$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/afd70549-f295-33ea-a3bf-8a903f3f5adf.roa File: afd70549-f295-33ea-a3bf-8a903f3f5adf.roa (raw, json) Hash identifier: Zy0kOPiTBWiIBsnb9kT4pCSq3rI0jywa5UPApWwIJGk= Subject key identifier: F1:34:C4:9E:3A:20:02:DD:18:75:74:F4:0D:E7:16:D4:F1:04:83:2F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F66C2BE150BE200D3EBFA2C00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/afd70549-f295-33ea-a3bf-8a903f3f5adf.roa Signing time: Mon 05 Oct 2026 13:00:13 +0000 ROA not before: Mon 05 Oct 2026 13:00:13 +0000 ROA not after: Sun 03 Jan 2027 14:00:13 +0000 asID: 396600 IP address blocks: 2001:502:cbe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:66:c2:be:15:0b:e2:00:d3:eb:fa:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 5 13:00:13 2026 GMT Not After : Jan 3 14:00:13 2027 GMT Subject: CN=d92255f4-80e7-47df-8b64-64dd6ee1490d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:60:44:dd:58:8e:89:42:24:82:6d:92:2b:59: ca:53:46:e9:2c:dc:11:bd:06:65:da:22:08:f5:84: df:3b:16:57:14:2e:b8:11:c0:e3:5f:11:f8:f0:7e: 8b:e8:69:a7:ce:62:08:e7:bb:e1:f8:c5:c6:26:f1: fa:6b:da:46:7d:57:66:d2:29:2a:3c:a1:db:04:2b: 5a:88:08:f0:d2:35:85:f5:47:7d:27:0e:bb:7b:10: 29:77:ab:41:c1:79:29:35:c5:93:fd:98:46:b2:b6: 50:b2:33:d9:3a:b9:f7:96:0e:d3:75:6b:73:86:e5: cb:03:6f:e7:f8:ea:0c:56:b2:56:38:8c:03:e8:0b: 3a:5e:6c:13:a4:be:4e:5c:58:55:e6:c8:f7:6d:20: 3d:e4:ca:ea:dd:7d:66:a1:dd:bd:7a:29:f8:00:bb: 2d:7f:14:7d:63:85:e1:2b:ea:60:fd:63:2f:5d:a0: 2a:86:9e:aa:15:ea:27:c6:ef:9d:8f:65:5f:98:ee: ba:98:be:23:93:b3:e8:3f:c5:06:64:b5:14:b1:a7: b4:64:ca:24:37:3d:71:e0:ed:15:d0:8f:84:30:76: a3:ce:a6:32:48:ec:f8:85:8d:65:d8:f2:85:96:46: 47:27:64:6d:82:b5:b5:d0:ac:1b:38:a5:f9:23:f4: f8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:34:C4:9E:3A:20:02:DD:18:75:74:F4:0D:E7:16:D4:F1:04:83:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/afd70549-f295-33ea-a3bf-8a903f3f5adf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:e2:42:0b:0e:f4:05:51:7c:5e:c4:e0:05:02:35:da:d8:82: ea:47:a4:d7:54:64:72:f7:f6:e1:f2:4c:97:00:0b:27:4f:45: b6:fb:64:fb:47:18:ee:13:d6:07:39:e4:0f:7e:1d:23:3a:5b: da:dc:cb:c5:42:b3:83:95:b8:89:0e:21:1a:f0:19:16:4b:6f: 20:76:63:5d:a7:43:f3:07:fa:ad:29:5a:12:27:c9:dd:a9:3b: 76:f1:0c:25:9b:f7:8d:60:95:96:82:db:d6:33:c7:4a:fb:83: d0:19:0d:f0:8b:d8:e5:a5:25:a5:c6:48:4b:57:76:06:1e:88: 93:98:07:0d:35:f5:c9:ec:9e:5c:f1:89:7a:38:d5:85:c6:75: 11:7c:fa:bf:90:12:7c:b7:f1:44:e9:84:27:45:67:b1:ec:70: 82:3e:57:11:e7:3d:40:23:5a:31:75:d5:58:d3:c4:7f:73:2d: c8:f8:f7:a5:95:1e:40:92:f1:61:57:1e:af:67:09:ef:b1:a9: e9:f1:7e:31:2b:be:dc:e5:dd:97:24:ba:2f:0e:dc:5b:42:fc: 27:72:0e:09:b7:9e:af:cd:ce:04:6f:76:13:16:c8:be:a5:37: c9:6b:90:f0:23:f9:b0:1d:e9:fd:f7:14:d6:6f:12:c8:4f:7b: 6a:68:6e:c0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9mwr4VC+IA0+v6LAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNTEzMDAxM1oXDTI3MDEwMzE0MDAxM1owLzEtMCsGA1UEAxMk ZDkyMjU1ZjQtODBlNy00N2RmLThiNjQtNjRkZDZlZTE0OTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2BE3ViOiUIkgm2SK1nKU0bpLNwRvQZl2iII 9YTfOxZXFC64EcDjXxH48H6L6GmnzmII57vh+MXGJvH6a9pGfVdm0ikqPKHbBCta iAjw0jWF9Ud9Jw67exApd6tBwXkpNcWT/ZhGsrZQsjPZOrn3lg7TdWtzhuXLA2/n +OoMVrJWOIwD6As6XmwTpL5OXFhV5sj3bSA95Mrq3X1mod29ein4ALstfxR9Y4Xh K+pg/WMvXaAqhp6qFeonxu+dj2VfmO66mL4jk7PoP8UGZLUUsae0ZMokNz1x4O0V 0I+EMHajzqYySOz4hY1l2PKFlkZHJ2RtgrW10KwbOKX5I/T4uwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPE0xJ46IALdGHV09A3nFtTxBIMvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWZkNzA1NDktZjI5NS0z M2VhLWEzYmYtOGE5MDNmM2Y1YWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACviQgsO9AVRfF7E4AUCNdrYgupHpNdUZHL39uHyTJcACydPRbb7 ZPtHGO4T1gc55A9+HSM6W9rcy8VCs4OVuIkOIRrwGRZLbyB2Y12nQ/MH+q0pWhIn yd2pO3bxDCWb941glZaC29Yzx0r7g9AZDfCL2OWlJaXGSEtXdgYeiJOYBw019cns nlzxiXo41YXGdRF8+r+QEny38UTphCdFZ7HscII+VxHnPUAjWjF11VjTxH9zLcj4 96WVHkCS8WFXHq9nCe+xqenxfjErvtzl3Zckui8O3FtC/CdyDgm3nq/NzgRvdhMW yL6lN8lrkPAj+bAd6f33FNZvEshPe2pobsA= -----END CERTIFICATE-----Generated at Wed Oct 7 09:39:45 2026 by rpki-client