f6dc-2cde-3dd4-a768-85d60ea625c2.roa File: 4736f6dc-2cde-3dd4-a768-85d60ea625c2.roa (raw, json) Hash identifier: LfeNFoCI/3jXISUCkUnNQR4mAL7o1nyfuhtDB+7JpFo= Subject key identifier: 35:DC:B4:41:29:D4:67:C0:1A:8B:AC:1D:FE:F6:44:2B:A1:82:92:27 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F23C2800B84BB286CE7303700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4736f6dc-2cde-3dd4-a768-85d60ea625c2.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 32651 IP address blocks: 2001:501:8a29::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:80:0b:84:bb:28:6c:e7:30:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=9dc3b8f5-a7d2-431f-b740-9bb0e77a9663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:24:2c:80:62:5d:aa:11:95:75:ca:1a:cd:51: 09:b1:1c:5e:65:d4:71:3d:5c:de:d3:4d:01:7b:32: ca:0e:20:4e:a5:bb:7d:c1:50:1e:07:5f:8c:09:6c: ce:77:3d:d1:15:de:2e:c3:4c:58:e1:1b:b8:1c:a2: 70:a1:fc:8d:c9:41:eb:b0:c4:67:42:7c:d0:3a:79: ce:b9:21:fb:61:8e:bd:9d:23:e2:ad:17:90:16:1f: 2a:ba:94:d8:3a:e3:c5:a5:ae:15:aa:6e:33:66:c3: b2:eb:69:75:93:a6:c6:c4:61:e0:20:97:ad:52:09: f6:ee:14:3e:e3:a1:fa:a9:b4:b1:d5:11:3c:5e:45: c9:4b:4d:b0:e7:09:91:be:05:ad:94:5b:dc:0e:6a: 25:15:3d:6b:07:14:b3:61:6d:77:a3:f6:6c:3a:b2: 31:bc:6d:6d:4d:5f:c4:b7:0a:8b:5d:9b:db:87:06: 68:de:67:7a:c8:f4:28:9a:14:6e:be:1a:60:c0:10: c5:16:f2:67:53:0e:b9:e7:a6:43:07:79:75:f8:36: 22:86:03:a1:20:01:a3:ca:6e:7f:46:9d:f0:02:85: 4d:5a:bd:2a:c2:6c:75:56:3a:fb:89:8d:94:cf:de: bb:5a:2b:59:67:22:4c:e8:a1:14:92:4c:2f:68:63: 4e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:DC:B4:41:29:D4:67:C0:1A:8B:AC:1D:FE:F6:44:2B:A1:82:92:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4736f6dc-2cde-3dd4-a768-85d60ea625c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:09:1e:93:23:0d:f7:de:2c:b6:10:22:2d:3f:6a:c8:59:ba: 90:6f:35:d6:01:19:4e:67:c8:00:95:f1:38:57:df:1e:48:8f: a4:e0:87:f1:48:74:5a:af:a4:9f:32:06:1c:9d:73:75:47:d2: e6:8f:ef:0e:17:32:9b:9e:1c:f3:b5:a4:e1:83:80:fc:6e:f8: 76:c1:5b:62:c7:41:59:a5:d9:94:cb:cd:9b:28:6a:fc:3f:12: e9:e3:3d:2b:95:bf:d2:69:1a:94:4d:19:ea:2e:12:97:39:c1: 70:bf:f4:e9:1b:52:5d:bd:a4:5a:3f:a7:d1:75:f9:bd:9e:23: dc:7e:70:51:d0:73:80:8a:34:03:19:31:ee:c6:02:ab:1c:b8: aa:31:6d:9f:d7:a5:46:07:dc:c1:dc:79:55:cd:0f:f5:c4:97: 4b:d1:1b:43:e6:b2:32:2e:09:90:44:99:7e:2e:da:49:0d:9f: 9a:fd:d0:39:69:8e:17:b2:cb:c3:00:32:06:8d:d6:8d:be:58: b9:1f:03:c1:2d:52:a9:5d:a3:30:88:30:25:d4:43:26:66:d6: 41:af:03:c8:a1:b2:f5:29:fa:77:15:9c:e2:27:0f:04:76:20: bf:da:74:fc:57:68:38:35:c2:09:46:2f:71:d7:38:97:cb:68: b6:b5:c4:ea -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8jwoALhLsobOcwNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk OWRjM2I4ZjUtYTdkMi00MzFmLWI3NDAtOWJiMGU3N2E5NjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiQsgGJdqhGVdcoazVEJsRxeZdRxPVze000B ezLKDiBOpbt9wVAeB1+MCWzOdz3RFd4uw0xY4Ru4HKJwofyNyUHrsMRnQnzQOnnO uSH7YY69nSPirReQFh8qupTYOuPFpa4Vqm4zZsOy62l1k6bGxGHgIJetUgn27hQ+ 46H6qbSx1RE8XkXJS02w5wmRvgWtlFvcDmolFT1rBxSzYW13o/ZsOrIxvG1tTV/E twqLXZvbhwZo3md6yPQomhRuvhpgwBDFFvJnUw6556ZDB3l1+DYihgOhIAGjym5/ Rp3wAoVNWr0qwmx1Vjr7iY2Uz967WitZZyJM6KEUkkwvaGNO4QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDXctEEp1GfAGousHf72RCuhgpInMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDczNmY2ZGMtMmNkZS0z ZGQ0LWE3NjgtODVkNjBlYTYyNWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBmCR6TIw333iy2ECItP2rIWbqQbzXWARlOZ8gA lfE4V98eSI+k4IfxSHRar6SfMgYcnXN1R9Lmj+8OFzKbnhzztaThg4D8bvh2wVti x0FZpdmUy82bKGr8PxLp4z0rlb/SaRqUTRnqLhKXOcFwv/TpG1JdvaRaP6fRdfm9 niPcfnBR0HOAijQDGTHuxgKrHLiqMW2f16VGB9zB3HlVzQ/1xJdL0RtD5rIyLgmQ RJl+LtpJDZ+a/dA5aY4XssvDADIGjdaNvli5HwPBLVKpXaMwiDAl1EMmZtZBrwPI obL1Kfp3FZziJw8EdiC/2nT8V2g4NcIJRi9x1ziXy2i2tcTq -----END CERTIFICATE-----Generated at Tue Sep 22 18:17:38 2026 by rpki-client