$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42ac3011-710d-32f6-8e7f-810fd42c9201.roa File: 42ac3011-710d-32f6-8e7f-810fd42c9201.roa (raw, json) Hash identifier: Sb20UbLqV1m+3pMmpjZu7oWaeqwcvwUyswKxlZrEFmE= Subject key identifier: 79:D3:0E:F2:64:EC:D1:D8:E5:33:05:93:D6:53:A5:2D:E4:CD:83:8D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F6292C80737519B64FF325980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42ac3011-710d-32f6-8e7f-810fd42c9201.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396617 IP address blocks: 2001:500:d937::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:c8:07:37:51:9b:64:ff:32:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=e45dd560-3c58-49f3-9d34-ea53c80c3c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ad:9f:eb:f5:53:83:0d:7a:6a:af:b5:58:9e: b8:86:07:10:cc:0b:ef:b9:6d:06:91:d0:27:7a:59: 8d:c6:94:58:84:06:13:6d:cb:dd:9d:eb:e7:2f:40: 8a:d9:ed:8d:f2:ef:f5:34:bc:98:83:6b:d8:eb:f1: b4:cc:fb:4a:3f:48:3a:de:f8:7e:59:7d:a8:b4:28: ea:41:d2:a3:df:05:0f:9a:ca:48:ba:08:95:ba:aa: 65:7d:92:73:ec:4c:05:54:f4:aa:4d:b8:f1:21:9e: 96:67:36:e4:04:a8:e0:4d:22:40:8a:93:4f:32:ac: 0b:2e:58:60:65:fe:46:2f:5d:e9:12:ad:2a:69:df: ac:6d:f9:da:e9:17:ab:fd:29:46:fa:81:f4:2a:23: 6d:fc:55:52:78:20:a3:24:e2:b3:53:9f:73:07:da: 1d:b1:6f:66:50:30:d9:13:fd:11:eb:df:56:e7:67: 72:d0:1e:19:81:78:e7:88:25:77:88:2c:a2:c5:19: 7f:e9:55:70:b7:d6:42:09:23:dc:82:f8:e4:54:58: 01:50:30:8e:bc:e3:b2:0f:ca:88:5e:09:c4:42:9d: 33:ab:3c:da:25:a3:98:3b:1b:bf:7a:09:ab:3d:61: 42:a2:18:e8:9a:65:8a:13:42:95:d8:ad:31:0e:7d: 9c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D3:0E:F2:64:EC:D1:D8:E5:33:05:93:D6:53:A5:2D:E4:CD:83:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42ac3011-710d-32f6-8e7f-810fd42c9201.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:d937::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:8b:b9:e0:e5:5e:b9:06:7b:46:9a:07:35:89:a9:f8:54:71: 10:6b:d8:44:ee:a3:ed:8f:7c:55:72:af:78:05:4e:35:8b:63: 0c:90:d3:be:7d:48:11:56:8a:14:08:73:ab:34:64:46:1b:08: 9c:af:d1:08:83:12:51:cd:7c:67:f0:3d:1b:22:5e:01:a4:53: 17:6a:02:d3:4f:09:8b:20:53:1f:06:b5:ab:e5:19:c8:90:65: 05:ef:3b:d1:09:24:11:eb:a4:87:a2:fe:2a:6a:20:b1:14:15: e6:34:78:27:64:bc:34:fc:4c:71:a5:9f:77:05:3e:2d:5a:fd: 6e:e9:43:4d:b3:cd:89:e9:76:5b:21:48:62:e1:7f:eb:76:6c: bb:b7:88:e9:86:89:22:96:dd:19:4d:c8:e4:a4:d3:91:e8:7c: da:99:a6:52:78:f0:24:4a:4a:ac:bd:78:a5:b8:cc:7b:60:78: 79:6f:7d:d0:4e:e4:69:95:f8:7d:c0:85:ca:9c:dd:c7:a2:70: 4a:d1:20:26:5d:09:38:12:ca:74:8e:c9:79:0d:d6:38:4c:1a: fe:33:b7:09:77:52:a5:9f:9a:41:1e:20:38:6e:00:30:f5:72: c1:0c:ad:ec:04:a6:78:44:97:ab:5d:64:9c:7e:7e:1d:34:4a: 7b:da:90:06 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9iksgHN1GbZP8yWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZTQ1ZGQ1NjAtM2M1OC00OWYzLTlkMzQtZWE1M2M4MGMzYzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApa2f6/VTgw16aq+1WJ64hgcQzAvvuW0GkdAn elmNxpRYhAYTbcvdnevnL0CK2e2N8u/1NLyYg2vY6/G0zPtKP0g63vh+WX2otCjq QdKj3wUPmspIugiVuqplfZJz7EwFVPSqTbjxIZ6WZzbkBKjgTSJAipNPMqwLLlhg Zf5GL13pEq0qad+sbfna6Rer/SlG+oH0KiNt/FVSeCCjJOKzU59zB9odsW9mUDDZ E/0R699W52dy0B4ZgXjniCV3iCyixRl/6VVwt9ZCCSPcgvjkVFgBUDCOvOOyD8qI XgnEQp0zqzzaJaOYOxu/egmrPWFCohjommWKE0KV2K0xDn2cmwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHnTDvJk7NHY5TMFk9ZTpS3kzYONMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDJhYzMwMTEtNzEwZC0z MmY2LThlN2YtODEwZmQ0MmM5MjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFANk3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFKLueDlXrkGe0aaBzWJqfhUcRBr2ETuo+2PfFVyr3gFTjWLYwyQ 0759SBFWihQIc6s0ZEYbCJyv0QiDElHNfGfwPRsiXgGkUxdqAtNPCYsgUx8Gtavl GciQZQXvO9EJJBHrpIei/ipqILEUFeY0eCdkvDT8THGln3cFPi1a/W7pQ02zzYnp dlshSGLhf+t2bLu3iOmGiSKW3RlNyOSk05HofNqZplJ48CRKSqy9eKW4zHtgeHlv fdBO5GmV+H3Ahcqc3ceicErRICZdCTgSynSOyXkN1jhMGv4ztwl3UqWfmkEeIDhu ADD1csEMrewEpnhEl6tdZJx+fh00SnvakAY= -----END CERTIFICATE-----Generated at Thu Oct 8 08:53:40 2026 by rpki-client