$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1cebd60-9d37-38da-a08f-9dd5f3c177c4.roa File: c1cebd60-9d37-38da-a08f-9dd5f3c177c4.roa (raw, json) Hash identifier: 7f0McfE73F+VPfX/B3CkJF/7xmzwuYgSuLjOOKlRntw= Subject key identifier: A9:6C:ED:DA:05:E2:15:D5:0C:F0:FF:C0:8F:B8:D4:DC:BF:10:1B:57 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F119CE44A79FC71FCD027F240 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1cebd60-9d37-38da-a08f-9dd5f3c177c4.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 396581 IP address blocks: 2001:502:8cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:e4:4a:79:fc:71:fc:d0:27:f2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=1ed284b0-ac09-4fe1-8e49-8d9403e0b7ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:8f:ff:00:41:30:72:e5:df:17:2e:65:ca:5d: bf:81:2d:2f:e5:58:e5:4d:a1:0f:92:2e:4d:9b:64: 75:a4:6c:48:69:11:0c:2a:f6:4c:30:f1:41:78:86: e8:5d:90:d1:96:b4:e6:8c:90:84:37:3d:06:0d:77: 3e:44:b2:97:ab:47:3d:74:af:15:b5:e8:9b:e4:7a: 76:b5:2f:96:4e:c4:9e:3c:32:74:cc:cd:c4:e8:af: 3d:6e:60:26:c5:ac:a1:d4:2f:b2:55:ab:ae:45:62: 3f:d8:85:88:28:49:e9:61:37:9f:77:64:a9:0c:af: c0:68:bf:8f:be:5b:d8:a9:fc:b5:9f:39:39:bd:c8: cc:ca:a9:32:1d:2e:a2:ea:31:1b:50:27:ec:df:16: 8d:fd:a0:cf:1b:00:3f:1a:be:53:16:f0:27:61:e1: 9f:ea:65:fd:5b:58:93:a9:1c:9c:6a:b4:15:35:5f: 86:40:ae:8a:32:bf:c6:5b:75:d2:e6:4a:78:12:9b: 96:40:f9:14:5c:d6:88:35:db:fe:87:28:cd:08:e0: 32:6d:02:97:42:49:cb:52:5c:17:9e:cf:f8:ef:61: c9:79:c5:f7:32:9b:ba:d8:bd:05:86:fc:a9:c2:1b: c8:c5:e8:8f:48:59:dc:3c:68:b7:ed:f6:02:59:c9: 44:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:6C:ED:DA:05:E2:15:D5:0C:F0:FF:C0:8F:B8:D4:DC:BF:10:1B:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1cebd60-9d37-38da-a08f-9dd5f3c177c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:fe:34:92:13:13:af:24:66:58:8a:af:63:a8:db:cb:08:8a: 6c:f1:fd:67:61:5d:2a:e2:4e:7d:b7:6b:05:c7:e5:ad:cb:d7: 2a:3f:23:92:4b:67:e9:f9:f4:be:4a:e6:97:d5:2f:f0:bb:cd: 99:c1:57:3f:4d:31:4c:2a:c7:24:2a:fe:bd:85:ac:aa:d1:59: 2e:e2:ec:d7:f6:59:40:c9:26:50:4e:c2:09:c7:47:7b:e6:9e: 27:93:ed:79:d2:12:b1:e9:58:13:14:19:23:f4:7f:26:06:ab: 3b:a5:99:b6:09:ec:3a:ce:bf:e9:5e:c2:3f:0b:ea:1d:fe:87: b0:0c:18:26:7c:76:71:cd:e7:fd:3c:4c:7a:25:82:9c:4c:0e: e0:c8:42:40:ec:54:6d:53:4a:72:9f:2b:7f:6c:99:f6:7e:2f: 93:71:f0:08:15:12:cd:d5:c1:b1:e9:57:43:9f:79:c6:0c:c5: cb:02:87:f2:a8:da:d8:43:1b:66:7c:89:f2:d5:e4:f4:a3:b2: dd:3b:1c:50:1c:c9:d2:17:ff:52:62:7a:74:86:9d:05:1d:2b: fc:16:72:7b:fd:00:14:67:a8:6b:a7:98:21:88:4b:45:e0:0b: 7c:2a:f8:74:8b:5c:b3:bf:8b:b3:6c:78:7c:31:0a:f3:5f:46: 01:ee:be:3d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8RnORKefxx/NAn8kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MWVkMjg0YjAtYWMwOS00ZmUxLThlNDktOGQ5NDAzZTBiN2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgo//AEEwcuXfFy5lyl2/gS0v5VjlTaEPki5N m2R1pGxIaREMKvZMMPFBeIboXZDRlrTmjJCENz0GDXc+RLKXq0c9dK8Vteib5Hp2 tS+WTsSePDJ0zM3E6K89bmAmxayh1C+yVauuRWI/2IWIKEnpYTefd2SpDK/AaL+P vlvYqfy1nzk5vcjMyqkyHS6i6jEbUCfs3xaN/aDPGwA/Gr5TFvAnYeGf6mX9W1iT qRycarQVNV+GQK6KMr/GW3XS5kp4EpuWQPkUXNaINdv+hyjNCOAybQKXQknLUlwX ns/472HJecX3Mpu62L0FhvypwhvIxeiPSFncPGi37fYCWclEaQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKls7doF4hXVDPD/wI+41Ny/EBtXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzFjZWJkNjAtOWQzNy0z OGRhLWEwOGYtOWRkNWYzYzE3N2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAgjM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABv+NJITE68kZliKr2Oo28sIimzx/WdhXSriTn23awXH5a3L1yo/ I5JLZ+n59L5K5pfVL/C7zZnBVz9NMUwqxyQq/r2FrKrRWS7i7Nf2WUDJJlBOwgnH R3vmnieT7XnSErHpWBMUGSP0fyYGqzulmbYJ7DrOv+lewj8L6h3+h7AMGCZ8dnHN 5/08THolgpxMDuDIQkDsVG1TSnKfK39smfZ+L5Nx8AgVEs3VwbHpV0OfecYMxcsC h/Ko2thDG2Z8ifLV5PSjst07HFAcydIX/1JienSGnQUdK/wWcnv9ABRnqGunmCGI S0XgC3wq+HSLXLO/i7NseHwxCvNfRgHuvj0= -----END CERTIFICATE-----Generated at Mon Sep 21 21:03:50 2026 by rpki-client