$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7e11062-a312-38bb-98ea-9f9bb0aaa71c.roa File: c7e11062-a312-38bb-98ea-9f9bb0aaa71c.roa (raw, json) Hash identifier: nDErsur6tXxTUOJBROo5XWu6fEDw/SgIwL30ivzqMZQ= Subject key identifier: A7:7B:6D:88:0F:69:F6:6E:E9:67:27:A7:88:32:63:79:9E:32:63:E1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4989FE739A49168096878DB0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7e11062-a312-38bb-98ea-9f9bb0aaa71c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396591 IP address blocks: 2001:500:856e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:fe:73:9a:49:16:80:96:87:8d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d840a2c4-5b94-471f-afa6-11b2a1f966d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:25:65:ba:a4:e8:5b:9b:c6:56:d0:41:b2:4f: 9f:fe:b7:0b:c4:d7:d1:d2:dd:0c:bd:7b:64:06:54: d6:c2:8e:c9:8b:27:3f:2b:09:d7:a0:a1:22:ab:73: 64:83:04:14:e1:be:7f:a1:cb:27:b4:93:2e:60:89: 8a:04:30:65:f5:5f:b0:21:c4:17:12:47:5a:2c:b0: 6f:89:7e:d2:1f:b3:39:81:84:31:18:48:9d:31:d4: 93:66:ee:c3:71:85:d3:93:bb:72:bc:09:6a:07:c6: 3d:77:1c:ef:8d:53:23:a3:7c:46:07:fa:b8:0d:09: ef:87:7c:da:36:33:9a:29:fa:cd:31:3f:5c:8e:ef: 74:cd:56:93:45:c7:cc:02:0c:21:a4:61:b4:66:49: 6a:a9:57:47:d5:12:2e:b0:56:93:5d:a6:7f:22:c8: 94:63:88:4e:ac:bd:f0:33:7c:80:38:13:b8:54:e8: 42:cd:8e:4a:4d:75:29:55:2d:2a:15:fb:20:65:86: 84:ea:9e:79:34:bb:db:91:04:5e:b9:fd:16:e4:82: 54:d5:22:3d:ea:ce:6a:8a:c4:75:37:0e:07:e0:2c: 74:e2:6b:17:2f:38:e5:02:83:08:80:6c:4e:6e:14: 34:fe:08:cf:2f:e6:a1:90:98:24:7f:c7:64:5c:89: c1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:7B:6D:88:0F:69:F6:6E:E9:67:27:A7:88:32:63:79:9E:32:63:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7e11062-a312-38bb-98ea-9f9bb0aaa71c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:856e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:4b:f7:e1:23:65:71:fd:2c:3a:8f:ef:e0:a3:a0:aa:72:f1: cd:56:b7:68:70:c7:76:f1:7b:23:ee:08:ee:88:69:b4:42:05: 3d:ca:4f:f2:1b:be:a7:8a:2d:8d:6f:44:16:3b:b2:a6:5a:75: a9:5f:bd:95:ed:93:83:d1:3d:18:42:87:10:db:d0:9a:64:03: 31:f4:49:d9:71:69:ad:81:7a:06:d2:ba:cc:59:d2:fe:7a:f6: 85:0c:87:01:c3:21:b6:f1:40:7e:e4:7b:22:88:d0:6d:55:25: 57:11:fb:f3:0d:07:2a:48:76:79:04:7d:61:30:6e:2a:84:3a: 01:8e:15:d7:cc:da:42:81:5c:a4:a9:fc:9e:06:de:4a:de:91: 40:bf:39:c8:a3:0a:53:17:42:fa:ea:3e:f2:51:cb:40:0e:77: 86:dd:5c:57:3c:20:03:cd:08:c2:70:ef:ee:8f:74:98:35:91: 6e:de:a8:18:b6:25:45:61:b5:36:56:1c:ca:4f:09:bd:c6:d1: d5:3e:f6:80:92:17:89:6c:29:18:50:cb:df:a8:e7:73:5b:5c: 13:07:f0:da:e0:55:33:d8:32:a5:4b:b4:6d:8e:8c:87:28:6c: 31:58:2e:12:56:47:aa:01:17:f9:b2:88:42:f1:a4:2b:a8:62: 76:34:3a:0a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jif5zmkkWgJaHjbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDg0MGEyYzQtNWI5NC00NzFmLWFmYTYtMTFiMmExZjk2NmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yVluqToW5vGVtBBsk+f/rcLxNfR0t0MvXtk BlTWwo7Jiyc/KwnXoKEiq3NkgwQU4b5/ocsntJMuYImKBDBl9V+wIcQXEkdaLLBv iX7SH7M5gYQxGEidMdSTZu7DcYXTk7tyvAlqB8Y9dxzvjVMjo3xGB/q4DQnvh3za NjOaKfrNMT9cju90zVaTRcfMAgwhpGG0ZklqqVdH1RIusFaTXaZ/IsiUY4hOrL3w M3yAOBO4VOhCzY5KTXUpVS0qFfsgZYaE6p55NLvbkQReuf0W5IJU1SI96s5qisR1 Nw4H4Cx04msXLzjlAoMIgGxObhQ0/gjPL+ahkJgkf8dkXInB0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKd7bYgPafZu6Wcnp4gyY3meMmPhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzdlMTEwNjItYTMxMi0z OGJiLTk4ZWEtOWY5YmIwYWFhNzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAIVu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADRL9+EjZXH9LDqP7+CjoKpy8c1Wt2hwx3bxeyPuCO6IabRCBT3K T/IbvqeKLY1vRBY7sqZadalfvZXtk4PRPRhChxDb0JpkAzH0Sdlxaa2BegbSusxZ 0v569oUMhwHDIbbxQH7keyKI0G1VJVcR+/MNBypIdnkEfWEwbiqEOgGOFdfM2kKB XKSp/J4G3krekUC/OcijClMXQvrqPvJRy0AOd4bdXFc8IAPNCMJw7+6PdJg1kW7e qBi2JUVhtTZWHMpPCb3G0dU+9oCSF4lsKRhQy9+o53NbXBMH8NrgVTPYMqVLtG2O jIcobDFYLhJWR6oBF/myiELxpCuoYnY0Ogo= -----END CERTIFICATE-----Generated at Sat Sep 26 04:16:24 2026 by rpki-client