$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff86d852-a0e6-37e3-bd86-72116b2c31df.roa File: ff86d852-a0e6-37e3-bd86-72116b2c31df.roa (raw, json) Hash identifier: aibVEuw6HRRKiNXDL8jSw8NeE/oPQ0fvrT9l/JyhGfc= Subject key identifier: CA:92:DB:0F:75:D3:D8:E2:00:6E:BB:EF:02:5F:4C:73:FF:34:00:1D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4974A5D32FAF5DF06639DE00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff86d852-a0e6-37e3-bd86-72116b2c31df.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396614 IP address blocks: 2001:501:8a29::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:a5:d3:2f:af:5d:f0:66:39:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b7eb9808-80ca-4791-9a0b-603bc1fe260a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:06:69:ad:51:33:1f:fc:b2:9c:8c:f9:65:f9: 37:fc:0e:85:7b:fb:90:38:54:9a:af:67:ba:3a:ef: 24:06:e0:d1:36:f6:d3:03:96:c5:7c:16:f1:96:33: 4f:bf:67:df:4f:4a:d8:03:19:00:ac:7a:d1:5b:77: 8f:51:97:79:3d:d0:0c:8b:63:a4:86:1a:63:e7:39: 21:16:a7:24:bc:ba:e8:97:f4:a3:17:a6:fc:53:60: ae:28:23:d9:8c:28:46:7e:ca:57:61:a4:f0:b0:91: 6e:73:1c:d6:2f:78:e4:bb:97:df:36:da:fd:d7:46: 09:7f:db:88:ad:0b:19:f2:7a:7e:82:60:a6:0b:cf: 0e:ba:84:52:fa:8b:8c:13:cf:d9:09:cd:41:93:74: 63:92:a0:d7:62:5e:9d:1f:e4:cc:b1:9f:e2:e5:be: 65:1c:ff:2d:67:2d:48:15:c5:a6:4c:c2:a7:dc:24: ef:05:2d:d8:6e:63:fd:eb:55:75:f6:70:5f:f0:a7: ce:8a:c7:65:8a:44:c7:9c:95:27:b1:c3:ca:80:5a: 67:76:a5:07:02:b2:89:65:57:f1:e0:1c:a9:50:a9: dd:3f:1e:78:54:3d:2c:af:74:75:94:7f:06:04:d9: e3:7a:1d:26:dd:77:43:ce:27:e6:0b:9d:59:b4:9a: e5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:92:DB:0F:75:D3:D8:E2:00:6E:BB:EF:02:5F:4C:73:FF:34:00:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff86d852-a0e6-37e3-bd86-72116b2c31df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:c2:19:30:31:3d:15:64:a3:2e:23:75:ab:0e:da:34:c0:b8: dd:d9:4e:8e:5b:16:2d:7d:26:e0:a7:09:54:15:50:47:46:4b: 61:ce:f9:04:43:6f:a1:e7:02:fa:53:db:01:e2:43:ba:a5:47: d0:4e:46:e4:70:76:32:f9:11:45:ed:bd:e4:88:01:3a:9e:ca: 40:d8:c9:cd:f3:8e:82:5e:28:70:3e:49:ce:18:a6:d5:61:bf: 1b:da:61:43:25:1d:10:d6:88:89:b7:64:c6:e3:47:4f:aa:f8: ce:37:33:0e:fa:f6:4e:56:85:b5:a3:c8:0c:33:9a:6f:82:96: a7:37:dc:fe:8b:c7:f9:b4:6e:20:c0:3d:cd:59:56:b7:ce:6b: cc:3b:7a:6d:39:d6:72:00:92:28:e4:ea:32:bd:0c:9c:fa:04: 97:d5:55:1b:11:86:cc:68:88:57:b3:f2:04:85:cd:ca:17:6f: c3:45:a0:bd:81:02:83:9a:7e:cb:f6:d4:8c:a4:87:5b:2f:5f: 4d:de:59:1f:97:4a:2d:20:5c:9c:97:87:c4:09:c1:4f:ac:79: 6d:af:ef:3b:bb:65:80:a2:a3:24:a7:d5:4e:92:ce:88:3c:1a: 3c:26:13:be:ab:35:0f:17:36:13:a3:6c:ee:0d:1e:02:15:f4: 39:30:de:89 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdKXTL69d8GY53gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjdlYjk4MDgtODBjYS00NzkxLTlhMGItNjAzYmMxZmUyNjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQZprVEzH/yynIz5Zfk3/A6Fe/uQOFSar2e6 Ou8kBuDRNvbTA5bFfBbxljNPv2ffT0rYAxkArHrRW3ePUZd5PdAMi2Okhhpj5zkh FqckvLrol/SjF6b8U2CuKCPZjChGfspXYaTwsJFucxzWL3jku5ffNtr910YJf9uI rQsZ8np+gmCmC88OuoRS+ouME8/ZCc1Bk3RjkqDXYl6dH+TMsZ/i5b5lHP8tZy1I FcWmTMKn3CTvBS3YbmP961V19nBf8KfOisdlikTHnJUnscPKgFpndqUHArKJZVfx 4BypUKndPx54VD0sr3R1lH8GBNnjeh0m3XdDzifmC51ZtJrlRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMqS2w9109jiAG677wJfTHP/NAAdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmY4NmQ4NTItYTBlNi0z N2UzLWJkODYtNzIxMTZiMmMzMWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAYop MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH/CGTAxPRVkoy4jdasO2jTAuN3ZTo5bFi19JuCnCVQVUEdGS2HO +QRDb6HnAvpT2wHiQ7qlR9BORuRwdjL5EUXtveSIATqeykDYyc3zjoJeKHA+Sc4Y ptVhvxvaYUMlHRDWiIm3ZMbjR0+q+M43Mw769k5WhbWjyAwzmm+Clqc33P6Lx/m0 biDAPc1ZVrfOa8w7em051nIAkijk6jK9DJz6BJfVVRsRhsxoiFez8gSFzcoXb8NF oL2BAoOafsv21Iykh1svX03eWR+XSi0gXJyXh8QJwU+seW2v7zu7ZYCioySn1U6S zog8GjwmE76rNQ8XNhOjbO4NHgIV9Dkw3ok= -----END CERTIFICATE-----Generated at Sun Sep 27 05:08:37 2026 by rpki-client