$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa04e89c-d217-3b56-b0d5-2a6160908215.roa File: aa04e89c-d217-3b56-b0d5-2a6160908215.roa (raw, json) Hash identifier: pkH1su083mjov2Wb1hhrTwTcnNwb4na9DzUtRCLQTkE= Subject key identifier: 91:80:8F:BD:78:FD:6D:E2:1D:CF:45:00:52:EE:76:96:EC:C1:2E:DD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F498BDFE844F469F0EDCFB4C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa04e89c-d217-3b56-b0d5-2a6160908215.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396541 IP address blocks: 2001:503:d414::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:df:e8:44:f4:69:f0:ed:cf:b4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ff52aed8-6b4d-4348-848a-e669129cf0f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8d:2d:f3:d5:cb:fa:32:f3:56:e6:f6:67:c3: 37:d7:90:5e:ec:a2:12:3c:6e:5b:10:3d:60:3a:4d: 1a:43:27:3f:55:08:2d:b7:5f:33:09:fc:db:95:be: d3:6f:8a:7f:5d:c3:86:3c:1f:e3:8d:74:02:89:ad: 21:73:04:db:f3:60:3d:45:0f:3b:c7:87:1e:e7:80: 8f:29:6f:fa:39:47:7b:06:1a:67:ef:dd:3e:b5:20: 37:54:02:b9:25:ad:a9:26:29:a5:46:04:4d:f9:be: 9d:5f:58:4e:5d:66:01:55:84:0c:74:ae:5c:d5:4a: 7c:dd:2c:aa:d9:20:96:b4:4b:c4:0b:33:aa:5d:2e: b4:e0:54:66:eb:35:eb:00:84:bd:4e:44:b3:7a:65: f1:6d:a1:10:2b:ca:a5:40:12:bf:72:6c:49:d0:60: e8:81:c0:09:26:9c:13:45:b1:79:b5:63:ce:a1:35: 44:58:76:8f:d4:89:07:05:d5:bd:26:21:81:f6:87: 6b:9f:d7:7c:ee:57:b2:40:aa:3a:23:f2:0d:50:8d: 74:04:4b:df:cf:31:78:97:86:f6:fc:d6:a5:a4:42: ac:bd:da:57:cb:38:17:f8:96:cb:1c:99:1e:59:02: 75:d9:44:c7:ce:12:70:bd:27:60:55:2b:97:85:78: 60:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:80:8F:BD:78:FD:6D:E2:1D:CF:45:00:52:EE:76:96:EC:C1:2E:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa04e89c-d217-3b56-b0d5-2a6160908215.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:d414::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:19:64:de:0f:e4:c3:0b:e6:56:2d:e7:dd:6b:ac:ea:88:7c: 2e:42:83:f3:24:8a:00:f6:4a:6c:56:e3:4e:f0:bd:6a:c6:90: aa:dd:d9:94:56:63:02:4b:61:52:55:cd:01:ca:17:5c:c7:0d: fe:91:7d:2f:5a:13:70:0f:69:90:a7:a1:eb:b9:7f:b6:db:67: 5f:af:96:d5:08:6d:d8:7a:94:86:f0:ae:2b:4a:58:6b:53:f2: ac:ad:8c:a9:ed:65:51:68:a4:b3:67:5d:68:45:a5:c1:99:94: 21:7e:ea:ea:3a:c2:3c:6e:57:c8:f7:00:ab:99:26:74:cb:26: c4:9a:cd:64:ab:fd:a8:54:37:5a:c1:e4:45:04:6e:3d:fc:71: 45:a3:bd:ef:14:c3:96:f9:ef:03:a7:3b:56:ac:15:f7:b0:88: 40:15:28:5c:34:34:18:d6:c3:d8:5c:cf:70:1e:9a:47:a8:1c: 07:4b:44:96:d3:b6:e3:bb:2f:63:41:87:a1:01:a0:01:33:c7: 78:6b:90:cf:6e:cc:2b:38:07:d8:61:6f:c1:7c:81:d5:c5:c7: 97:01:5d:2a:b7:39:47:df:01:63:82:38:64:d9:d7:72:35:aa: 99:0a:55:9c:77:46:94:b1:47:8d:79:2d:41:d1:c3:fe:bf:89: 92:98:2d:48 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Ji9/oRPRp8O3PtMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmY1MmFlZDgtNmI0ZC00MzQ4LTg0OGEtZTY2OTEyOWNmMGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj40t89XL+jLzVub2Z8M315Be7KISPG5bED1g Ok0aQyc/VQgtt18zCfzblb7Tb4p/XcOGPB/jjXQCia0hcwTb82A9RQ87x4ce54CP KW/6OUd7Bhpn790+tSA3VAK5Ja2pJimlRgRN+b6dX1hOXWYBVYQMdK5c1Up83Syq 2SCWtEvECzOqXS604FRm6zXrAIS9TkSzemXxbaEQK8qlQBK/cmxJ0GDogcAJJpwT RbF5tWPOoTVEWHaP1IkHBdW9JiGB9odrn9d87leyQKo6I/INUI10BEvfzzF4l4b2 /NalpEKsvdpXyzgX+JbLHJkeWQJ12UTHzhJwvSdgVSuXhXhggwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJGAj714/W3iHc9FAFLudpbswS7dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWEwNGU4OWMtZDIxNy0z YjU2LWIwZDUtMmE2MTYwOTA4MjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA9QU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIIZZN4P5MML5lYt591rrOqIfC5Cg/MkigD2SmxW407wvWrGkKrd 2ZRWYwJLYVJVzQHKF1zHDf6RfS9aE3APaZCnoeu5f7bbZ1+vltUIbdh6lIbwritK WGtT8qytjKntZVFopLNnXWhFpcGZlCF+6uo6wjxuV8j3AKuZJnTLJsSazWSr/ahU N1rB5EUEbj38cUWjve8Uw5b57wOnO1asFfewiEAVKFw0NBjWw9hcz3AemkeoHAdL RJbTtuO7L2NBh6EBoAEzx3hrkM9uzCs4B9hhb8F8gdXFx5cBXSq3OUffAWOCOGTZ 13I1qpkKVZx3RpSxR415LUHRw/6/iZKYLUg= -----END CERTIFICATE-----Generated at Mon Sep 28 21:46:54 2026 by rpki-client