$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/cb3d8f1a-86a9-39a5-abb5-0e4c15dd3f49.roa File: cb3d8f1a-86a9-39a5-abb5-0e4c15dd3f49.roa (raw, json) Hash identifier: 3Z1kGons9JB48s5m+24rhz2aYf4Hgus5+T6hLRBwrE8= Subject key identifier: F4:AA:9C:5E:87:C6:2F:C5:82:11:CA:88:0E:CA:56:71:4E:AC:DF:D2 Certificate issuer: /CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1 Certificate serial: 010D0C9F4328584EC371BF8DE9A2286DCFD5D680 Authority key identifier: EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/cb3d8f1a-86a9-39a5-abb5-0e4c15dd3f49.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 2701 IP address blocks: 2001:49d0:9000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:71:bf:8d:e9:a2:28:6d:cf:d5:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1 Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=8d3932a4-dacc-4edc-9e86-4f3b36654dde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4d:2b:1f:1e:ea:9f:c2:e9:15:37:f7:d4:46: eb:7f:6a:1c:a1:70:ee:1e:72:4e:3c:8e:94:71:f8: f3:28:89:da:3a:4c:77:a0:ab:33:00:da:17:ca:2a: de:21:99:e6:f5:c4:f5:eb:19:07:b9:10:10:aa:24: 8c:aa:34:2b:72:45:08:00:e3:d2:61:77:ec:b6:c0: dc:03:f1:bf:10:88:38:c9:e2:80:f0:98:94:f9:4b: 75:1a:72:a1:1e:24:8f:ba:03:cf:31:8f:fe:5c:76: 17:65:21:cf:98:fb:4e:46:b4:c3:56:89:31:8c:69: b9:d5:c5:67:9f:1d:b4:a3:bc:2c:c1:55:65:e7:58: 66:d5:b5:6d:4b:a7:7d:3a:91:49:f5:84:ea:09:fe: d8:9c:26:de:bc:d5:a1:b4:94:3e:3a:41:49:34:05: ba:98:e4:04:1d:bd:ac:0d:ac:87:8e:2e:1c:04:7d: 76:11:c5:4f:2d:04:f0:7a:c5:e5:42:e4:7c:91:66: 84:06:2d:42:a9:e6:e7:3b:1f:5b:65:23:0a:e1:b3: f0:a0:4e:6d:cc:fc:27:04:18:93:66:62:fd:47:46: 3d:c4:7f:84:5f:e3:35:55:b2:dd:58:01:4c:e6:68: f4:c3:35:c0:37:34:70:85:b3:95:fe:35:b2:99:7e: 82:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:AA:9C:5E:87:C6:2F:C5:82:11:CA:88:0E:CA:56:71:4E:AC:DF:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/cb3d8f1a-86a9-39a5-abb5-0e4c15dd3f49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl X509v3 Authority Key Identifier: keyid:EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer sbgp-ipAddrBlock: critical IPv6: 2001:49d0:9000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:44:0a:bb:e9:2c:10:a6:96:18:8f:f5:d6:00:d6:d9:53:44: 9a:b5:6b:53:bd:bd:9d:2e:e4:b7:7b:3a:46:47:ec:45:8a:f0: f8:46:6c:3e:b0:b0:92:f2:77:0d:8b:9f:d4:7e:f1:91:94:01: 77:d2:f7:a3:0a:76:0e:3a:2f:58:bb:ed:82:d0:e7:3c:aa:61: 88:8e:e1:ef:29:98:ee:8c:a2:82:98:05:20:d5:d3:61:9f:f9: 1e:52:16:b2:d1:42:97:89:2c:4d:ae:88:bf:6c:03:bf:97:96: b8:d2:3c:78:95:27:15:fe:a6:ac:7e:ca:0b:b3:c6:ef:6b:8b: 85:3a:1a:5b:63:0e:fd:d7:f6:17:e3:23:30:bf:e5:f9:8b:24: 3d:7b:79:47:3b:aa:70:d0:89:fb:90:e3:3c:f8:11:b5:39:10: 8c:d1:ce:f3:83:83:00:30:f8:bc:1a:29:71:9e:56:a1:cb:3d: 9c:bb:25:86:4f:d8:59:be:ca:e0:c5:73:d2:48:66:a3:ee:c0: c2:ce:14:1f:e3:f5:4d:98:cc:8a:28:b1:c5:7d:b5:67:11:7a: 9f:5d:a8:a8:7d:e8:d1:c5:56:80:35:0f:a4:38:1e:87:c7:e5: 40:05:8e:d7:30:ae:91:69:60:c6:c0:c3:a3:43:58:b9:48:00: 1e:aa:57:6b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7Dcb+N6aIobc/V1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE5MTIzMmItY2YwNy00ZDNkLTk1ZTEtYWZjZDFiOTI4 YWIxMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk OGQzOTMyYTQtZGFjYy00ZWRjLTllODYtNGYzYjM2NjU0ZGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk00rHx7qn8LpFTf31Ebrf2ocoXDuHnJOPI6U cfjzKInaOkx3oKszANoXyireIZnm9cT16xkHuRAQqiSMqjQrckUIAOPSYXfstsDc A/G/EIg4yeKA8JiU+Ut1GnKhHiSPugPPMY/+XHYXZSHPmPtORrTDVokxjGm51cVn nx20o7wswVVl51hm1bVtS6d9OpFJ9YTqCf7YnCbevNWhtJQ+OkFJNAW6mOQEHb2s DayHji4cBH12EcVPLQTwesXlQuR8kWaEBi1CqebnOx9bZSMK4bPwoE5tzPwnBBiT ZmL9R0Y9xH+EX+M1VbLdWAFM5mj0wzXANzRwhbOV/jWymX6CJQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPSqnF6Hxi/FghHKiA7KVnFOrN/SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMTkx MjMyYi1jZjA3LTRkM2QtOTVlMS1hZmNkMWI5MjhhYjEvY2IzZDhmMWEtODZhOS0z OWE1LWFiYjUtMGU0YzE1ZGQzZjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTE5MTIzMmItY2YwNy00ZDNkLTk1 ZTEtYWZjZDFiOTI4YWIxL2UxOTEyMzJiLWNmMDctNGQzZC05NWUxLWFmY2QxYjky OGFiMS5jcmwwHwYDVR0jBBgwFoAU7JRBLAWSfcf7SwhB2jG+8+q2vTQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMTkxMjMyYi1jZjA3LTRkM2QtOTVlMS1hZmNk MWI5MjhhYjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCIAFJ0JAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEATkQKu+ksEKaWGI/11gDW2VNEmrVrU729nS7kt3s6RkfsRYrw+EZs PrCwkvJ3DYuf1H7xkZQBd9L3owp2DjovWLvtgtDnPKphiI7h7ymY7oyigpgFINXT YZ/5HlIWstFCl4ksTa6Iv2wDv5eWuNI8eJUnFf6mrH7KC7PG72uLhToaW2MO/df2 F+MjML/l+YskPXt5RzuqcNCJ+5DjPPgRtTkQjNHO84ODADD4vBopcZ5Wocs9nLsl hk/YWb7K4MVz0khmo+7Aws4UH+P1TZjMiiixxX21ZxF6n12oqH3o0cVWgDUPpDge h8flQAWO1zCukWlgxsDDo0NYuUgAHqpXaw== -----END CERTIFICATE-----Generated at Sun Sep 13 14:56:18 2026 by rpki-client