$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ac76d2f-0ec9-3f56-9119-e877d5fa9949.roa File: 3ac76d2f-0ec9-3f56-9119-e877d5fa9949.roa (raw, json) Hash identifier: 4Z9vKHcpeyZq9qM4dKtUwZ4mXXjCiynZTilgpgqos90= Subject key identifier: CD:14:74:26:8E:E2:00:54:3F:98:D3:B9:DF:7B:8F:31:36:5C:48:2B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F49734CBBB1A463AB204DFC80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ac76d2f-0ec9-3f56-9119-e877d5fa9949.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396571 IP address blocks: 2001:503:ba3e::2:30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:4c:bb:b1:a4:63:ab:20:4d:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=99a90ddd-66b0-4c7e-ae5f-12817aa5d1e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:e0:0c:17:35:1b:01:ef:ed:f4:00:77:48:75: 98:5d:27:07:67:c6:92:73:21:de:4b:33:fc:8a:fc: 04:ea:ad:96:df:b6:71:60:de:35:1d:21:f7:7b:a4: cb:bc:05:0c:e5:d7:2a:5b:bb:11:77:90:04:17:60: 05:3d:a5:d8:fa:78:69:e5:de:c7:8d:1e:ff:a5:74: 17:fa:17:9f:de:8b:21:a1:ce:1a:f6:24:43:ee:f6: 5d:82:aa:65:b4:5d:7a:63:5b:6f:be:06:4d:ba:68: 82:17:20:30:e6:9f:6e:8e:fa:53:ed:85:ff:d3:02: 7a:f1:7c:30:c1:39:19:de:53:d7:dc:ce:75:b0:3d: 7c:37:9f:5e:35:27:06:b7:b4:01:88:1e:ac:39:a8: fb:ba:64:59:fc:d9:76:1c:87:76:3e:ec:66:f7:73: ad:b3:58:0e:d1:af:f8:66:fb:df:90:52:06:69:e9: 9d:68:0c:1f:5e:b5:b5:c2:d4:d8:bf:c4:e0:90:b5: 96:26:99:f2:c7:97:65:ec:c9:c4:4b:64:3d:e0:f7: 80:8e:32:17:67:56:58:b7:71:e2:ba:b7:ff:3e:9d: ff:b2:06:d0:91:52:cf:db:76:64:e0:14:0d:0d:ed: fd:d8:2d:94:22:85:e0:8b:38:64:25:19:20:9a:e3: fa:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:14:74:26:8E:E2:00:54:3F:98:D3:B9:DF:7B:8F:31:36:5C:48:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ac76d2f-0ec9-3f56-9119-e877d5fa9949.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e:0:0:0:2:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:26:f6:17:c7:f4:07:dc:64:ef:c2:af:95:ee:88:74:c5:54: 29:19:f4:47:42:33:c7:02:a0:61:58:c5:7f:a8:d3:40:26:af: ab:5d:1e:7b:d8:2d:12:fe:1f:2c:21:f4:50:d8:ea:d4:d9:1a: af:ff:ae:11:cb:7f:44:56:93:be:4e:24:ce:89:28:ca:83:ea: d3:80:0f:ee:69:5c:52:98:14:23:87:a9:a1:bb:40:55:a7:21: 33:09:6e:5c:52:10:39:28:36:91:b6:90:78:3d:96:87:b2:56: fc:a8:28:2f:5f:e5:8c:35:a1:bd:21:8c:b8:25:2e:e6:d3:ea: bf:10:94:63:61:07:50:af:b2:5b:d8:c8:e2:56:f2:04:f8:8f: 54:ba:cb:db:bf:ac:2c:d5:02:1e:35:c5:9a:9c:9a:63:cf:d0: 52:81:14:9d:31:23:cc:e2:ca:52:dd:49:04:8c:b8:bd:c8:fc: 14:31:84:5d:c8:af:81:13:57:25:32:fa:e2:e4:b2:53:68:30: 4a:66:b3:40:97:81:d9:67:a1:15:32:25:e3:2f:fe:81:40:8a: e7:b7:a4:36:1b:35:13:16:5e:03:dd:35:82:4a:a4:73:32:a5: 4e:f8:04:42:fb:b8:a9:dc:0c:ca:d8:05:7e:d8:f2:e4:8b:e9: fe:66:e5:90 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9Jc0y7saRjqyBN/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTlhOTBkZGQtNjZiMC00YzdlLWFlNWYtMTI4MTdhYTVkMWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8eAMFzUbAe/t9AB3SHWYXScHZ8aScyHeSzP8 ivwE6q2W37ZxYN41HSH3e6TLvAUM5dcqW7sRd5AEF2AFPaXY+nhp5d7HjR7/pXQX +hef3oshoc4a9iRD7vZdgqpltF16Y1tvvgZNumiCFyAw5p9ujvpT7YX/0wJ68Xww wTkZ3lPX3M51sD18N59eNScGt7QBiB6sOaj7umRZ/Nl2HId2Puxm93Ots1gO0a/4 ZvvfkFIGaemdaAwfXrW1wtTYv8TgkLWWJpnyx5dl7MnES2Q94PeAjjIXZ1ZYt3Hi urf/Pp3/sgbQkVLP23Zk4BQNDe392C2UIoXgizhkJRkgmuP6SwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFM0UdCaO4gBUP5jTud97jzE2XEgrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2FjNzZkMmYtMGVjOS0z ZjU2LTkxMTktZTg3N2Q1ZmE5OTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFA7o+ AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA8JvYXx/QH3GTvwq+V7oh0xVQpGfRHQjPHAqBh WMV/qNNAJq+rXR572C0S/h8sIfRQ2OrU2Rqv/64Ry39EVpO+TiTOiSjKg+rTgA/u aVxSmBQjh6mhu0BVpyEzCW5cUhA5KDaRtpB4PZaHslb8qCgvX+WMNaG9IYy4JS7m 0+q/EJRjYQdQr7Jb2MjiVvIE+I9Uusvbv6ws1QIeNcWanJpjz9BSgRSdMSPM4spS 3UkEjLi9yPwUMYRdyK+BE1clMvri5LJTaDBKZrNAl4HZZ6EVMiXjL/6BQIrnt6Q2 GzUTFl4D3TWCSqRzMqVO+ARC+7ip3AzK2AV+2PLki+n+ZuWQ -----END CERTIFICATE-----Generated at Tue Oct 6 20:00:03 2026 by rpki-client