$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ce21b84-7ee2-3847-8f8d-421cc0e53ee1.roa File: 4ce21b84-7ee2-3847-8f8d-421cc0e53ee1.roa (raw, json) Hash identifier: /OWsRJ4ORmAcsupmnqa4jqGHm/Z9Vb9umNIoimujtNs= Subject key identifier: FD:88:A5:71:56:E3:4F:C1:28:CC:0B:7A:41:17:F7:32:58:F6:A6:67 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F498BA62701D37EDCF22F8980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ce21b84-7ee2-3847-8f8d-421cc0e53ee1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396588 IP address blocks: 2001:502:1ca1::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:a6:27:01:d3:7e:dc:f2:2f:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=73c640da-8642-4c13-b56d-b50e07fbf6ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e6:a1:8e:e2:17:df:b5:f4:48:7f:e5:75:86: 42:39:19:bb:31:b3:b6:b0:01:10:31:0b:79:15:61: 27:e6:f1:f4:c5:0d:ed:5b:43:98:29:50:8a:f6:53: 64:dd:67:f3:3e:61:f1:51:1d:14:e9:d1:23:af:0a: 0e:d1:7f:f8:41:12:5f:72:6a:a3:4b:c1:6e:ad:e8: f0:7e:9a:b6:de:89:19:20:93:20:8c:40:8e:2f:4f: c0:9a:d8:34:55:04:86:b8:36:f4:54:48:de:dc:f1: 9f:a5:fd:49:cb:92:91:91:b6:1d:93:e3:45:7a:d9: ea:f9:98:4c:f8:ea:2a:45:87:d1:d3:64:be:b4:5d: f2:bc:10:e7:e7:1d:ea:24:b6:7e:31:fd:d1:20:b1: 97:d4:8c:dd:6b:2e:f5:c2:32:03:25:07:f8:7c:7f: e2:ed:ed:6b:75:ff:39:9d:3c:cf:7b:26:6c:8a:8b: f9:16:c5:74:a6:c5:7e:63:a5:17:5e:5b:cb:22:83: 98:84:2e:db:87:6c:04:3e:07:3a:74:6d:57:f7:20: 62:12:9f:7c:ba:d5:d8:a4:fc:cb:f4:76:ad:bb:6b: fa:f3:0e:42:ec:c6:c6:35:60:9f:81:6e:ea:fb:62: a5:3a:52:47:36:84:23:8f:06:5f:39:ed:3f:46:c7: dd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:88:A5:71:56:E3:4F:C1:28:CC:0B:7A:41:17:F7:32:58:F6:A6:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ce21b84-7ee2-3847-8f8d-421cc0e53ee1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:b1:1b:17:e0:7b:79:4e:fc:76:3e:00:68:0d:3e:03:ff:b7: a1:0d:45:fb:e1:ac:b6:4c:07:e5:17:eb:a5:f7:89:c9:29:09: 32:a5:4d:11:48:a5:90:90:e6:25:f8:bf:d5:48:6e:93:45:e4: cd:82:f7:e4:8c:7a:d3:32:ce:99:9c:8f:bb:02:c2:49:4b:db: 25:91:6f:c6:cb:7a:b4:28:b9:ce:9b:28:0f:2e:53:2e:37:a6: da:93:64:57:fd:ff:fb:fb:12:0d:d8:8e:56:33:5a:7a:10:b0: 97:28:2b:1f:7f:bd:b2:0a:c1:9a:53:50:59:1b:66:29:1e:e2: a9:5b:64:d3:f3:fe:27:a2:2d:ae:c5:54:d3:f8:1c:30:f4:31: 93:fb:ec:eb:29:42:7b:e5:57:65:3f:36:20:e3:66:10:3c:d9: c0:c2:29:e0:c1:24:e8:53:e4:11:f7:01:6d:72:6b:d5:e0:a1: 56:e3:14:88:93:ad:bd:65:cc:de:d2:42:2f:9d:31:87:56:83: 68:54:32:ba:52:0e:40:74:f7:3c:1b:d7:f1:51:7a:7e:a5:83: 91:8b:78:12:d4:e1:09:3f:bf:c1:4e:27:6d:76:da:2c:82:35: 6b:18:c5:cd:c3:4c:64:50:f2:65:6f:45:1a:fa:ce:55:f1:67: 52:73:7b:80 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9Ji6YnAdN+3PIviYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzNjNjQwZGEtODY0Mi00YzEzLWI1NmQtYjUwZTA3ZmJmNmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeahjuIX37X0SH/ldYZCORm7MbO2sAEQMQt5 FWEn5vH0xQ3tW0OYKVCK9lNk3WfzPmHxUR0U6dEjrwoO0X/4QRJfcmqjS8Furejw fpq23okZIJMgjECOL0/Amtg0VQSGuDb0VEje3PGfpf1Jy5KRkbYdk+NFetnq+ZhM +OoqRYfR02S+tF3yvBDn5x3qJLZ+Mf3RILGX1Izday71wjIDJQf4fH/i7e1rdf85 nTzPeyZsiov5FsV0psV+Y6UXXlvLIoOYhC7bh2wEPgc6dG1X9yBiEp98utXYpPzL 9Hatu2v68w5C7MbGNWCfgW7q+2KlOlJHNoQjjwZfOe0/RsfdOQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFP2IpXFW40/BKMwLekEX9zJY9qZnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGNlMjFiODQtN2VlMi0z ODQ3LThmOGQtNDIxY2MwZTUzZWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAhyh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBYsRsX4Ht5Tvx2PgBoDT4D/7ehDUX74ay2TAfl F+ul94nJKQkypU0RSKWQkOYl+L/VSG6TReTNgvfkjHrTMs6ZnI+7AsJJS9slkW/G y3q0KLnOmygPLlMuN6bak2RX/f/7+xIN2I5WM1p6ELCXKCsff72yCsGaU1BZG2Yp HuKpW2TT8/4noi2uxVTT+Bww9DGT++zrKUJ75VdlPzYg42YQPNnAwingwSToU+QR 9wFtcmvV4KFW4xSIk629Zcze0kIvnTGHVoNoVDK6Ug5AdPc8G9fxUXp+pYORi3gS 1OEJP7/BTidtdtosgjVrGMXNw0xkUPJlb0Ua+s5V8WdSc3uA -----END CERTIFICATE-----Generated at Fri Sep 25 06:36:12 2026 by rpki-client