$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/66ba0324-ad8c-3e5e-91fd-2dbdb83c9172.roa File: 66ba0324-ad8c-3e5e-91fd-2dbdb83c9172.roa (raw, json) Hash identifier: Eu+LHLK5gq7SM7hEB4cBsd4ut38gJbH+9HAuwbUC0cs= Subject key identifier: 67:B3:8C:DB:4B:35:66:8A:46:1F:35:E0:46:19:E6:B8:93:95:43:C9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4974E528E82E9594319FCD00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/66ba0324-ad8c-3e5e-91fd-2dbdb83c9172.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396585 IP address blocks: 2001:500:856e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:e5:28:e8:2e:95:94:31:9f:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=48a5abaa-f38f-4a70-b7c4-5d8ae8377152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:57:05:98:73:e7:43:99:ac:b1:19:ab:6b:57: 15:0f:bd:e3:6f:5a:15:90:19:97:db:19:6e:79:8b: 3f:cd:19:73:c0:7d:19:46:f5:78:ab:85:18:21:19: e9:af:39:7b:00:72:e2:0d:43:19:a8:b5:38:02:ee: 1b:4e:a8:ac:65:d3:a0:94:0b:89:88:ab:4f:62:e1: 30:0c:f5:af:1c:87:b7:aa:73:34:61:6d:fd:b1:6d: d8:1f:9d:04:df:85:8d:18:ea:40:75:ee:b9:85:6f: 95:47:60:6b:b8:3c:4f:19:94:14:ee:d8:35:91:bd: 8d:a2:0e:80:10:63:fd:28:c0:9a:ee:ed:67:d8:53: a1:31:5d:db:1c:9c:7b:af:fd:b0:37:cb:c2:61:c7: 1d:01:05:88:56:1b:9d:3e:49:4a:d6:fc:19:02:38: b1:71:4b:5b:df:eb:80:35:5c:03:88:29:cc:9b:c2: 15:f6:be:1d:7d:bf:94:60:2a:67:02:3f:ed:1f:91: 89:39:b0:66:8b:c4:9d:a2:0a:e7:fd:0b:cd:bb:56: b0:86:15:82:69:b5:5f:6f:57:5b:df:7c:d1:35:f8: 24:f6:56:cb:ae:5d:c6:10:f2:33:c0:c6:f7:26:29: 37:30:80:a8:93:c5:37:f5:c5:ac:3f:a4:8f:50:d8: be:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B3:8C:DB:4B:35:66:8A:46:1F:35:E0:46:19:E6:B8:93:95:43:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/66ba0324-ad8c-3e5e-91fd-2dbdb83c9172.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:856e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:a2:95:3d:13:c2:ae:6b:a1:f9:e2:34:27:46:76:83:4e:85: e8:38:08:b7:44:dd:61:63:aa:5c:ae:46:d9:ba:52:20:3c:e8: d1:c3:22:df:34:31:0c:1e:bf:08:cd:dc:53:d3:cf:94:62:6c: 3d:7e:ea:28:28:d2:c5:a7:6f:f8:a8:10:cc:d6:e3:27:be:92: 76:2c:73:43:61:56:04:5c:1f:00:48:89:88:35:e6:eb:50:0b: 49:ab:bd:83:74:92:ae:28:9d:70:72:f1:cf:7e:31:bc:2a:52: 0c:39:6b:57:51:9f:82:90:43:c7:21:5c:b3:a9:2c:96:8b:44: 18:d3:17:77:a0:68:38:5e:a1:13:a5:24:cc:6a:68:0b:97:fc: 9e:b7:96:57:79:55:29:49:a9:2c:fa:e2:1a:97:c5:9e:e1:87: 2e:c0:db:aa:85:49:ab:22:e5:22:c7:ac:3f:84:0c:ba:38:66: a5:e9:57:82:a7:fe:6d:26:e0:67:4b:e3:d2:9c:80:8e:8a:b8: 75:d2:e0:6b:ed:47:58:70:56:c6:f7:49:0d:6f:60:45:e3:00: 28:2e:e1:73:3a:c8:3b:aa:2e:e7:24:9c:80:91:1f:2d:19:09: be:22:84:31:1e:bd:60:85:ac:33:21:4d:96:a1:a0:48:3d:43: 53:bd:a2:d0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdOUo6C6VlDGfzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDhhNWFiYWEtZjM4Zi00YTcwLWI3YzQtNWQ4YWU4Mzc3MTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVcFmHPnQ5mssRmra1cVD73jb1oVkBmX2xlu eYs/zRlzwH0ZRvV4q4UYIRnprzl7AHLiDUMZqLU4Au4bTqisZdOglAuJiKtPYuEw DPWvHIe3qnM0YW39sW3YH50E34WNGOpAde65hW+VR2BruDxPGZQU7tg1kb2Nog6A EGP9KMCa7u1n2FOhMV3bHJx7r/2wN8vCYccdAQWIVhudPklK1vwZAjixcUtb3+uA NVwDiCnMm8IV9r4dfb+UYCpnAj/tH5GJObBmi8Sdogrn/QvNu1awhhWCabVfb1db 33zRNfgk9lbLrl3GEPIzwMb3Jik3MICok8U39cWsP6SPUNi+yQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGezjNtLNWaKRh814EYZ5riTlUPJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjZiYTAzMjQtYWQ4Yy0z ZTVlLTkxZmQtMmRiZGI4M2M5MTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAIVu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF2ilT0Twq5rofniNCdGdoNOheg4CLdE3WFjqlyuRtm6UiA86NHD It80MQwevwjN3FPTz5RibD1+6igo0sWnb/ioEMzW4ye+knYsc0NhVgRcHwBIiYg1 5utQC0mrvYN0kq4onXBy8c9+MbwqUgw5a1dRn4KQQ8chXLOpLJaLRBjTF3egaDhe oROlJMxqaAuX/J63lld5VSlJqSz64hqXxZ7hhy7A26qFSasi5SLHrD+EDLo4ZqXp V4Kn/m0m4GdL49KcgI6KuHXS4GvtR1hwVsb3SQ1vYEXjACgu4XM6yDuqLucknICR Hy0ZCb4ihDEevWCFrDMhTZahoEg9Q1O9otA= -----END CERTIFICATE-----Generated at Sat Sep 26 23:17:08 2026 by rpki-client