$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e3128fb-7a5f-3adf-824f-55abbfeb8f50.roa File: 1e3128fb-7a5f-3adf-824f-55abbfeb8f50.roa (raw, json) Hash identifier: c5EyOFUJbng07ybbEqGSbBs0sn6WA6dCze2aa0LYVlc= Subject key identifier: C6:FE:04:F8:58:07:77:8D:D9:06:72:2F:E1:65:B7:DF:5E:BB:EE:6E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F3CE2B0F7956101C67DD24500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e3128fb-7a5f-3adf-824f-55abbfeb8f50.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 20172 IP address blocks: 2001:501:b1f9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:b0:f7:95:61:01:c6:7d:d2:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=3be69158-1edf-4d58-a60b-1910ddf07f3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a7:0e:70:59:16:17:0c:10:71:d0:03:98:06: 29:dc:71:93:74:ff:f9:6e:f8:63:87:bd:db:6a:81: 8c:4b:03:4c:4c:e6:f6:d9:47:1c:7e:91:7d:ca:e1: df:93:ae:cf:ec:14:39:c0:b7:e4:ae:35:33:67:ca: 43:16:50:56:6e:a9:12:d5:ec:ab:71:c6:7d:b0:e3: d7:3c:7e:6b:52:61:b6:e9:71:3c:28:b1:67:bc:06: 1b:f6:03:e9:f7:6c:b7:a0:13:8d:61:76:ab:d4:84: eb:87:dc:aa:d3:d3:d3:76:97:f1:ba:bd:47:10:31: e5:1e:24:cf:48:b7:be:2f:b8:49:c4:55:47:18:00: 6e:78:62:5f:50:8d:fe:36:07:b7:ad:49:74:05:ae: 95:51:e0:2a:33:15:85:80:d1:37:ec:a9:93:94:43: 2b:c1:6c:fd:db:fe:b7:01:23:5c:64:19:74:ff:8a: 12:77:97:8e:6f:2b:71:bf:99:dd:77:84:74:c8:2e: da:a1:f2:77:66:50:8a:93:d2:f4:3e:de:66:8b:a5: 55:a4:41:02:de:2b:b4:e2:a6:75:c4:fb:c5:0d:1d: 5a:ff:df:b9:8c:54:cc:93:20:b4:3a:2b:4d:1c:bb: 33:90:6d:fc:de:0b:e6:46:d5:2d:49:a5:73:00:c4: b7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:FE:04:F8:58:07:77:8D:D9:06:72:2F:E1:65:B7:DF:5E:BB:EE:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e3128fb-7a5f-3adf-824f-55abbfeb8f50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:b1f9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:10:98:39:38:3c:f5:04:ef:fe:24:a8:6c:b8:16:19:55:e9: 8b:79:a2:87:64:80:ec:16:f1:96:f3:2f:e6:f1:04:d5:99:14: bb:08:b0:67:f1:30:9a:29:3d:5f:81:c4:04:85:06:0d:87:da: bf:57:4a:85:50:8a:e6:8a:95:7f:5e:97:58:ad:eb:89:c2:cd: 82:85:10:81:3e:4f:ec:b4:15:aa:01:e3:e9:a3:42:b7:3f:e9: b9:33:bd:36:10:49:f1:77:87:8f:37:86:73:d7:37:8c:44:29: 73:15:a2:dc:1b:b1:c8:66:f9:92:87:99:64:dd:1b:0c:53:b7: c9:e9:53:67:cf:fb:e5:d2:01:e8:99:ed:58:01:dd:a9:93:d3: a3:04:ee:8b:64:5a:98:59:ec:be:3e:da:21:63:f0:0c:1b:e9: 8b:8c:7c:a7:13:5f:42:f1:54:26:dc:81:e9:2d:57:03:e6:a8: 11:38:38:f0:95:c5:0c:ab:d1:4b:a9:46:45:93:02:c9:fd:58: e8:4e:4a:c5:56:14:c4:55:5e:c5:fb:f7:95:4b:29:e5:8b:5d: 47:25:60:f7:d1:10:c8:42:08:3a:48:19:5c:b0:d6:e2:20:eb: 2f:0f:a0:aa:40:47:eb:53:3f:9a:6e:2b:9f:f2:14:c7:50:79: 62:5c:ff:1a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE884rD3lWEBxn3SRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk M2JlNjkxNTgtMWVkZi00ZDU4LWE2MGItMTkxMGRkZjA3ZjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6cOcFkWFwwQcdADmAYp3HGTdP/5bvhjh73b aoGMSwNMTOb22UccfpF9yuHfk67P7BQ5wLfkrjUzZ8pDFlBWbqkS1eyrccZ9sOPX PH5rUmG26XE8KLFnvAYb9gPp92y3oBONYXar1ITrh9yq09PTdpfxur1HEDHlHiTP SLe+L7hJxFVHGABueGJfUI3+Nge3rUl0Ba6VUeAqMxWFgNE37KmTlEMrwWz92/63 ASNcZBl0/4oSd5eObytxv5ndd4R0yC7aofJ3ZlCKk9L0Pt5mi6VVpEEC3iu04qZ1 xPvFDR1a/9+5jFTMkyC0OitNHLszkG383gvmRtUtSaVzAMS3owIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMb+BPhYB3eN2QZyL+Flt99eu+5uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWUzMTI4ZmItN2E1Zi0z YWRmLTgyNGYtNTVhYmJmZWI4ZjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAbH5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALUQmDk4PPUE7/4kqGy4FhlV6Yt5oodkgOwW8ZbzL+bxBNWZFLsI sGfxMJopPV+BxASFBg2H2r9XSoVQiuaKlX9el1it64nCzYKFEIE+T+y0FaoB4+mj Qrc/6bkzvTYQSfF3h483hnPXN4xEKXMVotwbschm+ZKHmWTdGwxTt8npU2fP++XS AeiZ7VgB3amT06ME7otkWphZ7L4+2iFj8Awb6YuMfKcTX0LxVCbcgektVwPmqBE4 OPCVxQyr0UupRkWTAsn9WOhOSsVWFMRVXsX795VLKeWLXUclYPfREMhCCDpIGVyw 1uIg6y8PoKpAR+tTP5puK5/yFMdQeWJc/xo= -----END CERTIFICATE-----Generated at Sat Sep 26 02:24:00 2026 by rpki-client