$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ab2b0b4-17a4-3713-80d5-fee28853e986.roa File: 4ab2b0b4-17a4-3713-80d5-fee28853e986.roa (raw, json) Hash identifier: BrlrAq1c10ExvdF4k7EAE4qOKF99n9BRItFoH/AmRYQ= Subject key identifier: 62:DB:25:5D:40:2D:97:9D:53:E8:9B:AE:11:61:57:F6:99:5A:D6:5A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EF5B20CCBECC30D60671DDDC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ab2b0b4-17a4-3713-80d5-fee28853e986.roa Signing time: Wed 26 Aug 2026 01:00:12 +0000 ROA not before: Wed 26 Aug 2026 01:00:12 +0000 ROA not after: Tue 24 Nov 2026 02:00:12 +0000 asID: 36624 IP address blocks: 2001:503:d2d::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f5:b2:0c:cb:ec:c3:0d:60:67:1d:dd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 26 01:00:12 2026 GMT Not After : Nov 24 02:00:12 2026 GMT Subject: CN=b3461baa-db70-4a3d-b919-d34025014708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5b:ba:85:5c:bf:c9:1c:64:63:7e:e0:30:7d: 8e:32:6f:c9:81:4f:b9:1e:4d:9d:14:c2:7d:79:b9: 84:4b:ca:3b:72:d6:49:3c:d0:52:16:2a:67:77:93: 85:dd:6b:81:8c:f4:50:88:9c:3d:e3:1d:7a:4f:04: 90:ea:e1:2c:cf:1d:c6:57:b9:ab:43:a5:ac:53:61: 0f:06:79:50:dc:89:f1:ec:76:e3:7e:96:26:93:4b: 03:40:7f:84:c9:44:c5:90:3d:03:80:5d:bf:26:d9: 9b:90:c1:14:74:ad:c4:05:68:87:5c:2e:c5:ab:fb: 9e:9f:44:fa:32:41:b3:f2:f8:40:2c:ff:72:16:29: 23:9b:87:40:ec:16:f5:fe:21:ff:c8:53:65:6f:6c: 56:8c:15:40:21:e0:63:6f:57:45:8a:7b:73:5f:01: 8e:8f:f9:2e:a1:f5:49:7d:4d:46:0a:22:c0:2d:00: ed:35:3f:9f:8d:2b:94:56:d6:2b:73:3e:37:1a:c0: 70:80:88:7a:ba:cf:0e:dd:21:88:7e:b1:22:fd:aa: 3e:30:7e:d1:12:3b:2a:99:e6:fa:36:d8:40:1e:1b: 28:55:b3:d8:db:03:d4:e2:e7:39:6f:c2:86:f0:b3: 94:2a:d8:14:b1:f2:50:10:54:51:80:a4:8d:3f:df: 95:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:DB:25:5D:40:2D:97:9D:53:E8:9B:AE:11:61:57:F6:99:5A:D6:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ab2b0b4-17a4-3713-80d5-fee28853e986.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:d2d:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:45:5d:b4:ba:7d:10:d8:ac:80:3b:e3:72:15:91:7d:62:90: 3f:ea:6c:f0:0d:e2:eb:5e:5f:6b:be:7a:18:00:b4:53:44:73: 3a:90:61:f5:bd:e1:16:13:46:b9:9c:ae:c3:8c:7c:27:0f:6f: 1b:5b:90:21:60:00:a4:50:b9:20:65:03:5f:1e:36:a8:29:d3: a4:5f:a2:3b:ea:47:bf:a1:a6:7f:b9:5d:08:a1:dc:98:e8:03: 64:e5:ce:7f:95:d0:e9:cf:3d:9d:02:55:b8:a7:00:26:87:72: 60:40:0b:74:00:1a:b3:df:9b:56:6e:b1:ce:42:00:68:2f:c4: 9d:b4:f1:99:ae:79:cc:a2:18:59:e0:04:fb:6e:ff:1f:da:96: 48:fa:b4:21:3d:4f:8d:5a:b5:68:5c:07:c5:d5:fd:f0:5c:0f: 2a:03:38:5e:57:eb:df:e0:b5:09:22:ff:6b:30:80:47:59:c3: d6:97:c5:c5:06:0e:b9:5c:31:77:08:69:28:f0:3f:40:fa:28: 14:ed:4a:9b:30:38:8f:7b:c7:40:a3:d6:56:0a:c5:8c:b3:50: d2:4c:f7:a4:f8:4a:5d:cb:c1:c5:72:00:f6:f7:dd:c9:7f:8f: 15:66:e6:0b:e6:5d:09:63:54:86:ab:28:e8:73:ba:63:10:f2: 93:f1:f1:8c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE71sgzL7MMNYGcd3cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgyNjAxMDAxMloXDTI2MTEyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjM0NjFiYWEtZGI3MC00YTNkLWI5MTktZDM0MDI1MDE0NzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVu6hVy/yRxkY37gMH2OMm/JgU+5Hk2dFMJ9 ebmES8o7ctZJPNBSFipnd5OF3WuBjPRQiJw94x16TwSQ6uEszx3GV7mrQ6WsU2EP BnlQ3Inx7HbjfpYmk0sDQH+EyUTFkD0DgF2/JtmbkMEUdK3EBWiHXC7Fq/uen0T6 MkGz8vhALP9yFikjm4dA7Bb1/iH/yFNlb2xWjBVAIeBjb1dFintzXwGOj/kuofVJ fU1GCiLALQDtNT+fjSuUVtYrcz43GsBwgIh6us8O3SGIfrEi/ao+MH7REjsqmeb6 NthAHhsoVbPY2wPU4uc5b8KG8LOUKtgUsfJQEFRRgKSNP9+VGwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGLbJV1ALZedU+ibrhFhV/aZWtZaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGFiMmIwYjQtMTdhNC0z NzEzLTgwZDUtZmVlMjg4NTNlOTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAw0t AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBGRV20un0Q2KyAO+NyFZF9YpA/6mzwDeLrXl9r vnoYALRTRHM6kGH1veEWE0a5nK7DjHwnD28bW5AhYACkULkgZQNfHjaoKdOkX6I7 6ke/oaZ/uV0IodyY6ANk5c5/ldDpzz2dAlW4pwAmh3JgQAt0ABqz35tWbrHOQgBo L8SdtPGZrnnMohhZ4AT7bv8f2pZI+rQhPU+NWrVoXAfF1f3wXA8qAzheV+vf4LUJ Iv9rMIBHWcPWl8XFBg65XDF3CGko8D9A+igU7UqbMDiPe8dAo9ZWCsWMs1DSTPek +Epdy8HFcgD2993Jf48VZuYL5l0JY1SGqyjoc7pjEPKT8fGM -----END CERTIFICATE-----Generated at Tue Sep 22 17:40:00 2026 by rpki-client