$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f60af5ef-a05a-35dd-bd57-18e8198c7629.roa File: f60af5ef-a05a-35dd-bd57-18e8198c7629.roa (raw, json) Hash identifier: pTn0vUTEqykgcL/zIvmu2MSGnsCTtCfUyYmsGCvHqJM= Subject key identifier: 60:40:5B:C5:9C:8A:24:0D:BF:F3:66:9A:5B:7B:2A:0C:85:85:45:05 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F119D02CE28219079598329C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f60af5ef-a05a-35dd-bd57-18e8198c7629.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 36620 IP address blocks: 2001:502:8cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:02:ce:28:21:90:79:59:83:29:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=06574b45-d089-4cc3-87fc-88b10c4a290c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b8:a1:ca:91:1d:55:78:d4:45:82:b9:29:d2: 79:4e:aa:56:96:47:f1:48:f0:6d:9a:b6:81:4b:32: 6d:c4:cb:30:7f:bc:d4:0a:e4:1d:a4:eb:d7:0a:1c: bd:1a:96:7c:58:32:a2:1d:e7:e2:d5:a8:8c:f7:f2: 62:76:8c:43:65:e9:a6:c8:be:e8:0e:9b:a3:7c:b0: f9:0e:a6:46:69:31:f3:af:a9:95:33:6b:73:60:f9: 2b:62:5f:bc:dd:e3:88:8f:65:6c:48:22:8c:35:ed: 75:bf:51:67:8a:e9:6e:3f:2c:4e:e5:cb:56:23:09: 13:d7:77:fa:2a:e8:39:e1:e3:24:ce:b7:c6:19:0b: a9:4c:e7:d3:b6:27:e1:56:1f:65:d3:10:87:18:1a: 7b:79:86:cb:d6:d2:77:46:d7:5d:79:0a:63:de:80: d4:a1:19:3a:b5:27:37:bf:16:d9:35:69:82:25:dd: 37:01:4c:9d:72:ba:f4:d9:ae:87:16:ec:99:c7:ca: b7:00:fb:0a:fb:ee:eb:d4:11:aa:13:64:79:20:8a: d3:e5:26:6d:b4:b9:75:65:c8:32:da:66:fc:76:39: e4:19:77:81:47:05:4c:db:10:32:7e:bc:83:c3:42: 39:fe:6a:6f:b5:02:22:3c:b6:9c:97:2d:f4:ab:2d: 50:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:40:5B:C5:9C:8A:24:0D:BF:F3:66:9A:5B:7B:2A:0C:85:85:45:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f60af5ef-a05a-35dd-bd57-18e8198c7629.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:cc:29:b3:9e:5b:52:e6:0c:4b:e8:b1:21:6b:48:71:a4:48: 50:22:8a:9c:f3:45:4b:44:3a:0c:87:1c:b6:2d:60:ab:f3:f9: 3c:d0:08:a5:91:f0:ad:00:13:8a:db:5e:6a:70:8c:66:d4:76: 50:55:e2:66:70:4b:af:4b:83:c6:eb:40:38:74:99:1b:38:98: 6a:36:da:2d:a6:a8:da:15:2e:f0:df:87:23:94:f1:72:65:06: 43:86:3c:2a:49:85:46:1b:3c:17:14:65:2b:b6:0d:20:14:be: 32:b5:17:ee:76:2f:90:07:af:72:32:9c:e1:20:d2:d8:a2:e2: 7b:b8:49:57:e0:ca:63:70:92:ca:03:60:5e:75:43:e8:b1:78: 8b:0d:b2:18:9c:56:e7:f0:eb:b5:22:84:3b:64:ed:84:f4:df: c7:eb:78:1b:83:74:ce:c7:21:9c:e4:29:64:2f:f8:60:67:5a: a8:2e:64:fc:da:1e:5c:e6:23:15:72:56:85:fd:6d:92:a2:b5: b5:28:ce:5b:11:59:7f:ce:8a:66:28:43:96:b1:7d:67:6d:f4: d8:a4:c1:a8:8b:f7:4c:50:c4:ab:02:e1:75:0b:e5:a8:bf:ed: 20:da:ca:7e:7a:3c:8d:1c:cd:5e:27:02:76:74:bf:fc:c1:90: c1:43:27:a6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8RnQLOKCGQeVmDKcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MDY1NzRiNDUtZDA4OS00Y2MzLTg3ZmMtODhiMTBjNGEyOTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLihypEdVXjURYK5KdJ5TqpWlkfxSPBtmraB SzJtxMswf7zUCuQdpOvXChy9GpZ8WDKiHefi1aiM9/JidoxDZemmyL7oDpujfLD5 DqZGaTHzr6mVM2tzYPkrYl+83eOIj2VsSCKMNe11v1FniuluPyxO5ctWIwkT13f6 Kug54eMkzrfGGQupTOfTtifhVh9l0xCHGBp7eYbL1tJ3RtddeQpj3oDUoRk6tSc3 vxbZNWmCJd03AUydcrr02a6HFuyZx8q3APsK++7r1BGqE2R5IIrT5SZttLl1Zcgy 2mb8djnkGXeBRwVM2xAyfryDw0I5/mpvtQIiPLacly30qy1QtQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGBAW8WciiQNv/Nmmlt7KgyFhUUFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjYwYWY1ZWYtYTA1YS0z NWRkLWJkNTctMThlODE5OGM3NjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAgjM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHLMKbOeW1LmDEvosSFrSHGkSFAiipzzRUtEOgyHHLYtYKvz+TzQ CKWR8K0AE4rbXmpwjGbUdlBV4mZwS69Lg8brQDh0mRs4mGo22i2mqNoVLvDfhyOU 8XJlBkOGPCpJhUYbPBcUZSu2DSAUvjK1F+52L5AHr3IynOEg0tii4nu4SVfgymNw ksoDYF51Q+ixeIsNshicVufw67UihDtk7YT038freBuDdM7HIZzkKWQv+GBnWqgu ZPzaHlzmIxVyVoX9bZKitbUozlsRWX/OimYoQ5axfWdt9NikwaiL90xQxKsC4XUL 5ai/7SDayn56PI0czV4nAnZ0v/zBkMFDJ6Y= -----END CERTIFICATE-----Generated at Sat Sep 26 14:59:37 2026 by rpki-client