$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/633f4e98-7166-3819-8a3e-4de8938eea5a.roa File: 633f4e98-7166-3819-8a3e-4de8938eea5a.roa (raw, json) Hash identifier: Bvu3eTFG/AVhKfVdMA5tHpipwbNG3BC6UyP6glLgIG0= Subject key identifier: 6C:65:1D:A6:FE:1C:80:52:E6:02:C8:BE:AA:74:5E:6F:98:B1:4E:3E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4988DDF07F8590DEABCD5E70 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/633f4e98-7166-3819-8a3e-4de8938eea5a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396544 IP address blocks: 2001:501:8a29::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:dd:f0:7f:85:90:de:ab:cd:5e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c79f6115-a778-4da5-aa90-958864ce9aa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2e:4d:69:ee:e4:70:a8:c6:ec:ba:93:04:a3: 5e:1b:64:fa:b8:05:44:27:be:95:23:a3:75:e7:e1: 2d:c4:cf:17:a5:19:84:56:d2:e1:79:ea:10:61:58: 08:f4:41:a6:fe:ec:a7:e5:d5:9c:ea:61:c1:55:04: 0f:71:33:89:ef:ea:ae:f0:81:87:93:8b:63:f5:97: 76:ac:91:d4:48:3e:91:07:78:18:99:fb:47:fa:7b: 7c:ce:8d:e2:ed:07:1f:58:97:36:90:8b:f9:23:0d: 86:f2:a6:57:d1:fe:e0:f9:c3:bf:1a:12:35:8e:b8: 6c:0d:ed:1d:75:ca:ab:4d:c8:35:88:f4:f1:6b:a3: fd:82:a5:43:8b:0a:66:11:73:37:3e:72:cb:3b:73: a6:7e:0e:fa:44:a9:0c:39:e8:f2:58:a0:7c:fe:1f: c0:af:9a:5b:b1:3c:e1:97:61:03:1b:48:f0:60:bb: e3:98:95:08:72:53:14:48:a4:c9:52:54:34:18:46: fd:92:3d:c9:7d:be:67:68:16:50:a7:6a:d9:52:4a: ca:8f:2c:e5:73:2a:76:88:9d:ab:f3:fd:15:ce:63: 3a:4a:d7:be:b3:94:81:96:4e:77:6c:b2:7d:4d:ae: ce:c6:ab:6c:2a:45:2b:94:a4:4c:82:d4:fd:50:2b: 1c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:65:1D:A6:FE:1C:80:52:E6:02:C8:BE:AA:74:5E:6F:98:B1:4E:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/633f4e98-7166-3819-8a3e-4de8938eea5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:34:ec:c6:d8:70:71:0b:6c:8a:04:7b:27:9a:15:f3:8c:c7: 08:d8:14:fc:98:30:85:04:42:b1:6a:b5:fc:85:47:c1:61:21: 75:d3:e0:8a:51:2f:75:90:91:ee:ed:1b:e5:bd:59:a8:29:49: 9b:ae:35:e4:a8:9d:f9:8a:a3:d7:e0:11:f0:7d:49:71:8f:6b: 3a:b7:5a:39:27:5d:81:02:7a:79:1a:4b:01:15:ec:61:b5:e7: fb:a2:4d:91:4d:69:78:03:bf:5a:bb:db:69:72:61:79:f2:aa: 90:a0:6f:2c:ee:0f:a9:7d:f8:92:d0:e4:8c:d3:6a:13:9d:b3: c3:69:6a:d3:1e:c2:4d:ba:2c:1b:be:17:c9:16:6d:ae:1f:a4: ad:7f:53:dc:fc:53:b8:5a:9e:89:bc:ba:2f:1c:b6:c9:6d:cb: fa:ad:5d:e8:c5:6c:10:fd:08:3b:fc:5f:f1:9c:aa:22:8c:7b: e9:04:9f:92:f0:30:38:39:1c:4c:c2:ba:18:a9:e0:65:c2:1e: 7a:96:0c:f6:26:3f:17:80:03:b4:9f:3a:87:52:67:8e:ac:b1: 19:9e:3c:b2:fa:e1:f0:6a:05:e6:bb:20:9e:59:41:cf:86:b0: 37:95:c0:40:7d:10:42:f7:8e:ff:aa:f0:0c:32:60:98:1f:df: 01:38:6f:1a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JiN3wf4WQ3qvNXnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Yzc5ZjYxMTUtYTc3OC00ZGE1LWFhOTAtOTU4ODY0Y2U5YWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC5Nae7kcKjG7LqTBKNeG2T6uAVEJ76VI6N1 5+EtxM8XpRmEVtLheeoQYVgI9EGm/uyn5dWc6mHBVQQPcTOJ7+qu8IGHk4tj9Zd2 rJHUSD6RB3gYmftH+nt8zo3i7QcfWJc2kIv5Iw2G8qZX0f7g+cO/GhI1jrhsDe0d dcqrTcg1iPTxa6P9gqVDiwpmEXM3PnLLO3Omfg76RKkMOejyWKB8/h/Ar5pbsTzh l2EDG0jwYLvjmJUIclMUSKTJUlQ0GEb9kj3Jfb5naBZQp2rZUkrKjyzlcyp2iJ2r 8/0VzmM6Ste+s5SBlk53bLJ9Ta7OxqtsKkUrlKRMgtT9UCscKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGxlHab+HIBS5gLIvqp0Xm+YsU4+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjMzZjRlOTgtNzE2Ni0z ODE5LThhM2UtNGRlODkzOGVlYTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAYop MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABs07MbYcHELbIoEeyeaFfOMxwjYFPyYMIUEQrFqtfyFR8FhIXXT 4IpRL3WQke7tG+W9WagpSZuuNeSonfmKo9fgEfB9SXGPazq3WjknXYECenkaSwEV 7GG15/uiTZFNaXgDv1q722lyYXnyqpCgbyzuD6l9+JLQ5IzTahOds8NpatMewk26 LBu+F8kWba4fpK1/U9z8U7hanom8ui8ctslty/qtXejFbBD9CDv8X/GcqiKMe+kE n5LwMDg5HEzCuhip4GXCHnqWDPYmPxeAA7SfOodSZ46ssRmePLL64fBqBea7IJ5Z Qc+GsDeVwEB9EEL3jv+q8AwyYJgf3wE4bxo= -----END CERTIFICATE-----Generated at Fri Sep 25 10:41:17 2026 by rpki-client