$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/8e29d75c-ea6f-32dc-ad7f-56d0f4a3195f.roa File: 8e29d75c-ea6f-32dc-ad7f-56d0f4a3195f.roa (raw, json) Hash identifier: d+la8m1tUmWWtERVo+cQBZl72J5dwb4DK7IxDhCpiL8= Subject key identifier: 30:DA:5C:76:39:5E:97:F9:EE:B4:3C:E0:04:1B:9D:37:16:03:07:51 Certificate issuer: /CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d Certificate serial: 010D0C9F4328584F3E47D4A963862343E2BFCC00 Authority key identifier: E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/8e29d75c-ea6f-32dc-ad7f-56d0f4a3195f.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 237 IP address blocks: 2001:48a8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:d4:a9:63:86:23:43:e2:bf:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=749d3664-149b-48c3-b1d5-18666ebbf91e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2a:fb:d1:05:9a:9e:01:aa:c7:80:f0:48:9f: 3e:84:22:4f:9c:18:eb:cf:80:ca:f9:8f:69:10:16: 84:3b:b7:b2:52:39:48:bd:dc:7b:80:82:85:b3:95: 72:86:a0:60:92:96:3e:dc:8e:01:23:0a:68:d7:a7: 0a:2c:60:36:ec:ef:e4:d9:b1:1d:3d:f4:99:90:97: 62:d0:c7:32:ed:97:f6:dd:c5:2f:f0:02:51:bc:5e: 69:af:1f:35:4b:11:e6:e0:c7:17:65:51:19:0f:12: 15:30:72:7b:5d:e5:7b:fb:34:70:7a:af:f1:d9:37: 3b:ca:86:c9:96:1b:49:f7:0a:0e:a6:75:20:a4:72: 35:cb:e7:88:64:d7:b5:9f:2a:bb:c2:57:32:16:81: 79:af:9b:de:00:65:b2:c0:d7:2f:8c:08:2d:5f:61: ee:19:50:77:cc:cf:55:0e:dc:03:00:ba:0b:50:e2: 9a:c2:f6:9c:3d:7e:30:c5:bc:d5:69:65:a9:af:f0: 6a:84:c5:bf:9d:f6:43:24:a2:c9:a8:51:71:8d:6f: 74:64:18:ac:db:9a:eb:80:03:1a:b1:80:2c:fe:fc: 04:5d:24:0a:da:6b:ac:e0:2d:f5:73:ee:fb:17:ed: e9:37:56:43:13:cd:5b:5a:92:49:11:43:39:26:f6: 7a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:DA:5C:76:39:5E:97:F9:EE:B4:3C:E0:04:1B:9D:37:16:03:07:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/8e29d75c-ea6f-32dc-ad7f-56d0f4a3195f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl X509v3 Authority Key Identifier: keyid:E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer sbgp-ipAddrBlock: critical IPv6: 2001:48a8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:02:7d:b6:10:4d:75:da:23:fd:48:8b:db:f7:f7:d8:83:c0: 80:f0:18:b9:b6:55:86:39:2f:0f:af:9e:3a:ba:c1:1c:c0:5b: 7f:67:d7:42:b3:21:d0:ea:44:67:5d:90:ca:a1:1e:be:0b:96: 5d:20:c1:ae:00:59:e0:b9:b2:e2:83:5e:46:69:f6:ef:d2:95: 9b:8e:a7:3c:ad:fc:32:fd:e3:47:ec:09:9b:e8:a5:6d:12:d8: 4b:49:30:63:7e:39:6f:93:2e:ff:2c:a2:95:fd:dd:2f:c1:0a: 91:f0:eb:56:e4:00:5b:dc:7e:45:25:96:b2:cd:74:3e:7c:1d: e6:38:b8:3e:a4:67:d1:fd:96:7c:37:bb:ea:0d:8c:e2:92:69: a9:78:20:67:32:ff:dc:81:ce:71:24:bc:37:3a:e0:a4:e2:2f: b0:df:83:b1:31:da:e6:c2:85:37:e4:e2:3a:bf:64:14:da:df: 09:f3:0b:78:e2:4e:f0:26:4f:9b:8e:13:84:00:3a:07:9f:3e: 10:85:94:f3:8c:da:fc:da:d1:f3:f8:81:9b:0f:d3:1d:7a:a3: 93:5b:ab:40:6d:9d:13:2a:e4:08:01:4c:c2:02:d6:75:f8:dd: 86:b1:65:3a:86:69:8a:f4:d7:60:ae:09:7b:10:16:2c:33:60: 55:61:bd:e6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8+R9SpY4YjQ+K/zAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0OGJhYTgtNmM4My00NWViLWIwOWItNWZiZDFlNDJj NTdkMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk NzQ5ZDM2NjQtMTQ5Yi00OGMzLWIxZDUtMTg2NjZlYmJmOTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Sr70QWangGqx4DwSJ8+hCJPnBjrz4DK+Y9p EBaEO7eyUjlIvdx7gIKFs5VyhqBgkpY+3I4BIwpo16cKLGA27O/k2bEdPfSZkJdi 0Mcy7Zf23cUv8AJRvF5prx81SxHm4McXZVEZDxIVMHJ7XeV7+zRweq/x2Tc7yobJ lhtJ9woOpnUgpHI1y+eIZNe1nyq7wlcyFoF5r5veAGWywNcvjAgtX2HuGVB3zM9V DtwDALoLUOKawvacPX4wxbzVaWWpr/BqhMW/nfZDJKLJqFFxjW90ZBis25rrgAMa sYAs/vwEXSQK2mus4C31c+77F+3pN1ZDE81bWpJJEUM5JvZ6KwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDDaXHY5Xpf57rQ84AQbnTcWAwdRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYjQ4 YmFhOC02YzgzLTQ1ZWItYjA5Yi01ZmJkMWU0MmM1N2QvOGUyOWQ3NWMtZWE2Zi0z MmRjLWFkN2YtNTZkMGY0YTMxOTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2I0OGJhYTgtNmM4My00NWViLWIw OWItNWZiZDFlNDJjNTdkL2NiNDhiYWE4LTZjODMtNDVlYi1iMDliLTVmYmQxZTQy YzU3ZC5jcmwwHwYDVR0jBBgwFoAU6TbcWGb8aAK/ppnetN0TXkzRJ84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYjQ4YmFhOC02YzgzLTQ1ZWItYjA5Yi01ZmJk MWU0MmM1N2QuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAFIqDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBNAn22EE112iP9SIvb9/fYg8CA8Bi5tlWGOS8Pr546usEcwFt/Z9dC syHQ6kRnXZDKoR6+C5ZdIMGuAFngubLig15Gafbv0pWbjqc8rfwy/eNH7Amb6KVt EthLSTBjfjlvky7/LKKV/d0vwQqR8OtW5ABb3H5FJZayzXQ+fB3mOLg+pGfR/ZZ8 N7vqDYzikmmpeCBnMv/cgc5xJLw3OuCk4i+w34OxMdrmwoU35OI6v2QU2t8J8wt4 4k7wJk+bjhOEADoHnz4QhZTzjNr82tHz+IGbD9MdeqOTW6tAbZ0TKuQIAUzCAtZ1 +N2GsWU6hmmK9Ndgrgl7EBYsM2BVYb3m -----END CERTIFICATE-----Generated at Tue Sep 22 23:28:35 2026 by rpki-client