$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40cd5d6f-ff8a-309c-bc14-dddf87117073.roa File: 40cd5d6f-ff8a-309c-bc14-dddf87117073.roa (raw, json) Hash identifier: ku7YpIf5xeVdoFXS1CrbDV64f5Vj4DlXz7olF+leBLk= Subject key identifier: BE:FD:74:5C:BC:2D:73:98:81:2B:C1:02:95:AF:1E:C6:44:A5:68:D3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F549D62A39030DA8879A45B10 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40cd5d6f-ff8a-309c-bc14-dddf87117073.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 396566 IP address blocks: 2001:503:d2d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:62:a3:90:30:da:88:79:a4:5b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=92487984-6729-4265-8e0b-1b54879a5f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:db:e0:3f:00:4b:18:be:fd:35:c9:89:18:8e: ea:c0:23:95:63:83:5e:4d:ac:9d:7c:8b:50:8b:5f: d0:b1:a3:9a:3c:f9:dd:a5:28:fb:4f:5c:63:af:57: 2a:eb:e9:f2:ee:b8:52:fe:85:16:ce:03:08:b8:91: 42:57:b0:10:3a:6f:9a:eb:01:d8:72:bb:8a:8e:57: c2:9a:df:1c:fd:0f:a3:dd:81:2d:cd:07:4b:f8:f2: 59:f6:b0:a2:47:a9:b5:78:c0:9f:9f:0a:61:3f:fb: aa:b6:0e:8c:4d:b3:95:25:49:1c:18:74:f3:83:10: 12:c0:6f:8e:4c:ab:dc:59:a8:3d:bb:ce:15:e6:99: 22:0e:00:ca:ad:65:6d:b4:1f:e9:f7:3f:07:7b:be: ab:6f:5b:8b:21:0b:af:b0:0d:d7:87:73:a2:90:77: 31:fd:4a:ea:87:0e:bc:6c:15:86:e9:a8:dc:31:bb: ce:d8:d3:b6:63:45:77:0e:c8:e1:09:54:4b:d8:01: a5:b0:87:cb:36:bf:35:ca:ad:2a:25:aa:8a:75:12: 0d:10:e4:a1:99:9d:73:f1:d3:20:f3:79:2f:ae:44: 80:e5:72:be:ea:49:75:09:97:0b:3f:33:0a:96:36: 57:8e:a8:35:72:3a:a3:ab:f2:6c:a4:c5:b9:bf:c0: 68:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:FD:74:5C:BC:2D:73:98:81:2B:C1:02:95:AF:1E:C6:44:A5:68:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40cd5d6f-ff8a-309c-bc14-dddf87117073.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:d2d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:44:e2:f0:42:b1:36:b3:67:b1:c5:69:20:5b:ca:3e:24:15: c3:c9:6c:c6:e6:5d:ad:b3:a5:0d:1d:d6:8a:a2:5a:2c:f9:ac: 70:91:7a:82:bd:c0:a4:f0:e0:1e:6e:6d:fe:04:10:73:04:87: df:e5:37:42:8c:aa:51:87:e6:20:96:7d:33:e9:dc:a9:13:95: e0:49:73:6b:26:51:88:55:6b:92:3c:b6:30:ed:c8:eb:76:ec: dd:e7:30:aa:17:01:07:04:dd:77:15:86:d3:a2:4a:d6:82:1e: 18:d4:dc:49:71:33:33:d5:8a:13:bc:9e:cf:3f:cb:5b:e4:f0: 73:47:de:34:0e:5b:4e:4b:a7:86:cf:3b:fe:51:ee:c4:f4:75: 07:47:6b:de:7f:29:73:f3:0e:45:f5:66:ec:4f:e3:8b:4a:9b: fc:4d:8c:78:3a:bf:c8:82:4c:3a:39:0f:fc:3e:38:25:55:c0: 15:33:37:85:26:fd:fa:10:98:b3:f2:df:9b:fe:63:76:5d:55: 61:9b:e2:f5:3b:df:69:c7:58:39:cb:6d:ed:e6:eb:18:b4:f5: 4b:f6:93:d6:20:82:f7:c2:0e:66:74:12:44:1d:dc:9d:c4:9e: 84:48:b0:da:c7:ad:13:a3:ba:46:c7:75:0a:00:4b:72:0b:19: f5:18:b4:3c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9UnWKjkDDaiHmkWxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk OTI0ODc5ODQtNjcyOS00MjY1LThlMGItMWI1NDg3OWE1ZjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstvgPwBLGL79NcmJGI7qwCOVY4NeTaydfItQ i1/QsaOaPPndpSj7T1xjr1cq6+ny7rhS/oUWzgMIuJFCV7AQOm+a6wHYcruKjlfC mt8c/Q+j3YEtzQdL+PJZ9rCiR6m1eMCfnwphP/uqtg6MTbOVJUkcGHTzgxASwG+O TKvcWag9u84V5pkiDgDKrWVttB/p9z8He76rb1uLIQuvsA3Xh3OikHcx/Urqhw68 bBWG6ajcMbvO2NO2Y0V3DsjhCVRL2AGlsIfLNr81yq0qJaqKdRINEOShmZ1z8dMg 83kvrkSA5XK+6kl1CZcLPzMKljZXjqg1cjqjq/JspMW5v8BoswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL79dFy8LXOYgSvBApWvHsZEpWjTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDBjZDVkNmYtZmY4YS0z MDljLWJjMTQtZGRkZjg3MTE3MDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAw0t MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG5E4vBCsTazZ7HFaSBbyj4kFcPJbMbmXa2zpQ0d1oqiWiz5rHCR eoK9wKTw4B5ubf4EEHMEh9/lN0KMqlGH5iCWfTPp3KkTleBJc2smUYhVa5I8tjDt yOt27N3nMKoXAQcE3XcVhtOiStaCHhjU3ElxMzPVihO8ns8/y1vk8HNH3jQOW05L p4bPO/5R7sT0dQdHa95/KXPzDkX1ZuxP44tKm/xNjHg6v8iCTDo5D/w+OCVVwBUz N4Um/foQmLPy35v+Y3ZdVWGb4vU732nHWDnLbe3m6xi09Uv2k9YggvfCDmZ0EkQd 3J3EnoRIsNrHrROjukbHdQoAS3ILGfUYtDw= -----END CERTIFICATE-----Generated at Tue Oct 6 23:15:41 2026 by rpki-client