$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fcae8ee-d946-3da3-bf2c-5d7bfddd8593.roa File: 2fcae8ee-d946-3da3-bf2c-5d7bfddd8593.roa (raw, json) Hash identifier: kadzf6urhTav2TTpZUUM2woLCSkPBJUGhuXw3JmrNTA= Subject key identifier: 16:27:57:6B:E1:D6:C8:F4:FD:3B:27:57:E3:60:F2:7E:0C:88:71:7A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F49894C048E42E0BE62DDDDC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fcae8ee-d946-3da3-bf2c-5d7bfddd8593.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397194 IP address blocks: 2001:500:856e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:4c:04:8e:42:e0:be:62:dd:dd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3d8c2bdd-a1b8-456e-8cbb-9eacd27a3780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b6:5a:2e:93:51:93:80:aa:7f:cf:09:0a:55: dc:a5:6b:c8:ca:9a:b7:95:a7:f5:9f:17:f7:a3:83: 37:1b:5d:76:d2:e1:56:6f:18:a1:f4:b5:60:6d:b2: 4c:11:ca:01:6e:8c:fe:a2:fb:d3:bb:73:3b:c1:a1: c3:d2:c4:a4:cd:43:4a:d2:b3:71:82:87:d0:80:be: 64:de:24:e2:19:af:18:1c:22:c4:ad:f7:ab:da:c7: 7e:30:f0:0b:af:d9:27:6d:20:15:0b:0e:62:d4:49: 01:9d:a8:09:e9:46:7d:67:91:5d:25:80:03:56:d9: 3c:b6:cc:40:e3:b9:58:69:00:e4:ae:f4:d9:d8:14: 4b:21:c0:c8:b7:e3:eb:12:78:15:9a:58:71:dd:f5: 37:c0:b7:45:30:3f:e9:07:2c:bd:e4:fd:e3:f5:b0: 80:67:7b:a2:58:ac:e8:e5:ae:13:e9:c8:d8:be:6c: ef:2c:3e:bf:a8:3f:2f:28:54:49:2f:4c:8f:35:97: 4b:1a:a7:26:6d:12:b7:9e:55:58:94:16:fa:19:08: 1c:f9:e7:23:d6:27:1e:48:0b:c1:70:e7:54:d1:c1: a3:48:12:15:2c:f1:e1:5c:c6:b0:0a:d1:f1:8e:60: 70:ee:d6:98:49:5f:cf:8a:79:a2:e3:a3:b2:50:2c: 8d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:27:57:6B:E1:D6:C8:F4:FD:3B:27:57:E3:60:F2:7E:0C:88:71:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fcae8ee-d946-3da3-bf2c-5d7bfddd8593.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:856e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:4a:e8:19:bc:6d:56:83:86:ce:59:f3:93:e5:94:40:bd:e8: 7a:ab:31:d8:f0:3c:3e:dd:7f:e3:b7:34:97:46:b3:60:4a:c5: 79:e3:b9:7f:14:18:0b:66:64:73:6c:62:3f:ca:c8:94:3c:e0: 7e:52:8a:f8:e0:94:d6:ab:3b:dd:73:fb:4b:3a:12:41:57:12: d2:85:ea:00:44:06:34:b3:31:08:21:c9:67:99:1a:47:08:48: e5:8d:ef:1a:a0:fc:5e:91:bb:5e:b9:f6:1d:d4:cb:ee:89:da: 6c:42:43:f5:2e:b2:76:14:99:9a:e6:27:b0:91:00:86:14:11: f2:b5:56:0c:5b:ef:a5:1c:b3:76:4b:ad:e2:68:f6:81:f2:de: 04:ae:8a:99:93:09:ec:86:55:fa:49:3c:71:78:fd:6d:de:92: b7:22:be:b5:e1:79:f7:79:e4:06:d8:ca:70:65:76:50:e2:1a: c3:b1:09:61:e4:54:e1:af:00:65:41:47:6b:48:59:42:17:07: 34:04:88:fa:5e:23:76:9e:55:30:12:8b:37:b2:b3:b4:ac:9c: 82:35:f1:3b:ca:fc:29:eb:99:c6:04:51:06:ce:b4:e4:b6:25: fc:4a:a5:1c:17:eb:51:77:f9:ef:fe:1d:64:2c:fb:da:1b:e9: d0:16:a0:76 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JiUwEjkLgvmLd3cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2Q4YzJiZGQtYTFiOC00NTZlLThjYmItOWVhY2QyN2EzNzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibZaLpNRk4Cqf88JClXcpWvIypq3laf1nxf3 o4M3G1120uFWbxih9LVgbbJMEcoBboz+ovvTu3M7waHD0sSkzUNK0rNxgofQgL5k 3iTiGa8YHCLErfer2sd+MPALr9knbSAVCw5i1EkBnagJ6UZ9Z5FdJYADVtk8tsxA 47lYaQDkrvTZ2BRLIcDIt+PrEngVmlhx3fU3wLdFMD/pByy95P3j9bCAZ3uiWKzo 5a4T6cjYvmzvLD6/qD8vKFRJL0yPNZdLGqcmbRK3nlVYlBb6GQgc+ecj1iceSAvB cOdU0cGjSBIVLPHhXMawCtHxjmBw7taYSV/Pinmi46OyUCyNnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBYnV2vh1sj0/TsnV+Ng8n4MiHF6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmZjYWU4ZWUtZDk0Ni0z ZGEzLWJmMmMtNWQ3YmZkZGQ4NTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAIVu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ1K6Bm8bVaDhs5Z85PllEC96HqrMdjwPD7df+O3NJdGs2BKxXnj uX8UGAtmZHNsYj/KyJQ84H5SivjglNarO91z+0s6EkFXEtKF6gBEBjSzMQghyWeZ GkcISOWN7xqg/F6Ru1659h3Uy+6J2mxCQ/UusnYUmZrmJ7CRAIYUEfK1Vgxb76Uc s3ZLreJo9oHy3gSuipmTCeyGVfpJPHF4/W3ekrcivrXhefd55AbYynBldlDiGsOx CWHkVOGvAGVBR2tIWUIXBzQEiPpeI3aeVTASizeys7SsnII18TvK/CnrmcYEUQbO tOS2JfxKpRwX61F3+e/+HWQs+9ob6dAWoHY= -----END CERTIFICATE-----Generated at Fri Sep 25 20:06:23 2026 by rpki-client