$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f00ecfe6-d0a3-332c-be2b-33e8a302a8ac.roa File: f00ecfe6-d0a3-332c-be2b-33e8a302a8ac.roa (raw, json) Hash identifier: OaR5WbiKd1o3BGvVfZv0ByBVAJDsXD4ayvhkGxZmhGk= Subject key identifier: 98:79:03:1C:C5:70:1D:99:C9:D4:3C:00:10:92:D7:90:95:C8:2E:E7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4986C7574B80D0280545D580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f00ecfe6-d0a3-332c-be2b-33e8a302a8ac.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36630 IP address blocks: 2001:500:856e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:c7:57:4b:80:d0:28:05:45:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0ae0828b-17a9-4e86-8a33-cf840fd1d67f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e7:b4:7e:95:51:ab:56:26:f5:1a:3d:0f:ba: aa:52:b8:4b:31:71:c4:4f:e4:33:59:fb:8a:5a:ae: 6d:cc:e0:3a:36:76:ff:bd:4b:70:70:d9:0d:7e:2e: 8a:29:75:49:2b:74:0a:66:59:7e:f1:c8:2d:5c:4f: 0a:bf:33:01:37:84:27:5d:fe:dc:0d:25:db:6e:8a: 1a:e5:e3:8d:3d:ed:09:e2:8a:fe:29:63:b3:fc:20: fa:63:41:93:23:04:1c:80:27:64:5d:a8:6b:c0:17: cd:86:c9:a2:ee:8c:f4:6d:2c:7b:73:8d:7a:34:9b: 94:ed:0e:f6:ae:e5:28:ae:6c:26:20:8e:ee:12:98: a5:3e:da:10:0f:18:47:83:22:4a:e4:04:b1:3e:54: ab:61:ce:b0:6e:06:a9:14:ed:16:e9:be:ca:27:13: 11:b7:dd:63:91:b2:52:40:de:c9:21:ae:e5:8c:cb: 83:b0:35:81:42:9f:63:36:b0:83:9c:b4:c4:de:ce: 9c:64:67:47:05:4c:74:36:cf:e6:5d:04:52:68:47: e4:bd:22:4e:14:99:49:b3:27:3e:8b:0b:f9:c1:1a: 40:c1:d9:3e:d1:2d:58:61:c6:21:04:24:dc:1e:b5: ce:26:4a:9e:e4:ba:09:d3:00:b6:d0:7c:c9:20:cf: fe:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:79:03:1C:C5:70:1D:99:C9:D4:3C:00:10:92:D7:90:95:C8:2E:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f00ecfe6-d0a3-332c-be2b-33e8a302a8ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:856e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:00:f5:d8:31:c9:9a:5b:70:e1:1c:5d:55:b2:ae:a6:f1:70: b2:4d:39:35:5b:28:43:3b:f3:9e:6a:43:3b:d6:d7:e1:3f:76: d7:50:b9:21:58:f0:e6:83:ed:7b:72:c9:cf:4c:71:e1:62:70: 3d:1e:74:c0:b3:8c:ca:a0:b5:d8:17:e9:25:3a:39:30:dd:b4: 6f:f0:5a:1b:2c:4c:dc:7b:ff:ae:92:50:0a:8f:b4:9d:cf:f5: 12:16:9d:7d:15:85:8e:2d:fe:14:0e:c1:2c:62:25:85:09:6a: a8:4d:9c:c7:1b:13:e5:e8:82:16:80:2a:6e:29:83:01:94:20: 76:b1:af:2b:3b:fc:ba:e6:8a:fe:90:22:18:70:ab:23:5a:da: 34:2d:38:2b:1d:31:e0:8d:2d:ea:5f:77:70:23:47:4c:e5:2f: 44:d8:1e:45:06:c4:a8:1e:6c:17:78:04:3a:7f:18:6a:06:0c: ae:f3:9c:1e:6a:9f:e3:8d:64:0d:db:fe:3e:7c:df:bf:95:9f: c5:ae:e3:98:0e:0c:22:03:eb:57:f0:6a:9c:c4:c2:bb:88:4a: 09:64:e4:64:f3:d2:14:e1:b1:f1:61:3f:1c:5a:9d:fc:a3:20: 1e:63:a7:f1:a0:23:dc:d5:29:6a:27:4b:02:2f:3a:bd:13:b1: 83:73:b2:5f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JhsdXS4DQKAVF1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGFlMDgyOGItMTdhOS00ZTg2LThhMzMtY2Y4NDBmZDFkNjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjee0fpVRq1Ym9Ro9D7qqUrhLMXHET+QzWfuK Wq5tzOA6Nnb/vUtwcNkNfi6KKXVJK3QKZll+8cgtXE8KvzMBN4QnXf7cDSXbbooa 5eONPe0J4or+KWOz/CD6Y0GTIwQcgCdkXahrwBfNhsmi7oz0bSx7c416NJuU7Q72 ruUormwmII7uEpilPtoQDxhHgyJK5ASxPlSrYc6wbgapFO0W6b7KJxMRt91jkbJS QN7JIa7ljMuDsDWBQp9jNrCDnLTE3s6cZGdHBUx0Ns/mXQRSaEfkvSJOFJlJsyc+ iwv5wRpAwdk+0S1YYcYhBCTcHrXOJkqe5LoJ0wC20HzJIM/+XwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJh5AxzFcB2ZydQ8ABCS15CVyC7nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjAwZWNmZTYtZDBhMy0z MzJjLWJlMmItMzNlOGEzMDJhOGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAIVu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEEA9dgxyZpbcOEcXVWyrqbxcLJNOTVbKEM7855qQzvW1+E/dtdQ uSFY8OaD7Xtyyc9MceFicD0edMCzjMqgtdgX6SU6OTDdtG/wWhssTNx7/66SUAqP tJ3P9RIWnX0VhY4t/hQOwSxiJYUJaqhNnMcbE+XoghaAKm4pgwGUIHaxrys7/Lrm iv6QIhhwqyNa2jQtOCsdMeCNLepfd3AjR0zlL0TYHkUGxKgebBd4BDp/GGoGDK7z nB5qn+ONZA3b/j5837+Vn8Wu45gODCID61fwapzEwruISglk5GTz0hThsfFhPxxa nfyjIB5jp/GgI9zVKWonSwIvOr0TsYNzsl8= -----END CERTIFICATE-----Generated at Sun Sep 27 16:36:06 2026 by rpki-client