$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae1ade98-4b6a-37a2-b040-8b714881ea03.roa File: ae1ade98-4b6a-37a2-b040-8b714881ea03.roa (raw, json) Hash identifier: 3P/qdq8m3lAqCHuRx/XA8D2LNLLwowVuB4+L1uGUR+A= Subject key identifier: 6C:30:9E:9B:F3:2C:6F:98:5F:35:EC:AF:E1:31:9D:D6:4C:6C:34:A1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F11A1576ABAF2F8B10C04C080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae1ade98-4b6a-37a2-b040-8b714881ea03.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 396594 IP address blocks: 2001:502:8cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:57:6a:ba:f2:f8:b1:0c:04:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=9106774a-fc27-4582-9fb4-bcf159e5b868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b9:ac:b8:d9:36:bc:d7:17:bb:84:09:b6:12: 5e:85:e9:e7:63:f9:d5:eb:6e:15:01:60:63:e4:0a: 10:1d:0d:e1:58:d0:10:5f:be:4c:cd:5b:63:4f:80: b9:8c:4a:60:60:68:d7:dd:3e:ec:38:4b:b6:2c:69: 1f:f5:1e:5a:25:33:8b:68:ff:6b:ff:66:6d:62:3b: 5a:e5:ba:48:c5:e1:e5:31:f1:40:f8:3b:67:1b:f1: c2:d4:5e:5d:3a:58:54:11:d6:f5:b6:e4:c9:17:2a: 56:bf:51:8b:cf:5b:ec:34:5b:6c:32:f3:15:0b:67: 4f:62:cf:94:3a:36:f2:43:cd:90:36:47:67:c6:d2: 9d:19:29:e6:59:9e:31:00:42:df:20:ee:4a:34:ae: 00:07:84:94:d6:b2:c8:f0:dd:2e:6a:2c:aa:85:ca: 92:cf:b3:30:7c:d5:09:9a:0d:77:8f:73:fa:fc:fd: f1:af:1c:3a:40:1e:cf:d8:cf:30:be:f7:91:ca:c3: c8:a8:58:98:f6:eb:ed:db:37:1f:5a:82:8c:9b:6a: ac:f4:ba:e4:b3:11:d5:9e:0e:15:15:66:2d:e1:87: ef:23:9a:ae:58:b6:51:d5:1a:41:3d:b3:b3:f6:93: 1b:18:54:af:9b:48:bf:27:94:f3:2a:27:66:c7:d6: 9c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:30:9E:9B:F3:2C:6F:98:5F:35:EC:AF:E1:31:9D:D6:4C:6C:34:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae1ade98-4b6a-37a2-b040-8b714881ea03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:62:09:54:09:69:b0:c7:f7:0b:c5:af:86:aa:70:bc:af:22: 40:2f:e9:e4:0c:a2:16:a1:f4:0d:90:18:85:88:32:75:8d:df: ce:3a:c3:04:db:7d:17:98:c1:a8:21:33:db:a2:5b:a9:5a:95: a7:78:41:ac:64:54:7d:e0:04:07:48:66:09:51:91:d7:92:ae: 18:2e:42:4f:6e:9a:29:6c:13:fa:3e:a4:0b:cf:69:ac:21:cd: 2d:89:4a:e8:4f:43:61:ba:69:c1:27:68:bb:b0:7a:ec:b5:ed: de:18:b2:62:fc:0f:60:55:bb:a0:73:8f:78:cd:a1:06:7e:c0: 6b:89:7f:ea:d9:87:ea:d4:1c:d6:ca:41:0d:4b:53:06:8e:64: 44:f9:3b:08:60:b9:6a:ef:34:74:8c:10:9f:0e:7f:1c:25:5d: 00:54:12:bd:08:2e:b7:93:dc:a4:d2:f5:77:50:f9:b6:15:8b: f5:c6:d9:0f:ba:a7:23:a9:cd:34:09:36:08:64:ca:46:50:ed: 3c:34:9e:c6:01:48:6a:cf:7b:ce:aa:c9:93:63:1a:f5:35:74: 60:41:d9:b6:1a:36:5c:2f:1c:41:9e:cb:a7:d9:0c:75:f0:01: ae:83:22:29:b4:af:4c:9f:5c:c1:d9:f9:5d:f4:80:0d:e5:c5: d7:28:12:e8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8RoVdquvL4sQwEwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk OTEwNjc3NGEtZmMyNy00NTgyLTlmYjQtYmNmMTU5ZTViODY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7msuNk2vNcXu4QJthJehennY/nV624VAWBj 5AoQHQ3hWNAQX75MzVtjT4C5jEpgYGjX3T7sOEu2LGkf9R5aJTOLaP9r/2ZtYjta 5bpIxeHlMfFA+DtnG/HC1F5dOlhUEdb1tuTJFypWv1GLz1vsNFtsMvMVC2dPYs+U OjbyQ82QNkdnxtKdGSnmWZ4xAELfIO5KNK4AB4SU1rLI8N0uaiyqhcqSz7MwfNUJ mg13j3P6/P3xrxw6QB7P2M8wvveRysPIqFiY9uvt2zcfWoKMm2qs9LrksxHVng4V FWYt4YfvI5quWLZR1RpBPbOz9pMbGFSvm0i/J5TzKidmx9ac5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGwwnpvzLG+YXzXsr+ExndZMbDShMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWUxYWRlOTgtNGI2YS0z N2EyLWIwNDAtOGI3MTQ4ODFlYTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAgjM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFZiCVQJabDH9wvFr4aqcLyvIkAv6eQMohah9A2QGIWIMnWN3846 wwTbfReYwaghM9uiW6lalad4QaxkVH3gBAdIZglRkdeSrhguQk9umilsE/o+pAvP aawhzS2JSuhPQ2G6acEnaLuweuy17d4YsmL8D2BVu6Bzj3jNoQZ+wGuJf+rZh+rU HNbKQQ1LUwaOZET5OwhguWrvNHSMEJ8OfxwlXQBUEr0ILreT3KTS9XdQ+bYVi/XG 2Q+6pyOpzTQJNghkykZQ7Tw0nsYBSGrPe86qyZNjGvU1dGBB2bYaNlwvHEGey6fZ DHXwAa6DIim0r0yfXMHZ+V30gA3lxdcoEug= -----END CERTIFICATE-----Generated at Tue Sep 22 19:20:33 2026 by rpki-client