$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ddb0794-be75-37a8-938b-2b81e282b902.roa File: 3ddb0794-be75-37a8-938b-2b81e282b902.roa (raw, json) Hash identifier: ki+J6UVbrNLj5vFsKTVqB8oG3mZ8XgsXuA0XeRQkLf8= Subject key identifier: D4:A0:67:7F:9D:08:FE:24:8E:93:71:FA:FB:7B:F2:60:14:D7:E6:46 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F6292D0473736F1D4E5926000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ddb0794-be75-37a8-938b-2b81e282b902.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 36632 IP address blocks: 2001:500:d937::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:d0:47:37:36:f1:d4:e5:92:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=f3904034-b7ae-49a3-aa0e-20d551a921d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8e:db:ef:70:39:95:21:cf:b9:5f:7e:fc:5f: 69:51:99:74:f1:8f:4f:5a:c2:42:5d:df:fd:6b:ca: d0:d3:2e:27:a1:ea:88:76:8d:1d:3d:cf:b2:98:d6: d9:88:da:b4:9e:fa:bc:cf:66:b3:8a:a1:a9:28:40: a1:d3:40:b8:57:74:c2:57:85:e7:f6:07:79:5c:e1: f1:c7:35:0d:ab:fc:d4:cc:52:32:69:f7:02:1a:c2: 8f:12:01:c9:f1:2e:aa:b5:88:5c:ac:fd:95:43:66: b5:d9:5c:89:5b:d5:36:c7:31:d0:b8:d2:6e:b3:b1: cf:9e:d3:b3:7e:43:05:f8:e3:a9:93:a7:0c:67:df: 10:7b:67:9f:64:cc:70:de:55:5a:8e:2a:dc:02:12: 0a:74:a7:f1:a0:2c:a1:4b:06:86:c1:18:0e:69:64: 0f:4f:bd:b7:b4:dc:24:f0:d9:3f:83:80:19:6e:91: 49:63:27:ad:86:37:c6:93:18:b2:0c:04:8d:49:f4: 10:32:9d:a1:39:78:ec:d2:60:bb:92:4c:46:8c:10: ad:92:ba:6c:df:4b:e1:c9:20:e8:db:92:59:fa:09: a6:b1:03:53:c2:07:cd:be:fc:2c:fc:d0:df:a4:7c: 67:91:0e:e5:ab:6c:ca:92:9c:09:54:46:7a:10:28: fe:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A0:67:7F:9D:08:FE:24:8E:93:71:FA:FB:7B:F2:60:14:D7:E6:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ddb0794-be75-37a8-938b-2b81e282b902.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:d937::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:09:41:9a:b4:f8:68:a7:11:42:2d:8d:e5:d5:17:98:d6:04: 29:2e:b9:de:a1:41:02:62:c8:46:08:2d:cf:09:89:c4:77:00: c1:77:62:08:81:50:a9:a6:54:43:41:fa:04:eb:a2:b5:71:fb: 97:68:cb:f3:3d:a8:7d:32:43:3a:50:bf:53:61:b2:b0:96:5f: 0d:11:68:44:85:2a:a4:07:35:06:f3:2b:32:5b:d6:eb:31:3e: 76:f6:c4:1a:b3:89:49:61:be:bf:e9:e3:78:fa:58:7d:65:00: f7:9e:69:7e:fc:3e:58:b8:6b:ae:e9:aa:9f:44:86:25:05:76: b4:16:ba:cd:04:63:64:78:00:1b:60:66:47:c9:74:d1:11:83: 4c:cb:a2:2d:d9:4e:73:b5:7e:21:5e:95:98:74:a4:a6:fe:e4: bb:3b:74:03:7c:4b:6c:a8:c3:2d:8c:17:f8:d8:aa:82:8a:2b: 2a:fd:3c:cc:4d:10:7e:17:62:87:0b:15:e8:e6:f4:cb:c2:bc: 9b:c2:89:1e:f3:2e:07:10:42:45:ff:38:9a:73:ce:da:3a:19: 70:54:4f:dc:b5:47:a1:2c:66:48:b4:4c:bb:71:0d:a2:5c:61: f0:9d:08:89:7f:4b:40:d3:99:70:5c:0b:f2:6a:fb:88:bd:14: 03:83:64:0b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9iktBHNzbx1OWSYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZjM5MDQwMzQtYjdhZS00OWEzLWFhMGUtMjBkNTUxYTkyMWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo7b73A5lSHPuV9+/F9pUZl08Y9PWsJCXd/9 a8rQ0y4noeqIdo0dPc+ymNbZiNq0nvq8z2aziqGpKECh00C4V3TCV4Xn9gd5XOHx xzUNq/zUzFIyafcCGsKPEgHJ8S6qtYhcrP2VQ2a12VyJW9U2xzHQuNJus7HPntOz fkMF+OOpk6cMZ98Qe2efZMxw3lVajircAhIKdKfxoCyhSwaGwRgOaWQPT723tNwk 8Nk/g4AZbpFJYyethjfGkxiyDASNSfQQMp2hOXjs0mC7kkxGjBCtkrps30vhySDo 25JZ+gmmsQNTwgfNvvws/NDfpHxnkQ7lq2zKkpwJVEZ6ECj+gwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNSgZ3+dCP4kjpNx+vt78mAU1+ZGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2RkYjA3OTQtYmU3NS0z N2E4LTkzOGItMmI4MWUyODJiOTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFANk3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAMJQZq0+GinEUItjeXVF5jWBCkuud6hQQJiyEYILc8JicR3AMF3 YgiBUKmmVENB+gTrorVx+5doy/M9qH0yQzpQv1NhsrCWXw0RaESFKqQHNQbzKzJb 1usxPnb2xBqziUlhvr/p43j6WH1lAPeeaX78Pli4a67pqp9EhiUFdrQWus0EY2R4 ABtgZkfJdNERg0zLoi3ZTnO1fiFelZh0pKb+5Ls7dAN8S2yowy2MF/jYqoKKKyr9 PMxNEH4XYocLFejm9MvCvJvCiR7zLgcQQkX/OJpzzto6GXBUT9y1R6EsZki0TLtx DaJcYfCdCIl/S0DTmXBcC/Jq+4i9FAODZAs= -----END CERTIFICATE-----Generated at Wed Oct 7 07:47:50 2026 by rpki-client