$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cdac3e7f-8c66-3c56-972e-bade4c8d3efa.roa File: cdac3e7f-8c66-3c56-972e-bade4c8d3efa.roa (raw, json) Hash identifier: bf/zvbP7WTjURsNmY2itBwIPXfOZ148x02cqXTEre9M= Subject key identifier: 2E:F6:59:23:BE:F5:3F:D7:38:5A:17:F5:E2:D7:F3:CD:3E:39:D5:52 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F629314A359EC02727CAFE500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cdac3e7f-8c66-3c56-972e-bade4c8d3efa.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396612 IP address blocks: 2001:500:d937::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:14:a3:59:ec:02:72:7c:af:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=f590a76a-bdb6-4efc-affe-c6e43af7d95c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7e:87:79:f2:8c:49:e6:2c:de:34:11:47:69: 9a:3b:1a:c5:01:05:a0:91:16:5f:8d:d4:75:e3:fe: 8c:99:b8:b5:9d:d2:06:68:ab:b0:b0:28:83:3a:3a: 9d:ee:db:12:3a:87:b8:22:31:4f:bc:c6:b5:c2:cd: 16:22:43:0b:2d:a3:09:83:4e:5e:35:61:94:fe:42: 58:f0:be:7e:67:81:5e:ef:e7:21:2c:02:d5:b4:ed: 90:3f:73:5c:9b:47:ba:eb:31:e4:43:7b:2b:e2:40: 5a:38:53:e7:20:9f:ec:06:cb:22:d2:b3:1d:ba:8a: 35:2c:c4:46:db:42:2a:3e:e8:8b:27:a2:7a:97:69: 11:13:fb:47:d4:ad:f3:83:48:a8:18:a1:49:bb:bd: fd:fc:cf:1f:85:ef:49:b0:14:f4:60:43:fa:0f:4f: af:cc:98:98:76:50:71:fe:aa:03:1d:e1:0c:ae:5d: dd:0e:47:f2:57:67:0f:b6:32:74:b5:e8:4f:72:82: 8c:41:45:d5:d1:22:99:e3:be:31:41:30:1d:b3:eb: a4:d0:e5:00:49:af:3d:02:6c:37:a0:b4:63:ed:1f: 42:b2:4a:63:7f:5e:07:27:cd:33:4c:d3:54:0c:b4: 6e:61:f2:78:87:5e:64:bd:ab:89:6d:bb:ce:0d:6e: bc:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F6:59:23:BE:F5:3F:D7:38:5A:17:F5:E2:D7:F3:CD:3E:39:D5:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cdac3e7f-8c66-3c56-972e-bade4c8d3efa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:d937::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:e2:8b:ad:a5:4c:10:ae:a1:c7:a8:8c:b4:b4:72:a2:11:8e: bd:0b:67:c8:e3:05:79:6c:4c:d0:0a:50:27:ce:c7:8b:cb:53: ec:1c:4d:7e:49:8e:35:af:ed:38:e3:19:01:7c:f3:d0:b8:bb: e3:54:bb:9b:4b:7c:fe:a2:4b:40:51:5c:4e:9b:b0:57:2e:34: 77:01:65:be:ed:e9:2c:fa:26:f8:d3:85:ea:5c:4f:6f:b4:60: 6b:ea:b6:81:33:cc:7e:1b:a8:82:d4:2e:1b:34:cc:81:8d:fd: 8e:bc:a6:18:3b:69:e3:c1:4a:01:0f:51:9e:9a:9a:b2:7a:3a: d7:ca:6a:ea:c2:53:cb:ab:1b:03:7b:9c:84:ac:7c:0b:2b:91: 28:7b:9a:ca:6f:df:2b:cf:df:a7:38:f6:1e:20:5e:37:9f:c9: 36:1d:a0:2d:60:16:9c:3c:c9:38:16:e8:b8:2d:a0:84:44:ff: d4:7e:b5:27:e9:65:35:dd:1b:b0:be:7e:fd:51:0a:71:2c:5b: cd:eb:15:9b:e0:4e:7d:c3:00:33:8a:13:d9:b4:d0:c7:e2:46: 58:cb:60:ae:ea:d0:8a:76:3e:ec:c3:31:86:04:66:b9:d8:20: 47:9f:cb:8d:33:8c:48:50:75:d8:e4:07:45:29:bc:5b:50:5f: e3:cc:73:d3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9ikxSjWewCcnyv5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZjU5MGE3NmEtYmRiNi00ZWZjLWFmZmUtYzZlNDNhZjdkOTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA436HefKMSeYs3jQRR2maOxrFAQWgkRZfjdR1 4/6Mmbi1ndIGaKuwsCiDOjqd7tsSOoe4IjFPvMa1ws0WIkMLLaMJg05eNWGU/kJY 8L5+Z4Fe7+chLALVtO2QP3Ncm0e66zHkQ3sr4kBaOFPnIJ/sBssi0rMduoo1LMRG 20IqPuiLJ6J6l2kRE/tH1K3zg0ioGKFJu739/M8fhe9JsBT0YEP6D0+vzJiYdlBx /qoDHeEMrl3dDkfyV2cPtjJ0tehPcoKMQUXV0SKZ474xQTAds+uk0OUASa89Amw3 oLRj7R9Cskpjf14HJ80zTNNUDLRuYfJ4h15kvauJbbvODW68xwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC72WSO+9T/XOFoX9eLX880+OdVSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2RhYzNlN2YtOGM2Ni0z YzU2LTk3MmUtYmFkZTRjOGQzZWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFANk3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACfii62lTBCuoceojLS0cqIRjr0LZ8jjBXlsTNAKUCfOx4vLU+wc TX5JjjWv7TjjGQF889C4u+NUu5tLfP6iS0BRXE6bsFcuNHcBZb7t6Sz6JvjThepc T2+0YGvqtoEzzH4bqILULhs0zIGN/Y68phg7aePBSgEPUZ6amrJ6OtfKaurCU8ur GwN7nISsfAsrkSh7mspv3yvP36c49h4gXjefyTYdoC1gFpw8yTgW6LgtoIRE/9R+ tSfpZTXdG7C+fv1RCnEsW83rFZvgTn3DADOKE9m00MfiRljLYK7q0Ip2PuzDMYYE ZrnYIEefy40zjEhQddjkB0UpvFtQX+PMc9M= -----END CERTIFICATE-----Generated at Tue Oct 6 19:56:22 2026 by rpki-client