$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f552cfc-f93a-3c4b-bb1b-f78f8beca2e5.roa File: 2f552cfc-f93a-3c4b-bb1b-f78f8beca2e5.roa (raw, json) Hash identifier: wgkjOWVe0u/o7g0H1o+jr35eY46gscozJZwf+sXCe8E= Subject key identifier: CE:B7:40:C5:17:FC:3B:94:00:D9:AA:96:05:53:38:BA:56:48:6B:42 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F49735EB14340857617587C80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f552cfc-f93a-3c4b-bb1b-f78f8beca2e5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396555 IP address blocks: 2001:501:8a29::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:5e:b1:43:40:85:76:17:58:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0ba17f40-87fd-44ea-94cf-d96871e418d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:64:00:95:3c:74:bc:19:d3:70:d8:a9:c1:3c: 8d:b1:34:ae:c8:02:5c:d9:23:3f:99:9a:25:a3:b2: d1:ef:b5:f1:22:21:4d:e1:6a:6c:af:b5:62:62:0b: ac:5c:06:4b:bc:ad:f9:bd:1c:70:07:dc:a5:01:7b: 8f:d3:77:e7:f3:3e:b8:13:66:f1:29:24:0d:1d:1c: 67:c1:b5:a8:ea:34:5b:4d:36:9d:d3:31:1f:f6:99: 24:33:0d:90:4d:79:85:58:ab:2f:54:fa:7a:fa:46: 57:e0:a8:82:60:0f:06:3c:2b:36:36:f9:18:7d:3e: aa:1c:4b:fb:a8:04:30:cd:d0:aa:b5:c3:49:20:1a: 7d:01:13:10:68:4b:1d:d6:ea:13:fa:10:78:a4:4a: 50:4b:40:d5:77:05:4f:bf:28:4e:2a:5c:1a:a7:1d: 94:7a:72:19:9e:f3:dd:e3:93:dc:f1:a7:4c:02:80: e6:e3:e2:2a:93:18:96:29:3a:0c:a1:7b:3d:f0:98: e2:d2:84:62:0d:8d:83:18:b8:82:3b:89:1d:0e:d2: 75:f6:aa:99:ba:9b:00:37:d5:f4:f5:bd:4b:d1:47: 9e:bc:f1:3a:5c:29:64:49:c6:50:0a:1b:4a:cf:6a: 02:f1:62:9c:8a:c2:27:43:99:ba:dc:05:6e:b3:a1: 4f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B7:40:C5:17:FC:3B:94:00:D9:AA:96:05:53:38:BA:56:48:6B:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f552cfc-f93a-3c4b-bb1b-f78f8beca2e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:71:4d:3e:d6:83:7b:cd:65:05:96:60:e5:d2:4d:ef:98:7e: 32:f2:a1:af:20:15:76:65:98:6e:e3:8e:22:ad:5a:58:e7:fd: c0:e1:66:44:8c:dc:89:7f:64:cb:50:1c:62:24:35:81:07:b2: b0:9a:52:7f:e5:3f:a2:a4:e4:75:44:cb:7e:1d:98:6c:53:c5: 4c:31:f3:51:64:c9:8b:77:a9:4a:c1:43:f1:6d:a1:8b:8b:ff: 3f:11:00:23:f8:4f:c8:d5:62:ba:73:cd:dd:f1:a0:00:1f:c8: 00:e0:24:36:4d:9d:e2:af:d9:5c:63:52:d9:cf:8a:c7:2a:1d: 54:c8:e8:ce:1f:c2:7e:4f:2a:a1:c9:99:97:8e:5a:8e:c0:0d: c5:df:bc:82:d5:b3:79:5a:83:10:fb:03:1d:65:cc:58:94:19: a4:68:c2:fc:b7:d5:95:41:eb:37:26:c8:c1:2d:75:1a:3c:39: 67:d3:2a:a0:82:f8:c0:8b:c3:9a:cd:0a:ec:7b:74:a0:db:f1: 52:6f:90:03:d6:42:73:5e:69:c9:c9:f2:a9:9d:e4:18:21:2a: 2f:b8:db:2e:3e:cb:d0:31:a9:4c:e6:3d:6e:63:a3:d0:cd:94: 17:83:a8:57:ea:b8:31:9f:d6:ad:8a:10:b4:cc:23:e3:e3:38: e2:e4:63:da -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc16xQ0CFdhdYfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGJhMTdmNDAtODdmZC00NGVhLTk0Y2YtZDk2ODcxZTQxOGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWQAlTx0vBnTcNipwTyNsTSuyAJc2SM/mZol o7LR77XxIiFN4Wpsr7ViYgusXAZLvK35vRxwB9ylAXuP03fn8z64E2bxKSQNHRxn wbWo6jRbTTad0zEf9pkkMw2QTXmFWKsvVPp6+kZX4KiCYA8GPCs2NvkYfT6qHEv7 qAQwzdCqtcNJIBp9ARMQaEsd1uoT+hB4pEpQS0DVdwVPvyhOKlwapx2UenIZnvPd 45Pc8adMAoDm4+IqkxiWKToMoXs98Jji0oRiDY2DGLiCO4kdDtJ19qqZupsAN9X0 9b1L0UeevPE6XClkScZQChtKz2oC8WKcisInQ5m63AVus6FPEwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM63QMUX/DuUANmqlgVTOLpWSGtCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmY1NTJjZmMtZjkzYS0z YzRiLWJiMWItZjc4ZjhiZWNhMmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAYop MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF1xTT7Wg3vNZQWWYOXSTe+YfjLyoa8gFXZlmG7jjiKtWljn/cDh ZkSM3Il/ZMtQHGIkNYEHsrCaUn/lP6Kk5HVEy34dmGxTxUwx81FkyYt3qUrBQ/Ft oYuL/z8RACP4T8jVYrpzzd3xoAAfyADgJDZNneKv2VxjUtnPiscqHVTI6M4fwn5P KqHJmZeOWo7ADcXfvILVs3lagxD7Ax1lzFiUGaRowvy31ZVB6zcmyMEtdRo8OWfT KqCC+MCLw5rNCux7dKDb8VJvkAPWQnNeacnJ8qmd5BghKi+42y4+y9AxqUzmPW5j o9DNlBeDqFfquDGf1q2KELTMI+PjOOLkY9o= -----END CERTIFICATE-----Generated at Thu Oct 1 15:07:02 2026 by rpki-client