$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3500ddb1-0f72-3424-a18a-565623454803.roa File: 3500ddb1-0f72-3424-a18a-565623454803.roa (raw, json) Hash identifier: Rqz0X7tMsgfIH7Yf1NkOS3W2smcp7eavDNawGnklbEE= Subject key identifier: EE:FF:6E:0B:6A:01:2D:DD:EB:D2:B6:C7:DF:07:5B:B4:5B:97:64:8F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F498A56448AFBD033BD3EFA80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3500ddb1-0f72-3424-a18a-565623454803.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396593 IP address blocks: 2001:500:30ff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:56:44:8a:fb:d0:33:bd:3e:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b1e5833e-1be2-4348-bc60-92d2a17d32ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:02:b4:9a:43:37:5d:ab:9c:d5:49:ed:4d:e2: 5e:4e:a7:40:54:4b:34:90:52:99:6e:31:10:54:0c: 57:74:42:48:04:cb:83:fe:8e:15:c6:9f:7a:57:c4: 72:5c:c9:97:b0:b8:20:42:1c:af:f2:b7:e8:ae:40: e2:5f:4c:da:36:45:96:67:ea:69:98:89:5d:c7:83: 8e:b5:52:a5:3c:c3:01:2d:8c:60:09:c8:7e:b6:32: 3c:a4:4e:12:26:63:10:e3:e8:52:64:cd:22:0a:af: d0:bc:bb:4d:87:fc:81:9b:d2:11:10:11:1c:a3:54: b5:96:3f:ab:19:c4:d3:51:0e:f1:f0:fc:c3:be:0c: ee:27:03:d6:46:8d:51:56:31:24:58:a1:d9:81:52: f4:07:aa:dc:1e:0b:08:a9:d4:ea:79:6c:64:a5:d2: c8:b5:eb:ac:33:31:62:15:c4:06:60:fe:b3:2e:dc: 67:16:f1:b0:95:c3:23:3a:ae:6b:13:bd:ed:13:92: e4:95:95:46:e1:ed:11:59:9a:c8:03:cb:cb:09:2a: d8:08:fb:a2:ae:cf:a1:ac:64:8c:07:99:5a:9d:5f: 27:94:61:70:c7:69:08:6a:8c:9b:c9:89:3d:a5:5c: 69:df:94:ef:93:02:87:5c:a6:00:47:2b:ae:d3:4c: 3e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:FF:6E:0B:6A:01:2D:DD:EB:D2:B6:C7:DF:07:5B:B4:5B:97:64:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3500ddb1-0f72-3424-a18a-565623454803.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:30ff::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:61:84:b2:b9:fe:9d:e8:26:c2:ac:e7:96:4f:86:39:ba:7b: f6:3d:51:38:2e:3b:ff:7e:bd:3b:9e:92:5a:cc:28:2e:ab:cf: 4b:86:6f:9c:a1:c2:81:c3:a2:eb:c1:2d:c1:87:a9:f5:7d:15: eb:72:d3:2b:9f:a1:89:b0:99:24:42:e8:5e:be:ee:88:c6:3a: 76:d3:c8:bf:b5:ee:11:bd:bb:22:28:48:cb:72:71:59:00:12: db:74:2f:5c:3d:d5:ec:45:96:7f:90:b4:f5:97:c7:80:4e:9f: 96:b0:71:8d:44:a1:a4:a1:d8:18:5b:d0:9b:e3:ae:16:c0:8e: c4:ab:18:48:f1:10:9a:07:57:96:1f:4e:72:b9:2c:75:ec:6e: 4f:0c:8e:eb:75:ae:70:ca:87:14:c1:88:c3:9b:a0:5c:d4:8d: fa:ad:07:b0:9f:c7:2b:0a:de:00:e9:f8:cd:86:78:f7:fe:25: ee:19:65:d0:5e:19:b3:12:f3:fd:4f:ee:6b:e6:a2:1a:6c:66: 83:02:03:a6:62:e6:21:6e:f9:d9:0a:f3:e8:33:7b:cd:1d:20: 75:95:1a:3a:31:08:29:3e:08:02:d2:7c:5f:ab:c2:33:e5:7d: d0:00:d1:88:cc:21:a5:c7:fb:e3:e5:fa:d8:07:44:74:6e:8e: f8:87:3a:2e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JilZEivvQM70++oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjFlNTgzM2UtMWJlMi00MzQ4LWJjNjAtOTJkMmExN2QzMmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gK0mkM3Xauc1UntTeJeTqdAVEs0kFKZbjEQ VAxXdEJIBMuD/o4Vxp96V8RyXMmXsLggQhyv8rforkDiX0zaNkWWZ+ppmIldx4OO tVKlPMMBLYxgCch+tjI8pE4SJmMQ4+hSZM0iCq/QvLtNh/yBm9IREBEco1S1lj+r GcTTUQ7x8PzDvgzuJwPWRo1RVjEkWKHZgVL0B6rcHgsIqdTqeWxkpdLIteusMzFi FcQGYP6zLtxnFvGwlcMjOq5rE73tE5LklZVG4e0RWZrIA8vLCSrYCPuirs+hrGSM B5lanV8nlGFwx2kIaoybyYk9pVxp35TvkwKHXKYARyuu00w+JwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO7/bgtqAS3d69K2x98HW7Rbl2SPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzUwMGRkYjEtMGY3Mi0z NDI0LWExOGEtNTY1NjIzNDU0ODAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFADD/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF1hhLK5/p3oJsKs55ZPhjm6e/Y9UTguO/9+vTueklrMKC6rz0uG b5yhwoHDouvBLcGHqfV9Fety0yufoYmwmSRC6F6+7ojGOnbTyL+17hG9uyIoSMty cVkAEtt0L1w91exFln+QtPWXx4BOn5awcY1EoaSh2Bhb0JvjrhbAjsSrGEjxEJoH V5YfTnK5LHXsbk8Mjut1rnDKhxTBiMOboFzUjfqtB7CfxysK3gDp+M2GePf+Je4Z ZdBeGbMS8/1P7mvmohpsZoMCA6Zi5iFu+dkK8+gze80dIHWVGjoxCCk+CALSfF+r wjPlfdAA0YjMIaXH++Pl+tgHRHRujviHOi4= -----END CERTIFICATE-----Generated at Tue Oct 6 13:58:05 2026 by rpki-client