$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87908d22-c3bc-35a7-a77c-4c318e326048.roa File: 87908d22-c3bc-35a7-a77c-4c318e326048.roa (raw, json) Hash identifier: zFYXPyKUjQcspZzb+F0gVybFGioQa5bM+z6KT607tCw= Subject key identifier: 41:5A:F4:18:FC:FF:84:6E:B0:3C:38:5D:D3:9D:30:30:6C:E2:5A:19 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F498B0CCC06F5FC15160C2980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87908d22-c3bc-35a7-a77c-4c318e326048.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36624 IP address blocks: 2001:500:856e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:0c:cc:06:f5:fc:15:16:0c:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=738ed165-b43c-4603-a9df-d48c1c1962aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d0:c1:06:67:e3:a6:b2:c5:b2:61:4e:ea:3a: 6a:0b:cc:50:a5:29:9e:f2:06:ed:d3:1c:df:b5:66: 4c:cd:fa:f4:76:89:c0:da:3b:c0:8a:f8:4f:15:d2: 99:6b:83:c1:e2:a5:2c:c5:25:ec:85:6b:dd:93:ae: 51:e1:aa:66:8c:4e:d8:94:97:b5:a7:d8:95:56:c5: 93:33:37:1e:c9:07:04:2f:b3:2a:70:d5:f3:67:75: 42:69:fe:22:a5:59:81:c8:f0:48:90:ab:f5:d9:45: 28:d0:46:b8:54:b7:68:9c:88:a0:73:27:84:f3:f1: 05:ec:46:42:51:13:d8:17:b6:32:58:81:60:b0:a9: af:4a:bd:38:b7:82:ad:99:d4:e3:bd:51:81:01:f6: 89:70:8d:99:6a:58:a3:5b:7e:c7:73:25:71:31:0b: 18:14:2f:8f:65:4b:8b:db:e8:88:f9:d3:94:90:c8: a2:8c:25:df:04:41:39:12:63:77:50:1c:24:de:eb: 20:51:e6:4f:7e:2b:f2:bd:ff:60:00:c2:f8:ef:70: d1:4a:11:61:4f:cf:0c:d7:3d:ea:2f:e1:96:c3:bd: 11:6b:ee:c5:db:59:94:33:f7:39:31:e8:61:db:d5: f8:fd:2e:2b:7d:5b:f3:de:ad:ed:31:d2:9d:ee:dc: 6b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:5A:F4:18:FC:FF:84:6E:B0:3C:38:5D:D3:9D:30:30:6C:E2:5A:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87908d22-c3bc-35a7-a77c-4c318e326048.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:856e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:62:fd:96:a9:3b:f2:7e:dd:78:49:ac:c2:c8:bc:34:45:b4: 72:32:4b:25:b4:07:b4:fb:a0:b5:5d:66:fa:b9:25:fc:5c:74: 71:78:7e:53:b0:ff:89:f1:b8:b7:6e:22:39:05:0f:de:aa:33: d2:77:e0:f8:64:9c:5c:e2:5d:ed:51:d5:3e:25:a0:68:8a:91: 3d:da:6e:f7:b2:48:d0:fd:0f:16:16:b8:d6:91:80:00:cf:bb: c1:86:4c:37:7d:2f:5c:47:dc:7c:ea:fc:eb:89:e6:13:77:86: 37:11:74:9b:ed:bc:fa:7a:49:d2:e7:09:19:13:c1:0d:35:55: 6c:88:db:ca:b4:99:67:13:44:06:e6:82:4a:13:4f:80:fd:26: c5:8a:6a:14:56:cc:8a:12:d7:1e:e3:1d:82:14:0c:03:aa:02: 25:d7:2a:39:c0:ae:91:43:2b:2f:4f:ae:4f:19:18:ee:1f:0b: 92:95:55:46:dc:f6:48:62:35:88:12:7c:3f:78:4c:7a:d1:0f: 8d:e1:71:5d:46:39:45:6e:d7:a0:fa:da:da:98:8e:68:60:61: d6:a4:ce:03:1e:d7:5b:06:78:81:78:72:d8:4d:e5:43:8c:bc: 43:95:2a:73:d1:30:b7:8b:a9:d9:c9:e7:4d:fb:15:0c:39:ca: 8f:8c:d4:4d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JiwzMBvX8FRYMKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzM4ZWQxNjUtYjQzYy00NjAzLWE5ZGYtZDQ4YzFjMTk2MmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59DBBmfjprLFsmFO6jpqC8xQpSme8gbt0xzf tWZMzfr0donA2jvAivhPFdKZa4PB4qUsxSXshWvdk65R4apmjE7YlJe1p9iVVsWT MzceyQcEL7MqcNXzZ3VCaf4ipVmByPBIkKv12UUo0Ea4VLdonIigcyeE8/EF7EZC URPYF7YyWIFgsKmvSr04t4KtmdTjvVGBAfaJcI2ZalijW37HcyVxMQsYFC+PZUuL 2+iI+dOUkMiijCXfBEE5EmN3UBwk3usgUeZPfivyvf9gAML473DRShFhT88M1z3q L+GWw70Ra+7F21mUM/c5Mehh29X4/S4rfVvz3q3tMdKd7txrwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEFa9Bj8/4RusDw4XdOdMDBs4loZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODc5MDhkMjItYzNiYy0z NWE3LWE3N2MtNGMzMThlMzI2MDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAIVu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAABi/ZapO/J+3XhJrMLIvDRFtHIySyW0B7T7oLVdZvq5JfxcdHF4 flOw/4nxuLduIjkFD96qM9J34PhknFziXe1R1T4loGiKkT3abveySND9DxYWuNaR gADPu8GGTDd9L1xH3Hzq/OuJ5hN3hjcRdJvtvPp6SdLnCRkTwQ01VWyI28q0mWcT RAbmgkoTT4D9JsWKahRWzIoS1x7jHYIUDAOqAiXXKjnArpFDKy9Prk8ZGO4fC5KV VUbc9khiNYgSfD94THrRD43hcV1GOUVu16D62tqYjmhgYdakzgMe11sGeIF4cthN 5UOMvEOVKnPRMLeLqdnJ5037FQw5yo+M1E0= -----END CERTIFICATE-----Generated at Mon Sep 28 04:34:17 2026 by rpki-client