$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b3e4574-8a31-369d-9a35-5cdfc6185194.roa File: 0b3e4574-8a31-369d-9a35-5cdfc6185194.roa (raw, json) Hash identifier: YDGEzFY4jxWeDp/+5nPMRewE9rJD9QuDaa/QCE7dJys= Subject key identifier: EC:3A:0D:7C:00:51:8D:F9:40:9C:E9:A0:3B:F3:92:AD:76:0A:0B:DA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F119CE5F8E9CA0A4C26DC5F00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b3e4574-8a31-369d-9a35-5cdfc6185194.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 396587 IP address blocks: 2001:502:8cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:e5:f8:e9:ca:0a:4c:26:dc:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=8773d7cf-304e-4a8c-8968-b36018e80709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:fa:71:61:0f:c2:3c:40:92:39:76:fc:a3:e4: 18:28:58:a4:f3:92:cf:5e:b6:61:52:24:04:d8:37: f8:e5:42:86:d8:e1:bd:ba:01:8f:e1:7a:f7:f9:0c: 77:81:d2:03:a5:c3:ff:32:bf:65:2a:72:f4:d5:fa: 37:b2:3f:7d:1a:ef:31:73:57:cf:4b:00:c6:b5:bc: a6:24:cb:69:40:c2:3e:58:7d:ba:76:05:dd:3a:db: 77:80:3d:f9:96:31:01:93:c2:83:89:e8:73:af:c0: 0c:78:43:b2:d5:07:25:42:6a:54:c5:9b:d1:5e:25: b9:f6:80:98:de:83:d8:be:91:0f:20:ba:92:ee:e9: 16:17:7b:2c:78:3f:cd:f8:35:ce:96:61:b3:a6:d7: 2e:54:92:96:e6:4e:7d:88:db:83:fd:b7:8e:d1:e9: 9b:00:85:1d:69:85:66:27:51:7b:68:c0:22:6a:f8: c7:8f:d9:2a:8a:8f:91:f1:50:67:8f:7c:f4:cd:02: dd:fb:12:1d:95:7d:bf:54:4d:53:1c:f2:5b:aa:d4: ef:15:ff:c6:95:ee:ef:f8:19:c1:ff:3c:cd:ee:2a: be:74:fe:73:e2:df:39:a4:39:73:c7:39:34:b2:05: 49:c3:e7:37:7a:9b:90:33:de:cb:55:26:34:23:d1: 5b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:3A:0D:7C:00:51:8D:F9:40:9C:E9:A0:3B:F3:92:AD:76:0A:0B:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b3e4574-8a31-369d-9a35-5cdfc6185194.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:07:e2:c5:56:d7:37:93:81:a1:ec:c9:8f:f0:b9:ce:f8:8c: af:4c:0e:17:c9:de:98:15:fb:ec:4b:74:a5:74:b3:ee:c1:48: b1:fb:d8:e2:2e:f6:7b:d8:96:3d:3b:77:a2:37:c5:73:24:b4: b1:7e:d6:56:f7:89:cb:9d:41:da:2d:10:9a:52:1e:44:17:41: 94:5c:02:c0:54:1e:6e:1e:ae:df:cf:c4:b5:77:42:7d:1f:1f: 03:b3:ce:5a:e7:dc:83:bb:dd:21:df:2e:7e:ed:b5:9a:d1:e8: 77:89:6a:db:93:1d:5e:37:1a:80:36:0d:90:61:cf:c4:59:3f: 3f:f1:72:4a:5f:f0:98:22:37:1f:44:bf:24:92:c9:70:9b:55: 1d:d3:31:bc:cd:7c:87:b3:d6:ba:ea:37:6c:1f:df:f6:9d:8c: 34:84:b5:cf:30:8f:10:ee:e6:e0:3b:78:ec:28:e7:91:53:2d: d1:86:25:2b:49:a6:de:cb:d0:2e:44:94:ac:72:88:79:e3:9a: fd:a5:b2:b9:98:42:33:56:e3:1a:69:9f:5e:16:f1:fc:d5:fb: 69:91:5c:3c:40:47:bf:c9:31:16:ae:ea:74:2f:7b:70:34:06: a8:01:8d:cf:ea:04:4d:9e:d6:13:3f:89:87:77:61:39:b1:57: d7:ff:47:9f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8RnOX46coKTCbcXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ODc3M2Q3Y2YtMzA0ZS00YThjLTg5NjgtYjM2MDE4ZTgwNzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPpxYQ/CPECSOXb8o+QYKFik85LPXrZhUiQE 2Df45UKG2OG9ugGP4Xr3+Qx3gdIDpcP/Mr9lKnL01fo3sj99Gu8xc1fPSwDGtbym JMtpQMI+WH26dgXdOtt3gD35ljEBk8KDiehzr8AMeEOy1QclQmpUxZvRXiW59oCY 3oPYvpEPILqS7ukWF3sseD/N+DXOlmGzptcuVJKW5k59iNuD/beO0embAIUdaYVm J1F7aMAiavjHj9kqio+R8VBnj3z0zQLd+xIdlX2/VE1THPJbqtTvFf/Gle7v+BnB /zzN7iq+dP5z4t85pDlzxzk0sgVJw+c3epuQM97LVSY0I9FbhQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOw6DXwAUY35QJzpoDvzkq12CgvaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGIzZTQ1NzQtOGEzMS0z NjlkLTlhMzUtNWNkZmM2MTg1MTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAgjM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK8H4sVW1zeTgaHsyY/wuc74jK9MDhfJ3pgV++xLdKV0s+7BSLH7 2OIu9nvYlj07d6I3xXMktLF+1lb3icudQdotEJpSHkQXQZRcAsBUHm4ert/PxLV3 Qn0fHwOzzlrn3IO73SHfLn7ttZrR6HeJatuTHV43GoA2DZBhz8RZPz/xckpf8Jgi Nx9EvySSyXCbVR3TMbzNfIez1rrqN2wf3/adjDSEtc8wjxDu5uA7eOwo55FTLdGG JStJpt7L0C5ElKxyiHnjmv2lsrmYQjNW4xppn14W8fzV+2mRXDxAR7/JMRau6nQv e3A0BqgBjc/qBE2e1hM/iYd3YTmxV9f/R58= -----END CERTIFICATE-----Generated at Sat Sep 26 12:21:10 2026 by rpki-client