$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89881625-13e0-3eb0-b653-8b90c6af8121.roa File: 89881625-13e0-3eb0-b653-8b90c6af8121.roa (raw, json) Hash identifier: QrWFBAvMkQ3PSoCg+M5BERxoL2jEW2hK5e6qcFKAOF8= Subject key identifier: BE:12:0F:04:3F:8F:99:9B:4F:D6:D0:2F:1B:4C:41:5B:7E:31:B9:25 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F498A6626D4F26DFA1D9BC738 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89881625-13e0-3eb0-b653-8b90c6af8121.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396550 IP address blocks: 2001:500:856e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:66:26:d4:f2:6d:fa:1d:9b:c7:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bf4dfcad-655d-4aa5-93a7-04493bb5cf54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:61:ec:3d:06:22:68:60:f4:8f:75:40:c4:61: 57:ed:68:29:c5:40:4a:ef:d9:91:85:bb:73:72:27: 7f:7a:ae:93:75:3b:4c:a5:b0:3d:2b:97:91:7b:dd: 95:f3:f7:6f:7e:1d:98:4f:61:d8:7c:92:c2:f1:4b: 58:dd:b6:7c:14:5a:c6:36:54:67:47:b0:f8:9e:a1: b3:79:7c:b3:4f:81:ae:3b:09:87:13:57:53:1f:53: 16:be:5a:a8:95:51:3d:25:20:1a:b5:35:14:db:62: 81:99:7e:7d:b5:11:d1:f5:a3:fc:4d:49:bd:28:08: 7f:09:02:cf:0b:2d:5a:06:c0:31:91:c9:2a:02:8b: e2:06:5c:7b:25:20:2a:7b:48:9f:ae:20:33:ea:a7: 59:f0:30:db:78:02:44:74:b7:79:85:aa:35:10:63: 88:48:81:da:e3:40:8e:8d:fe:9e:70:42:e9:98:2f: 1a:59:09:af:47:6f:b1:9e:e8:09:6e:04:ba:c3:7b: a3:ab:34:fe:ce:bd:41:17:bb:52:9d:6c:67:25:4f: 9c:77:b3:f9:03:44:f0:9b:87:24:54:b0:be:2c:55: 78:81:db:28:ba:94:fd:b7:69:ca:63:c8:15:50:22: 3d:cc:a6:29:b1:4a:fe:ff:75:f6:d9:04:e6:89:09: e9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:12:0F:04:3F:8F:99:9B:4F:D6:D0:2F:1B:4C:41:5B:7E:31:B9:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89881625-13e0-3eb0-b653-8b90c6af8121.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:856e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:69:d5:43:03:2d:c7:a8:96:4f:46:c0:aa:ca:29:b2:60:10: 04:27:ec:be:93:9f:bd:be:b2:30:20:8c:62:c6:93:62:dc:d1: 57:e7:c0:d1:96:e2:13:72:3c:cd:30:64:54:30:fb:12:ec:8e: 06:1d:7b:37:cd:07:e1:99:b4:f9:c2:ac:f2:c8:d6:13:a4:a8: 5e:fa:ee:89:89:d7:cb:c2:30:a9:9f:76:5b:7f:5f:0c:c5:53: 91:1d:28:d4:bb:07:9b:df:02:87:63:fe:fc:0e:8d:9c:35:39: 62:fa:84:43:bf:1a:15:ff:24:77:48:18:c6:8c:a7:d2:07:5b: aa:7b:9c:c9:f8:d1:b3:c3:54:7c:ac:de:08:a7:c0:9a:ca:41: cf:ca:d4:46:17:8d:18:80:10:62:72:29:35:93:05:83:73:e3: e4:a4:4e:5a:54:db:ac:b7:e1:7b:fb:83:92:b4:87:67:88:ac: 76:c0:84:dd:42:8b:ed:d5:87:19:b4:11:03:33:9c:89:aa:44: 7d:35:2c:32:3d:cd:dc:25:bf:ca:f2:c9:d5:49:25:85:fa:43: 76:be:c7:0a:d6:52:9d:1c:9f:bf:3f:67:b5:fc:5c:67:b4:52: 46:a5:45:f7:aa:8f:2a:20:ab:da:03:c8:e7:48:ca:57:91:8c: 84:1e:d1:17 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JimYm1PJt+h2bxzgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmY0ZGZjYWQtNjU1ZC00YWE1LTkzYTctMDQ0OTNiYjVjZjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2HsPQYiaGD0j3VAxGFX7WgpxUBK79mRhbtz cid/eq6TdTtMpbA9K5eRe92V8/dvfh2YT2HYfJLC8UtY3bZ8FFrGNlRnR7D4nqGz eXyzT4GuOwmHE1dTH1MWvlqolVE9JSAatTUU22KBmX59tRHR9aP8TUm9KAh/CQLP Cy1aBsAxkckqAoviBlx7JSAqe0ifriAz6qdZ8DDbeAJEdLd5hao1EGOISIHa40CO jf6ecELpmC8aWQmvR2+xnugJbgS6w3ujqzT+zr1BF7tSnWxnJU+cd7P5A0Twm4ck VLC+LFV4gdsoupT9t2nKY8gVUCI9zKYpsUr+/3X22QTmiQnpAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL4SDwQ/j5mbT9bQLxtMQVt+MbklMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODk4ODE2MjUtMTNlMC0z ZWIwLWI2NTMtOGI5MGM2YWY4MTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAIVu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHFp1UMDLceolk9GwKrKKbJgEAQn7L6Tn72+sjAgjGLGk2Lc0Vfn wNGW4hNyPM0wZFQw+xLsjgYdezfNB+GZtPnCrPLI1hOkqF767omJ18vCMKmfdlt/ XwzFU5EdKNS7B5vfAodj/vwOjZw1OWL6hEO/GhX/JHdIGMaMp9IHW6p7nMn40bPD VHys3ginwJrKQc/K1EYXjRiAEGJyKTWTBYNz4+SkTlpU26y34Xv7g5K0h2eIrHbA hN1Ci+3Vhxm0EQMznImqRH01LDI9zdwlv8ryydVJJYX6Q3a+xwrWUp0cn78/Z7X8 XGe0UkalRfeqjyogq9oDyOdIyleRjIQe0Rc= -----END CERTIFICATE-----Generated at Wed Oct 7 00:40:00 2026 by rpki-client