$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4cd342d-b8cf-32df-8d20-c60fac4cc876.roa File: a4cd342d-b8cf-32df-8d20-c60fac4cc876.roa (raw, json) Hash identifier: xESaHJRHiuMOUyE0+1fKH/kSAYuXLPtqOno5iqWdFvA= Subject key identifier: 5F:45:3C:AF:8B:76:57:7B:BF:B4:41:89:07:B7:3B:F2:AA:FB:87:91 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F3E4804775132690F03DE4480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4cd342d-b8cf-32df-8d20-c60fac4cc876.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 397197 IP address blocks: 2001:503:39c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:48:04:77:51:32:69:0f:03:de:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=022550e7-acf9-4dc2-b47d-293715364b29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:86:49:eb:cd:b5:53:e9:04:ee:d0:92:d2:1f: a2:c2:f6:ec:88:67:9d:33:67:20:a9:aa:7a:01:36: 74:23:13:a3:0f:1a:7a:96:5b:33:b2:29:87:1e:83: a5:4a:b2:cc:23:09:d8:58:f5:d8:84:e9:86:94:e7: ff:3a:04:bf:b0:7c:cf:9b:3b:59:db:7b:cf:b4:f0: d0:73:c8:16:e8:54:43:7f:37:90:1b:3f:1c:a9:db: ad:60:ca:63:b2:d9:88:c4:36:be:8f:ea:a4:c0:4e: 09:41:9e:36:3f:a7:5c:3e:ca:ae:76:ff:dd:e0:99: ee:eb:d6:44:22:70:55:1e:c4:f4:d0:16:31:ca:01: 7f:df:0f:0f:4f:a7:52:b2:b6:35:1f:1d:a2:90:11: e0:be:42:3b:e9:92:48:ee:52:04:a8:9c:22:25:46: ba:57:48:58:29:a4:56:87:80:93:10:e8:93:07:51: e9:bf:8a:48:31:13:46:46:65:37:20:f0:8f:06:ee: ab:58:67:0d:7c:3d:9c:57:4f:39:c7:70:d5:5e:43: ca:22:1b:73:6e:59:98:1c:d0:74:d6:66:c1:2a:73: 16:e3:96:eb:f1:af:5a:da:f6:b2:e4:b0:8b:3c:de: 3c:b2:13:c4:b8:3b:65:c8:ff:8c:66:8b:48:68:3f: f2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:45:3C:AF:8B:76:57:7B:BF:B4:41:89:07:B7:3B:F2:AA:FB:87:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4cd342d-b8cf-32df-8d20-c60fac4cc876.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:39c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:bb:66:64:d7:6e:e6:c3:d1:10:c9:45:15:97:e9:86:44:06: 07:bf:87:69:3b:86:98:96:e4:c8:52:b8:1f:8b:85:1a:89:3d: f5:2f:19:97:75:58:83:c0:a4:4e:6c:66:d0:37:e3:2d:bc:fc: 2e:73:61:a4:c0:d1:c7:77:d1:8f:1a:ea:78:2f:01:41:71:3e: 75:d5:af:a8:8d:bf:32:81:e8:c3:ef:f4:f4:28:b7:0b:a8:13: 0f:0c:5d:81:e8:da:36:5f:8b:7a:b8:b0:e5:a5:df:a8:95:c9: 9a:d8:2a:4c:19:5a:34:a3:ba:a3:cc:1d:13:9d:1d:12:40:15: ca:72:3e:e8:5c:c6:e3:d9:10:aa:aa:e3:f4:aa:72:a0:5c:76: 33:fe:4b:9f:97:fa:d7:31:91:2d:7a:4e:91:7e:4e:aa:97:4a: 23:c0:6f:ea:04:eb:7b:fb:79:5c:fa:4c:6c:bd:db:d3:4f:2b: 0f:95:84:ee:23:fc:d4:ce:e7:ce:b9:4f:fe:1f:58:5b:b3:ae: 3f:fb:89:ed:ca:cf:0b:fe:7d:19:89:8e:87:4b:c3:b9:69:98: 63:8d:8f:46:82:ad:9a:a7:06:e7:03:58:1b:98:49:f0:58:aa: cf:7a:fb:91:1c:97:05:d9:3e:b9:02:52:6a:7b:02:6b:e9:03: f8:aa:cb:b9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8+SAR3UTJpDwPeRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk MDIyNTUwZTctYWNmOS00ZGMyLWI0N2QtMjkzNzE1MzY0YjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIZJ6821U+kE7tCS0h+iwvbsiGedM2cgqap6 ATZ0IxOjDxp6llszsimHHoOlSrLMIwnYWPXYhOmGlOf/OgS/sHzPmztZ23vPtPDQ c8gW6FRDfzeQGz8cqdutYMpjstmIxDa+j+qkwE4JQZ42P6dcPsqudv/d4Jnu69ZE InBVHsT00BYxygF/3w8PT6dSsrY1Hx2ikBHgvkI76ZJI7lIEqJwiJUa6V0hYKaRW h4CTEOiTB1Hpv4pIMRNGRmU3IPCPBu6rWGcNfD2cV085x3DVXkPKIhtzblmYHNB0 1mbBKnMW45br8a9a2vay5LCLPN48shPEuDtlyP+MZotIaD/yfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF9FPK+Ldld7v7RBiQe3O/Kq+4eRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTRjZDM0MmQtYjhjZi0z MmRmLThkMjAtYzYwZmFjNGNjODc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAznB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGS7ZmTXbubD0RDJRRWX6YZEBge/h2k7hpiW5MhSuB+LhRqJPfUv GZd1WIPApE5sZtA34y28/C5zYaTA0cd30Y8a6ngvAUFxPnXVr6iNvzKB6MPv9PQo twuoEw8MXYHo2jZfi3q4sOWl36iVyZrYKkwZWjSjuqPMHROdHRJAFcpyPuhcxuPZ EKqq4/SqcqBcdjP+S5+X+tcxkS16TpF+TqqXSiPAb+oE63v7eVz6TGy929NPKw+V hO4j/NTO5865T/4fWFuzrj/7ie3Kzwv+fRmJjodLw7lpmGONj0aCrZqnBucDWBuY SfBYqs96+5EclwXZPrkCUmp7AmvpA/iqy7k= -----END CERTIFICATE-----Generated at Mon Sep 21 23:49:11 2026 by rpki-client