$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a5f68c5-8bb9-3d25-b4f1-f10b02704d68.roa File: 1a5f68c5-8bb9-3d25-b4f1-f10b02704d68.roa (raw, json) Hash identifier: /ZfyOTYgFQLTSDUy1C2NH9d+VgSLsVQQV1ezabtFMVg= Subject key identifier: E3:B7:DD:73:F3:1C:EB:40:57:12:57:F6:DC:9F:31:DA:D3:77:A1:5F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4987D435E130BE054AD02280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a5f68c5-8bb9-3d25-b4f1-f10b02704d68.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36625 IP address blocks: 2001:502:1ca1::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:d4:35:e1:30:be:05:4a:d0:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4d134dc3-c5c7-4223-a0bd-2c4542ab132f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:22:a2:06:05:bc:e3:0c:58:b3:30:f8:2d:48: 83:99:63:56:42:ac:0e:57:52:1a:58:da:a6:02:17: 12:8b:a3:4f:6c:7c:11:7d:34:e8:12:7d:e6:e7:e0: 7f:40:a4:af:64:33:cb:3a:e4:36:a3:0c:a1:3d:3f: 20:2a:95:54:05:73:23:57:a5:29:75:42:75:de:dd: f7:2c:2d:a7:c5:84:bc:31:75:21:8e:59:3b:5d:a7: 33:8a:ab:28:ba:6b:0a:db:8f:3f:25:30:dc:90:76: 13:a6:ba:6d:7e:fd:a1:d1:db:e6:19:56:e4:bb:0e: ab:19:7c:eb:07:b5:4a:dd:a9:90:5e:c7:be:e7:30: af:b4:58:2b:b0:b6:83:80:70:97:8e:13:c5:dc:bc: d2:b7:86:96:f5:04:f1:2a:6b:ef:f4:2b:bd:05:8e: 3a:29:6d:da:74:a8:aa:2a:52:10:7d:c2:22:02:7c: 7f:f6:87:fd:ed:7e:a2:53:b3:a4:74:9a:0d:f6:54: 3c:5f:c8:e6:df:d4:b6:49:7a:4c:5e:4d:dc:ab:6f: 33:42:02:93:d5:05:cf:ed:f6:d1:38:99:a4:15:85: 8a:b2:ce:f2:d1:9c:00:04:73:d3:fc:ea:8f:36:a4: 6d:eb:a0:ca:b2:f1:84:16:22:51:07:28:3b:bb:ea: e6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B7:DD:73:F3:1C:EB:40:57:12:57:F6:DC:9F:31:DA:D3:77:A1:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a5f68c5-8bb9-3d25-b4f1-f10b02704d68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:c2:c0:fa:df:0a:89:e6:4e:8e:79:98:b2:49:f6:3d:16:59: 34:1b:a6:da:b6:35:09:3e:ec:b7:36:16:2e:07:4e:ca:81:92: 9e:b9:62:f8:84:55:db:f1:c7:cf:e0:3b:11:b6:43:6b:9d:fa: c2:3b:7a:7d:ea:01:bf:ea:2e:a7:df:2a:f0:d8:61:22:d4:68: 02:67:28:c0:d6:ae:d5:57:5b:19:c2:f1:cb:62:7c:68:0a:8e: be:05:75:2a:43:3f:73:b8:95:3b:e8:7e:e8:cd:f6:56:4a:ca: 8a:65:ac:30:35:f6:03:62:c6:a3:c1:76:94:8d:79:7e:70:99: d0:3c:57:72:bf:b0:0c:5a:9b:ec:fe:db:f4:a6:c2:8f:95:d4: 91:f8:20:9d:eb:5e:c2:07:f6:7c:96:b0:6c:b6:0c:1d:0c:81: 4f:2f:1a:d6:36:cb:89:11:ae:3b:a2:7e:82:b0:fe:08:bf:b4: 45:2b:2f:49:63:3a:14:b9:4a:dd:85:9f:33:88:24:d8:6e:2c: c9:06:24:df:22:a3:c6:e6:c8:e5:70:7a:86:97:fb:00:a3:d8: 81:c7:49:bc:1c:56:84:cd:46:49:bd:2f:17:a4:8a:92:1c:4f: 7c:04:49:3a:3f:23:b9:04:ad:4c:cc:44:d1:a4:a3:e6:38:3a: c1:85:1d:5c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9Jh9Q14TC+BUrQIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGQxMzRkYzMtYzVjNy00MjIzLWEwYmQtMmM0NTQyYWIxMzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyKiBgW84wxYszD4LUiDmWNWQqwOV1IaWNqm AhcSi6NPbHwRfTToEn3m5+B/QKSvZDPLOuQ2owyhPT8gKpVUBXMjV6UpdUJ13t33 LC2nxYS8MXUhjlk7XacziqsoumsK248/JTDckHYTprptfv2h0dvmGVbkuw6rGXzr B7VK3amQXse+5zCvtFgrsLaDgHCXjhPF3LzSt4aW9QTxKmvv9Cu9BY46KW3adKiq KlIQfcIiAnx/9of97X6iU7OkdJoN9lQ8X8jm39S2SXpMXk3cq28zQgKT1QXP7fbR OJmkFYWKss7y0ZwABHPT/OqPNqRt66DKsvGEFiJRByg7u+rmNwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOO33XPzHOtAVxJX9tyfMdrTd6FfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWE1ZjY4YzUtOGJiOS0z ZDI1LWI0ZjEtZjEwYjAyNzA0ZDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAhyh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBSwsD63wqJ5k6OeZiySfY9Flk0G6batjUJPuy3 NhYuB07KgZKeuWL4hFXb8cfP4DsRtkNrnfrCO3p96gG/6i6n3yrw2GEi1GgCZyjA 1q7VV1sZwvHLYnxoCo6+BXUqQz9zuJU76H7ozfZWSsqKZawwNfYDYsajwXaUjXl+ cJnQPFdyv7AMWpvs/tv0psKPldSR+CCd617CB/Z8lrBstgwdDIFPLxrWNsuJEa47 on6CsP4Iv7RFKy9JYzoUuUrdhZ8ziCTYbizJBiTfIqPG5sjlcHqGl/sAo9iBx0m8 HFaEzUZJvS8XpIqSHE98BEk6PyO5BK1MzETRpKPmODrBhR1c -----END CERTIFICATE-----Generated at Sun Sep 27 05:56:06 2026 by rpki-client