$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43a899ad-204b-30e1-9967-9fc741baf358.roa File: 43a899ad-204b-30e1-9967-9fc741baf358.roa (raw, json) Hash identifier: XOFQQI09GdX6EHvwhVvMAgHDuW2+31LPrUrpIJgNf4E= Subject key identifier: FB:AC:63:83:69:4C:29:2C:A3:58:52:A9:4B:DE:26:48:92:84:AD:07 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4F082C19029082E1D305C100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43a899ad-204b-30e1-9967-9fc741baf358.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 36623 IP address blocks: 2001:503:231d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:2c:19:02:90:82:e1:d3:05:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=8cf23d14-01eb-4cc8-8e29-596c9e65ef23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2d:07:a5:b7:cf:3c:36:12:64:9d:64:74:5a: 10:0e:57:ff:23:7e:c0:b4:d9:dd:0d:d8:b8:10:67: c8:85:a6:91:96:06:c9:c3:6a:a5:66:de:7a:4a:60: 12:1d:5e:63:1a:e4:c6:54:af:65:42:ec:27:f6:23: 6c:b0:46:fe:60:24:fc:4e:c6:e4:20:96:e9:a3:c1: d9:7a:28:f9:b7:df:71:68:23:73:a8:68:a0:fa:85: 3c:0e:27:c4:9a:fe:18:51:44:b1:4c:b3:bf:80:2f: 6b:88:6a:7b:dd:38:0f:4f:e9:e8:16:b3:73:a8:c1: c9:55:e7:cb:be:83:73:73:d7:db:16:bc:37:eb:e5: 31:11:db:eb:22:91:3e:1e:d1:2d:1b:85:46:24:60: cc:c2:84:b5:6c:3c:ba:6c:26:b4:91:e1:48:89:48: 39:66:7f:f0:8d:fe:61:9b:45:f4:94:cf:1a:f4:d5: b4:85:71:7c:45:9e:ae:a9:a7:99:d5:9b:2d:c4:00: 79:bb:12:c9:14:16:00:69:34:9c:69:50:4d:3b:f9: 11:b5:b5:ef:2f:44:4b:74:d5:ce:d1:7f:b7:2f:44: 99:43:67:ba:df:be:f8:06:61:95:ff:5b:31:41:6d: 35:4c:fa:8d:01:32:24:18:72:c3:1f:d4:58:18:c1: 99:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:AC:63:83:69:4C:29:2C:A3:58:52:A9:4B:DE:26:48:92:84:AD:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43a899ad-204b-30e1-9967-9fc741baf358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:231d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:44:02:50:95:47:d5:e0:cd:72:cc:fd:4a:0d:04:3b:f0:1e: 4b:fe:65:4f:05:d3:d4:2f:b5:88:ed:23:58:2a:14:62:9f:15: 21:75:a1:6c:e6:1b:df:2d:b0:b6:3b:86:09:f4:d9:aa:04:27: 49:d1:72:2e:34:27:b3:c2:2a:63:77:ca:b1:e6:9a:7b:fb:59: b4:7d:b4:28:e0:62:36:bd:67:0a:54:a3:39:2f:ab:dd:5f:63: 6b:3b:64:36:36:5c:36:50:e6:c3:3d:1b:71:cb:bd:52:b6:66: 61:42:72:bc:29:29:97:f3:0d:6e:13:1f:32:1d:e1:4d:fd:c7: 12:5a:c0:c7:15:aa:6c:58:33:bf:31:e7:f7:7d:f7:12:96:53: dd:22:74:20:ee:01:10:c3:8f:0d:95:ed:3d:22:55:60:77:25: 2a:75:7c:c0:4b:ec:5d:f3:a5:13:3f:d1:57:3f:d5:3c:79:00: 00:a3:d7:56:b0:b1:30:4a:8a:73:f7:d0:b9:ea:77:c5:cb:88: ca:dc:20:5a:9f:b1:6d:94:7b:f7:53:b7:11:e0:3c:61:30:a3: d0:d6:f6:f9:24:07:56:ca:8a:57:53:ad:56:90:c1:89:50:7d: 57:e3:b8:2f:93:73:a7:bb:f5:27:03:3e:fa:55:67:b6:85:a0: cd:70:c9:5d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9PCCwZApCC4dMFwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk OGNmMjNkMTQtMDFlYi00Y2M4LThlMjktNTk2YzllNjVlZjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzy0HpbfPPDYSZJ1kdFoQDlf/I37AtNndDdi4 EGfIhaaRlgbJw2qlZt56SmASHV5jGuTGVK9lQuwn9iNssEb+YCT8TsbkIJbpo8HZ eij5t99xaCNzqGig+oU8DifEmv4YUUSxTLO/gC9riGp73TgPT+noFrNzqMHJVefL voNzc9fbFrw36+UxEdvrIpE+HtEtG4VGJGDMwoS1bDy6bCa0keFIiUg5Zn/wjf5h m0X0lM8a9NW0hXF8RZ6uqaeZ1ZstxAB5uxLJFBYAaTScaVBNO/kRtbXvL0RLdNXO 0X+3L0SZQ2e63774BmGV/1sxQW01TPqNATIkGHLDH9RYGMGZwQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPusY4NpTCkso1hSqUveJkiShK0HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDNhODk5YWQtMjA0Yi0z MGUxLTk5NjctOWZjNzQxYmFmMzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAyMd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALNEAlCVR9XgzXLM/UoNBDvwHkv+ZU8F09QvtYjtI1gqFGKfFSF1 oWzmG98tsLY7hgn02aoEJ0nRci40J7PCKmN3yrHmmnv7WbR9tCjgYja9ZwpUozkv q91fY2s7ZDY2XDZQ5sM9G3HLvVK2ZmFCcrwpKZfzDW4THzId4U39xxJawMcVqmxY M78x5/d99xKWU90idCDuARDDjw2V7T0iVWB3JSp1fMBL7F3zpRM/0Vc/1Tx5AACj 11awsTBKinP30Lnqd8XLiMrcIFqfsW2Ue/dTtxHgPGEwo9DW9vkkB1bKildTrVaQ wYlQfVfjuC+Tc6e79ScDPvpVZ7aFoM1wyV0= -----END CERTIFICATE-----Generated at Mon Sep 28 21:03:38 2026 by rpki-client