$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/289088e7-2494-30b1-ae68-ca383973f1d7.roa File: 289088e7-2494-30b1-ae68-ca383973f1d7.roa (raw, json) Hash identifier: BF41umnacwTrVtTNLe9IfA5BxQeZ7houReQLhXp/lgk= Subject key identifier: E2:A0:44:81:FD:40:D1:94:4B:69:23:B7:12:B7:FF:C9:18:30:E9:0B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F15CCFBCD79F1F0CB81D07480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/289088e7-2494-30b1-ae68-ca383973f1d7.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 397197 IP address blocks: 2001:502:cbe4::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cc:fb:cd:79:f1:f0:cb:81:d0:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=8ba97eaf-5e5a-4a24-8f7d-df343b09800d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7c:73:7d:52:f8:fc:6e:b3:10:c3:92:ca:79: fe:f0:54:72:99:ff:6f:4d:e0:c0:76:71:59:92:e2: 66:a6:ef:67:9a:79:9b:58:77:1b:45:8d:35:71:d4: b7:2b:b3:dd:f5:af:aa:1b:3e:89:de:b5:4e:a5:94: 1e:09:59:c5:c7:d2:47:1f:5a:38:0a:9d:5a:47:81: e3:6c:8f:e1:db:23:e8:6e:3d:60:81:48:5a:92:c6: b9:68:a6:45:4d:22:88:e7:72:f2:01:01:dd:9b:65: 08:88:6e:fa:77:03:d6:3c:43:88:6d:26:c3:fc:f7: 96:bd:06:c9:05:c2:02:c6:bb:45:38:00:5d:ca:a9: 87:dd:3b:38:16:23:07:f2:1c:a6:f0:92:5e:c2:a1: 2c:f7:1f:23:51:dc:ac:8f:5a:20:32:ea:bc:1a:32: 53:e8:40:43:ed:64:91:2a:26:04:1f:37:7a:8b:e9: 83:c9:27:a3:6c:67:8c:4a:50:99:2a:de:0d:95:3c: 30:76:75:d3:49:d7:31:59:63:df:fd:43:42:27:cb: 7f:59:56:41:bb:4c:25:c4:90:02:bf:b5:dd:de:3e: 9e:e3:d3:21:61:74:5b:70:ab:79:19:88:ea:f7:d7: c4:7d:f0:f9:e2:b3:49:1f:52:af:47:ff:7d:ba:66: 6a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A0:44:81:FD:40:D1:94:4B:69:23:B7:12:B7:FF:C9:18:30:E9:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/289088e7-2494-30b1-ae68-ca383973f1d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:ad:d8:b2:db:9b:74:4a:69:33:2e:83:b4:01:13:4f:29:a9: 98:ef:25:da:68:c0:e5:c8:95:73:52:95:fd:a9:e4:a0:d1:0a: 39:66:5c:52:2c:cd:5b:75:8e:62:57:bc:e6:89:28:05:90:6b: 72:88:a2:47:4a:6a:c7:e5:21:54:29:9c:17:c4:11:52:30:4f: c2:b0:9f:12:ab:00:59:67:7b:fb:6b:a2:24:51:01:93:97:df: 0f:ba:13:ca:71:e9:04:d4:54:bd:01:fc:bc:47:86:db:fa:43: cb:6f:b1:00:e8:8e:be:30:9f:20:e5:34:c1:51:46:ef:57:21: 84:aa:5f:2b:02:32:62:b6:28:94:a9:bc:d9:9b:28:34:8b:06: 5e:c1:01:dc:3b:b6:52:ef:af:77:97:1c:7b:5f:00:48:17:42: 13:e3:4f:2f:57:cf:6d:50:0c:c1:60:80:7f:96:82:ea:40:08: 39:c0:9f:a5:1b:eb:e4:c1:ed:f9:13:98:0e:72:37:ea:fe:87: 37:96:a0:18:47:02:95:1a:7c:ed:63:19:8a:5d:42:15:49:01: 03:93:94:a4:76:cf:d9:58:26:2b:7a:ba:9c:03:19:16:47:78: 91:95:18:4a:22:a7:aa:92:75:02:55:d5:b4:a8:37:a0:8e:8f: d6:ad:42:ed -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8VzPvNefHwy4HQdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk OGJhOTdlYWYtNWU1YS00YTI0LThmN2QtZGYzNDNiMDk4MDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonxzfVL4/G6zEMOSynn+8FRymf9vTeDAdnFZ kuJmpu9nmnmbWHcbRY01cdS3K7Pd9a+qGz6J3rVOpZQeCVnFx9JHH1o4Cp1aR4Hj bI/h2yPobj1ggUhaksa5aKZFTSKI53LyAQHdm2UIiG76dwPWPEOIbSbD/PeWvQbJ BcICxrtFOABdyqmH3Ts4FiMH8hym8JJewqEs9x8jUdysj1ogMuq8GjJT6EBD7WSR KiYEHzd6i+mDySejbGeMSlCZKt4NlTwwdnXTSdcxWWPf/UNCJ8t/WVZBu0wlxJAC v7Xd3j6e49MhYXRbcKt5GYjq99fEffD54rNJH1KvR/99umZqQQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOKgRIH9QNGUS2kjtxK3/8kYMOkLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjg5MDg4ZTctMjQ5NC0z MGIxLWFlNjgtY2EzODM5NzNmMWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC+rdiy25t0SmkzLoO0ARNPKamY7yXaaMDlyJVz UpX9qeSg0Qo5ZlxSLM1bdY5iV7zmiSgFkGtyiKJHSmrH5SFUKZwXxBFSME/CsJ8S qwBZZ3v7a6IkUQGTl98PuhPKcekE1FS9Afy8R4bb+kPLb7EA6I6+MJ8g5TTBUUbv VyGEql8rAjJitiiUqbzZmyg0iwZewQHcO7ZS7693lxx7XwBIF0IT408vV89tUAzB YIB/loLqQAg5wJ+lG+vkwe35E5gOcjfq/oc3lqAYRwKVGnztYxmKXUIVSQEDk5Sk ds/ZWCYrerqcAxkWR3iRlRhKIqeqknUCVdW0qDegjo/WrULt -----END CERTIFICATE-----Generated at Tue Sep 29 11:54:38 2026 by rpki-client