$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d49eb8a3-8b92-3f8b-aaec-1ff69c8d5da4.roa File: d49eb8a3-8b92-3f8b-aaec-1ff69c8d5da4.roa (raw, json) Hash identifier: SJwoUXT4y90dx8XkggqGP7LOvnqj2PesVrZ3QFBlFUo= Subject key identifier: 1E:5F:8E:8F:7E:44:E5:7D:61:95:82:E4:88:53:3E:71:2D:BE:F1:C0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584FCF9137F6B8847F0F5AE97780 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d49eb8a3-8b92-3f8b-aaec-1ff69c8d5da4.roa Signing time: Thu 12 Nov 2026 02:00:12 +0000 ROA not before: Thu 12 Nov 2026 02:00:12 +0000 ROA not after: Wed 10 Feb 2027 02:00:12 +0000 asID: 396590 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:cf:91:37:f6:b8:84:7f:0f:5a:e9:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 12 02:00:12 2026 GMT Not After : Feb 10 02:00:12 2027 GMT Subject: CN=3f5babb1-6e8a-4e92-93ff-f5008a3e0ad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:85:04:9a:4c:3d:8b:4f:fc:af:17:42:fb:e1: 79:6c:bd:a8:2c:47:63:1e:89:ce:c2:69:0c:71:4f: 4b:41:c5:04:fd:9c:ae:41:ec:ba:9d:51:7f:0b:b6: 22:2f:5c:c2:92:cd:eb:89:a9:0c:91:d8:f5:5a:03: cc:55:b5:53:92:61:88:3f:b9:30:c7:cf:bd:43:fd: 62:82:47:2e:f6:14:f5:9e:8c:48:75:4f:c2:ee:87: 58:b9:9e:ef:66:81:9f:7a:b3:99:30:09:c5:23:df: d7:21:cb:96:50:25:ad:c3:10:4b:a8:3b:d4:51:fe: be:da:85:0c:e8:77:c3:02:f2:fb:01:f6:5a:5f:16: 7e:3a:b7:85:66:82:7c:5e:b5:a5:1a:1f:dc:fd:88: 53:60:17:e9:3f:10:59:44:cd:49:e4:9f:d9:37:8a: 65:6d:ed:f7:94:95:0c:5d:44:4b:83:7f:b3:0c:9d: 63:b4:0b:7b:4e:3f:fa:f4:e3:f2:bf:eb:ec:60:f8: d2:7d:be:55:05:0e:b1:b7:70:6e:2e:a4:26:0f:e4: bb:d7:73:3b:2a:e8:59:4d:02:44:3f:96:4d:52:9d: 04:82:6f:68:e0:7d:0b:ee:ec:44:1c:1a:12:bc:b3: b5:a4:85:22:c5:05:c2:6a:19:b1:24:bb:b2:88:8f: 90:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:5F:8E:8F:7E:44:E5:7D:61:95:82:E4:88:53:3E:71:2D:BE:F1:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d49eb8a3-8b92-3f8b-aaec-1ff69c8d5da4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:f3:43:cd:d1:d7:45:f1:b7:ea:2b:83:e3:f9:25:4a:7a:f9: 69:d9:76:c5:32:d7:a2:7e:57:6b:41:16:53:f9:2a:89:60:16: a8:58:c4:b1:cf:18:6b:3c:70:83:7d:85:94:41:3d:f9:88:02: aa:7c:f3:7a:3d:f4:d0:ee:d3:08:62:3e:47:49:72:e5:77:a7: 16:47:4f:4a:7a:93:ab:3b:ee:38:a6:93:e7:bc:0b:5f:0b:a8: 14:0b:09:50:4e:cc:9f:5c:c1:2a:1d:d5:26:cf:71:d3:e4:75: 78:bd:d9:32:75:c4:37:60:62:93:eb:04:a2:7f:36:97:11:96: bd:36:c9:40:ae:b9:a4:c4:68:b8:99:fa:77:df:b8:b4:d7:76: 4d:31:7d:3f:6d:77:30:a2:29:b6:e6:c1:45:b4:58:da:9c:4a: b1:26:83:de:14:cd:a0:9c:13:c1:63:9b:1b:76:81:4c:37:36: df:b7:25:09:17:ba:9f:d2:8c:74:ff:5f:b5:67:24:f4:16:b2: 34:26:09:a0:d6:df:25:47:61:3c:7f:d2:49:c7:02:f7:93:a9: 91:21:9b:76:0a:bd:75:48:c5:e3:aa:43:96:c4:31:25:65:70: e4:6c:68:a7:32:e0:94:dc:c6:50:c3:a8:66:f7:e2:d4:b0:6b: 63:78:07:d8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE/PkTf2uIR/D1rpd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTExMjAyMDAxMloXDTI3MDIxMDAyMDAxMlowLzEtMCsGA1UEAxMk M2Y1YmFiYjEtNmU4YS00ZTkyLTkzZmYtZjUwMDhhM2UwYWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoUEmkw9i0/8rxdC++F5bL2oLEdjHonOwmkM cU9LQcUE/ZyuQey6nVF/C7YiL1zCks3riakMkdj1WgPMVbVTkmGIP7kwx8+9Q/1i gkcu9hT1noxIdU/C7odYuZ7vZoGferOZMAnFI9/XIcuWUCWtwxBLqDvUUf6+2oUM 6HfDAvL7AfZaXxZ+OreFZoJ8XrWlGh/c/YhTYBfpPxBZRM1J5J/ZN4plbe33lJUM XURLg3+zDJ1jtAt7Tj/69OPyv+vsYPjSfb5VBQ6xt3BuLqQmD+S713M7KuhZTQJE P5ZNUp0Egm9o4H0L7uxEHBoSvLO1pIUixQXCahmxJLuyiI+QuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB5fjo9+ROV9YZWC5IhTPnEtvvHAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDQ5ZWI4YTMtOGI5Mi0z ZjhiLWFhZWMtMWZmNjljOGQ1ZGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFnzQ83R10Xxt+org+P5JUp6+WnZdsUy16J+V2tBFlP5KolgFqhY xLHPGGs8cIN9hZRBPfmIAqp883o99NDu0whiPkdJcuV3pxZHT0p6k6s77jimk+e8 C18LqBQLCVBOzJ9cwSod1SbPcdPkdXi92TJ1xDdgYpPrBKJ/NpcRlr02yUCuuaTE aLiZ+nffuLTXdk0xfT9tdzCiKbbmwUW0WNqcSrEmg94UzaCcE8Fjmxt2gUw3Nt+3 JQkXup/SjHT/X7VnJPQWsjQmCaDW3yVHYTx/0knHAveTqZEhm3YKvXVIxeOqQ5bE MSVlcORsaKcy4JTcxlDDqGb34tSwa2N4B9g= -----END CERTIFICATE-----Generated at Sun Nov 15 17:42:59 2026 by rpki-client