$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da467733-df3b-3ff6-8471-ad36e1b18e9e.roa File: da467733-df3b-3ff6-8471-ad36e1b18e9e.roa (raw, json) Hash identifier: Zx8xLtzWqnsYlC5iMYd7Vb/P3LfusaJB0Aj4JhV+oPw= Subject key identifier: 0F:EB:24:32:F5:C8:D4:4B:70:21:93:68:9C:04:9A:1D:B8:49:62:40 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4972E4F23B2F2870ECF2B380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da467733-df3b-3ff6-8471-ad36e1b18e9e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396560 IP address blocks: 2001:502:1ca1::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:e4:f2:3b:2f:28:70:ec:f2:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cc37c59b-6124-4452-bb74-d757d15756a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bb:b6:db:22:49:e1:6e:dd:5a:4a:62:23:90: 58:c6:11:4e:15:da:92:f3:16:ab:0a:7c:d5:94:f0: 34:ad:39:af:cd:b7:3c:ec:84:ea:00:84:45:83:57: bd:53:c2:24:80:34:d7:2c:12:92:dd:ce:ca:1a:b8: 37:5a:62:1e:e3:38:8f:23:2b:6b:80:dc:aa:46:c4: e0:3f:ee:b6:2c:2b:9c:f7:3c:1b:1d:f7:aa:c2:af: 77:9a:a0:18:ff:64:cc:9e:ed:4a:1d:9e:88:bf:58: 11:60:3e:17:c1:d9:8d:cd:4c:71:48:68:89:2a:f4: c6:4b:bf:9b:cb:b0:5f:97:82:80:0f:18:32:6a:5f: 6a:f6:6f:1b:57:a8:ed:66:d8:14:08:73:12:18:30: 21:0c:3f:06:9f:d1:56:80:71:d6:22:7d:0c:76:78: dd:38:71:98:2a:cc:62:13:c0:70:f6:49:76:d1:b0: b6:65:71:e5:5e:ff:48:e6:85:2c:3f:c9:0e:1a:ee: 10:1f:b9:80:2a:74:18:96:02:29:8f:86:0e:da:3b: 5a:bc:d6:ef:82:8a:87:ce:e1:7b:e1:79:cd:d1:3a: 3f:aa:3e:91:07:d5:db:02:e9:b6:28:6d:b8:a9:a4: f4:7c:bc:18:e1:87:04:7c:f4:a2:15:c4:22:26:0c: e2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:EB:24:32:F5:C8:D4:4B:70:21:93:68:9C:04:9A:1D:B8:49:62:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da467733-df3b-3ff6-8471-ad36e1b18e9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:5f:25:27:e3:cc:6c:cf:7f:de:aa:75:e1:51:b9:7d:22:7b: cc:d8:61:4d:b3:c2:43:c4:39:ea:f5:37:c2:04:5f:a7:b8:fc: b9:39:9a:1d:0f:01:0d:d5:4e:3c:f5:41:e4:b9:2a:96:22:a9: 09:2b:a1:ef:b1:48:a4:62:68:27:bd:93:47:f0:50:d9:b3:99: 49:79:1a:0f:c0:62:6c:33:51:13:c8:69:69:e9:a7:2d:06:2f: 9d:ad:e1:a1:53:a3:e0:17:62:09:6d:a0:fd:fe:0d:69:c6:d6: 11:05:37:e4:70:89:ee:43:42:7b:ad:7f:ca:35:02:de:ea:4e: 23:43:6f:9f:dd:5b:30:58:03:38:39:5d:5e:33:25:54:c9:e1: f6:e9:d0:5d:22:8b:dd:21:31:62:50:3f:7e:26:30:22:70:d6: 83:cd:ce:f1:15:04:ba:6a:f6:1a:f2:82:f9:07:62:87:f9:f5: a3:cf:1f:c1:ff:95:18:0c:ac:ed:07:67:2a:e9:bc:c4:53:98: 81:13:7f:25:bc:f0:13:41:6a:60:4d:12:3f:dd:24:8c:79:e2: 74:57:ef:fd:5e:60:c5:c5:ff:14:9f:62:82:55:14:55:28:96: 51:79:1f:b9:7f:b2:d3:42:51:9f:6b:d3:1c:1a:38:03:ad:15: c8:ac:d9:15 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9JcuTyOy8ocOzys4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2MzN2M1OWItNjEyNC00NDUyLWJiNzQtZDc1N2QxNTc1NmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7u22yJJ4W7dWkpiI5BYxhFOFdqS8xarCnzV lPA0rTmvzbc87ITqAIRFg1e9U8IkgDTXLBKS3c7KGrg3WmIe4ziPIytrgNyqRsTg P+62LCuc9zwbHfeqwq93mqAY/2TMnu1KHZ6Iv1gRYD4XwdmNzUxxSGiJKvTGS7+b y7Bfl4KADxgyal9q9m8bV6jtZtgUCHMSGDAhDD8Gn9FWgHHWIn0MdnjdOHGYKsxi E8Bw9kl20bC2ZXHlXv9I5oUsP8kOGu4QH7mAKnQYlgIpj4YO2jtavNbvgoqHzuF7 4XnN0To/qj6RB9XbAum2KG24qaT0fLwY4YcEfPSiFcQiJgzikQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFA/rJDL1yNRLcCGTaJwEmh24SWJAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGE0Njc3MzMtZGYzYi0z ZmY2LTg0NzEtYWQzNmUxYjE4ZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAhyh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAvXyUn48xsz3/eqnXhUbl9InvM2GFNs8JDxDnq 9TfCBF+nuPy5OZodDwEN1U489UHkuSqWIqkJK6HvsUikYmgnvZNH8FDZs5lJeRoP wGJsM1ETyGlp6actBi+dreGhU6PgF2IJbaD9/g1pxtYRBTfkcInuQ0J7rX/KNQLe 6k4jQ2+f3VswWAM4OV1eMyVUyeH26dBdIovdITFiUD9+JjAicNaDzc7xFQS6avYa 8oL5B2KH+fWjzx/B/5UYDKztB2cq6bzEU5iBE38lvPATQWpgTRI/3SSMeeJ0V+/9 XmDFxf8Un2KCVRRVKJZReR+5f7LTQlGfa9McGjgDrRXIrNkV -----END CERTIFICATE-----Generated at Fri Sep 25 18:40:57 2026 by rpki-client