$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ea0a3b0-08df-3b7e-9a16-18fce7e4985d.roa File: 6ea0a3b0-08df-3b7e-9a16-18fce7e4985d.roa (raw, json) Hash identifier: gZbuUzvVzIYSw4L6JI/uS6a91OBvX12FJQJVljsmT6Q= Subject key identifier: BB:FD:9C:47:43:B3:6E:26:7B:33:9F:6C:CC:BB:F7:FF:CE:6B:B0:11 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F119CFCB237C1E2699C31B480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ea0a3b0-08df-3b7e-9a16-18fce7e4985d.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 396590 IP address blocks: 2001:502:8cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:fc:b2:37:c1:e2:69:9c:31:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=dfa490ab-79d6-48d2-a562-dfd74b2ff881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d5:13:9c:e6:be:c0:16:38:b6:c1:f2:ed:12: ff:99:82:73:22:a1:9d:08:23:74:cc:39:26:2c:5f: 05:34:78:a9:37:cb:34:00:d1:2b:da:03:f4:8b:05: 6a:40:1f:c1:15:a9:21:1f:7a:17:f1:10:6a:41:88: 89:a5:3d:ae:6d:f7:11:14:f9:e2:e6:d1:8b:53:dc: 37:91:94:5b:db:c9:87:72:d2:34:4c:4d:bf:61:11: 44:85:7c:59:65:ad:3b:50:e4:d2:ec:8a:b3:e9:74: 3c:9c:70:c9:30:39:d4:03:9f:aa:b9:5f:25:31:9e: 33:17:6f:d3:43:45:e4:7f:05:db:fc:9d:69:64:5c: 3a:2e:af:38:b5:65:d0:9d:c9:80:e2:5c:53:99:f0: 46:1f:e3:b6:86:fe:03:84:b6:22:f1:17:a6:d9:58: 1d:a5:8a:cb:5c:8d:2a:25:34:21:09:0f:db:91:33: ae:b1:b5:59:89:49:f3:42:00:56:77:ec:70:b2:da: 22:b3:7e:0f:9a:dc:2e:6e:2d:24:3c:f7:1b:d0:2a: c7:31:b1:1b:4f:75:ef:7c:3b:7a:21:f5:08:53:b7: 0d:e0:81:64:49:18:e4:d8:b0:0d:ac:27:58:9d:74: cd:6d:d5:5f:85:c4:20:18:5d:bf:2b:96:6d:fe:49: 34:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:FD:9C:47:43:B3:6E:26:7B:33:9F:6C:CC:BB:F7:FF:CE:6B:B0:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ea0a3b0-08df-3b7e-9a16-18fce7e4985d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:7a:52:1a:56:68:ea:06:0c:67:0b:5c:38:9b:ca:01:ad:1b: 72:4e:7c:bd:29:0f:53:91:59:34:58:20:33:6d:8f:b1:1f:da: 85:2a:92:28:a4:b8:c5:5b:ac:1d:01:16:ed:6a:6e:52:e6:9d: cf:89:ae:19:23:66:50:0d:0c:69:4f:d9:e5:9d:18:c3:40:15: 6a:af:14:e1:3c:60:b4:d0:84:d8:61:b6:c6:6d:85:40:2c:f9: f2:3b:18:7f:9c:71:85:a2:35:4d:bd:ca:55:9a:ab:72:29:df: eb:18:43:ca:01:48:f2:dd:ad:1c:94:6a:a2:ef:e1:4e:2b:a5: bc:ca:29:8e:6f:10:69:90:97:2d:db:52:83:ab:d5:5e:78:cf: 12:6b:41:f5:9e:4b:87:c0:d7:d3:ec:ea:62:48:12:31:74:72: 1a:f6:4a:2e:d4:96:b8:a6:09:d8:3d:fb:03:bf:d0:b0:1e:a7: 12:bf:d2:10:8c:0d:08:03:ad:5f:5a:24:ab:05:cd:fb:3a:9c: 06:84:32:0e:8e:59:86:f8:d3:dc:48:3a:77:9e:8e:f5:6b:57: c1:6d:b5:8c:4a:c8:40:ec:2a:d7:c7:d0:f6:2b:b4:ae:d7:ea: db:10:6d:d6:54:87:90:69:b5:87:53:b5:25:1e:e3:94:90:25: 52:cf:fc:68 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8RnPyyN8HiaZwxtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGZhNDkwYWItNzlkNi00OGQyLWE1NjItZGZkNzRiMmZmODgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNUTnOa+wBY4tsHy7RL/mYJzIqGdCCN0zDkm LF8FNHipN8s0ANEr2gP0iwVqQB/BFakhH3oX8RBqQYiJpT2ubfcRFPni5tGLU9w3 kZRb28mHctI0TE2/YRFEhXxZZa07UOTS7Iqz6XQ8nHDJMDnUA5+quV8lMZ4zF2/T Q0XkfwXb/J1pZFw6Lq84tWXQncmA4lxTmfBGH+O2hv4DhLYi8Rem2VgdpYrLXI0q JTQhCQ/bkTOusbVZiUnzQgBWd+xwstois34Pmtwubi0kPPcb0CrHMbEbT3XvfDt6 IfUIU7cN4IFkSRjk2LANrCdYnXTNbdVfhcQgGF2/K5Zt/kk0xwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLv9nEdDs24mezOfbMy79//Oa7ARMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmVhMGEzYjAtMDhkZi0z YjdlLTlhMTYtMThmY2U3ZTQ5ODVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAgjM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEJ6UhpWaOoGDGcLXDibygGtG3JOfL0pD1ORWTRYIDNtj7Ef2oUq kiikuMVbrB0BFu1qblLmnc+JrhkjZlANDGlP2eWdGMNAFWqvFOE8YLTQhNhhtsZt hUAs+fI7GH+ccYWiNU29ylWaq3Ip3+sYQ8oBSPLdrRyUaqLv4U4rpbzKKY5vEGmQ ly3bUoOr1V54zxJrQfWeS4fA19Ps6mJIEjF0chr2Si7UlrimCdg9+wO/0LAepxK/ 0hCMDQgDrV9aJKsFzfs6nAaEMg6OWYb409xIOneejvVrV8FttYxKyEDsKtfH0PYr tK7X6tsQbdZUh5BptYdTtSUe45SQJVLP/Gg= -----END CERTIFICATE-----Generated at Tue Sep 22 11:09:19 2026 by rpki-client