$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/821fc637-901f-389b-a543-7673ce7660ba.roa File: 821fc637-901f-389b-a543-7673ce7660ba.roa (raw, json) Hash identifier: D2YcW2p7/8ipAjkWFZV8zIsG9G02BK+W/daaOxieVcs= Subject key identifier: FE:DD:5F:99:FA:2D:84:25:F1:D1:24:88:D0:92:37:2E:1E:BB:64:4F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F2D87E0327024479D9C9978C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/821fc637-901f-389b-a543-7673ce7660ba.roa Signing time: Tue 15 Sep 2026 01:00:12 +0000 ROA not before: Tue 15 Sep 2026 01:00:12 +0000 ROA not after: Mon 14 Dec 2026 02:00:12 +0000 asID: 397209 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2d:87:e0:32:70:24:47:9d:9c:99:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 15 01:00:12 2026 GMT Not After : Dec 14 02:00:12 2026 GMT Subject: CN=b74347b8-85ac-49b1-9902-924181503924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3e:aa:23:21:f1:db:43:6d:04:22:11:e2:7d: 7a:40:1f:66:26:6b:29:e0:f1:0c:0d:5c:12:14:90: 82:ee:6e:80:d1:a1:46:2d:46:aa:cf:1d:bb:ac:57: f9:0f:92:b7:9f:72:d7:df:b9:60:83:8c:16:16:6b: 34:62:00:34:b3:4c:f8:51:10:d8:2b:52:3b:db:37: f9:a3:20:ec:e5:39:1b:b0:7d:c8:20:c5:88:24:a4: a4:20:5f:eb:72:f9:5d:96:43:ca:19:89:b2:e0:9a: f7:c4:f4:b1:55:fe:8a:17:5e:72:3c:1d:95:0f:c8: 83:e1:bb:0f:ea:18:9f:19:e2:c1:a7:f8:99:24:d0: e2:e5:31:b7:9c:6e:20:a9:8e:2a:57:d0:85:b9:a2: 0f:d5:be:e3:a3:2f:9a:2b:5a:29:8c:c1:21:d5:5a: 69:b8:a4:13:5b:17:4a:8b:ec:dd:dd:25:2e:dd:ab: 58:39:ca:ab:3c:6d:af:8d:fd:e9:e1:09:9c:f3:20: 28:7c:0d:57:25:91:eb:90:53:98:af:d4:ba:7d:29: 4f:08:af:0a:13:64:8b:85:7c:69:42:76:9c:64:a1: aa:b3:dc:62:5e:d4:13:53:67:66:f1:74:c3:09:06: a7:33:bb:54:52:ff:56:8c:92:12:a3:0d:b1:ae:d0: a6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:DD:5F:99:FA:2D:84:25:F1:D1:24:88:D0:92:37:2E:1E:BB:64:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/821fc637-901f-389b-a543-7673ce7660ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:57:03:e8:e9:f1:78:4b:ae:c5:92:d5:36:7c:88:f0:51:c7: a5:28:d9:20:ea:8a:e4:10:31:0c:c9:44:b4:36:63:5d:64:94: 73:2f:d9:d2:21:57:62:b2:0f:fc:fb:c9:45:29:6e:69:4b:86: 0d:4c:fb:0d:ba:af:d2:c1:47:0d:07:b2:83:6c:9b:17:cf:16: 8d:1e:86:1e:0c:eb:0f:b8:46:d7:c6:ad:e9:d4:b3:9e:99:3b: b0:50:e1:a3:68:5c:a9:d8:6f:49:3a:10:3b:45:b2:4a:65:2a: 87:3b:64:55:fe:34:3d:f1:14:ed:86:a9:61:c5:e0:11:13:07: d9:99:0d:d3:87:8d:67:24:b8:26:73:aa:5e:8c:a4:be:5d:03: 0c:f7:82:6c:2b:0a:41:27:c6:ea:57:30:1c:0b:73:e6:0b:bf: cb:db:cd:f8:9a:1b:65:f8:29:44:af:04:e6:24:23:78:d4:d1: 88:17:f6:7e:19:e2:b0:af:33:60:35:a4:60:ec:9a:eb:0e:6d: 50:80:6f:0e:90:84:03:84:ce:90:87:a8:b6:b0:f6:05:8b:19: 56:e1:6d:de:fa:0e:9c:29:57:cf:41:d5:ab:61:fa:89:28:f0: 54:00:e9:b3:36:05:20:25:55:12:b9:a7:79:95:81:be:87:27: 33:02:98:91 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8th+AycCRHnZyZeMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkxNTAxMDAxMloXDTI2MTIxNDAyMDAxMlowLzEtMCsGA1UEAxMk Yjc0MzQ3YjgtODVhYy00OWIxLTk5MDItOTI0MTgxNTAzOTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxT6qIyHx20NtBCIR4n16QB9mJmsp4PEMDVwS FJCC7m6A0aFGLUaqzx27rFf5D5K3n3LX37lgg4wWFms0YgA0s0z4URDYK1I72zf5 oyDs5TkbsH3IIMWIJKSkIF/rcvldlkPKGYmy4Jr3xPSxVf6KF15yPB2VD8iD4bsP 6hifGeLBp/iZJNDi5TG3nG4gqY4qV9CFuaIP1b7joy+aK1opjMEh1VppuKQTWxdK i+zd3SUu3atYOcqrPG2vjf3p4Qmc8yAofA1XJZHrkFOYr9S6fSlPCK8KE2SLhXxp QnacZKGqs9xiXtQTU2dm8XTDCQanM7tUUv9WjJISow2xrtCmJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP7dX5n6LYQl8dEkiNCSNy4eu2RPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODIxZmM2MzctOTAxZi0z ODliLWE1NDMtNzY3M2NlNzY2MGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEVXA+jp8XhLrsWS1TZ8iPBRx6Uo2SDqiuQQMQzJRLQ2Y11klHMv 2dIhV2KyD/z7yUUpbmlLhg1M+w26r9LBRw0HsoNsmxfPFo0ehh4M6w+4RtfGrenU s56ZO7BQ4aNoXKnYb0k6EDtFskplKoc7ZFX+ND3xFO2GqWHF4BETB9mZDdOHjWck uCZzql6MpL5dAwz3gmwrCkEnxupXMBwLc+YLv8vbzfiaG2X4KUSvBOYkI3jU0YgX 9n4Z4rCvM2A1pGDsmusObVCAbw6QhAOEzpCHqLaw9gWLGVbhbd76DpwpV89B1ath +oko8FQA6bM2BSAlVRK5p3mVgb6HJzMCmJE= -----END CERTIFICATE-----Generated at Tue Sep 29 05:10:06 2026 by rpki-client