$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8aff1ae4-4c53-3ede-ab24-ade089c9e5fb.roa File: 8aff1ae4-4c53-3ede-ab24-ade089c9e5fb.roa (raw, json) Hash identifier: NenzDNzqQhW903imDC1MOb/V0Bph+2nr/fAG+oM7T1c= Subject key identifier: 99:56:A9:8B:4A:EF:27:35:D5:12:55:6C:C3:AB:63:A7:60:B3:F7:7D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F11A14DCC76A8F38EFDC94840 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8aff1ae4-4c53-3ede-ab24-ade089c9e5fb.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 396617 IP address blocks: 2001:502:8cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:4d:cc:76:a8:f3:8e:fd:c9:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=a039c8c6-0377-42d4-92b5-b6c8f2315118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:09:8f:d7:18:59:20:62:8d:24:8f:eb:4d:f8: 11:c5:1a:3f:c4:e9:74:d6:77:a1:db:2b:cf:16:1b: 25:af:13:cc:f9:73:48:79:a7:fd:8e:5e:d6:c5:e6: 19:7d:8b:e3:3f:05:aa:68:bb:ec:94:0e:13:a0:22: 90:3d:7b:53:95:5d:e3:c8:8e:f1:42:2e:e4:ca:a1: 33:6d:2c:83:20:b1:60:0e:02:cb:07:0c:10:20:36: 0a:df:29:b1:8e:3b:2a:bd:98:cc:40:69:01:71:76: 1c:c6:dd:ef:3d:26:2f:07:64:d3:f1:f4:da:28:56: c4:54:af:de:3b:22:30:93:11:99:df:66:8d:de:56: 25:9f:0f:62:38:bc:92:1b:a1:a2:1f:1a:ad:a7:e9: ae:0e:7b:9b:c6:3c:a2:2a:57:16:31:39:86:0e:5f: 9d:b3:46:46:81:43:b9:8a:6e:1c:0e:f9:50:1a:4d: ca:11:83:c4:72:17:f7:30:b4:9e:e4:60:58:b6:80: 7b:8b:a0:80:d5:36:37:73:57:3b:b7:02:90:06:67: 70:1b:c7:bf:be:f3:59:c3:06:5a:dd:b3:76:d3:0b: 3e:36:b5:bc:5e:26:78:8d:df:32:b7:74:f1:6c:e5: 7e:27:d0:bd:3b:e6:d9:41:b2:82:a5:f2:8e:6b:1a: e4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:56:A9:8B:4A:EF:27:35:D5:12:55:6C:C3:AB:63:A7:60:B3:F7:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8aff1ae4-4c53-3ede-ab24-ade089c9e5fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:0b:8a:54:10:a6:77:d1:cd:61:12:97:12:37:b7:66:fa:01: 72:93:c8:49:2a:fa:c9:3e:27:fc:a9:f3:3f:27:2b:ff:ad:dd: a4:12:55:e3:4d:97:47:eb:0f:09:78:8b:3b:1b:6c:c3:bb:57: 5f:15:dc:6f:88:37:d1:ac:de:58:d2:62:c8:07:7d:a9:d2:12: 50:7a:fd:17:8a:c1:73:e9:d0:83:c8:c2:73:5d:11:d8:4e:98: aa:a3:e4:97:de:f3:15:8a:83:b4:56:79:04:9c:ef:28:0b:99: 6c:5e:48:ca:28:a5:1e:b3:d6:18:75:54:59:65:3c:f5:29:d4: bb:2a:48:16:79:f1:21:48:bc:b8:24:00:67:97:ab:52:fd:ab: 01:e7:24:cd:ff:b0:34:67:eb:d3:97:b9:f2:53:db:22:be:54: 22:51:b0:ca:83:3d:f5:51:10:ce:54:7a:0b:8e:82:3c:49:8c: ab:e7:32:25:02:04:43:9c:c4:83:1d:fe:df:68:98:d7:29:f9: 6d:d5:7d:2e:04:81:ce:08:c4:79:c0:8c:04:85:5f:b9:15:21: 14:b9:a7:c9:77:7d:26:83:87:a7:5a:f4:b0:e7:20:16:c4:cd: ee:de:84:74:f9:6e:50:03:b5:91:fb:3b:67:df:63:29:8d:03: 34:dd:eb:c9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8RoU3Mdqjzjv3JSEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YTAzOWM4YzYtMDM3Ny00MmQ0LTkyYjUtYjZjOGYyMzE1MTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggmP1xhZIGKNJI/rTfgRxRo/xOl01neh2yvP FhslrxPM+XNIeaf9jl7WxeYZfYvjPwWqaLvslA4ToCKQPXtTlV3jyI7xQi7kyqEz bSyDILFgDgLLBwwQIDYK3ymxjjsqvZjMQGkBcXYcxt3vPSYvB2TT8fTaKFbEVK/e OyIwkxGZ32aN3lYlnw9iOLySG6GiHxqtp+muDnubxjyiKlcWMTmGDl+ds0ZGgUO5 im4cDvlQGk3KEYPEchf3MLSe5GBYtoB7i6CA1TY3c1c7twKQBmdwG8e/vvNZwwZa 3bN20ws+NrW8XiZ4jd8yt3TxbOV+J9C9O+bZQbKCpfKOaxrkNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJlWqYtK7yc11RJVbMOrY6dgs/d9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGFmZjFhZTQtNGM1My0z ZWRlLWFiMjQtYWRlMDg5YzllNWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAgjM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADoLilQQpnfRzWESlxI3t2b6AXKTyEkq+sk+J/yp8z8nK/+t3aQS VeNNl0frDwl4izsbbMO7V18V3G+IN9Gs3ljSYsgHfanSElB6/ReKwXPp0IPIwnNd EdhOmKqj5Jfe8xWKg7RWeQSc7ygLmWxeSMoopR6z1hh1VFllPPUp1LsqSBZ58SFI vLgkAGeXq1L9qwHnJM3/sDRn69OXufJT2yK+VCJRsMqDPfVREM5UeguOgjxJjKvn MiUCBEOcxIMd/t9omNcp+W3VfS4Egc4IxHnAjASFX7kVIRS5p8l3fSaDh6da9LDn IBbEze7ehHT5blADtZH7O2ffYymNAzTd68k= -----END CERTIFICATE-----Generated at Mon Sep 28 00:15:03 2026 by rpki-client