$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e7b2e49-6dad-32de-84f5-64e01ca2ea78.roa File: 1e7b2e49-6dad-32de-84f5-64e01ca2ea78.roa (raw, json) Hash identifier: dedeKFE7k6t2UGUP32MFv6c1biyz6JgNukIQ2YJ7kys= Subject key identifier: 14:1E:8E:77:EC:4D:C7:F5:31:97:E9:EA:C6:1E:43:71:07:9A:FE:69 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F23C2833A48EC23A5A86ABDE0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e7b2e49-6dad-32de-84f5-64e01ca2ea78.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 396610 IP address blocks: 2001:501:8a29::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:83:3a:48:ec:23:a5:a8:6a:bd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=471afe55-ae2d-4b47-a707-f0c1f42457da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e0:90:b5:f1:c3:c6:95:2d:d8:fe:29:a4:95: 2b:64:17:8e:1c:58:fb:9b:f1:5a:e6:e3:ef:d2:83: 08:b0:68:7e:70:ea:7d:1d:72:3e:c4:75:e7:11:96: 4c:34:80:32:ff:91:b7:52:ba:7e:25:34:0e:2a:f0: 44:b5:4c:3d:43:38:12:27:d0:57:8d:f9:14:d3:c9: 9a:c9:53:52:44:85:7d:39:e9:24:76:3b:22:96:23: 36:6e:02:68:c3:d7:f5:7f:8e:ec:01:93:73:ea:6f: 12:36:61:50:47:99:8e:d3:92:8c:59:c6:50:05:95: bf:aa:95:eb:1d:ce:7c:3c:1f:da:1d:ec:a4:23:92: ef:2e:04:4c:78:ad:67:59:c8:1d:ca:54:1f:8b:8d: 1b:1a:33:3e:0d:d2:02:80:b5:70:3d:20:c8:96:4f: 4b:a1:a1:35:0d:57:02:a9:6b:cd:78:57:47:d1:03: e3:95:74:f0:2b:02:21:be:fc:80:4d:89:ec:d2:bf: 45:86:fb:88:ab:65:93:5c:3b:4a:4d:27:d9:f2:fd: 43:90:1d:e1:2d:83:86:ed:bc:77:af:cc:db:bd:6d: 23:c8:5d:72:40:0c:9b:84:40:0f:fa:aa:8f:ac:da: 4b:97:25:46:46:5f:db:f0:96:fe:31:27:a7:1f:0e: 10:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:1E:8E:77:EC:4D:C7:F5:31:97:E9:EA:C6:1E:43:71:07:9A:FE:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e7b2e49-6dad-32de-84f5-64e01ca2ea78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:a2:8a:17:d6:25:07:94:5c:54:a0:ff:7a:3f:40:39:49:6f: ad:d7:fe:54:c3:0f:63:09:be:e4:af:9a:fd:ca:e9:c0:23:b1: 27:25:1f:ef:06:78:13:79:e2:0d:bf:3d:13:0e:b7:10:28:3c: 89:d3:20:a2:bd:e3:a3:5f:7e:3b:c6:9b:fa:57:b5:ad:39:8b: 1d:62:1b:4a:9d:1c:84:0c:a4:c7:9c:44:01:c7:78:7d:eb:5e: 71:bd:f0:ad:8c:51:be:64:24:9b:71:05:7b:33:0a:33:98:bb: 7d:89:e4:7e:d0:21:ac:dc:29:31:56:0f:07:30:f6:67:84:d8: fc:88:69:a0:1c:6d:fb:38:d0:18:2d:36:da:a1:17:b2:5b:31: 8f:e9:2d:4f:e2:be:44:9c:43:b8:93:d1:9f:21:7b:9f:ec:ab: 7c:38:a9:cc:73:20:59:e0:a1:4a:44:64:49:ce:fa:d6:bb:fe: dd:9f:71:d0:51:0a:b2:51:87:92:a6:90:19:3b:ca:ce:24:c2: b7:d5:ad:47:f6:88:eb:5a:eb:a7:5e:49:10:fa:c2:f6:44:59: 10:89:9a:c2:96:30:a0:e6:c6:b9:ca:b4:ea:63:e0:9d:89:4b: d7:fc:29:33:fe:24:70:ce:70:4c:61:b4:23:3a:30:80:fe:e1: 26:3b:f4:17 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8jwoM6SOwjpahqveAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk NDcxYWZlNTUtYWUyZC00YjQ3LWE3MDctZjBjMWY0MjQ1N2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+CQtfHDxpUt2P4ppJUrZBeOHFj7m/Fa5uPv 0oMIsGh+cOp9HXI+xHXnEZZMNIAy/5G3Urp+JTQOKvBEtUw9QzgSJ9BXjfkU08ma yVNSRIV9OekkdjsiliM2bgJow9f1f47sAZNz6m8SNmFQR5mO05KMWcZQBZW/qpXr Hc58PB/aHeykI5LvLgRMeK1nWcgdylQfi40bGjM+DdICgLVwPSDIlk9LoaE1DVcC qWvNeFdH0QPjlXTwKwIhvvyATYns0r9FhvuIq2WTXDtKTSfZ8v1DkB3hLYOG7bx3 r8zbvW0jyF1yQAybhEAP+qqPrNpLlyVGRl/b8Jb+MSenHw4QGwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBQejnfsTcf1MZfp6sYeQ3EHmv5pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWU3YjJlNDktNmRhZC0z MmRlLTg0ZjUtNjRlMDFjYTJlYTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCtoooX1iUHlFxUoP96P0A5SW+t1/5Uww9jCb7k r5r9yunAI7EnJR/vBngTeeINvz0TDrcQKDyJ0yCiveOjX347xpv6V7WtOYsdYhtK nRyEDKTHnEQBx3h9615xvfCtjFG+ZCSbcQV7MwozmLt9ieR+0CGs3CkxVg8HMPZn hNj8iGmgHG37ONAYLTbaoReyWzGP6S1P4r5EnEO4k9GfIXuf7Kt8OKnMcyBZ4KFK RGRJzvrWu/7dn3HQUQqyUYeSppAZO8rOJMK31a1H9ojrWuunXkkQ+sL2RFkQiZrC ljCg5sa5yrTqY+CdiUvX/Ckz/iRwznBMYbQjOjCA/uEmO/QX -----END CERTIFICATE-----Generated at Sat Sep 26 15:45:10 2026 by rpki-client