$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8421354-f434-37ba-917f-6ca609be55a3.roa File: b8421354-f434-37ba-917f-6ca609be55a3.roa (raw, json) Hash identifier: CEgWvBVGyVrgGXsH8ub63lwBQQZg6QqGxwrBWQR++P4= Subject key identifier: 31:A7:D2:67:60:53:BD:01:E3:92:F3:CC:A4:BA:06:9D:10:B7:46:25 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F19FCEDC48B018E5C5A298A80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8421354-f434-37ba-917f-6ca609be55a3.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 396608 IP address blocks: 2001:500:7967::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:ed:c4:8b:01:8e:5c:5a:29:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=e83bf0e5-9440-4ea6-90e8-c1c3aa7e2948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:19:58:ca:ba:94:fe:6f:e0:5f:bc:fd:93:c7: 24:84:5d:d2:08:e2:fc:74:a4:60:3d:0f:f0:da:a2: c7:02:9c:1d:f9:8b:f1:0e:46:02:72:28:19:d3:94: de:29:b1:75:7f:17:50:6e:11:25:d0:e2:c2:ea:2e: b4:b3:0c:ec:29:53:61:e0:48:f4:19:dc:00:bb:0c: 17:0d:1f:88:14:27:1c:03:3a:41:21:83:86:77:6f: 54:60:3e:df:ac:76:ac:01:18:3f:94:fa:8a:0a:25: f1:4b:bb:8b:3f:68:e3:bd:02:9d:25:8f:16:70:14: 1e:70:89:e1:28:a8:c2:9e:25:cc:7b:af:3f:2e:fd: 6f:85:85:9f:f4:ca:8f:2a:53:e6:8f:fa:a3:40:12: 4c:90:2c:64:e1:10:fb:bd:de:d0:e6:f8:a4:16:3c: 3c:95:72:6c:7e:6a:6a:44:b2:58:46:40:99:c0:fd: 3c:bd:70:26:8c:f3:2a:93:92:ae:48:9f:89:48:2d: b2:d5:9c:59:9b:96:5c:5a:dd:cd:a1:f5:33:ac:5d: 2f:5b:df:e5:37:68:28:7e:b1:aa:d8:ba:6b:d7:6d: 5b:1d:f3:74:d9:80:46:34:71:4c:35:5c:91:a7:c3: 9b:de:28:7b:79:cc:73:ce:07:1e:ce:a0:28:74:f8: e3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A7:D2:67:60:53:BD:01:E3:92:F3:CC:A4:BA:06:9D:10:B7:46:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8421354-f434-37ba-917f-6ca609be55a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:4e:db:7a:e9:5f:13:cb:59:71:b8:bf:b4:93:03:e7:69:8d: aa:2e:3e:b4:5e:2e:db:c3:e8:a3:c6:bd:b9:24:52:ce:63:69: 80:b5:10:6c:a1:bf:fc:dd:06:0f:93:ba:cf:42:54:d1:69:f6: e1:b9:aa:f0:a8:e0:3e:74:2b:eb:86:48:4e:ce:58:8a:a6:b1: 97:55:b1:24:bc:a2:bd:f6:c3:5e:11:39:b3:e6:14:5b:21:a6: af:50:5e:a4:3b:c1:10:5c:62:ca:d8:04:a6:5e:ce:68:58:9e: 6b:d2:9e:9e:df:f9:fd:8a:9c:86:d2:06:74:a3:ed:d0:45:0d: c0:1f:6c:76:f3:40:42:d1:20:51:80:ed:8d:fb:4c:f0:cc:d5: 97:09:7c:ee:93:78:f5:6b:8d:81:1d:49:67:5b:5b:9d:8e:cf: d6:27:bd:db:de:20:fa:e3:60:57:fb:c2:85:28:a6:05:ae:9b: de:8f:df:02:f0:af:54:7c:2c:03:7d:7d:e2:74:77:e6:99:3e: aa:cb:f1:ce:48:22:a2:29:93:ae:d8:a8:08:c9:d4:93:62:cd: 8c:d6:c3:bb:7e:40:65:c5:45:ce:04:bd:b1:68:43:52:44:b7: f4:0a:be:25:33:d7:ba:c6:18:72:4c:f3:87:fd:16:fc:81:ad: 55:f0:4c:81 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8Z/O3EiwGOXFopioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk ZTgzYmYwZTUtOTQ0MC00ZWE2LTkwZTgtYzFjM2FhN2UyOTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhlYyrqU/m/gX7z9k8ckhF3SCOL8dKRgPQ/w 2qLHApwd+YvxDkYCcigZ05TeKbF1fxdQbhEl0OLC6i60swzsKVNh4Ej0GdwAuwwX DR+IFCccAzpBIYOGd29UYD7frHasARg/lPqKCiXxS7uLP2jjvQKdJY8WcBQecInh KKjCniXMe68/Lv1vhYWf9MqPKlPmj/qjQBJMkCxk4RD7vd7Q5vikFjw8lXJsfmpq RLJYRkCZwP08vXAmjPMqk5KuSJ+JSC2y1ZxZm5ZcWt3NofUzrF0vW9/lN2gofrGq 2Lpr121bHfN02YBGNHFMNVyRp8Ob3ih7ecxzzgcezqAodPjjLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDGn0mdgU70B45LzzKS6Bp0Qt0YlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjg0MjEzNTQtZjQzNC0z N2JhLTkxN2YtNmNhNjA5YmU1NWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAHln MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEBO23rpXxPLWXG4v7STA+dpjaouPrReLtvD6KPGvbkkUs5jaYC1 EGyhv/zdBg+Tus9CVNFp9uG5qvCo4D50K+uGSE7OWIqmsZdVsSS8or32w14RObPm FFshpq9QXqQ7wRBcYsrYBKZezmhYnmvSnp7f+f2KnIbSBnSj7dBFDcAfbHbzQELR IFGA7Y37TPDM1ZcJfO6TePVrjYEdSWdbW52Oz9YnvdveIPrjYFf7woUopgWum96P 3wLwr1R8LAN9feJ0d+aZPqrL8c5IIqIpk67YqAjJ1JNizYzWw7t+QGXFRc4EvbFo Q1JEt/QKviUz17rGGHJM84f9FvyBrVXwTIE= -----END CERTIFICATE-----Generated at Thu Oct 8 15:41:47 2026 by rpki-client