$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1aff7d74-1c44-3440-96bb-1f154581fadd.roa File: 1aff7d74-1c44-3440-96bb-1f154581fadd.roa (raw, json) Hash identifier: 6rgwZAL9BXDKYFEgfWJNOG5nEatITV/1RO4tp8bItyM= Subject key identifier: 4E:31:A7:D2:0F:EF:2E:92:D9:C7:12:DE:0A:43:DC:64:4A:13:B2:93 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F11A15631EA96B42556CBA100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1aff7d74-1c44-3440-96bb-1f154581fadd.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 396592 IP address blocks: 2001:502:8cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:56:31:ea:96:b4:25:56:cb:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=55a40d01-390a-444e-966a-af24433c0635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:90:0d:c7:8f:29:b0:56:46:95:81:1e:92:29: 41:cb:e0:e4:26:18:42:46:73:c3:7a:67:87:dd:c5: 99:dd:ef:fd:36:77:26:6b:9f:3a:e6:1e:25:72:a8: 6c:34:46:69:96:3d:bf:bb:75:1e:fd:8e:21:8e:b3: fe:60:1d:a4:17:61:f5:82:aa:d9:63:f2:7d:db:61: 38:ca:40:3f:63:e7:c5:c5:5e:b2:5a:8c:8e:d0:72: 32:87:d3:30:c4:7d:ad:9a:1c:5e:c1:c9:23:e8:7b: bc:31:a5:8f:8d:93:7e:7b:c6:00:be:4a:dd:d2:18: 57:7b:d3:e3:62:21:fc:30:1f:b4:4c:51:82:a8:e4: a7:4b:d0:77:ae:e7:35:d5:ce:92:3f:af:00:cf:32: 8c:22:1a:1e:78:35:c6:65:90:c4:94:05:83:07:25: a2:43:76:68:9a:25:46:d4:43:a7:23:32:04:54:f3: 39:0a:d7:29:44:4d:0a:4b:5e:2f:1d:99:5a:03:aa: 1b:13:68:49:77:8d:cd:92:75:8c:ec:c9:55:01:90: 80:14:8c:fa:cc:95:29:fe:2e:f3:aa:f4:de:f1:d7: c8:8e:84:f1:75:c6:cd:17:de:4a:cc:68:db:60:53: 46:1f:3c:b6:20:17:38:2f:b5:77:e2:0c:7d:9e:4a: b1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:31:A7:D2:0F:EF:2E:92:D9:C7:12:DE:0A:43:DC:64:4A:13:B2:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1aff7d74-1c44-3440-96bb-1f154581fadd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:b8:bd:25:20:10:b4:ee:fa:45:43:34:f9:df:84:bf:59:33: ef:ce:d9:30:de:75:88:77:11:98:df:d7:5f:32:5d:e7:d7:8b: a5:1b:ad:e1:8a:6c:b2:c3:58:e0:0f:f1:23:44:2f:b0:48:16: 92:9e:26:52:97:0c:31:0a:d4:1b:89:ee:14:c3:67:72:b3:57: d8:60:b8:31:65:f9:1d:08:30:9e:62:31:93:ff:a2:15:44:34: 11:74:60:c1:52:cf:0c:a1:3e:66:f7:df:60:ed:d5:ba:9f:9a: 36:44:60:1f:ac:1b:db:c6:0e:45:40:ea:6c:3f:a5:a8:80:1c: 08:0e:91:a1:b7:cc:56:e3:9a:8b:96:44:15:c0:f5:5c:8a:c1: 4d:2e:33:f4:12:0a:c4:60:e1:4b:42:b2:e5:9c:ee:fd:16:ae: 24:ed:69:59:28:db:70:ed:4c:ba:98:50:2d:a2:a5:70:23:93: 60:6d:db:3f:f8:e2:62:27:88:15:62:64:2a:bd:29:d5:e7:c5: 6a:83:38:56:09:bd:30:45:86:b1:85:b1:d8:72:eb:28:f5:b9: e4:b4:c7:2e:d0:9d:14:ea:f4:77:b2:bb:f1:1c:3f:76:9d:8b: b8:59:f4:be:65:59:6d:9f:b4:1a:57:31:7c:83:f0:dc:d5:3f: 70:a0:48:50 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8RoVYx6pa0JVbLoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NTVhNDBkMDEtMzkwYS00NDRlLTk2NmEtYWYyNDQzM2MwNjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpANx48psFZGlYEekilBy+DkJhhCRnPDemeH 3cWZ3e/9Nncma5865h4lcqhsNEZplj2/u3Ue/Y4hjrP+YB2kF2H1gqrZY/J922E4 ykA/Y+fFxV6yWoyO0HIyh9MwxH2tmhxewckj6Hu8MaWPjZN+e8YAvkrd0hhXe9Pj YiH8MB+0TFGCqOSnS9B3ruc11c6SP68AzzKMIhoeeDXGZZDElAWDByWiQ3ZomiVG 1EOnIzIEVPM5CtcpRE0KS14vHZlaA6obE2hJd43NknWM7MlVAZCAFIz6zJUp/i7z qvTe8dfIjoTxdcbNF95KzGjbYFNGHzy2IBc4L7V34gx9nkqx0QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE4xp9IP7y6S2ccS3gpD3GRKE7KTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWFmZjdkNzQtMWM0NC0z NDQwLTk2YmItMWYxNTQ1ODFmYWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAgjM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAe4vSUgELTu+kVDNPnfhL9ZM+/O2TDedYh3EZjf118yXefXi6Ub reGKbLLDWOAP8SNEL7BIFpKeJlKXDDEK1BuJ7hTDZ3KzV9hguDFl+R0IMJ5iMZP/ ohVENBF0YMFSzwyhPmb332Dt1bqfmjZEYB+sG9vGDkVA6mw/paiAHAgOkaG3zFbj mouWRBXA9VyKwU0uM/QSCsRg4UtCsuWc7v0WriTtaVko23DtTLqYUC2ipXAjk2Bt 2z/44mIniBViZCq9KdXnxWqDOFYJvTBFhrGFsdhy6yj1ueS0xy7QnRTq9Heyu/Ec P3adi7hZ9L5lWW2ftBpXMXyD8NzVP3CgSFA= -----END CERTIFICATE-----Generated at Thu Oct 8 09:02:49 2026 by rpki-client