$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf1f9322-a4f8-3afb-b306-b2f75c738217.roa File: cf1f9322-a4f8-3afb-b306-b2f75c738217.roa (raw, json) Hash identifier: zT4pxgWubI/l6slqZxObiGSSEkk5TOW3gWB7ybQqEoQ= Subject key identifier: 92:D5:24:A4:6D:E2:D9:20:B4:C5:4D:61:72:71:DB:73:EA:B0:BC:7C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F6292C7EDBCE4CA6A7BE3A700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf1f9322-a4f8-3afb-b306-b2f75c738217.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 397195 IP address blocks: 2001:500:d937::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:c7:ed:bc:e4:ca:6a:7b:e3:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=63b45f73-9bd8-4037-978a-e313d14eab24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a0:93:e3:44:5a:30:9c:d1:a5:0f:e3:90:05: f4:b6:89:e0:d8:01:71:1f:d7:25:cc:ee:30:ea:4c: 05:44:5d:5d:b7:24:af:54:84:cd:f5:61:7b:34:f2: c1:2e:40:47:96:7f:37:6a:32:52:22:e6:c4:d5:9a: 12:23:6a:04:34:e9:8e:7c:0a:28:b5:81:09:ff:8c: 6d:22:67:a6:3f:36:85:3d:cd:12:fd:5c:23:70:d8: f7:a0:01:11:96:66:f0:30:1a:59:db:d2:9f:3a:82: 0a:84:a7:23:43:54:fb:a0:ba:53:2d:e7:aa:7f:2f: ec:3b:b6:12:2a:34:94:58:08:9a:52:36:ae:c1:16: 86:5e:14:38:cf:33:e0:6b:9d:21:fd:46:ca:40:e1: 65:c0:8d:62:fb:c1:21:73:d7:e8:2b:ac:11:33:ad: ee:44:4d:ab:a8:84:ee:70:48:5d:21:fa:37:0a:c6: 40:7a:14:3e:b1:dc:9b:cc:0f:46:86:85:aa:44:64: 74:13:04:0c:42:76:97:b3:7b:aa:50:37:92:7e:ad: 0f:51:05:c1:d1:c2:04:7c:2d:ae:17:c7:25:cb:f5: 89:36:1f:3d:f8:4b:f7:3b:db:dd:a6:96:bd:ce:d2: 89:5e:87:bd:05:c3:3c:04:c9:73:30:b2:e9:67:10: d8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D5:24:A4:6D:E2:D9:20:B4:C5:4D:61:72:71:DB:73:EA:B0:BC:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf1f9322-a4f8-3afb-b306-b2f75c738217.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:d937::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:fc:88:ec:12:6a:7c:12:38:ec:88:cc:59:e1:01:ea:7a:9c: 3a:86:8b:35:fc:9e:8c:cd:76:19:47:1b:99:be:8a:f2:3c:05: 5e:ca:a0:d3:73:2f:3c:73:8a:c0:20:43:16:9a:78:a1:b1:08: cd:11:89:88:ea:9e:d1:46:a3:9f:c4:74:e2:fe:bf:79:8a:77: 30:e0:4f:10:2b:04:d7:5d:7b:17:32:c7:88:cb:1a:0b:0b:b3: 41:0f:57:9f:cf:5d:cd:40:0f:1d:3f:83:52:4f:ef:20:29:60: 50:3b:70:29:ce:af:2f:6e:84:b8:6b:af:4a:a2:f3:f1:57:5d: 08:cf:a0:0a:0a:c4:db:73:64:02:28:60:86:2d:fb:b6:0b:d5: b2:0a:62:cf:91:de:13:08:d1:1b:72:2c:74:05:ca:c6:71:16: 6f:e5:00:df:33:34:68:92:2f:3b:80:d1:43:47:32:1e:96:51: e4:82:c0:22:07:bd:d3:98:7a:32:c2:bf:4c:34:77:e5:b5:04: 89:63:c0:00:2a:85:9c:7d:70:78:4a:e5:f2:96:5e:58:99:cd: c7:1e:1c:dc:2d:1e:b0:91:63:d9:cf:eb:9f:c9:e1:4d:e9:8f: 09:97:a5:85:ff:ea:15:50:4f:d3:44:44:0b:65:d1:2b:aa:9a: 42:ac:6c:8b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9iksftvOTKanvjpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk NjNiNDVmNzMtOWJkOC00MDM3LTk3OGEtZTMxM2QxNGVhYjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaCT40RaMJzRpQ/jkAX0tong2AFxH9clzO4w 6kwFRF1dtySvVITN9WF7NPLBLkBHln83ajJSIubE1ZoSI2oENOmOfAootYEJ/4xt ImemPzaFPc0S/VwjcNj3oAERlmbwMBpZ29KfOoIKhKcjQ1T7oLpTLeeqfy/sO7YS KjSUWAiaUjauwRaGXhQ4zzPga50h/UbKQOFlwI1i+8Ehc9foK6wRM63uRE2rqITu cEhdIfo3CsZAehQ+sdybzA9GhoWqRGR0EwQMQnaXs3uqUDeSfq0PUQXB0cIEfC2u F8cly/WJNh89+Ev3O9vdppa9ztKJXoe9BcM8BMlzMLLpZxDYkwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJLVJKRt4tkgtMVNYXJx23PqsLx8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2YxZjkzMjItYTRmOC0z YWZiLWIzMDYtYjJmNzVjNzM4MjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFANk3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABb8iOwSanwSOOyIzFnhAep6nDqGizX8nozNdhlHG5m+ivI8BV7K oNNzLzxzisAgQxaaeKGxCM0RiYjqntFGo5/EdOL+v3mKdzDgTxArBNddexcyx4jL GgsLs0EPV5/PXc1ADx0/g1JP7yApYFA7cCnOry9uhLhrr0qi8/FXXQjPoAoKxNtz ZAIoYIYt+7YL1bIKYs+R3hMI0RtyLHQFysZxFm/lAN8zNGiSLzuA0UNHMh6WUeSC wCIHvdOYejLCv0w0d+W1BIljwAAqhZx9cHhK5fKWXliZzcceHNwtHrCRY9nP65/J 4U3pjwmXpYX/6hVQT9NERAtl0SuqmkKsbIs= -----END CERTIFICATE-----Generated at Wed Oct 7 07:43:17 2026 by rpki-client