$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3a02c2a-6c4e-324a-9960-d40182c72b24.roa File: c3a02c2a-6c4e-324a-9960-d40182c72b24.roa (raw, json) Hash identifier: U64CNjIoOPOoh1SessnQTPHKFUp4k1OSd8LPeyjxVrQ= Subject key identifier: 7F:6A:C8:3D:2A:18:E4:EB:30:FA:A2:D8:A0:A9:62:33:C0:8E:D2:5A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F1CC79AB85793697001CD3F80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3a02c2a-6c4e-324a-9960-d40182c72b24.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 397197 IP address blocks: 2001:503:a83e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:9a:b8:57:93:69:70:01:cd:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=74fc1bc3-7a83-4a79-b74d-5a18b6df65c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:be:2d:c9:37:bd:8f:c9:09:ef:4d:9b:10:74: ce:d7:a0:c5:ba:05:35:50:13:46:d0:1b:d1:4c:41: ab:1d:9b:88:32:d9:c0:f8:7c:fb:f6:f6:79:34:02: 68:7b:cb:20:1c:92:96:47:92:fb:f0:d9:e0:cd:00: 7c:0c:4f:4d:d8:4c:57:ff:24:16:cd:53:58:7e:60: 0b:c6:40:e1:f6:d1:c9:75:cf:ee:59:14:62:57:b7: 7d:88:da:24:8a:c5:1c:a7:79:e4:e7:51:fb:34:d0: 5b:a9:48:dd:17:10:a0:ef:b0:3d:b1:cd:7f:55:00: bc:7e:21:e2:34:6b:30:87:fa:cb:9c:9a:fd:29:1d: 68:a7:49:28:50:74:fa:c2:ec:16:71:92:11:b7:18: c9:7f:6a:9f:27:fb:b1:34:23:ca:5d:94:92:1e:54: 30:da:fa:1f:01:16:ab:ee:89:06:b3:8c:4c:7b:63: 35:54:5b:f7:06:e2:ed:2d:27:72:32:89:f4:99:33: 5f:60:4e:51:48:4a:87:9d:7f:4a:ff:95:9a:4d:7d: a6:3c:de:65:35:06:70:d0:8f:7c:b3:3e:5d:49:34: 97:a0:d7:6b:36:f9:84:d1:5b:ae:38:51:70:ba:60: be:d4:5e:3e:00:7a:e8:6b:a7:04:71:d5:1a:44:3e: 3d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:6A:C8:3D:2A:18:E4:EB:30:FA:A2:D8:A0:A9:62:33:C0:8E:D2:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3a02c2a-6c4e-324a-9960-d40182c72b24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:a83e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:85:bb:17:b3:27:c0:a6:92:02:69:16:91:04:91:4c:2a:86: 68:57:b9:27:68:ca:06:f7:00:52:9e:29:51:e5:73:df:19:a1: 7b:17:99:47:04:88:11:01:e8:e1:54:52:75:bd:9f:40:10:7e: 13:fd:62:3f:6e:f0:68:f3:7d:b7:22:4b:e8:f7:38:42:2b:83: 0b:9f:83:c1:ff:36:05:5e:68:22:87:4f:9b:79:35:6a:40:21: 17:b5:a0:c2:81:53:d7:bb:f5:21:28:d3:47:9d:b7:4d:de:e5: 50:ed:d2:21:46:76:46:5d:1e:84:cb:7b:ea:69:e8:01:de:22: 79:b7:c0:1f:65:c0:05:b7:79:5a:7a:2e:1d:2a:0e:a9:9b:17: ba:d5:96:5b:87:27:8a:13:18:0f:36:5e:38:f5:2d:95:db:d4: 5d:48:bf:89:bf:0d:74:93:02:bd:cb:6a:38:6d:fc:d1:32:03: e8:59:db:9a:fb:14:a5:8a:d5:d2:4c:88:fc:da:35:4a:7a:a2: 31:b0:b0:97:39:3e:0f:f5:be:6b:fd:91:c6:e8:af:19:50:56: 6c:23:8c:54:84:40:d9:27:fe:7a:32:0c:01:ac:ab:86:1d:6d: ed:f1:d0:3d:69:d3:85:e4:80:e4:16:eb:bf:3a:d5:8a:a6:d1: e0:d9:d0:20 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8cx5q4V5NpcAHNP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk NzRmYzFiYzMtN2E4My00YTc5LWI3NGQtNWExOGI2ZGY2NWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg74tyTe9j8kJ702bEHTO16DFugU1UBNG0BvR TEGrHZuIMtnA+Hz79vZ5NAJoe8sgHJKWR5L78NngzQB8DE9N2ExX/yQWzVNYfmAL xkDh9tHJdc/uWRRiV7d9iNokisUcp3nk51H7NNBbqUjdFxCg77A9sc1/VQC8fiHi NGswh/rLnJr9KR1op0koUHT6wuwWcZIRtxjJf2qfJ/uxNCPKXZSSHlQw2vofARar 7okGs4xMe2M1VFv3BuLtLSdyMon0mTNfYE5RSEqHnX9K/5WaTX2mPN5lNQZw0I98 sz5dSTSXoNdrNvmE0VuuOFFwumC+1F4+AHroa6cEcdUaRD49bwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH9qyD0qGOTrMPqi2KCpYjPAjtJaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzNhMDJjMmEtNmM0ZS0z MjRhLTk5NjAtZDQwMTgyYzcyYjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA6g+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHaFuxezJ8CmkgJpFpEEkUwqhmhXuSdoygb3AFKeKVHlc98ZoXsX mUcEiBEB6OFUUnW9n0AQfhP9Yj9u8GjzfbciS+j3OEIrgwufg8H/NgVeaCKHT5t5 NWpAIRe1oMKBU9e79SEo00edt03e5VDt0iFGdkZdHoTLe+pp6AHeInm3wB9lwAW3 eVp6Lh0qDqmbF7rVlluHJ4oTGA82Xjj1LZXb1F1Iv4m/DXSTAr3Lajht/NEyA+hZ 25r7FKWK1dJMiPzaNUp6ojGwsJc5Pg/1vmv9kcborxlQVmwjjFSEQNkn/noyDAGs q4Ydbe3x0D1p04XkgOQW67861Yqm0eDZ0CA= -----END CERTIFICATE-----Generated at Tue Sep 22 09:12:54 2026 by rpki-client