$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e78620c-1d48-35c1-978c-b0d4922b4275.roa File: 8e78620c-1d48-35c1-978c-b0d4922b4275.roa (raw, json) Hash identifier: 5JoLXdrRtpRnVfFqLTj3VGi1b/bpB6VpOmdvwHSpuGY= Subject key identifier: D8:EF:21:A5:02:AE:2D:5B:30:1D:90:7C:3D:52:A2:EA:8A:C2:E4:13 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F19FCEA7B313F223A30E91100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e78620c-1d48-35c1-978c-b0d4922b4275.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 36631 IP address blocks: 2001:500:7967::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:ea:7b:31:3f:22:3a:30:e9:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=5dca51fd-62be-4416-9e2a-fc3e5354ba5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3c:65:fc:a6:5e:8c:b1:48:82:33:ea:31:e1: 33:ac:0d:f4:86:50:c8:dc:64:ea:94:df:a4:28:f9: 5f:40:60:f8:7d:29:fc:6d:13:72:21:0d:67:0a:dd: af:97:03:3d:01:a9:f2:dd:99:37:73:9d:33:bf:74: 0b:52:08:7d:9d:06:92:ce:b3:f1:ac:df:46:2d:e9: d9:b8:0b:86:5d:26:0f:f9:9c:64:25:8a:f2:6a:e0: e5:c9:e1:2c:ab:6f:d3:65:9e:86:18:3b:41:39:99: cb:c4:fb:f5:b1:29:6b:3f:ac:a0:7b:f5:42:4b:7f: 67:e8:d0:2c:03:ca:a8:69:5e:b9:cf:08:2a:98:a1: 26:63:42:83:4e:5d:68:b5:21:84:cc:de:f9:69:10: 48:98:34:97:aa:84:79:ac:4c:a7:8f:2d:57:b1:53: a5:0c:22:a5:87:84:b2:d6:23:6b:72:88:b2:f0:01: 63:35:d0:b0:7f:c6:26:77:f0:4f:d1:07:46:0c:ca: e8:32:cd:59:cf:d1:44:e3:9b:35:bc:d1:f2:4b:0d: 16:38:d3:5d:78:3c:45:2c:80:93:9c:2a:4b:6e:99: 92:56:d0:e8:fb:11:20:3c:54:68:bc:a0:77:b8:e5: c2:84:dc:03:28:dd:b5:2b:4f:65:dc:d4:ce:ef:e1: 9b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:EF:21:A5:02:AE:2D:5B:30:1D:90:7C:3D:52:A2:EA:8A:C2:E4:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e78620c-1d48-35c1-978c-b0d4922b4275.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:2f:43:10:87:c9:df:01:ef:ff:74:4e:b1:1f:03:bf:fb:55: 29:f6:59:0b:d5:1c:37:26:34:27:4a:aa:54:3b:d7:ef:3d:d1: d4:ed:c0:18:eb:ed:6b:40:85:f7:63:4a:23:e9:57:ea:5d:5a: 1a:78:32:89:f7:6a:32:3b:6f:32:c4:ad:de:5a:cf:5d:6b:05: 3e:ce:37:da:c4:ad:38:cd:1a:c6:ca:7e:d8:c4:fb:99:0a:2e: 75:61:5b:c5:b5:52:f0:38:8e:a8:12:bd:32:b0:20:c0:f6:ed: 8b:5c:31:87:20:1e:84:ea:e8:2c:c3:25:f3:be:fa:43:93:ef: 11:28:a5:99:7f:35:24:4e:d8:61:85:8d:17:84:37:c8:e5:76: 01:66:c0:47:ba:b3:3d:aa:4f:61:7d:a0:94:6d:19:75:8d:7e: b4:04:9f:c7:9f:cd:75:d6:b6:ff:46:de:e1:72:f2:d5:c7:ad: 8a:81:15:8f:14:ce:82:06:23:b0:80:cd:34:44:ed:28:0c:d4: f9:ea:0d:f0:40:b8:b8:06:8d:7f:e1:ea:f4:be:df:89:68:29: 62:96:5e:14:0a:c8:bd:d8:91:9c:eb:4b:ce:7d:7f:44:82:76: 89:11:d7:22:6a:77:74:3f:57:9d:27:a4:08:30:a3:a3:4c:13: e4:15:dd:1b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8Z/Op7MT8iOjDpEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk NWRjYTUxZmQtNjJiZS00NDE2LTllMmEtZmMzZTUzNTRiYTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzxl/KZejLFIgjPqMeEzrA30hlDI3GTqlN+k KPlfQGD4fSn8bRNyIQ1nCt2vlwM9Aany3Zk3c50zv3QLUgh9nQaSzrPxrN9GLenZ uAuGXSYP+ZxkJYryauDlyeEsq2/TZZ6GGDtBOZnLxPv1sSlrP6yge/VCS39n6NAs A8qoaV65zwgqmKEmY0KDTl1otSGEzN75aRBImDSXqoR5rEynjy1XsVOlDCKlh4Sy 1iNrcoiy8AFjNdCwf8Ymd/BP0QdGDMroMs1Zz9FE45s1vNHySw0WONNdeDxFLICT nCpLbpmSVtDo+xEgPFRovKB3uOXChNwDKN21K09l3NTO7+Gb6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNjvIaUCri1bMB2QfD1SouqKwuQTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGU3ODYyMGMtMWQ0OC0z NWMxLTk3OGMtYjBkNDkyMmI0Mjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAHln MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACIvQxCHyd8B7/90TrEfA7/7VSn2WQvVHDcmNCdKqlQ71+890dTt wBjr7WtAhfdjSiPpV+pdWhp4Mon3ajI7bzLErd5az11rBT7ON9rErTjNGsbKftjE +5kKLnVhW8W1UvA4jqgSvTKwIMD27YtcMYcgHoTq6CzDJfO++kOT7xEopZl/NSRO 2GGFjReEN8jldgFmwEe6sz2qT2F9oJRtGXWNfrQEn8efzXXWtv9G3uFy8tXHrYqB FY8UzoIGI7CAzTRE7SgM1PnqDfBAuLgGjX/h6vS+34loKWKWXhQKyL3YkZzrS859 f0SCdokR1yJqd3Q/V50npAgwo6NME+QV3Rs= -----END CERTIFICATE-----Generated at Mon Sep 28 21:19:40 2026 by rpki-client