$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c4ec453-636b-355c-881a-cb29e5a2575b.roa File: 1c4ec453-636b-355c-881a-cb29e5a2575b.roa (raw, json) Hash identifier: FOFAVUURBezSvUulWcEWlHe0diOS9ZlPexyBPPEREuA= Subject key identifier: D9:6A:C3:59:2E:88:AD:F0:46:46:72:72:24:35:3C:F7:A3:0C:1D:0D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F2D87DCF598965AC034884300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c4ec453-636b-355c-881a-cb29e5a2575b.roa Signing time: Tue 15 Sep 2026 01:00:12 +0000 ROA not before: Tue 15 Sep 2026 01:00:12 +0000 ROA not after: Mon 14 Dec 2026 02:00:12 +0000 asID: 36624 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2d:87:dc:f5:98:96:5a:c0:34:88:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 15 01:00:12 2026 GMT Not After : Dec 14 02:00:12 2026 GMT Subject: CN=39a882d5-b423-4d14-a416-ffb576a5d36b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5d:b2:7b:fe:50:93:56:a7:80:36:85:8b:b5: 0d:32:0f:6b:ed:20:77:58:e5:30:16:de:95:3d:94: 66:f9:da:94:9c:6e:dd:5c:c1:a6:17:dc:0b:8e:31: c6:b2:6e:e4:8c:16:32:6d:6d:1c:07:ca:4a:5e:31: e1:aa:26:26:3b:17:a3:8d:a7:67:b7:c8:19:07:0e: 08:72:57:9d:3f:7a:3e:72:08:ab:3c:5d:d5:c7:4a: d1:d4:72:39:d5:b1:c1:b4:48:a5:e7:55:5f:14:92: 32:46:ca:09:e8:e2:dc:c2:25:3f:42:3b:cf:b6:da: 93:08:c0:67:8b:62:bf:56:a3:4e:1a:b9:de:c2:94: 51:9d:1b:22:17:aa:8e:08:a5:7e:a3:ae:63:02:46: 71:c6:c6:67:8c:66:ca:62:dd:31:dc:b3:90:7d:cf: c9:7d:b4:79:ee:1d:ae:c9:4b:e7:08:9c:07:2d:81: 21:a4:dd:3c:29:e7:4b:5c:e0:08:e5:e0:77:69:88: a3:a4:78:c9:23:31:6f:d0:ab:18:3f:50:64:b6:0b: 07:9d:d5:ff:59:0a:eb:10:d1:69:5b:a3:54:1c:6c: 72:20:43:e2:28:50:49:e0:08:ec:d4:87:aa:4f:0c: 84:c7:e5:96:66:03:3b:8a:65:23:09:c8:36:ec:99: 7a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6A:C3:59:2E:88:AD:F0:46:46:72:72:24:35:3C:F7:A3:0C:1D:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c4ec453-636b-355c-881a-cb29e5a2575b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:01:cd:98:98:05:ea:42:c5:9a:29:24:3f:7f:08:30:c2:dd: 97:d3:55:52:16:75:7a:84:c0:d3:68:1e:53:8f:44:a4:af:9d: 5f:7d:ea:f3:1e:f9:d2:1b:63:66:d2:4e:01:17:f7:e0:71:e0: 1b:ff:14:3f:a4:f5:19:07:bd:94:0a:b8:aa:c2:48:bf:fc:bc: ac:27:e9:21:74:8d:46:a0:b0:68:15:6d:99:56:ec:76:ad:4d: 79:f1:40:9a:a4:8f:61:a6:fe:d8:4e:57:11:56:6e:ae:7a:04: f6:0f:29:18:48:84:44:ad:38:9c:9a:03:ea:5f:66:7b:bb:e3: b1:81:6a:5f:1c:d8:fe:8c:ec:47:33:cd:8b:a7:24:45:80:e2: 36:f3:67:d3:bc:fc:1c:48:a6:90:91:9e:33:46:80:f1:5b:be: 71:cc:ea:1e:68:84:a7:50:a0:37:e4:a2:25:7b:27:6f:e0:aa: 81:d8:37:a3:9a:85:bf:26:c4:66:57:dd:c8:de:2c:51:e3:82: b3:ff:9a:06:ee:d0:f8:84:63:4c:2b:46:9f:31:a9:ff:d0:b7: 10:6e:e8:0b:1f:46:f3:26:4c:2b:89:56:2c:23:e8:ea:3f:93: bd:94:2a:54:7c:f6:a7:6b:30:23:ba:35:53:e5:f9:c3:a8:d9: a4:8b:ab:25 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8th9z1mJZawDSIQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkxNTAxMDAxMloXDTI2MTIxNDAyMDAxMlowLzEtMCsGA1UEAxMk MzlhODgyZDUtYjQyMy00ZDE0LWE0MTYtZmZiNTc2YTVkMzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnF2ye/5Qk1angDaFi7UNMg9r7SB3WOUwFt6V PZRm+dqUnG7dXMGmF9wLjjHGsm7kjBYybW0cB8pKXjHhqiYmOxejjadnt8gZBw4I cledP3o+cgirPF3Vx0rR1HI51bHBtEil51VfFJIyRsoJ6OLcwiU/QjvPttqTCMBn i2K/VqNOGrnewpRRnRsiF6qOCKV+o65jAkZxxsZnjGbKYt0x3LOQfc/JfbR57h2u yUvnCJwHLYEhpN08KedLXOAI5eB3aYijpHjJIzFv0KsYP1BktgsHndX/WQrrENFp W6NUHGxyIEPiKFBJ4Ajs1IeqTwyEx+WWZgM7imUjCcg27Jl60wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNlqw1kuiK3wRkZyciQ1PPejDB0NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWM0ZWM0NTMtNjM2Yi0z NTVjLTg4MWEtY2IyOWU1YTI1NzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJsBzZiYBepCxZopJD9/CDDC3ZfTVVIWdXqEwNNoHlOPRKSvnV99 6vMe+dIbY2bSTgEX9+Bx4Bv/FD+k9RkHvZQKuKrCSL/8vKwn6SF0jUagsGgVbZlW 7HatTXnxQJqkj2Gm/thOVxFWbq56BPYPKRhIhEStOJyaA+pfZnu747GBal8c2P6M 7EczzYunJEWA4jbzZ9O8/BxIppCRnjNGgPFbvnHM6h5ohKdQoDfkoiV7J2/gqoHY N6Oahb8mxGZX3cjeLFHjgrP/mgbu0PiEY0wrRp8xqf/QtxBu6AsfRvMmTCuJViwj 6Oo/k72UKlR89qdrMCO6NVPl+cOo2aSLqyU= -----END CERTIFICATE-----Generated at Thu Sep 24 18:27:43 2026 by rpki-client