$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7345d112-ec33-3bba-b704-44d218d30b7e.roa File: 7345d112-ec33-3bba-b704-44d218d30b7e.roa (raw, json) Hash identifier: pDv3FmAZiuPDp9V1gVUGT1ckxy7wlNKhngl9fsCUxgg= Subject key identifier: 70:6C:FB:CF:DD:3E:2A:21:D7:F8:6F:1D:25:CF:21:03:96:87:41:F8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F497385FE197D0FA12954CC80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7345d112-ec33-3bba-b704-44d218d30b7e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397212 IP address blocks: 2001:502:1ca1::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:85:fe:19:7d:0f:a1:29:54:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=beafe2bc-70f0-44cf-a88a-f048165b17a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d9:d1:4c:15:28:2a:89:c9:0d:73:9e:8c:f5: 0c:1e:1a:70:8a:0e:15:16:ed:4c:8b:11:a5:9d:0c: 68:5a:97:7d:82:48:d6:ee:9d:1c:b1:83:68:72:e8: b0:a0:f1:e4:04:e7:0b:23:8a:d8:f4:44:a4:ba:a3: 2d:33:31:b8:34:f9:91:0b:aa:00:5b:e3:89:f9:d2: 28:ad:6d:6e:f8:0e:a9:00:61:50:7e:a2:1b:74:18: ac:7d:a9:6c:77:a9:cb:ae:8b:30:b7:bc:2d:c6:d3: 3c:e2:7a:a4:c0:64:65:bc:a0:53:de:f4:d5:00:61: 23:be:4e:87:4b:8e:19:03:ba:1a:a1:60:02:00:da: 37:76:cc:96:ac:59:2a:a0:f7:54:e7:65:0e:8d:f1: 38:24:84:01:4a:86:c3:34:96:6d:bb:51:28:d7:f0: 42:ba:aa:c1:c6:b2:fa:66:bc:12:4f:24:33:16:bb: 30:bd:44:56:1b:51:e7:2a:d5:32:f1:df:a8:05:e1: 97:a6:9b:82:13:4b:97:ee:70:32:e5:f3:99:2d:26: dd:12:7a:53:2c:05:b8:c2:3f:fa:46:d4:fc:97:7b: 86:cb:1a:88:9e:18:69:fe:86:64:8a:12:57:d5:41: 9d:e1:27:db:82:aa:50:49:9e:07:e4:61:f8:54:27: 7a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:6C:FB:CF:DD:3E:2A:21:D7:F8:6F:1D:25:CF:21:03:96:87:41:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7345d112-ec33-3bba-b704-44d218d30b7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:5a:c3:87:30:da:b5:b3:65:69:33:d0:a5:e7:d0:76:46:9f: fd:3c:96:04:f5:95:3e:36:be:65:f2:93:d2:f5:1d:c2:25:d0: 9a:d1:20:9d:97:66:ff:4e:50:b0:e8:a1:02:c4:06:03:f1:49: b8:d3:c5:3e:7e:28:1c:82:c9:d9:95:83:7b:59:35:a1:94:62: 31:a1:d3:9c:fa:87:18:a4:8a:e1:5a:0e:64:46:3e:16:f8:be: a4:6b:fc:b5:51:37:50:cc:db:d7:9d:fa:ac:54:3c:2c:5e:18: 2a:8e:a4:b0:e0:78:03:2c:20:47:c1:e3:cd:50:90:0c:d6:3d: 11:9b:a5:50:36:ad:28:13:61:7b:21:99:c9:6a:2c:46:dd:1a: 67:62:bc:1a:4b:81:69:5f:dd:7e:b5:cd:48:f1:fb:b9:5e:5d: 85:96:2c:1f:08:03:30:12:79:6a:b7:be:b7:65:36:ee:4d:33: 55:a2:7f:21:d0:51:fa:38:55:85:b1:97:b1:5c:d5:e6:a6:12: 98:6c:c2:65:c3:c5:24:2e:78:17:ec:39:07:9a:7d:44:4d:9f: 0d:4b:d9:80:94:23:9e:d9:b8:79:64:8c:9f:11:9d:1a:33:ff: a9:e4:5d:ce:6a:1f:55:85:99:ef:30:e3:da:72:66:d9:ce:73: 1b:25:18:bb -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9Jc4X+GX0PoSlUzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmVhZmUyYmMtNzBmMC00NGNmLWE4OGEtZjA0ODE2NWIxN2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNnRTBUoKonJDXOejPUMHhpwig4VFu1MixGl nQxoWpd9gkjW7p0csYNocuiwoPHkBOcLI4rY9ESkuqMtMzG4NPmRC6oAW+OJ+dIo rW1u+A6pAGFQfqIbdBisfalsd6nLroswt7wtxtM84nqkwGRlvKBT3vTVAGEjvk6H S44ZA7oaoWACANo3dsyWrFkqoPdU52UOjfE4JIQBSobDNJZtu1Eo1/BCuqrBxrL6 ZrwSTyQzFrswvURWG1HnKtUy8d+oBeGXppuCE0uX7nAy5fOZLSbdEnpTLAW4wj/6 RtT8l3uGyxqInhhp/oZkihJX1UGd4SfbgqpQSZ4H5GH4VCd62QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHBs+8/dPioh1/hvHSXPIQOWh0H4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzM0NWQxMTItZWMzMy0z YmJhLWI3MDQtNDRkMjE4ZDMwYjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAhyh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCnWsOHMNq1s2VpM9Cl59B2Rp/9PJYE9ZU+Nr5l 8pPS9R3CJdCa0SCdl2b/TlCw6KECxAYD8Um408U+figcgsnZlYN7WTWhlGIxodOc +ocYpIrhWg5kRj4W+L6ka/y1UTdQzNvXnfqsVDwsXhgqjqSw4HgDLCBHwePNUJAM 1j0Rm6VQNq0oE2F7IZnJaixG3RpnYrwaS4FpX91+tc1I8fu5Xl2FliwfCAMwEnlq t763ZTbuTTNVon8h0FH6OFWFsZexXNXmphKYbMJlw8UkLngX7DkHmn1ETZ8NS9mA lCOe2bh5ZIyfEZ0aM/+p5F3Oah9VhZnvMOPacmbZznMbJRi7 -----END CERTIFICATE-----Generated at Thu Oct 8 08:53:06 2026 by rpki-client