$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28f4fc42-3f49-332d-9bd5-b4434487e138.roa File: 28f4fc42-3f49-332d-9bd5-b4434487e138.roa (raw, json) Hash identifier: JWwgFzTZfQjSFuWUEoPNw/U7G8HLZnRXzclTOaygNVw= Subject key identifier: 43:F1:6C:5D:60:F4:DB:FB:AD:9A:0D:F8:6B:68:7C:2C:50:9F:B5:0F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F119CE1667FB875EDE89A6C80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28f4fc42-3f49-332d-9bd5-b4434487e138.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 396586 IP address blocks: 2001:502:8cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:e1:66:7f:b8:75:ed:e8:9a:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=4d71aa80-4fdf-49a7-be17-1267022cdb16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:de:50:51:b3:22:60:8b:ad:e4:00:56:39:9d: 82:98:13:02:22:e2:ea:10:b9:33:bc:2d:7d:50:8c: bc:ef:d0:37:14:c1:f5:d3:38:66:2b:7b:bd:e2:11: 5f:a3:88:0e:58:b5:23:6c:a9:51:06:ef:ce:89:18: 95:3b:9f:ce:d7:d8:dd:60:fb:42:4c:7c:25:f7:54: 4f:ee:12:bf:40:8b:30:ee:db:11:1a:2d:d4:0a:08: a2:06:55:2f:9f:94:f8:13:c8:a9:2f:25:0e:c0:76: 00:1f:be:04:8f:e6:7d:5e:f6:95:b4:13:65:57:e6: 33:95:4a:a6:de:0f:1f:d6:48:62:cf:4f:9a:e0:46: 56:59:b5:a0:2b:7c:23:95:0b:7d:db:2c:2c:b4:38: 71:56:dc:d6:1b:06:be:fd:e9:f2:87:79:02:42:af: 10:08:32:55:2f:89:c0:5d:64:79:5c:8b:4e:41:15: 8e:8a:f9:f9:5f:4c:5d:de:10:c3:c7:89:75:b2:3b: fd:88:7c:22:b7:b3:5c:5e:91:51:9a:82:2e:d8:96: d7:00:50:81:e0:a1:61:5d:b1:0f:64:ae:42:61:7e: a9:15:65:0d:72:c1:db:92:b1:0c:49:3b:b7:33:4b: f3:17:bd:62:97:d9:0d:e6:5c:4b:53:be:cf:3b:f3: c4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F1:6C:5D:60:F4:DB:FB:AD:9A:0D:F8:6B:68:7C:2C:50:9F:B5:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28f4fc42-3f49-332d-9bd5-b4434487e138.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:0d:ba:67:60:38:ab:f5:d1:48:c4:cf:5a:bc:74:c0:3c:ba: b7:82:13:cd:13:8c:5f:3d:e3:31:8b:e2:18:3d:5d:6b:1c:2a: cb:81:45:66:ea:7d:4a:34:25:0c:8d:f4:9c:a4:ea:66:94:c4: 2f:29:49:68:b2:60:ce:61:1c:a6:8d:f6:72:9e:7f:db:2b:a4: 4b:cc:bd:43:af:b9:7a:61:34:8b:e9:96:9a:57:80:ca:2c:46: 8d:85:b3:be:da:34:bf:7f:7a:d2:ac:50:4a:67:2c:3c:70:f0: 2e:fa:b5:90:57:51:3c:21:fd:d5:d1:1e:36:ed:c7:29:f7:ba: 23:11:c0:3a:b0:21:70:28:a8:93:10:f8:a7:38:00:7e:5c:35: fd:75:73:80:63:77:8f:28:68:cd:39:0b:f5:6b:62:75:77:5a: e8:53:36:a4:67:d7:28:ca:3a:73:46:69:b5:71:aa:00:35:fa: b8:66:10:15:89:0e:65:58:9d:94:74:bf:f5:60:27:2e:56:4a: ea:62:81:7f:3e:2e:8e:3e:d0:7a:c8:d0:b3:65:68:29:c5:f4: 46:5a:a1:91:5d:1a:a0:4f:8c:0f:d4:0c:71:f7:a1:52:f1:0a: 5a:64:f1:75:6e:5c:1c:b5:2b:b2:23:4e:2e:6a:39:80:84:f9: ab:34:bc:f1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8RnOFmf7h17eiabIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NGQ3MWFhODAtNGZkZi00OWE3LWJlMTctMTI2NzAyMmNkYjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr95QUbMiYIut5ABWOZ2CmBMCIuLqELkzvC19 UIy879A3FMH10zhmK3u94hFfo4gOWLUjbKlRBu/OiRiVO5/O19jdYPtCTHwl91RP 7hK/QIsw7tsRGi3UCgiiBlUvn5T4E8ipLyUOwHYAH74Ej+Z9XvaVtBNlV+YzlUqm 3g8f1khiz0+a4EZWWbWgK3wjlQt92ywstDhxVtzWGwa+/enyh3kCQq8QCDJVL4nA XWR5XItOQRWOivn5X0xd3hDDx4l1sjv9iHwit7NcXpFRmoIu2JbXAFCB4KFhXbEP ZK5CYX6pFWUNcsHbkrEMSTu3M0vzF71il9kN5lxLU77PO/PE/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEPxbF1g9Nv7rZoN+GtofCxQn7UPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjhmNGZjNDItM2Y0OS0z MzJkLTliZDUtYjQ0MzQ0ODdlMTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAgjM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALcNumdgOKv10UjEz1q8dMA8ureCE80TjF894zGL4hg9XWscKsuB RWbqfUo0JQyN9Jyk6maUxC8pSWiyYM5hHKaN9nKef9srpEvMvUOvuXphNIvplppX gMosRo2Fs77aNL9/etKsUEpnLDxw8C76tZBXUTwh/dXRHjbtxyn3uiMRwDqwIXAo qJMQ+Kc4AH5cNf11c4Bjd48oaM05C/VrYnV3WuhTNqRn1yjKOnNGabVxqgA1+rhm EBWJDmVYnZR0v/VgJy5WSupigX8+Lo4+0HrI0LNlaCnF9EZaoZFdGqBPjA/UDHH3 oVLxClpk8XVuXBy1K7IjTi5qOYCE+as0vPE= -----END CERTIFICATE-----Generated at Thu Sep 24 21:08:52 2026 by rpki-client