$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b1386d9-7043-36f5-8587-38c78da0c30b.roa File: 3b1386d9-7043-36f5-8587-38c78da0c30b.roa (raw, json) Hash identifier: tSLmV/gY6e5x6YlwfygeI3wjcHon8Cih6EbuXelWTOY= Subject key identifier: 6E:6F:FC:2A:C2:91:ED:C5:41:79:BC:ED:64:65:60:94:51:09:3F:E1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F0AA234F288691C0627FB3CE0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b1386d9-7043-36f5-8587-38c78da0c30b.roa Signing time: Wed 02 Sep 2026 13:00:12 +0000 ROA not before: Wed 02 Sep 2026 13:00:12 +0000 ROA not after: Tue 01 Dec 2026 14:00:12 +0000 asID: 396540 IP address blocks: 2001:502:8cc::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:a2:34:f2:88:69:1c:06:27:fb:3c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 2 13:00:12 2026 GMT Not After : Dec 1 14:00:12 2026 GMT Subject: CN=ecde9eb1-cade-40c1-a63b-5be3d05da2fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:61:c3:31:03:f4:a2:a2:3e:f6:89:1c:f0:ef: 39:b6:d0:18:fd:5f:08:96:02:8b:3a:5f:9e:1a:51: b2:5e:e7:17:3e:44:d8:e7:2a:7d:7c:6d:6c:3b:c6: c3:29:91:3d:34:de:0a:78:17:a5:43:d8:8f:92:4f: c0:01:11:ea:3a:6e:80:f2:e0:d6:e4:08:65:8d:2c: 89:13:ce:2f:45:53:9e:e0:f9:1c:d9:fd:85:86:24: b5:c8:2b:b6:fc:38:c6:82:b3:ce:5f:fb:e2:6a:53: aa:6b:d5:fc:d2:b5:db:45:05:02:86:6a:8f:82:55: a2:b2:8d:a7:79:ca:72:c0:62:ea:8b:be:81:8f:ee: 4a:ec:f6:ce:20:12:0a:21:e6:7a:f3:7c:fa:6d:cf: 3b:f6:61:08:c4:b3:d1:7e:e6:53:64:0f:d2:7f:c5: eb:76:38:16:e9:16:6a:b7:b2:92:ef:20:cd:da:90: a0:9b:c6:bb:44:35:f4:e5:3d:75:dc:15:d7:01:6d: a1:d1:84:0a:2c:52:3d:26:ff:70:24:33:c3:e1:10: e1:1f:5c:37:94:23:6f:7a:77:a5:aa:27:7e:3f:73: eb:ae:79:b4:8e:bf:fe:96:ad:16:25:d4:f5:92:35: e7:57:32:ed:f3:c3:3d:80:92:72:68:e7:f1:49:d5: 41:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:6F:FC:2A:C2:91:ED:C5:41:79:BC:ED:64:65:60:94:51:09:3F:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b1386d9-7043-36f5-8587-38c78da0c30b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:c6:c9:a6:91:b5:97:b6:c7:a8:c8:f7:bb:c1:a1:b0:f1:4e: 9c:7d:8d:7e:95:ef:08:56:40:b9:d7:f9:b9:7c:84:f9:26:c1: c7:59:09:86:20:d3:89:69:04:0e:6f:ce:99:14:43:28:a6:1c: 6b:55:f5:6f:2d:c4:77:37:b3:5e:6e:90:9c:da:aa:e5:ca:74: 44:2e:9f:8b:c7:0d:ae:15:62:b9:cd:de:3f:97:ce:4c:c6:0e: 66:36:77:ca:f4:3c:55:9a:23:fb:20:89:4d:24:68:dd:6b:63: d4:ea:ce:16:80:3c:9a:92:6a:d8:87:0c:22:98:6b:77:cf:04: d1:05:d7:40:10:45:1d:8e:dd:b5:7d:ac:fd:02:08:20:ea:d4: f4:0e:f2:ed:14:c1:08:6a:7e:0f:7a:0d:ae:d2:f5:4a:12:00: bd:73:ed:40:62:9b:b7:ad:76:08:a9:c7:ea:40:9e:68:b6:3d: a7:96:db:65:7a:15:c0:01:1b:f5:fe:82:8e:7a:b2:b3:00:7a: c7:d9:78:e5:30:36:0a:9d:b0:8f:b2:71:d3:e2:2d:32:0e:6c: ab:66:9d:54:6d:ea:5c:39:ca:69:b7:f0:89:68:47:a1:6a:85: 33:be:50:03:f9:7b:1d:9a:93:44:97:44:cb:e2:73:ea:c0:49: 54:e3:15:5f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8KojTyiGkcBif7POAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwMjEzMDAxMloXDTI2MTIwMTE0MDAxMlowLzEtMCsGA1UEAxMk ZWNkZTllYjEtY2FkZS00MGMxLWE2M2ItNWJlM2QwNWRhMmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWHDMQP0oqI+9okc8O85ttAY/V8IlgKLOl+e GlGyXucXPkTY5yp9fG1sO8bDKZE9NN4KeBelQ9iPkk/AARHqOm6A8uDW5AhljSyJ E84vRVOe4Pkc2f2FhiS1yCu2/DjGgrPOX/vialOqa9X80rXbRQUChmqPglWiso2n ecpywGLqi76Bj+5K7PbOIBIKIeZ683z6bc879mEIxLPRfuZTZA/Sf8XrdjgW6RZq t7KS7yDN2pCgm8a7RDX05T113BXXAW2h0YQKLFI9Jv9wJDPD4RDhH1w3lCNvenel qid+P3Prrnm0jr/+lq0WJdT1kjXnVzLt88M9gJJyaOfxSdVB4wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFG5v/CrCke3FQXm87WRlYJRRCT/hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2IxMzg2ZDktNzA0My0z NmY1LTg1ODctMzhjNzhkYTBjMzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAgjM AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB/xsmmkbWXtseoyPe7waGw8U6cfY1+le8IVkC5 1/m5fIT5JsHHWQmGINOJaQQOb86ZFEMophxrVfVvLcR3N7NebpCc2qrlynRELp+L xw2uFWK5zd4/l85Mxg5mNnfK9DxVmiP7IIlNJGjda2PU6s4WgDyakmrYhwwimGt3 zwTRBddAEEUdjt21faz9Aggg6tT0DvLtFMEIan4Peg2u0vVKEgC9c+1AYpu3rXYI qcfqQJ5otj2nlttlehXAARv1/oKOerKzAHrH2XjlMDYKnbCPsnHT4i0yDmyrZp1U bepcOcppt/CJaEehaoUzvlAD+XsdmpNEl0TL4nPqwElU4xVf -----END CERTIFICATE-----Generated at Sat Sep 26 14:42:06 2026 by rpki-client