$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aeb06d48-8563-3609-9383-602a42e844e7.roa File: aeb06d48-8563-3609-9383-602a42e844e7.roa (raw, json) Hash identifier: bYB+PpEF7YQLAYWw9k4n+TmTzGL8p8bJRpc/18BUlFI= Subject key identifier: 6B:D1:7C:F9:DC:2A:A1:0B:F6:5E:D3:C9:E8:34:20:FD:FB:E4:FC:D1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F119D02FE6955C864F6BBE580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aeb06d48-8563-3609-9383-602a42e844e7.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 396544 IP address blocks: 2001:502:8cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:02:fe:69:55:c8:64:f6:bb:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=00d2478d-a0b4-47e1-8367-2831074569c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b8:3c:55:b3:02:19:71:54:a3:1e:67:f3:d0: 6b:96:c7:be:c1:05:87:08:d3:d2:a9:a0:c5:c8:fa: 88:53:8f:69:52:8d:e2:fb:9a:84:ee:36:8a:fd:c4: d4:58:d3:99:54:7d:ff:1c:28:c6:b4:6a:67:97:da: 9c:77:2d:44:7f:16:a3:aa:5e:0e:82:f7:84:e1:d4: f0:7b:f8:f1:db:55:cf:ee:dd:2f:b7:18:1e:07:5a: ac:74:aa:7e:12:61:2d:2f:15:d2:80:21:d2:25:df: 29:60:1d:f3:9a:1e:52:a3:a0:4e:c3:52:0b:d4:31: 44:87:f7:f3:9c:e6:48:66:70:60:44:fc:65:67:9a: fe:05:e4:ac:40:c0:70:b7:8a:af:9c:7d:0f:9f:59: 64:e6:d0:31:e9:b2:fb:68:f7:96:ca:c1:5d:5a:5c: fd:b8:6f:c9:ee:e9:e4:79:90:dc:fc:18:c2:ef:ef: ce:8e:93:94:2f:86:e7:d7:ec:a7:ac:85:4f:b7:4d: 9f:bf:27:69:9f:52:4d:43:f9:d6:b1:50:0a:52:f5: 5e:d7:b1:e0:bc:4c:d5:a3:ef:5b:ef:1c:6f:7a:ec: 68:0f:83:fa:eb:e9:6f:60:23:c7:16:bc:33:2b:cd: 8d:49:d3:eb:59:6c:d5:b3:c6:03:53:e5:bb:bc:74: 9a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D1:7C:F9:DC:2A:A1:0B:F6:5E:D3:C9:E8:34:20:FD:FB:E4:FC:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aeb06d48-8563-3609-9383-602a42e844e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:ce:c4:3d:99:ea:fa:b6:5d:63:f4:50:6d:9d:57:7b:00:a4: 6c:35:e9:be:e0:be:b3:57:4b:86:2b:81:25:cc:77:b6:73:24: c4:34:bc:59:cc:a2:4c:2c:f2:89:0f:2a:11:d9:57:04:6b:f5: 51:24:18:04:18:e8:d1:ae:03:c9:f2:e7:83:6e:ad:ab:14:0a: 8e:d7:ab:2e:be:14:36:15:ac:67:72:79:44:5e:58:56:92:27: 3e:f5:ab:7b:df:c1:77:0f:53:c5:30:8a:f4:1c:e8:37:6e:71: ee:39:2c:13:ac:72:2b:29:f0:41:55:41:18:9a:38:e2:f0:9e: 38:d8:27:d8:aa:a5:a6:55:16:15:3a:85:52:e0:b8:ef:b3:41: 05:38:94:6b:67:ce:c3:0a:d2:3c:dd:5f:97:64:b3:51:f7:58: 22:6a:2f:cc:01:45:d0:6c:39:9b:97:15:25:6a:6b:78:d7:9a: 21:fe:37:d3:b9:98:9b:e6:cc:f9:47:9d:68:9b:b4:a2:17:ef: 4e:13:89:34:18:99:1a:ff:15:b6:85:b8:2d:14:01:fd:9d:68: 5a:f6:a1:c6:04:b0:3a:45:10:2c:b8:73:0f:57:ad:61:3b:c4: 9f:54:b2:08:f5:35:ee:3d:1a:af:07:d3:70:35:ee:a9:5b:53: 91:3e:35:de -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8RnQL+aVXIZPa75YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MDBkMjQ3OGQtYTBiNC00N2UxLTgzNjctMjgzMTA3NDU2OWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7g8VbMCGXFUox5n89Brlse+wQWHCNPSqaDF yPqIU49pUo3i+5qE7jaK/cTUWNOZVH3/HCjGtGpnl9qcdy1Efxajql4OgveE4dTw e/jx21XP7t0vtxgeB1qsdKp+EmEtLxXSgCHSJd8pYB3zmh5So6BOw1IL1DFEh/fz nOZIZnBgRPxlZ5r+BeSsQMBwt4qvnH0Pn1lk5tAx6bL7aPeWysFdWlz9uG/J7unk eZDc/BjC7+/OjpOUL4bn1+ynrIVPt02fvydpn1JNQ/nWsVAKUvVe17HgvEzVo+9b 7xxveuxoD4P66+lvYCPHFrwzK82NSdPrWWzVs8YDU+W7vHSaKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGvRfPncKqEL9l7Tyeg0IP375PzRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWViMDZkNDgtODU2My0z NjA5LTkzODMtNjAyYTQyZTg0NGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAgjM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALfOxD2Z6vq2XWP0UG2dV3sApGw16b7gvrNXS4YrgSXMd7ZzJMQ0 vFnMokws8okPKhHZVwRr9VEkGAQY6NGuA8ny54NurasUCo7Xqy6+FDYVrGdyeURe WFaSJz71q3vfwXcPU8UwivQc6Dduce45LBOscisp8EFVQRiaOOLwnjjYJ9iqpaZV FhU6hVLguO+zQQU4lGtnzsMK0jzdX5dks1H3WCJqL8wBRdBsOZuXFSVqa3jXmiH+ N9O5mJvmzPlHnWibtKIX704TiTQYmRr/FbaFuC0UAf2daFr2ocYEsDpFECy4cw9X rWE7xJ9Usgj1Ne49Gq8H03A17qlbU5E+Nd4= -----END CERTIFICATE-----Generated at Mon Sep 21 12:41:27 2026 by rpki-client