$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43bb9e3e-d40c-38d3-9a68-a5706b2cb7e4.roa File: 43bb9e3e-d40c-38d3-9a68-a5706b2cb7e4.roa (raw, json) Hash identifier: mQ8Ygq3gZLu0CDI+f5nDa5uPpTAS0pFmqLxhpyyIFuw= Subject key identifier: D1:6C:A0:31:8F:1D:54:EC:B4:F2:CE:B5:6A:3E:78:F2:68:07:A5:A9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F629310DD529C1A46AD588880 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43bb9e3e-d40c-38d3-9a68-a5706b2cb7e4.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 397198 IP address blocks: 2001:500:d937::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:10:dd:52:9c:1a:46:ad:58:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=04a8a8be-ff6f-482a-add2-4532af3537d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5f:c2:af:32:f3:74:0a:e0:e0:fa:9d:f8:88: 31:62:01:ea:0c:e9:0a:db:fc:4c:3f:fc:14:e1:af: 32:a3:ca:f8:59:61:c8:5f:87:fb:68:4e:a3:ab:7f: 8d:e5:a0:01:59:fd:f7:91:b0:cc:c4:14:cb:33:eb: 68:50:63:94:de:58:2f:0b:88:54:84:12:1a:7e:d8: b3:d7:09:c8:c0:6b:fc:47:e4:ab:23:c5:a2:c3:11: 97:ee:12:83:29:4b:84:f1:9a:bd:ba:0e:ff:2a:82: a8:ee:1b:0f:a7:57:89:fb:4b:c9:23:0c:3d:d6:63: ce:94:3a:5a:be:8c:39:21:93:b6:19:d7:db:81:54: 8d:47:1e:e6:37:59:98:6f:11:40:fc:66:c7:63:a6: 6b:3f:a2:a2:bf:cd:a3:d3:20:0b:45:90:2a:7a:3b: 70:e1:20:07:4d:cd:d9:83:38:0e:dc:61:d8:0f:2a: 47:61:f4:b8:f3:43:d6:a1:de:4f:14:84:df:d6:a0: e5:b5:bc:66:ab:07:34:d3:f9:c9:db:77:e7:3e:ae: 0c:01:e3:6b:53:df:d0:cb:2a:93:73:38:ac:eb:25: 5c:e1:63:70:87:0a:b7:4a:81:89:88:e0:d2:bc:cb: b8:8f:e2:1f:4b:c1:e3:16:a1:ff:2c:4f:6f:d7:9a: 8a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:6C:A0:31:8F:1D:54:EC:B4:F2:CE:B5:6A:3E:78:F2:68:07:A5:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43bb9e3e-d40c-38d3-9a68-a5706b2cb7e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:d937::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:f8:59:7f:db:63:b9:6c:3e:6d:28:aa:81:b9:3f:fd:ad:8d: ea:7c:d6:85:51:6e:45:2c:4f:49:90:bc:16:51:80:a8:1e:d3: bc:db:00:59:af:2f:29:f2:27:97:08:14:02:95:db:13:ed:ca: 0c:32:53:c7:48:f9:2f:f5:69:65:cd:1a:28:a5:93:4a:73:13: b3:50:0d:4e:f1:1f:0f:17:f1:55:4c:8c:a3:29:93:85:f5:e0: 80:c8:f6:e1:2d:68:36:82:fb:5a:3d:11:c8:c2:2a:c6:8c:c5: 71:79:56:cd:74:8e:23:9f:e7:97:9f:f8:c3:09:d1:25:96:9c: ca:7a:dd:52:97:ef:9e:b2:f8:4d:e5:ee:f0:c6:e3:ea:bb:3f: 6d:f2:6f:8d:54:70:2d:5c:bd:89:9f:b8:3f:6e:c5:04:7d:32: c2:d7:72:59:b3:26:49:58:00:c3:28:7d:51:72:85:be:d4:ec: e7:c3:d4:18:94:ed:d5:df:bd:9b:7f:6c:5c:60:e9:2a:84:ba: 92:32:91:a4:33:bb:c3:4a:b3:4c:f6:00:5b:f4:28:c5:09:30: 73:a8:02:24:63:fa:ad:55:47:96:e8:ba:cf:8f:85:1e:53:89: 91:38:ce:12:eb:bf:f1:f3:d7:5c:5b:da:12:70:d2:9d:f8:f9: 00:74:98:9e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9ikxDdUpwaRq1YiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MDRhOGE4YmUtZmY2Zi00ODJhLWFkZDItNDUzMmFmMzUzN2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF/CrzLzdArg4Pqd+IgxYgHqDOkK2/xMP/wU 4a8yo8r4WWHIX4f7aE6jq3+N5aABWf33kbDMxBTLM+toUGOU3lgvC4hUhBIaftiz 1wnIwGv8R+SrI8WiwxGX7hKDKUuE8Zq9ug7/KoKo7hsPp1eJ+0vJIww91mPOlDpa vow5IZO2GdfbgVSNRx7mN1mYbxFA/GbHY6ZrP6Kiv82j0yALRZAqejtw4SAHTc3Z gzgO3GHYDypHYfS480PWod5PFITf1qDltbxmqwc00/nJ23fnPq4MAeNrU9/QyyqT czis6yVc4WNwhwq3SoGJiODSvMu4j+IfS8HjFqH/LE9v15qKiQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNFsoDGPHVTstPLOtWo+ePJoB6WpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDNiYjllM2UtZDQwYy0z OGQzLTlhNjgtYTU3MDZiMmNiN2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFANk3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABT4WX/bY7lsPm0oqoG5P/2tjep81oVRbkUsT0mQvBZRgKge07zb AFmvLynyJ5cIFAKV2xPtygwyU8dI+S/1aWXNGiilk0pzE7NQDU7xHw8X8VVMjKMp k4X14IDI9uEtaDaC+1o9EcjCKsaMxXF5Vs10jiOf55ef+MMJ0SWWnMp63VKX756y +E3l7vDG4+q7P23yb41UcC1cvYmfuD9uxQR9MsLXclmzJklYAMMofVFyhb7U7OfD 1BiU7dXfvZt/bFxg6SqEupIykaQzu8NKs0z2AFv0KMUJMHOoAiRj+q1VR5bous+P hR5TiZE4zhLrv/Hz11xb2hJw0p34+QB0mJ4= -----END CERTIFICATE-----Generated at Tue Oct 6 20:00:52 2026 by rpki-client