$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba222fdd-81c2-3d6d-8b80-65d3f6ff478a.roa File: ba222fdd-81c2-3d6d-8b80-65d3f6ff478a.roa (raw, json) Hash identifier: ftr7Idr2cFxNFe8o6ZoiSQt0Fnr7O2W/nOAPqoGubdI= Subject key identifier: FE:D2:8F:1B:15:60:19:EA:A1:B4:95:93:8E:3F:14:98:40:65:2C:36 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F62930F7676426CB6F511B880 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba222fdd-81c2-3d6d-8b80-65d3f6ff478a.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 36623 IP address blocks: 2001:500:d937::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:0f:76:76:42:6c:b6:f5:11:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=4aca9c87-e665-4849-90ff-7ee75018a8bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3e:c8:2c:02:82:92:41:35:06:4b:ed:16:88: 67:17:be:d3:09:18:2d:4b:d4:cd:9c:f3:18:f8:15: f0:9b:36:00:f6:63:5e:84:18:f8:a3:f5:7d:f5:d6: fa:6d:3b:3a:70:79:4e:41:72:be:00:2f:02:88:42: ea:26:37:5e:7f:0d:36:43:37:ae:d1:69:69:7e:11: 4f:be:7f:17:46:5c:66:4a:07:38:b9:f3:ca:fa:c5: 82:da:87:54:ab:fb:5a:96:0c:a6:28:04:a3:c0:5b: 88:06:71:63:e6:5e:78:cb:14:08:03:36:05:7a:49: a6:de:5a:81:52:23:22:ab:cc:a8:f3:c8:0b:e7:c9: 7e:c7:2c:5e:f1:76:0e:0a:91:50:10:ee:b4:83:98: 70:86:d5:28:ed:f1:20:0e:a4:84:da:5e:22:52:ce: 3b:5b:9f:b3:1f:a1:0c:df:61:b9:58:11:14:e7:9c: 32:0c:d9:c9:7f:99:27:5e:e6:20:09:c7:1a:4f:ed: 83:dd:97:f0:ca:7e:6e:87:ff:c1:38:a5:b1:53:95: d4:b9:9a:ed:c1:9d:d8:fd:9c:31:76:b5:0c:b1:cc: c2:f1:ab:a4:36:b6:e2:c2:7b:9a:3f:7d:bb:a2:84: 28:55:24:e1:9f:49:ca:0a:83:45:65:f1:3d:5c:cf: d9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:D2:8F:1B:15:60:19:EA:A1:B4:95:93:8E:3F:14:98:40:65:2C:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba222fdd-81c2-3d6d-8b80-65d3f6ff478a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:d937::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:90:1a:b7:44:4b:5b:b6:84:bb:d9:8c:12:46:fa:29:77:84: 52:ca:37:f1:5c:5a:54:68:7d:80:47:c0:b4:69:4f:89:64:31: 22:3d:6b:b0:5b:1d:ac:dd:ba:96:9f:ee:ce:ac:75:80:db:93: cb:03:7a:66:ce:b7:95:7b:10:08:0e:62:2c:11:69:d0:67:84: cd:9d:04:fa:5e:d9:cc:93:bb:c0:0f:f1:6c:c2:e5:e1:1a:58: 70:4e:4e:a2:14:33:e4:c5:53:e0:37:0a:ce:f2:05:72:ae:b4: 37:9a:fa:11:73:82:89:33:a6:86:97:78:f2:bb:39:ed:f5:14: 9b:7c:ef:2b:7d:e8:e9:73:66:4e:14:70:07:18:00:18:bb:c1: b8:41:e7:1a:ff:1d:c9:40:4c:ac:cb:ac:67:8b:06:d3:93:85: 46:cf:8a:0a:b2:19:6a:fd:d7:a2:9b:0e:46:92:59:fe:00:2f: ba:24:5c:a9:7f:f1:90:04:b1:c1:4c:e2:49:bf:56:f8:4a:61: c1:fa:45:98:84:54:49:63:5b:3d:18:35:88:ce:af:e7:43:c3: 7f:ae:0d:f0:46:52:59:02:58:fe:b9:51:36:00:94:e1:0c:a0: 7c:4b:6b:3c:9d:d5:72:ba:cd:fd:1f:83:f8:f5:5c:ee:48:b5: 83:10:fd:84 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9ikw92dkJstvURuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk NGFjYTljODctZTY2NS00ODQ5LTkwZmYtN2VlNzUwMThhOGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3D7ILAKCkkE1BkvtFohnF77TCRgtS9TNnPMY +BXwmzYA9mNehBj4o/V99db6bTs6cHlOQXK+AC8CiELqJjdefw02Qzeu0WlpfhFP vn8XRlxmSgc4ufPK+sWC2odUq/talgymKASjwFuIBnFj5l54yxQIAzYFekmm3lqB UiMiq8yo88gL58l+xyxe8XYOCpFQEO60g5hwhtUo7fEgDqSE2l4iUs47W5+zH6EM 32G5WBEU55wyDNnJf5knXuYgCccaT+2D3Zfwyn5uh//BOKWxU5XUuZrtwZ3Y/Zwx drUMsczC8aukNrbiwnuaP327ooQoVSThn0nKCoNFZfE9XM/ZawIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP7SjxsVYBnqobSVk44/FJhAZSw2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmEyMjJmZGQtODFjMi0z ZDZkLThiODAtNjVkM2Y2ZmY0NzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFANk3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHCQGrdES1u2hLvZjBJG+il3hFLKN/FcWlRofYBHwLRpT4lkMSI9 a7BbHazdupaf7s6sdYDbk8sDembOt5V7EAgOYiwRadBnhM2dBPpe2cyTu8AP8WzC 5eEaWHBOTqIUM+TFU+A3Cs7yBXKutDea+hFzgokzpoaXePK7Oe31FJt87yt96Olz Zk4UcAcYABi7wbhB5xr/HclATKzLrGeLBtOThUbPigqyGWr916KbDkaSWf4AL7ok XKl/8ZAEscFM4km/VvhKYcH6RZiEVEljWz0YNYjOr+dDw3+uDfBGUlkCWP65UTYA lOEMoHxLazyd1XK6zf0fg/j1XO5ItYMQ/YQ= -----END CERTIFICATE-----Generated at Wed Oct 7 07:40:06 2026 by rpki-client