$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf20bc92-0b35-3f4c-bde1-bdd282bef22a.roa File: bf20bc92-0b35-3f4c-bde1-bdd282bef22a.roa (raw, json) Hash identifier: ZfMxz1iaEmLaFepAbZr9go2BcMK+Xu1G4JFmILaXVx0= Subject key identifier: 7D:C1:C9:F2:78:2C:DA:19:3C:C9:1D:B5:18:B0:10:DF:BC:6B:42:A3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F3052696F2D2BEBB18D453880 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf20bc92-0b35-3f4c-bde1-bdd282bef22a.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 396597 IP address blocks: 2001:503:83eb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:69:6f:2d:2b:eb:b1:8d:45:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=afba39ef-d466-43af-9ac0-462695441fe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1e:23:b3:23:58:3b:da:0f:7d:9a:25:0a:76: b6:46:cd:97:d2:0f:86:b0:23:62:48:a1:52:9b:46: 24:70:24:ae:d2:92:33:d5:e3:02:7e:46:db:2a:28: c8:ec:a0:f2:d3:21:63:ce:19:30:d7:87:66:d3:da: 79:74:96:92:d5:48:1e:e5:c5:d0:8b:cc:d7:a6:4e: cf:32:a5:4a:b3:dd:9a:95:bd:44:db:9a:66:77:51: 4e:62:45:c6:6a:c2:04:66:61:85:8e:17:39:5b:5f: 6d:e8:37:b5:ae:ba:04:96:c7:ec:a7:1e:19:c4:eb: 51:aa:e2:36:2c:69:17:c2:2c:9f:76:d9:6b:f7:5a: 15:49:e9:98:ca:20:d7:9a:82:5e:57:93:a5:8e:04: c1:84:46:93:ce:81:23:eb:9a:2b:76:fd:46:c6:91: 73:d5:e9:e1:85:dc:d8:e2:d4:bb:96:48:6c:6c:ec: 7e:b2:a0:c8:22:00:72:a9:1e:70:a1:0b:e4:d2:11: dc:74:fc:1a:b0:71:64:7c:8f:01:70:de:d8:52:69: 5b:c2:7b:1c:53:d9:5e:92:f5:c3:6a:d6:87:5f:4e: 5b:e6:c0:29:a2:5f:4b:35:86:0c:dc:76:e1:10:ca: 32:e6:3e:e3:1a:95:99:da:fd:d3:5f:38:42:f6:44: 2c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C1:C9:F2:78:2C:DA:19:3C:C9:1D:B5:18:B0:10:DF:BC:6B:42:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf20bc92-0b35-3f4c-bde1-bdd282bef22a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:83eb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:47:54:7d:3a:ea:5c:a5:56:0c:67:4e:e7:0d:f3:e2:42:32: f6:73:8b:7d:bb:9a:41:5b:86:79:7f:2f:f5:a5:ca:e3:98:19: 9f:b1:59:0c:80:7d:21:7d:35:5c:28:fc:1a:b1:21:d1:69:40: 1c:0a:39:8b:8a:e1:01:58:e2:8a:3b:5c:86:3a:70:60:0a:81: a7:60:bc:a8:4b:63:6e:3c:93:7c:b7:7e:00:88:d3:f9:61:ec: 2b:8d:a4:82:a5:45:e4:e4:cf:ed:df:8d:12:d3:2c:06:b5:2a: 58:0d:d9:56:18:0d:12:55:83:8d:ab:d4:a0:a3:5e:48:c6:d3: c5:b7:15:59:e0:b5:8c:51:de:19:eb:03:7f:27:34:18:06:26: b5:cf:35:10:ec:ae:6c:c5:ff:ca:e6:d3:41:ff:2d:9b:3c:47: 93:42:90:97:2d:67:cf:1c:09:02:9a:39:6b:63:02:d0:7d:61: d0:9f:90:d3:d8:dc:f9:4c:76:b1:d5:dd:72:66:d8:5b:0a:82: 63:26:e9:b6:19:ac:60:4f:da:a0:ff:f7:4a:3f:f6:a9:af:40: 03:70:63:ad:22:84:db:0f:64:66:e2:a9:0b:74:ba:32:e9:ee: 80:12:48:41:d6:8a:47:05:72:f7:90:37:8d:25:01:67:f5:28: 47:fa:a4:99 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8wUmlvLSvrsY1FOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk YWZiYTM5ZWYtZDQ2Ni00M2FmLTlhYzAtNDYyNjk1NDQxZmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjh4jsyNYO9oPfZolCna2Rs2X0g+GsCNiSKFS m0YkcCSu0pIz1eMCfkbbKijI7KDy0yFjzhkw14dm09p5dJaS1Uge5cXQi8zXpk7P MqVKs92alb1E25pmd1FOYkXGasIEZmGFjhc5W19t6De1rroElsfspx4ZxOtRquI2 LGkXwiyfdtlr91oVSemYyiDXmoJeV5OljgTBhEaTzoEj65ordv1GxpFz1enhhdzY 4tS7lkhsbOx+sqDIIgByqR5woQvk0hHcdPwasHFkfI8BcN7YUmlbwnscU9lekvXD ataHX05b5sApol9LNYYM3HbhEMoy5j7jGpWZ2v3TXzhC9kQskwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH3ByfJ4LNoZPMkdtRiwEN+8a0KjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmYyMGJjOTItMGIzNS0z ZjRjLWJkZTEtYmRkMjgyYmVmMjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA4Pr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALRHVH066lylVgxnTucN8+JCMvZzi327mkFbhnl/L/WlyuOYGZ+x WQyAfSF9NVwo/BqxIdFpQBwKOYuK4QFY4oo7XIY6cGAKgadgvKhLY248k3y3fgCI 0/lh7CuNpIKlReTkz+3fjRLTLAa1KlgN2VYYDRJVg42r1KCjXkjG08W3FVngtYxR 3hnrA38nNBgGJrXPNRDsrmzF/8rm00H/LZs8R5NCkJctZ88cCQKaOWtjAtB9YdCf kNPY3PlMdrHV3XJm2FsKgmMm6bYZrGBP2qD/90o/9qmvQANwY60ihNsPZGbiqQt0 ujLp7oASSEHWikcFcveQN40lAWf1KEf6pJk= -----END CERTIFICATE-----Generated at Tue Sep 22 12:37:35 2026 by rpki-client