$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ceb5cde-9176-3479-9941-881e3f5b81f0.roa File: 9ceb5cde-9176-3479-9941-881e3f5b81f0.roa (raw, json) Hash identifier: ol9Tphj2tRu55cw+MJGVfMAnFIPUoMRfos3yr9gLuyo= Subject key identifier: 7B:43:18:80:4E:A9:FC:B2:ED:92:25:17:D2:33:CB:31:58:90:BA:28 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F6292D3B225E3132B6D44C77C Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ceb5cde-9176-3479-9941-881e3f5b81f0.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396604 IP address blocks: 2001:500:d937::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:d3:b2:25:e3:13:2b:6d:44:c7:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=84542c5b-facc-4889-a543-577264c2996e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:79:e4:d0:81:97:c4:0f:6b:07:81:7f:99:a0: 27:9a:4f:da:65:dd:95:00:90:bc:e3:97:35:d5:6c: 93:9f:d2:98:01:6c:74:9e:38:92:17:95:37:1e:c1: b1:d7:95:af:25:21:69:5b:98:36:3b:d9:f4:32:66: 76:0d:30:11:05:9c:9d:63:f0:1f:5d:ac:fa:20:8c: 97:d3:9a:76:40:1f:d2:18:5d:e7:c4:b6:b8:c6:02: 52:2a:71:54:1c:d7:e3:61:b1:00:d8:43:d4:72:ac: 84:8f:e2:0b:03:9b:2a:b0:ee:83:b8:fa:ec:f8:fc: 98:ff:d7:b1:ca:bd:d0:15:6e:03:23:68:54:9d:cf: a0:3f:c1:0d:db:1d:1c:0c:54:aa:6c:d2:ab:72:7d: 20:16:b5:6b:8a:25:91:5d:f8:99:63:84:c8:ff:48: 44:f9:ce:e0:b8:27:8d:bc:3c:15:6d:05:97:96:0f: 0c:bd:4e:87:43:a4:be:9d:60:72:61:54:eb:c7:c8: a1:80:55:31:4a:73:90:20:65:74:b2:72:43:a1:e8: 49:6e:21:f6:5a:23:3d:c6:45:cb:9d:8c:32:6f:ea: 2e:1f:66:c8:b7:f8:46:06:74:4b:b3:35:99:e5:27: b5:a9:0d:0f:91:7f:69:ee:b9:05:f6:08:1e:89:01: ea:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:43:18:80:4E:A9:FC:B2:ED:92:25:17:D2:33:CB:31:58:90:BA:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ceb5cde-9176-3479-9941-881e3f5b81f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:d937::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:70:bd:89:4a:06:75:ed:31:78:b5:50:94:f9:5a:0f:34:85: 04:79:db:15:33:cd:e4:c2:45:76:75:fb:74:be:62:7e:75:df: b5:cf:52:99:d5:4c:68:87:60:37:cb:4d:47:45:8f:4e:c1:8c: 13:58:16:40:b2:c1:f9:48:0d:cb:1d:66:b3:34:89:47:6d:8d: 9e:f5:f2:b4:09:16:1f:24:4f:9b:94:53:57:43:9c:98:23:68: 23:4a:ce:7b:af:f1:c1:2d:2f:5a:0d:b5:57:df:0e:7a:27:8f: 63:92:71:c2:28:03:68:6a:31:7d:c8:a3:04:11:9d:76:7b:ba: 4f:b4:e0:75:f1:1d:e9:3e:8a:52:b5:7c:6d:0d:1e:a4:63:22: a6:fe:3a:da:fa:76:19:6e:51:9e:10:a7:13:f2:f5:0a:21:f8: b5:ca:39:2e:79:b9:5c:58:d6:b3:ed:87:ea:bd:65:13:a4:1e: 47:37:ab:35:2a:e2:a3:8d:15:40:46:d5:c8:1d:82:60:b6:7b: 63:71:6c:2f:9f:83:b1:84:49:16:3b:69:d7:a9:b1:d2:8e:2b: 0a:2e:58:6d:e8:5b:99:a0:40:b7:f6:2b:b1:c6:5c:70:98:dc: 2e:6a:ec:33:66:30:6c:b7:2a:d2:90:5b:ab:b2:c6:01:56:f3: 67:38:68:b2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9iktOyJeMTK21Ex3wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ODQ1NDJjNWItZmFjYy00ODg5LWE1NDMtNTc3MjY0YzI5OTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHnk0IGXxA9rB4F/maAnmk/aZd2VAJC845c1 1WyTn9KYAWx0njiSF5U3HsGx15WvJSFpW5g2O9n0MmZ2DTARBZydY/AfXaz6IIyX 05p2QB/SGF3nxLa4xgJSKnFUHNfjYbEA2EPUcqyEj+ILA5sqsO6DuPrs+PyY/9ex yr3QFW4DI2hUnc+gP8EN2x0cDFSqbNKrcn0gFrVriiWRXfiZY4TI/0hE+c7guCeN vDwVbQWXlg8MvU6HQ6S+nWByYVTrx8ihgFUxSnOQIGV0snJDoehJbiH2WiM9xkXL nYwyb+ouH2bIt/hGBnRLszWZ5Se1qQ0PkX9p7rkF9ggeiQHqpQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHtDGIBOqfyy7ZIlF9IzyzFYkLooMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWNlYjVjZGUtOTE3Ni0z NDc5LTk5NDEtODgxZTNmNWI4MWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFANk3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALVwvYlKBnXtMXi1UJT5Wg80hQR52xUzzeTCRXZ1+3S+Yn5137XP UpnVTGiHYDfLTUdFj07BjBNYFkCywflIDcsdZrM0iUdtjZ718rQJFh8kT5uUU1dD nJgjaCNKznuv8cEtL1oNtVffDnonj2OSccIoA2hqMX3IowQRnXZ7uk+04HXxHek+ ilK1fG0NHqRjIqb+Otr6dhluUZ4QpxPy9Qoh+LXKOS55uVxY1rPth+q9ZROkHkc3 qzUq4qONFUBG1cgdgmC2e2NxbC+fg7GESRY7adepsdKOKwouWG3oW5mgQLf2K7HG XHCY3C5q7DNmMGy3KtKQW6uyxgFW82c4aLI= -----END CERTIFICATE-----Generated at Fri Oct 9 22:59:39 2026 by rpki-client