$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c199d6c0-d780-3cf8-a308-e8d899b5b17c.roa File: c199d6c0-d780-3cf8-a308-e8d899b5b17c.roa (raw, json) Hash identifier: 0SOsD2uPa+sjHF5sSQ+WfLz/h8rGbRdSyB0ZZPGs8vg= Subject key identifier: AD:D3:E9:A5:0F:0F:45:88:69:02:D6:71:EB:91:DE:BB:C1:59:08:C4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F49873302F9B7B64C04AD8100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c199d6c0-d780-3cf8-a308-e8d899b5b17c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396578 IP address blocks: 2001:501:8a29::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:33:02:f9:b7:b6:4c:04:ad:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0d112df6-0697-46f7-9140-c5ecb71310eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f3:04:31:ac:86:cd:f5:3c:7b:d8:a3:25:14: 63:09:a4:ca:cc:b9:42:52:ac:8c:02:84:c0:ce:ce: b0:79:82:bc:0f:68:01:1f:17:59:22:53:3b:3c:61: fe:30:67:71:40:96:ee:b0:68:b9:47:41:66:15:25: fe:64:d5:4e:31:22:40:ad:15:00:ae:8d:80:ca:ff: 09:21:e7:4a:34:70:7e:21:49:12:9a:93:fa:da:15: 9c:07:ea:0c:ea:36:c9:92:ca:8d:76:0d:89:ad:66: 02:b3:ac:7e:fc:2d:79:d8:e4:22:29:68:69:e3:d6: 55:de:34:1e:ca:59:ce:36:f2:81:d1:1d:2e:ec:72: c1:1b:41:d6:f7:84:4f:37:58:3d:f3:3b:b0:20:53: bd:05:dc:06:db:4e:97:bc:1c:88:21:b6:a3:6f:97: 27:4c:d8:ef:74:49:ea:7d:ca:11:ec:c1:06:fe:f6: b4:ad:34:61:0b:46:e3:0a:2e:9e:b3:45:4b:28:4b: 5c:03:ca:d2:9e:a1:7c:72:40:62:8b:9e:29:bb:90: 37:51:3e:44:a3:7b:7a:9c:8e:72:f0:67:65:fc:a8: 76:3e:25:65:50:7b:d3:3e:dd:af:17:a3:68:d0:2c: fc:14:3e:43:6d:94:6b:d9:6b:0e:7b:e7:eb:d5:51: a1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D3:E9:A5:0F:0F:45:88:69:02:D6:71:EB:91:DE:BB:C1:59:08:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c199d6c0-d780-3cf8-a308-e8d899b5b17c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:cd:b2:bc:91:f6:8d:5f:39:4c:42:31:f3:a5:2b:6a:86:8f: ca:f0:1c:ee:02:ff:0e:31:7a:95:99:81:9e:89:33:cc:2d:68: 22:fd:4d:d4:5a:40:68:b2:17:f4:0d:b7:00:62:0d:45:88:e3: 8f:81:39:e1:a1:2a:ed:e0:80:35:44:64:fb:84:1c:c7:43:37: 81:b2:86:7a:4e:d4:42:57:66:03:0a:ad:65:18:b4:71:44:f1: 64:6b:ac:79:2d:d2:b1:be:27:bd:77:cb:16:05:ed:43:c5:24: ed:36:f1:74:44:dd:63:07:20:79:65:ea:ae:9b:9b:75:83:55: 59:e6:4d:ba:73:fd:94:4b:dc:c1:c1:c5:40:ed:1e:da:b5:ab: 15:bb:91:3b:18:40:d3:08:cc:14:8e:fd:aa:05:ef:f3:53:ff: 07:5f:65:7c:d3:c8:f0:fe:7f:24:bc:79:03:8f:34:e1:b4:ca: 6e:a6:42:e0:79:37:65:64:5b:12:ea:5e:ba:b1:63:fc:1a:ca: 47:8b:14:47:82:d2:56:11:eb:5b:64:e3:d5:3c:47:bc:b4:5e: 24:11:a6:51:84:18:62:32:01:01:13:9f:7f:ae:4c:c6:da:1b: 32:be:aa:d5:5d:2f:e8:95:5d:0a:2d:4f:a9:13:0d:27:89:9f: 4b:ec:72:64 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JhzMC+be2TAStgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGQxMTJkZjYtMDY5Ny00NmY3LTkxNDAtYzVlY2I3MTMxMGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvMEMayGzfU8e9ijJRRjCaTKzLlCUqyMAoTA zs6weYK8D2gBHxdZIlM7PGH+MGdxQJbusGi5R0FmFSX+ZNVOMSJArRUAro2Ayv8J IedKNHB+IUkSmpP62hWcB+oM6jbJksqNdg2JrWYCs6x+/C152OQiKWhp49ZV3jQe ylnONvKB0R0u7HLBG0HW94RPN1g98zuwIFO9BdwG206XvByIIbajb5cnTNjvdEnq fcoR7MEG/va0rTRhC0bjCi6es0VLKEtcA8rSnqF8ckBii54pu5A3UT5Eo3t6nI5y 8Gdl/Kh2PiVlUHvTPt2vF6No0Cz8FD5DbZRr2WsOe+fr1VGhqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK3T6aUPD0WIaQLWceuR3rvBWQjEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzE5OWQ2YzAtZDc4MC0z Y2Y4LWEzMDgtZThkODk5YjViMTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAYop MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEfNsryR9o1fOUxCMfOlK2qGj8rwHO4C/w4xepWZgZ6JM8wtaCL9 TdRaQGiyF/QNtwBiDUWI44+BOeGhKu3ggDVEZPuEHMdDN4GyhnpO1EJXZgMKrWUY tHFE8WRrrHkt0rG+J713yxYF7UPFJO028XRE3WMHIHll6q6bm3WDVVnmTbpz/ZRL 3MHBxUDtHtq1qxW7kTsYQNMIzBSO/aoF7/NT/wdfZXzTyPD+fyS8eQOPNOG0ym6m QuB5N2VkWxLqXrqxY/waykeLFEeC0lYR61tk49U8R7y0XiQRplGEGGIyAQETn3+u TMbaGzK+qtVdL+iVXQotT6kTDSeJn0vscmQ= -----END CERTIFICATE-----Generated at Fri Sep 25 04:14:37 2026 by rpki-client