$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de364d1c-bc90-37fe-b0db-82e261a77995.roa File: de364d1c-bc90-37fe-b0db-82e261a77995.roa (raw, json) Hash identifier: zVpbnnAQ9hizjXV5DUbO3FQXkqim08kgZQmyfWbPfV4= Subject key identifier: 22:4E:1F:D1:AC:65:90:B8:C8:F4:0A:43:09:D1:16:59:C9:57:E0:25 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F66C2C4C3E7CEBB590EA48980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de364d1c-bc90-37fe-b0db-82e261a77995.roa Signing time: Mon 05 Oct 2026 13:00:13 +0000 ROA not before: Mon 05 Oct 2026 13:00:13 +0000 ROA not after: Sun 03 Jan 2027 14:00:13 +0000 asID: 397212 IP address blocks: 2001:502:cbe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:66:c2:c4:c3:e7:ce:bb:59:0e:a4:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 5 13:00:13 2026 GMT Not After : Jan 3 14:00:13 2027 GMT Subject: CN=d8f7a5d9-b1d5-4508-93f1-a644f0ebd55a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ae:43:b7:0e:55:3a:6a:71:e0:7c:bc:cd:09: 76:92:94:e7:eb:f7:57:08:63:b3:04:c9:56:04:6e: 52:ff:a3:c3:e0:48:9a:5f:23:c3:5d:7e:ad:ec:02: 71:4c:32:45:12:44:4d:45:0f:c9:b9:6c:24:ac:a9: 15:65:ee:f9:75:92:e3:1d:71:00:19:d6:c4:fd:7b: de:4b:9e:b1:42:cc:72:02:22:7c:31:49:d5:f4:af: 18:ed:a1:7f:77:9a:62:1a:d3:61:e7:ca:8f:24:9c: 5d:f0:53:8f:28:af:c0:10:f1:bd:a7:d7:d4:78:6c: 83:04:26:ff:5e:0d:a5:f8:1f:25:fc:32:6e:d5:e6: ec:6f:bd:83:35:a8:9b:7c:1f:2f:9c:d6:34:0a:4e: 60:1a:55:21:28:33:31:c8:3e:b3:6f:d7:10:ef:db: 3b:87:6b:25:10:d5:a8:8f:8c:57:4a:6f:26:c9:bc: d1:32:40:39:23:9d:6e:ca:5a:af:e6:b2:b9:2e:9e: 71:85:0b:e8:c1:f9:10:dc:5c:77:36:33:89:0d:c2: a1:43:79:e8:6f:56:4e:54:63:d0:fb:bc:97:d4:c9: 62:e5:f8:37:12:db:6a:a0:c2:8b:ef:d7:b6:ba:b9: a2:07:76:1f:0f:a1:9f:30:bc:db:b5:bc:ae:33:7e: dc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:4E:1F:D1:AC:65:90:B8:C8:F4:0A:43:09:D1:16:59:C9:57:E0:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de364d1c-bc90-37fe-b0db-82e261a77995.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:d7:2a:88:db:29:26:4e:b5:a8:2d:b3:83:94:7c:a6:cd:ca: 23:4b:3d:73:93:f8:d2:8b:9e:fc:d9:a2:cf:55:40:e9:48:0d: 0c:bd:49:0e:72:e1:7f:c6:2f:d8:77:3f:3d:b9:4e:0f:8d:c8: 79:49:67:64:b0:68:fb:b6:05:b0:05:e3:c2:ce:06:f2:02:c5: db:af:fd:9c:c5:11:6f:50:64:b3:c4:55:91:f2:d9:95:14:0c: 60:63:31:04:e6:25:85:9a:d8:01:2c:da:9a:99:40:97:a8:4d: ad:ff:09:42:8a:77:62:01:5b:6c:6b:c8:e9:ad:8e:7f:c6:68: 00:03:ae:37:49:3a:57:1e:35:0e:b7:c3:2c:bb:43:15:f9:46: a8:af:df:39:4f:80:7c:51:48:05:e3:ef:6d:99:cf:70:89:78: 88:52:7c:49:d9:14:53:22:6e:9c:f8:c9:e0:50:26:7e:85:ab: 74:9e:e9:46:91:69:06:10:84:7c:0a:c5:1f:01:7d:e2:aa:e8: ea:b4:0e:1d:75:1d:ae:d6:5b:20:23:7b:20:a0:7f:c3:e4:0f: 32:57:b0:9e:a4:68:0c:de:5d:43:40:a0:9d:b4:b1:47:89:91: b8:86:94:7a:a6:c0:b5:00:83:aa:da:e3:8f:ca:30:60:95:b8: 16:e9:bf:e9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9mwsTD5867WQ6kiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNTEzMDAxM1oXDTI3MDEwMzE0MDAxM1owLzEtMCsGA1UEAxMk ZDhmN2E1ZDktYjFkNS00NTA4LTkzZjEtYTY0NGYwZWJkNTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj65Dtw5VOmpx4Hy8zQl2kpTn6/dXCGOzBMlW BG5S/6PD4EiaXyPDXX6t7AJxTDJFEkRNRQ/JuWwkrKkVZe75dZLjHXEAGdbE/Xve S56xQsxyAiJ8MUnV9K8Y7aF/d5piGtNh58qPJJxd8FOPKK/AEPG9p9fUeGyDBCb/ Xg2l+B8l/DJu1ebsb72DNaibfB8vnNY0Ck5gGlUhKDMxyD6zb9cQ79s7h2slENWo j4xXSm8mybzRMkA5I51uylqv5rK5Lp5xhQvowfkQ3Fx3NjOJDcKhQ3nob1ZOVGPQ +7yX1Mli5fg3EttqoMKL79e2urmiB3YfD6GfMLzbtbyuM37ccQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCJOH9GsZZC4yPQKQwnRFlnJV+AlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGUzNjRkMWMtYmM5MC0z N2ZlLWIwZGItODJlMjYxYTc3OTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAArXKojbKSZOtagts4OUfKbNyiNLPXOT+NKLnvzZos9VQOlIDQy9 SQ5y4X/GL9h3Pz25Tg+NyHlJZ2SwaPu2BbAF48LOBvICxduv/ZzFEW9QZLPEVZHy 2ZUUDGBjMQTmJYWa2AEs2pqZQJeoTa3/CUKKd2IBW2xryOmtjn/GaAADrjdJOlce NQ63wyy7QxX5Rqiv3zlPgHxRSAXj722Zz3CJeIhSfEnZFFMibpz4yeBQJn6Fq3Se 6UaRaQYQhHwKxR8BfeKq6Oq0Dh11Ha7WWyAjeyCgf8PkDzJXsJ6kaAzeXUNAoJ20 sUeJkbiGlHqmwLUAg6ra44/KMGCVuBbpv+k= -----END CERTIFICATE-----Generated at Thu Oct 8 08:52:28 2026 by rpki-client