$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f33cc804-ebaa-3521-97a0-ee44d07e931a.roa File: f33cc804-ebaa-3521-97a0-ee44d07e931a.roa (raw, json) Hash identifier: axTgaxI4ljBDsKZFwK3+ZLAm2liGLXJo64M4coM7JnY= Subject key identifier: 5A:2A:1D:88:32:E4:F3:59:23:0A:95:BE:98:70:B2:5D:A5:D7:85:24 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F3E47CFB3C51C77B8C376DCC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f33cc804-ebaa-3521-97a0-ee44d07e931a.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 396567 IP address blocks: 2001:503:39c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:cf:b3:c5:1c:77:b8:c3:76:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=f96e33ea-718a-4488-9fcc-12a3fea88ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:90:93:bd:c2:3e:64:08:d6:4e:8c:b0:d2:46: 31:a9:19:4d:19:b3:f8:e7:7d:69:03:84:97:71:45: 78:3b:3a:12:38:63:db:59:b7:51:a7:b9:99:5e:5e: 0a:a4:9b:2f:45:33:b5:9f:39:14:bf:0b:9e:a6:ab: 15:9f:4a:a9:f6:6c:d9:06:5a:9b:fa:c5:99:2c:d1: d1:7a:dc:0b:4a:06:f3:b9:ae:af:07:4c:85:cb:39: a7:44:3d:1e:be:ed:18:b4:0b:eb:ef:cc:97:2a:7e: 4c:5e:16:dd:6a:4d:86:c5:1f:55:60:91:85:ff:a7: ea:94:ec:78:7f:2b:b2:a4:f9:3c:68:f7:93:ab:c5: f5:77:47:21:96:d3:e3:6a:fb:d3:ab:da:fc:2b:40: 3e:f6:90:1a:2d:35:8d:03:8e:00:00:d4:15:7d:18: 20:1a:69:77:0b:d7:ab:5e:53:19:7d:ea:64:b0:d3: c4:1b:e1:bd:05:90:4e:9b:28:7e:14:7b:d4:96:3f: 0d:99:77:29:09:ef:7e:f5:dd:27:f1:70:11:96:73: ed:16:1f:08:d1:1c:b9:6c:07:77:02:44:b7:31:38: 17:c9:91:f4:37:e6:26:a5:48:69:b5:4d:b2:4a:fa: 50:fd:94:0c:67:b9:8a:9f:5c:9b:ef:85:38:ad:cd: 5e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:2A:1D:88:32:E4:F3:59:23:0A:95:BE:98:70:B2:5D:A5:D7:85:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f33cc804-ebaa-3521-97a0-ee44d07e931a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:39c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:8c:b9:fb:da:d3:60:37:21:84:95:35:ef:35:f7:47:86:f5: a1:06:87:7d:be:6e:70:2f:91:1e:23:7f:1a:d6:d9:d2:7a:79: c0:1d:e9:51:95:07:57:1a:c1:de:df:e0:d7:35:86:01:b4:5e: bb:3c:ae:ff:e2:7e:ef:6d:ab:f7:8d:3a:d5:0e:9b:34:a3:8f: a2:cc:65:39:e9:1c:6e:42:a1:7f:ea:83:bf:e2:c1:2e:b8:f5: 06:d6:22:a7:63:73:eb:f6:a9:03:71:b2:f3:46:98:98:6f:75: e1:b5:da:2a:d5:c7:fa:09:c9:8d:3e:66:46:ad:97:5e:72:06: a0:0d:e7:e5:95:ba:2a:a1:6a:0b:b6:2e:df:a8:9f:15:7c:77: 5f:db:1e:2d:16:7c:5b:60:bd:9b:e3:0e:c6:2a:e1:10:c0:82: 9b:30:01:3e:ee:6b:24:c2:a5:6f:24:93:9e:d4:28:e4:f1:96: 21:21:58:f9:35:48:6d:e9:69:b3:93:79:81:b2:90:25:12:7a: d3:f1:70:31:e3:c7:0f:f4:94:7e:af:95:a9:71:4f:bb:b0:1d: f9:69:f0:04:f5:62:79:0b:1a:9a:c0:c8:ff:65:4d:29:ad:47: ea:0f:a2:ad:a6:e8:8b:40:b0:95:2a:a7:4e:8b:b1:54:f0:88: de:ab:ab:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8+R8+zxRx3uMN23MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk Zjk2ZTMzZWEtNzE4YS00NDg4LTlmY2MtMTJhM2ZlYTg4YWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZCTvcI+ZAjWToyw0kYxqRlNGbP4531pA4SX cUV4OzoSOGPbWbdRp7mZXl4KpJsvRTO1nzkUvwuepqsVn0qp9mzZBlqb+sWZLNHR etwLSgbzua6vB0yFyzmnRD0evu0YtAvr78yXKn5MXhbdak2GxR9VYJGF/6fqlOx4 fyuypPk8aPeTq8X1d0chltPjavvTq9r8K0A+9pAaLTWNA44AANQVfRggGml3C9er XlMZfepksNPEG+G9BZBOmyh+FHvUlj8NmXcpCe9+9d0n8XARlnPtFh8I0Ry5bAd3 AkS3MTgXyZH0N+YmpUhptU2ySvpQ/ZQMZ7mKn1yb74U4rc1evwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFoqHYgy5PNZIwqVvphwsl2l14UkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjMzY2M4MDQtZWJhYS0z NTIxLTk3YTAtZWU0NGQwN2U5MzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAznB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEKMufva02A3IYSVNe8190eG9aEGh32+bnAvkR4jfxrW2dJ6ecAd 6VGVB1cawd7f4Nc1hgG0Xrs8rv/ifu9tq/eNOtUOmzSjj6LMZTnpHG5CoX/qg7/i wS649QbWIqdjc+v2qQNxsvNGmJhvdeG12irVx/oJyY0+Zkatl15yBqAN5+WVuiqh agu2Lt+onxV8d1/bHi0WfFtgvZvjDsYq4RDAgpswAT7uayTCpW8kk57UKOTxliEh WPk1SG3pabOTeYGykCUSetPxcDHjxw/0lH6vlalxT7uwHflp8AT1YnkLGprAyP9l TSmtR+oPoq2m6ItAsJUqp06LsVTwiN6rqw8= -----END CERTIFICATE-----Generated at Mon Sep 21 20:30:40 2026 by rpki-client