$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74203a77-c811-376a-9971-69a78f1d9b12.roa File: 74203a77-c811-376a-9971-69a78f1d9b12.roa (raw, json) Hash identifier: U93h4bEC8QDqwaWH8zqToOJrBLc7k8s4KNaznkX10v4= Subject key identifier: D6:70:B9:9E:DA:06:19:92:3B:CC:F3:D7:E5:5C:6A:D2:68:05:9A:84 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F19FCFCD256F3A6A0CF405680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74203a77-c811-376a-9971-69a78f1d9b12.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 20431 IP address blocks: 2001:500:7967::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:fc:d2:56:f3:a6:a0:cf:40:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=d033cd9e-b811-4b56-b11f-1568eff79650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f8:cf:32:d0:20:80:bc:a9:5f:1d:a4:c7:4e: f8:f4:90:8a:8a:91:c4:e4:69:08:e9:de:d6:2d:3e: 72:b3:0f:bb:7c:af:80:f3:70:19:75:16:64:d8:13: d6:5a:b8:f8:2e:c1:93:e4:d2:9f:68:cf:f5:a2:6d: 8a:1b:06:b1:50:d8:1d:ad:66:a6:82:e9:52:a5:8c: aa:75:2c:5b:f1:8a:7d:c0:54:18:08:7c:85:5e:0c: a5:15:10:ce:b9:fe:a5:12:db:84:f2:79:9a:75:53: 9b:b9:08:57:75:d5:03:e3:72:6b:c9:f2:96:ab:b6: 08:c6:37:3b:5a:d8:ad:99:83:5e:a7:90:2d:a5:9a: a2:4e:6a:98:17:5b:28:c3:b3:d3:3e:8d:f7:6f:38: a8:9c:a1:14:ba:45:06:56:4f:ff:15:e2:cc:ff:2c: 35:a7:71:42:99:57:37:53:55:01:55:c0:24:ac:b1: c4:b7:41:6d:0f:b6:15:1b:a7:ad:f2:25:ee:1a:95: 7a:0d:e0:82:af:9e:f1:e4:eb:7b:c6:e0:4d:cf:e7: 63:c3:62:de:5a:17:bf:7b:ab:68:5e:22:2d:5f:2c: ea:e9:88:34:39:ee:b1:cf:0c:17:20:74:b1:0e:cc: 51:40:86:bb:ee:3e:19:6a:1b:7b:dc:4c:65:64:70: 36:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:70:B9:9E:DA:06:19:92:3B:CC:F3:D7:E5:5C:6A:D2:68:05:9A:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74203a77-c811-376a-9971-69a78f1d9b12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:fa:70:b5:90:b2:fe:be:71:73:0e:c3:01:e7:f4:27:04:27: 08:3d:65:53:f2:eb:68:39:28:ba:8e:ec:0c:d1:39:be:33:b3: 38:9c:e9:85:a5:c1:d8:98:c3:10:b9:03:c1:50:0e:9b:76:36: ad:96:9b:ab:ee:81:ac:ce:3a:f9:89:49:14:39:b7:e0:f2:36: 24:4b:dd:90:25:f4:9d:95:ea:1b:4c:f0:c3:e3:83:e1:c0:17: a3:32:f1:81:97:8f:cd:87:66:60:15:2f:94:c9:e4:8c:61:9e: 40:92:b8:41:fc:25:79:8f:4c:7a:9e:86:e0:4a:3c:31:7f:76: 66:05:05:28:c6:c6:d5:b7:48:1a:f8:a7:98:61:f5:31:1b:e8: a6:8d:37:aa:9d:71:47:89:73:a9:4e:ec:cb:1b:3d:a4:62:db: 6a:39:43:ca:5e:77:29:32:56:98:1e:01:6c:64:66:03:1c:38: e1:9f:2d:f3:8e:4f:49:f0:d7:d6:e7:56:07:ca:f1:04:31:ab: 24:73:5e:96:4c:4a:ff:47:bc:97:4e:55:ce:25:c8:7e:9a:9b: ce:df:1c:3a:39:7c:b3:92:db:4d:c7:72:1d:95:7a:a4:3a:64: 99:db:a0:be:a7:4f:7f:4f:34:17:12:5a:4a:a4:5f:fd:d4:73: 60:d8:dd:26 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8Z/PzSVvOmoM9AVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk ZDAzM2NkOWUtYjgxMS00YjU2LWIxMWYtMTU2OGVmZjc5NjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvjPMtAggLypXx2kx0749JCKipHE5GkI6d7W LT5ysw+7fK+A83AZdRZk2BPWWrj4LsGT5NKfaM/1om2KGwaxUNgdrWamgulSpYyq dSxb8Yp9wFQYCHyFXgylFRDOuf6lEtuE8nmadVObuQhXddUD43JryfKWq7YIxjc7 WtitmYNep5AtpZqiTmqYF1sow7PTPo33bzionKEUukUGVk//FeLM/yw1p3FCmVc3 U1UBVcAkrLHEt0FtD7YVG6et8iXuGpV6DeCCr57x5Ot7xuBNz+djw2LeWhe/e6to XiItXyzq6Yg0Oe6xzwwXIHSxDsxRQIa77j4Zaht73ExlZHA2SQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNZwuZ7aBhmSO8zz1+VcatJoBZqEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzQyMDNhNzctYzgxMS0z NzZhLTk5NzEtNjlhNzhmMWQ5YjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAHln MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFP6cLWQsv6+cXMOwwHn9CcEJwg9ZVPy62g5KLqO7AzROb4zszic 6YWlwdiYwxC5A8FQDpt2Nq2Wm6vugazOOvmJSRQ5t+DyNiRL3ZAl9J2V6htM8MPj g+HAF6My8YGXj82HZmAVL5TJ5IxhnkCSuEH8JXmPTHqehuBKPDF/dmYFBSjGxtW3 SBr4p5hh9TEb6KaNN6qdcUeJc6lO7MsbPaRi22o5Q8pedykyVpgeAWxkZgMcOOGf LfOOT0nw19bnVgfK8QQxqyRzXpZMSv9HvJdOVc4lyH6am87fHDo5fLOS203Hch2V eqQ6ZJnboL6nT39PNBcSWkqkX/3Uc2DY3SY= -----END CERTIFICATE-----Generated at Sat Sep 26 23:56:41 2026 by rpki-client