$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/645b07f9-416b-3a45-abac-a1788c7a9e98.roa File: 645b07f9-416b-3a45-abac-a1788c7a9e98.roa (raw, json) Hash identifier: nhYgZlKRFJrU59jWgVOmhMj+rST7fsq6FfZn6QmaJMc= Subject key identifier: 4D:01:5A:49:0E:07:F5:FF:51:B6:72:91:6B:29:B0:A0:80:93:4F:C7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F2D87C0216DA1F80464A3D480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/645b07f9-416b-3a45-abac-a1788c7a9e98.roa Signing time: Tue 15 Sep 2026 01:00:12 +0000 ROA not before: Tue 15 Sep 2026 01:00:12 +0000 ROA not after: Mon 14 Dec 2026 02:00:12 +0000 asID: 36617 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2d:87:c0:21:6d:a1:f8:04:64:a3:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 15 01:00:12 2026 GMT Not After : Dec 14 02:00:12 2026 GMT Subject: CN=a7f2d097-69f9-425d-a16b-2212eeca3e7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8d:e6:63:37:a7:03:89:92:23:23:73:70:73: d5:f0:bd:b1:56:d0:f2:6b:c2:40:a5:ba:ae:34:1e: b1:e1:7d:95:6e:2c:31:62:80:ba:5c:3e:1c:68:a4: 62:98:1f:e8:39:a2:43:ef:3f:97:d7:62:99:41:6c: ab:f5:72:54:46:f1:b2:0e:03:3f:a4:56:74:f3:b6: 8d:9c:e5:fa:b0:32:51:23:88:db:c9:dc:d8:9c:ca: 14:6c:8a:fc:69:5a:93:80:60:57:50:b4:2e:34:21: 4c:e3:a9:2f:87:8b:20:8c:dd:d1:9b:79:6c:75:c2: fc:50:95:6b:ad:38:ad:b6:ca:40:90:34:aa:7d:bd: 28:53:99:82:1b:18:c7:d4:16:14:69:11:82:bb:98: 15:4d:0d:6b:86:eb:d5:c1:96:53:6c:c7:b5:d7:bb: 24:87:da:0e:b0:50:e8:8e:c8:3c:9d:5b:8a:a7:a1: 56:e9:e7:f2:a2:67:65:4a:0a:16:ff:18:3a:33:82: 1d:99:57:12:d4:d5:f9:81:bb:50:21:ab:ef:ea:0c: f2:c7:98:88:ad:3e:9d:c6:c4:ab:e6:4c:de:42:e5: b8:28:df:ce:80:88:27:8e:86:65:8b:f1:a3:ff:14: e8:7b:15:a9:cd:75:fe:28:1b:00:c0:35:df:1d:94: 73:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:01:5A:49:0E:07:F5:FF:51:B6:72:91:6B:29:B0:A0:80:93:4F:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/645b07f9-416b-3a45-abac-a1788c7a9e98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:c6:d9:7a:49:03:10:b2:56:cf:dd:5b:ba:2f:9e:35:b6:b9: ed:fb:ef:87:82:e1:8c:8e:b6:b5:73:fa:29:f3:9a:78:bb:37: cf:89:40:7b:31:0f:c1:71:97:70:55:c1:e7:f2:17:0f:27:fc: 2e:f4:17:9a:04:15:82:a1:cc:2a:f6:e1:7e:8b:e6:75:7f:c9: 09:87:50:75:e5:ac:7f:fc:c7:4e:b4:fe:5f:b4:06:ba:05:f0: 6c:1c:99:17:29:0f:e9:8e:7f:62:23:61:e5:57:91:9a:4a:16: fc:e7:00:25:10:b5:d6:e6:c6:14:de:85:bc:76:79:af:91:c0: 64:0d:12:aa:36:8f:4e:fe:7a:36:71:a3:70:b8:39:85:b5:f8: e5:23:10:99:6a:40:40:6a:0d:e7:b7:df:79:18:e9:1e:50:40: 72:27:6b:16:f2:54:72:7e:7b:1a:7a:e5:80:14:13:86:6e:f4: 49:b3:d3:f0:d5:7e:84:a3:af:58:74:06:b7:7a:5c:fa:dc:b3: 4c:cd:bd:7a:d6:aa:a9:c1:e1:9f:43:75:39:ed:5c:ae:89:20: e3:7d:ef:a5:9c:f9:a9:69:6d:34:79:57:a3:d1:d3:51:5a:3d: 63:ca:5d:90:39:eb:d0:17:38:67:2e:2d:49:c2:73:d4:fd:2c: bd:f9:58:67 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8th8AhbaH4BGSj1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkxNTAxMDAxMloXDTI2MTIxNDAyMDAxMlowLzEtMCsGA1UEAxMk YTdmMmQwOTctNjlmOS00MjVkLWExNmItMjIxMmVlY2EzZTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI3mYzenA4mSIyNzcHPV8L2xVtDya8JApbqu NB6x4X2VbiwxYoC6XD4caKRimB/oOaJD7z+X12KZQWyr9XJURvGyDgM/pFZ087aN nOX6sDJRI4jbydzYnMoUbIr8aVqTgGBXULQuNCFM46kvh4sgjN3Rm3lsdcL8UJVr rTittspAkDSqfb0oU5mCGxjH1BYUaRGCu5gVTQ1rhuvVwZZTbMe117skh9oOsFDo jsg8nVuKp6FW6efyomdlSgoW/xg6M4IdmVcS1NX5gbtQIavv6gzyx5iIrT6dxsSr 5kzeQuW4KN/OgIgnjoZli/Gj/xToexWpzXX+KBsAwDXfHZRzQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE0BWkkOB/X/UbZykWspsKCAk0/HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjQ1YjA3ZjktNDE2Yi0z YTQ1LWFiYWMtYTE3ODhjN2E5ZTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEHG2XpJAxCyVs/dW7ovnjW2ue3774eC4YyOtrVz+inzmni7N8+J QHsxD8Fxl3BVwefyFw8n/C70F5oEFYKhzCr24X6L5nV/yQmHUHXlrH/8x060/l+0 BroF8GwcmRcpD+mOf2IjYeVXkZpKFvznACUQtdbmxhTehbx2ea+RwGQNEqo2j07+ ejZxo3C4OYW1+OUjEJlqQEBqDee333kY6R5QQHInaxbyVHJ+exp65YAUE4Zu9Emz 0/DVfoSjr1h0Brd6XPrcs0zNvXrWqqnB4Z9DdTntXK6JION976Wc+alpbTR5V6PR 01FaPWPKXZA569AXOGcuLUnCc9T9LL35WGc= -----END CERTIFICATE-----Generated at Tue Sep 22 10:16:43 2026 by rpki-client