$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fc0b5e2-2efe-3f6d-a351-f6925eae79cd.roa File: 3fc0b5e2-2efe-3f6d-a351-f6925eae79cd.roa (raw, json) Hash identifier: jajvwUA6QrSCM0YVwWbMbKDBtjzIDvkhCqkIBD30Gy0= Subject key identifier: E4:71:9D:59:93:FA:8A:6C:C1:49:1D:8C:C1:21:22:25:7B:88:0C:6F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4972AF6D27EF52D61035E580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fc0b5e2-2efe-3f6d-a351-f6925eae79cd.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397203 IP address blocks: 2001:502:1ca1::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:af:6d:27:ef:52:d6:10:35:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ace9c007-e258-415a-8134-205fe0cb43c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:55:47:93:d0:b3:82:80:14:91:b1:32:8f:40: ce:b2:e5:d7:db:71:a7:91:c5:07:05:15:08:ce:e1: 97:99:52:de:f3:ba:71:fb:5c:fc:b3:d8:09:4b:0e: 91:b9:ba:a9:81:d7:82:4d:5c:56:7b:d3:fa:8b:8c: 69:40:13:17:db:3d:da:de:57:b2:82:10:3c:b5:86: fe:ff:69:97:5e:69:67:a4:75:51:25:74:b2:c3:fc: fc:04:6c:e7:42:99:11:6d:30:d3:b4:6b:14:7e:01: 07:db:00:fc:fd:fb:bf:b9:56:54:d4:26:c1:40:dd: fe:4e:50:27:28:4e:e6:17:2b:63:e2:d1:df:de:50: 5b:86:44:f6:77:9d:f5:fe:a0:e5:8e:7b:08:60:fa: 56:51:a1:7e:7a:7f:f1:f4:55:0a:52:6c:21:b7:3d: 4d:9f:fe:d5:42:12:c7:19:5f:ad:32:36:25:b5:3f: 1c:54:29:31:77:b7:d2:6c:1b:61:4c:e1:43:7a:42: 61:85:20:a5:c7:11:ea:09:84:60:1d:b8:a0:5a:cb: 5f:9f:67:1f:fe:8a:f2:e7:0d:fb:e2:e7:ec:85:6d: 0b:fe:eb:de:94:ef:e6:6d:15:ff:c5:2e:d1:8b:7b: 1f:77:bd:21:10:e7:af:ca:f2:e5:1c:64:8e:83:63: 9d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:71:9D:59:93:FA:8A:6C:C1:49:1D:8C:C1:21:22:25:7B:88:0C:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fc0b5e2-2efe-3f6d-a351-f6925eae79cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:d6:49:4f:0c:f2:2d:f9:aa:81:0e:75:38:0b:95:ef:bc:ea: e0:11:b0:74:5c:97:be:a7:d4:f9:d8:70:3d:2f:45:98:6e:03: 8b:ac:32:3a:98:ca:2a:e0:5c:92:cb:27:54:8a:b0:42:49:6d: 3a:b3:fd:0d:6c:60:3f:32:d6:78:ab:de:3f:36:f7:37:ec:07: f7:01:c8:22:a2:f3:59:ee:19:78:ed:7f:ed:59:ed:87:ff:cf: b3:70:f4:61:7f:2d:1a:81:da:c6:5e:42:ec:43:4d:57:15:bd: 18:6d:fd:2a:48:35:6b:f8:30:4c:81:e2:d4:f8:86:c2:2a:ef: aa:0b:eb:58:9a:cb:23:fa:69:ff:25:5d:10:55:9e:f8:e8:ba: df:b4:1b:0d:66:0a:a4:e8:33:9d:97:2b:d4:52:e2:a7:f6:71: 56:94:16:f0:77:ff:a2:8e:ed:83:e9:7e:48:eb:1a:5b:79:37: 75:3d:16:ff:8b:86:88:bc:2f:9c:07:51:dc:aa:b1:6b:fb:f5: 4d:3e:2d:c4:39:c1:5c:1b:93:69:0c:7c:1a:cc:e0:af:a9:d2: 14:88:06:ca:00:8b:e2:ff:39:8d:77:dd:59:c6:02:a8:fc:a0: d0:15:82:dc:78:21:28:91:d7:bd:9e:ef:74:9b:6b:ae:22:36: 8f:bf:6e:56 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9Jcq9tJ+9S1hA15YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWNlOWMwMDctZTI1OC00MTVhLTgxMzQtMjA1ZmUwY2I0M2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1VHk9CzgoAUkbEyj0DOsuXX23GnkcUHBRUI zuGXmVLe87px+1z8s9gJSw6RubqpgdeCTVxWe9P6i4xpQBMX2z3a3leyghA8tYb+ /2mXXmlnpHVRJXSyw/z8BGznQpkRbTDTtGsUfgEH2wD8/fu/uVZU1CbBQN3+TlAn KE7mFytj4tHf3lBbhkT2d531/qDljnsIYPpWUaF+en/x9FUKUmwhtz1Nn/7VQhLH GV+tMjYltT8cVCkxd7fSbBthTOFDekJhhSClxxHqCYRgHbigWstfn2cf/ory5w37 4ufshW0L/uvelO/mbRX/xS7Ri3sfd70hEOevyvLlHGSOg2Od8QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFORxnVmT+opswUkdjMEhIiV7iAxvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2ZjMGI1ZTItMmVmZS0z ZjZkLWEzNTEtZjY5MjVlYWU3OWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAhyh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA+1klPDPIt+aqBDnU4C5XvvOrgEbB0XJe+p9T5 2HA9L0WYbgOLrDI6mMoq4FySyydUirBCSW06s/0NbGA/MtZ4q94/Nvc37Af3Acgi ovNZ7hl47X/tWe2H/8+zcPRhfy0agdrGXkLsQ01XFb0Ybf0qSDVr+DBMgeLU+IbC Ku+qC+tYmssj+mn/JV0QVZ746LrftBsNZgqk6DOdlyvUUuKn9nFWlBbwd/+iju2D 6X5I6xpbeTd1PRb/i4aIvC+cB1HcqrFr+/VNPi3EOcFcG5NpDHwazOCvqdIUiAbK AIvi/zmNd91ZxgKo/KDQFYLceCEokde9nu90m2uuIjaPv25W -----END CERTIFICATE-----Generated at Sun Sep 27 12:33:00 2026 by rpki-client