$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce572bf2-53f6-3595-aa83-e027b4da7555.roa File: ce572bf2-53f6-3595-aa83-e027b4da7555.roa (raw, json) Hash identifier: X9uFTI5cWIO3e56rRcj/+fqWGEb/bxQ6b1PbEoOKxDY= Subject key identifier: 2D:33:ED:57:6E:0A:1B:D6:0F:68:B5:01:C1:F3:85:5D:9C:C5:48:0F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F0AA22B7D8C9A12BC05D88D00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce572bf2-53f6-3595-aa83-e027b4da7555.roa Signing time: Wed 02 Sep 2026 13:00:12 +0000 ROA not before: Wed 02 Sep 2026 13:00:12 +0000 ROA not after: Tue 01 Dec 2026 14:00:12 +0000 asID: 397198 IP address blocks: 2001:502:8cc::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:a2:2b:7d:8c:9a:12:bc:05:d8:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 2 13:00:12 2026 GMT Not After : Dec 1 14:00:12 2026 GMT Subject: CN=12ca7f9c-e0ab-4766-8252-1747276c8fc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:47:a2:6b:93:7c:97:dc:9b:41:09:d3:20:a2: 82:60:56:c7:d4:f9:48:ed:1d:a5:17:21:01:10:bb: 43:97:65:52:2d:22:1a:c2:1f:a1:b3:75:ac:34:f0: 20:02:3c:77:2d:8b:7d:0c:95:99:37:72:56:61:96: fb:61:d3:b0:eb:95:e7:0f:bd:23:34:b8:cd:4c:da: f3:3f:bb:64:76:4f:8e:6a:30:71:26:85:40:c2:49: 02:d1:da:26:94:93:35:98:93:63:d9:18:ad:b4:bb: 41:ff:d4:ae:a2:73:52:d1:23:85:fc:d7:74:ff:f8: 08:44:ab:50:8a:15:dd:2a:c4:84:ee:16:ab:51:b7: f8:65:fa:c1:66:aa:0b:ae:82:b1:c3:2d:2e:31:b3: 7c:bb:7d:84:fb:43:a0:d9:81:f3:ee:9c:5e:c0:6b: 87:7c:c7:cd:e5:d2:20:13:ef:6c:50:e1:14:c4:ef: 06:a5:8a:39:5b:8f:19:92:6b:07:0b:9d:ba:0f:5b: ea:f8:9f:fb:09:d7:0d:bf:e4:f8:d8:6a:78:96:67: f3:e8:34:f3:cb:b9:5a:36:f6:e1:a4:0e:c3:c6:ba: 87:72:e7:99:0b:e5:10:f7:a2:4c:ec:9a:b6:43:3c: f3:8f:a4:41:c7:fd:a0:0a:84:40:29:ce:3f:27:77: 85:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:33:ED:57:6E:0A:1B:D6:0F:68:B5:01:C1:F3:85:5D:9C:C5:48:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce572bf2-53f6-3595-aa83-e027b4da7555.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:3b:17:2e:17:f2:63:b0:f1:b2:38:a7:47:96:6f:72:64:57: 98:8a:3f:69:3a:5f:60:5e:7a:89:08:3c:15:28:fb:cd:7d:4b: 4e:b2:ab:9a:a8:d9:3a:19:45:7a:69:62:9f:f8:7f:f5:7d:7b: 07:0f:4e:3c:fa:cb:2f:bd:ea:23:47:b8:22:f5:2a:0e:b4:09: 12:44:46:e2:12:89:dd:25:50:43:6d:a8:ed:ff:d3:3a:70:71: e6:58:f1:c7:9e:0a:c3:f5:ed:ae:bf:2b:33:af:30:b9:62:ef: 62:49:4a:9e:b7:02:c1:89:34:e6:da:f8:4b:e0:65:07:94:a8: 01:3a:80:22:d6:21:09:72:2b:03:a6:74:9c:ab:80:10:a0:b6: a9:ca:a9:02:c1:12:27:1e:e0:31:0b:57:f2:9f:78:b3:dc:85: 29:de:5c:93:f8:a0:8f:85:68:78:bc:bb:38:ba:7e:63:0a:21: 52:2e:60:d9:9a:85:eb:c0:da:b0:d6:61:07:bd:03:ee:bb:b3: 7e:00:bd:cb:3f:82:1b:e6:7e:50:5c:85:fd:b5:36:ba:c8:54: 3b:ec:bf:ca:19:cb:42:22:9f:7c:1e:6e:3d:34:08:fc:71:00: d7:43:18:27:16:83:66:3a:3e:c5:f7:05:b6:3f:1a:8b:5b:67: 2b:73:7f:94 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8Koit9jJoSvAXYjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwMjEzMDAxMloXDTI2MTIwMTE0MDAxMlowLzEtMCsGA1UEAxMk MTJjYTdmOWMtZTBhYi00NzY2LTgyNTItMTc0NzI3NmM4ZmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUeia5N8l9ybQQnTIKKCYFbH1PlI7R2lFyEB ELtDl2VSLSIawh+hs3WsNPAgAjx3LYt9DJWZN3JWYZb7YdOw65XnD70jNLjNTNrz P7tkdk+OajBxJoVAwkkC0domlJM1mJNj2RittLtB/9SuonNS0SOF/Nd0//gIRKtQ ihXdKsSE7harUbf4ZfrBZqoLroKxwy0uMbN8u32E+0Og2YHz7pxewGuHfMfN5dIg E+9sUOEUxO8GpYo5W48ZkmsHC526D1vq+J/7CdcNv+T42Gp4lmfz6DTzy7laNvbh pA7DxrqHcueZC+UQ96JM7Jq2Qzzzj6RBx/2gCoRAKc4/J3eF0QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFC0z7VduChvWD2i1AcHzhV2cxUgPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2U1NzJiZjItNTNmNi0z NTk1LWFhODMtZTAyN2I0ZGE3NTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAgjM AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA/OxcuF/JjsPGyOKdHlm9yZFeYij9pOl9gXnqJ CDwVKPvNfUtOsquaqNk6GUV6aWKf+H/1fXsHD048+ssvveojR7gi9SoOtAkSREbi EondJVBDbajt/9M6cHHmWPHHngrD9e2uvyszrzC5Yu9iSUqetwLBiTTm2vhL4GUH lKgBOoAi1iEJcisDpnScq4AQoLapyqkCwRInHuAxC1fyn3iz3IUp3lyT+KCPhWh4 vLs4un5jCiFSLmDZmoXrwNqw1mEHvQPuu7N+AL3LP4Ib5n5QXIX9tTa6yFQ77L/K GctCIp98Hm49NAj8cQDXQxgnFoNmOj7F9wW2PxqLW2crc3+U -----END CERTIFICATE-----Generated at Fri Sep 25 03:09:55 2026 by rpki-client