$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e697b655-5d97-3d71-a30d-8e806f5e3f34.roa File: e697b655-5d97-3d71-a30d-8e806f5e3f34.roa (raw, json) Hash identifier: whmlk0v80FxKpyAqyOR/3+DMYpQAcCTEHnxsD0s/6f8= Subject key identifier: F9:6B:6E:D8:F8:C4:D5:68:CE:68:99:2E:CE:EA:67:C7:A8:2E:0D:E2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F49872F167BACB2BB15356780 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e697b655-5d97-3d71-a30d-8e806f5e3f34.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396580 IP address blocks: 2001:501:8a29::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:2f:16:7b:ac:b2:bb:15:35:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4dcf6327-c415-419c-866f-45376c56718b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:dd:5f:32:4b:54:cf:f1:ab:a4:75:b6:5e:8b: dd:c0:3d:c9:df:8c:a2:4c:53:ba:89:ff:0d:1b:e9: f3:f9:98:59:f1:81:f3:2c:d6:c7:5d:e2:a4:0a:80: ad:c7:75:ed:0b:35:d4:ef:93:6c:da:f6:3e:a1:1c: 8f:2a:6d:ca:79:5e:2b:f3:20:b9:83:54:82:b8:5d: 2d:b2:d3:5d:1d:5c:65:5e:61:16:e3:59:13:bb:e8: 49:6e:28:ed:11:de:1a:14:16:22:6c:f6:99:26:7b: ab:80:d5:99:22:5f:f3:ed:dc:01:b9:77:ba:d0:27: ac:f7:25:a5:5e:79:03:17:d0:14:76:ca:aa:f3:ef: 36:53:b7:a6:c3:e5:cf:06:ee:ae:88:bf:0a:56:a7: 44:98:a3:60:ca:dd:db:89:78:d8:7a:37:6c:ba:10: 63:84:f1:9a:cc:da:da:e8:dc:2b:7d:87:b4:09:22: ff:43:de:ec:d3:bc:50:b3:f9:9b:38:f9:9b:80:17: 3b:3c:1a:64:f6:16:34:e9:a6:26:b7:03:ec:fa:5a: 33:32:36:94:9c:1c:68:0e:ad:a3:0d:2d:60:cc:70: 36:06:4a:a0:d5:8f:24:ee:88:d4:12:47:25:f4:b9: 53:46:97:37:5e:61:1d:06:54:fc:29:db:98:05:a1: 6a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:6B:6E:D8:F8:C4:D5:68:CE:68:99:2E:CE:EA:67:C7:A8:2E:0D:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e697b655-5d97-3d71-a30d-8e806f5e3f34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:39:64:d1:b1:9a:62:c6:5d:9d:3d:c5:4b:a9:1a:0c:c8:57: 26:4f:87:96:32:f3:e9:fc:bf:fa:5d:d0:7a:3d:a0:93:05:48: 70:4f:bb:b3:5b:e0:c7:88:fe:9e:14:fc:5d:91:52:52:4c:1f: ab:11:03:5e:99:b2:50:7b:b5:89:b5:5f:9c:bf:45:8c:d3:6c: 4c:9b:a8:fb:ed:a2:60:98:e6:dc:32:e7:44:a9:26:a1:15:6b: 7a:66:10:0e:2c:55:40:55:c6:a5:ca:12:23:66:81:5b:81:35: bb:99:71:36:f3:f6:9c:a8:36:59:9e:a5:62:6d:2d:e1:46:47: c0:7b:af:9e:82:f7:e0:b7:63:9c:72:66:77:ee:7c:87:6f:a7: e5:11:f8:bf:ec:39:b5:e6:d3:07:d6:e8:ca:a1:e3:21:11:76: 40:6c:f0:c2:de:a2:7a:c4:d9:c1:48:d7:ab:4a:f7:d2:2f:82: d2:65:46:cf:af:aa:b0:3c:8f:4a:2e:90:4a:16:77:c2:01:ba: 11:da:b2:49:55:51:11:3d:50:d0:1c:6c:cf:25:3f:53:25:7d: da:b4:64:83:50:b0:38:b8:59:95:c4:7d:20:6d:f1:cd:30:9b: e4:37:e5:45:9c:34:8c:6d:68:06:6b:f0:88:a9:16:63:8e:06: 0a:c3:45:84 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jhy8We6yyuxU1Z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGRjZjYzMjctYzQxNS00MTljLTg2NmYtNDUzNzZjNTY3MThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd1fMktUz/GrpHW2XovdwD3J34yiTFO6if8N G+nz+ZhZ8YHzLNbHXeKkCoCtx3XtCzXU75Ns2vY+oRyPKm3KeV4r8yC5g1SCuF0t stNdHVxlXmEW41kTu+hJbijtEd4aFBYibPaZJnurgNWZIl/z7dwBuXe60Ces9yWl XnkDF9AUdsqq8+82U7emw+XPBu6uiL8KVqdEmKNgyt3biXjYejdsuhBjhPGazNra 6NwrfYe0CSL/Q97s07xQs/mbOPmbgBc7PBpk9hY06aYmtwPs+lozMjaUnBxoDq2j DS1gzHA2Bkqg1Y8k7ojUEkcl9LlTRpc3XmEdBlT8KduYBaFqtQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPlrbtj4xNVozmiZLs7qZ8eoLg3iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTY5N2I2NTUtNWQ5Ny0z ZDcxLWEzMGQtOGU4MDZmNWUzZjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAYop MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACY5ZNGxmmLGXZ09xUupGgzIVyZPh5Yy8+n8v/pd0Ho9oJMFSHBP u7Nb4MeI/p4U/F2RUlJMH6sRA16ZslB7tYm1X5y/RYzTbEybqPvtomCY5twy50Sp JqEVa3pmEA4sVUBVxqXKEiNmgVuBNbuZcTbz9pyoNlmepWJtLeFGR8B7r56C9+C3 Y5xyZnfufIdvp+UR+L/sObXm0wfW6Mqh4yERdkBs8MLeonrE2cFI16tK99IvgtJl Rs+vqrA8j0oukEoWd8IBuhHasklVURE9UNAcbM8lP1Mlfdq0ZINQsDi4WZXEfSBt 8c0wm+Q35UWcNIxtaAZr8IipFmOOBgrDRYQ= -----END CERTIFICATE-----Generated at Wed Oct 7 08:03:02 2026 by rpki-client