$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88921ca1-50f0-3f50-a4fb-337c8ad79e9d.roa File: 88921ca1-50f0-3f50-a4fb-337c8ad79e9d.roa (raw, json) Hash identifier: kOMeZdLEz5J/AKFzjsdIzl8INN3Edf7Sh4uG08yitHU= Subject key identifier: 88:07:2B:59:2B:7C:AB:C6:3B:A3:20:DF:DF:67:70:C4:C6:E7:64:88 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F3E480829D66742143DFC7400 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88921ca1-50f0-3f50-a4fb-337c8ad79e9d.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 397208 IP address blocks: 2001:503:39c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:48:08:29:d6:67:42:14:3d:fc:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=c2918369-9f60-45c9-80cc-4bed21f1a9c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8d:ba:ab:8b:82:c7:5d:0e:3e:ea:d5:3c:d4: 69:96:ff:55:c6:52:bc:6b:5c:a3:3c:28:51:28:b5: c5:55:66:34:a6:db:4a:38:b8:2f:7d:60:20:86:9f: e8:7c:be:e5:36:f1:6e:b8:23:ed:f1:6e:39:fb:61: ac:d2:96:da:f5:50:9f:8d:35:f3:49:21:c1:5a:bc: 16:ad:a8:c4:f5:41:ff:56:46:95:5b:80:43:42:00: 7a:8b:13:5f:e1:15:3e:07:e7:f1:7b:2e:6d:1b:2c: e9:f7:af:d5:2e:ff:b2:a3:4b:2c:11:cf:f4:83:9b: 12:66:8e:da:aa:75:54:5a:6c:69:95:43:8b:0d:9f: e1:9a:b4:1e:42:3d:87:8e:35:cd:8a:4b:30:fb:0d: bf:7e:ff:20:70:1e:5b:82:f9:00:6a:c5:9a:c0:c4: f1:6a:e0:49:4f:c3:d3:5d:2a:81:4d:9c:19:96:49: 76:d8:e1:18:b0:3a:08:66:87:b1:24:94:f2:ee:b7: fb:0f:cb:b4:55:23:66:26:5a:6d:f3:16:33:31:83: 67:11:ab:07:59:e4:e0:13:e6:e9:c2:e6:45:da:26: ea:bd:9f:c8:29:48:56:56:47:b8:be:25:b9:05:2c: 28:ff:79:bd:93:17:c4:7c:fa:e1:46:95:33:1e:cf: b9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:07:2B:59:2B:7C:AB:C6:3B:A3:20:DF:DF:67:70:C4:C6:E7:64:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88921ca1-50f0-3f50-a4fb-337c8ad79e9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:39c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:e4:99:27:e9:b3:f5:9d:c0:90:3d:7c:3e:ca:d9:9b:96:7d: f1:fb:fe:65:40:0b:cf:44:e7:41:a7:5a:51:34:4d:3c:65:b9: 40:1f:fd:cd:3a:07:1d:4a:26:f9:8a:62:43:23:7f:ce:c5:63: a8:bf:5f:1c:ae:fd:c2:c5:19:64:da:b6:6b:f6:1c:ab:a0:72: 66:32:ce:af:86:4f:27:2a:5e:cb:3d:07:5c:f3:15:80:c6:e6: 25:bf:ab:e6:c9:54:1a:af:b5:66:7f:39:e2:ae:6a:11:51:aa: 65:86:d0:55:12:9f:4b:ee:8b:68:87:f1:c4:71:50:31:ad:c4: 6d:41:74:2b:1d:f3:4d:05:76:cd:cc:b9:8f:3a:0c:99:e1:34: 7b:b3:2c:da:24:8b:18:1b:59:65:b6:b1:1c:40:24:c2:53:cb: b5:3e:5d:63:a9:b3:49:8a:0b:80:28:6e:03:88:0d:4d:b8:80: a8:be:07:f7:a9:c3:65:10:2a:48:05:6a:58:69:b7:53:35:e6: 99:34:2f:78:51:a0:1a:a0:7d:3f:83:80:30:5a:ed:7e:0e:6e: 65:e4:7a:06:7c:66:64:49:af:ad:2c:74:42:23:94:12:a4:80: 20:e9:50:c0:a8:ab:a4:0d:fc:2c:96:16:56:ce:93:ff:a8:1e: 12:4d:3c:22 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8+SAgp1mdCFD38dAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk YzI5MTgzNjktOWY2MC00NWM5LTgwY2MtNGJlZDIxZjFhOWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyI26q4uCx10OPurVPNRplv9VxlK8a1yjPChR KLXFVWY0pttKOLgvfWAghp/ofL7lNvFuuCPt8W45+2Gs0pba9VCfjTXzSSHBWrwW rajE9UH/VkaVW4BDQgB6ixNf4RU+B+fxey5tGyzp96/VLv+yo0ssEc/0g5sSZo7a qnVUWmxplUOLDZ/hmrQeQj2HjjXNiksw+w2/fv8gcB5bgvkAasWawMTxauBJT8PT XSqBTZwZlkl22OEYsDoIZoexJJTy7rf7D8u0VSNmJlpt8xYzMYNnEasHWeTgE+bp wuZF2ibqvZ/IKUhWVke4viW5BSwo/3m9kxfEfPrhRpUzHs+5twIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIgHK1krfKvGO6Mg399ncMTG52SIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODg5MjFjYTEtNTBmMC0z ZjUwLWE0ZmItMzM3YzhhZDc5ZTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAznB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD3kmSfps/WdwJA9fD7K2ZuWffH7/mVAC89E50GnWlE0TTxluUAf /c06Bx1KJvmKYkMjf87FY6i/Xxyu/cLFGWTatmv2HKugcmYyzq+GTycqXss9B1zz FYDG5iW/q+bJVBqvtWZ/OeKuahFRqmWG0FUSn0vui2iH8cRxUDGtxG1BdCsd800F ds3MuY86DJnhNHuzLNokixgbWWW2sRxAJMJTy7U+XWOps0mKC4AobgOIDU24gKi+ B/epw2UQKkgFalhpt1M15pk0L3hRoBqgfT+DgDBa7X4ObmXkegZ8ZmRJr60sdEIj lBKkgCDpUMCoq6QN/CyWFlbOk/+oHhJNPCI= -----END CERTIFICATE-----Generated at Sun Sep 27 05:39:35 2026 by rpki-client