$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29590919-e5c0-3890-868f-f468198a7453.roa File: 29590919-e5c0-3890-868f-f468198a7453.roa (raw, json) Hash identifier: e2vv3hagC6p+e+EmR9DbMIwHA+tPT8jbsOHOz6hFyK4= Subject key identifier: 9B:FA:62:20:D1:80:49:4A:56:7F:07:DF:AB:AF:77:F1:21:B4:56:4F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F2D87DEC14C61795FDE011200 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29590919-e5c0-3890-868f-f468198a7453.roa Signing time: Tue 15 Sep 2026 01:00:12 +0000 ROA not before: Tue 15 Sep 2026 01:00:12 +0000 ROA not after: Mon 14 Dec 2026 02:00:12 +0000 asID: 211369 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2d:87:de:c1:4c:61:79:5f:de:01:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 15 01:00:12 2026 GMT Not After : Dec 14 02:00:12 2026 GMT Subject: CN=cee93723-d2d1-469b-b6f1-ee5218b8126e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b3:bd:81:1e:4d:bf:54:81:10:25:f2:32:0a: 85:6f:d9:dd:14:c7:4a:b8:94:9c:8b:3d:bf:b4:ae: 43:ee:33:b8:4a:32:95:48:4a:95:7f:6b:b8:06:dc: 09:ca:5c:39:92:2c:30:b2:f7:b3:9b:d5:a3:08:ba: ee:32:a1:0e:5b:73:c3:62:9e:41:44:5f:d6:bb:eb: 80:71:7c:75:ac:8d:ff:9b:a0:4d:13:a3:d4:19:40: 18:12:ed:88:25:8c:b5:b7:a2:28:00:ef:45:67:cb: 33:30:29:67:db:5c:54:7c:1d:09:b2:ce:ea:aa:4c: c1:af:a4:75:df:a4:4a:a5:b4:99:a2:89:95:7e:41: 30:72:37:4f:46:17:d5:f6:10:4a:26:27:f1:44:3b: cd:82:58:9b:84:e9:24:11:b4:5e:03:99:fb:43:b9: 54:80:96:ac:f6:2d:5d:24:70:f8:b0:f8:02:b7:30: ce:d2:88:e5:f0:e3:7e:2e:bf:a5:94:52:41:9a:51: 33:e8:3c:30:82:4e:b0:60:e7:01:42:84:05:34:cd: e4:c9:6d:de:99:82:2c:14:3e:09:ce:3c:fb:a5:42: 4f:60:db:a9:37:11:7c:a3:0f:94:94:e8:79:22:f1: 7b:0c:fc:03:7d:df:3c:68:7c:e5:13:99:09:b5:37: e3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:FA:62:20:D1:80:49:4A:56:7F:07:DF:AB:AF:77:F1:21:B4:56:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29590919-e5c0-3890-868f-f468198a7453.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:88:68:94:53:e7:11:29:31:c9:a2:bc:23:9f:80:73:0f:50: 2e:56:d0:62:97:0c:26:e2:08:e3:31:a0:d2:5e:24:10:b5:c9: e6:f5:d0:7f:32:0c:ec:8e:46:8b:50:a9:b1:61:71:f6:1a:fd: b0:4f:df:0f:fb:03:ec:79:89:63:7d:f1:be:84:bf:d3:c5:d9: d0:09:aa:17:28:0a:bf:76:c9:ba:2d:66:19:e5:42:fa:c7:4b: db:b0:45:74:43:56:ec:ea:d1:2d:73:8d:bd:d9:a2:95:e8:6d: 57:0f:db:37:ed:a9:cc:cb:5c:e7:b0:67:fb:c4:07:2f:d8:cb: 0c:f7:0a:cf:8e:18:5c:51:a0:7d:7d:48:29:9d:f0:45:a0:d6: 7b:f0:6e:7c:0d:8d:ff:10:b4:5c:ce:cc:9c:1d:51:08:f5:02: bc:32:33:51:aa:8c:8f:1d:19:3d:bb:e6:8e:fc:fc:59:21:be: 7e:ef:cb:ae:36:f1:07:00:ce:dc:7a:9d:c6:f9:ed:e0:8e:96: 22:37:1e:f0:3b:58:e2:70:3a:54:1f:f0:8f:d4:29:5f:08:f7: 9a:1b:93:76:ea:12:97:8c:34:a5:db:c7:77:f3:eb:0d:43:5f: 2b:87:bf:52:e0:84:bb:b3:10:c5:88:9c:1a:75:ba:90:06:fb: 66:6b:94:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8th97BTGF5X94BEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkxNTAxMDAxMloXDTI2MTIxNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2VlOTM3MjMtZDJkMS00NjliLWI2ZjEtZWU1MjE4YjgxMjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbO9gR5Nv1SBECXyMgqFb9ndFMdKuJSciz2/ tK5D7jO4SjKVSEqVf2u4BtwJylw5kiwwsvezm9WjCLruMqEOW3PDYp5BRF/Wu+uA cXx1rI3/m6BNE6PUGUAYEu2IJYy1t6IoAO9FZ8szMCln21xUfB0Jss7qqkzBr6R1 36RKpbSZoomVfkEwcjdPRhfV9hBKJifxRDvNglibhOkkEbReA5n7Q7lUgJas9i1d JHD4sPgCtzDO0ojl8ON+Lr+llFJBmlEz6Dwwgk6wYOcBQoQFNM3kyW3emYIsFD4J zjz7pUJPYNupNxF8ow+UlOh5IvF7DPwDfd88aHzlE5kJtTfjTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJv6YiDRgElKVn8H36uvd/EhtFZPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjk1OTA5MTktZTVjMC0z ODkwLTg2OGYtZjQ2ODE5OGE3NDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFKIaJRT5xEpMcmivCOfgHMPUC5W0GKXDCbiCOMxoNJeJBC1yeb1 0H8yDOyORotQqbFhcfYa/bBP3w/7A+x5iWN98b6Ev9PF2dAJqhcoCr92ybotZhnl QvrHS9uwRXRDVuzq0S1zjb3ZopXobVcP2zftqczLXOewZ/vEBy/Yywz3Cs+OGFxR oH19SCmd8EWg1nvwbnwNjf8QtFzOzJwdUQj1ArwyM1GqjI8dGT275o78/Fkhvn7v y6428QcAztx6ncb57eCOliI3HvA7WOJwOlQf8I/UKV8I95obk3bqEpeMNKXbx3fz 6w1DXyuHv1LghLuzEMWInBp1upAG+2ZrlE4= -----END CERTIFICATE-----Generated at Sun Sep 27 04:04:52 2026 by rpki-client