$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f3fad05-a56d-33fe-8a1d-2a9289ea5dee.roa File: 4f3fad05-a56d-33fe-8a1d-2a9289ea5dee.roa (raw, json) Hash identifier: aHj1+IXSaAZ9jeEH7jJLHv0fYAA6MXLBhe73TtcGM3U= Subject key identifier: E9:45:A2:70:E2:CD:13:FE:1D:7E:BB:87:D9:AD:C1:6D:90:0B:34:BD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F549DA99D2986C66E18B326A6 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f3fad05-a56d-33fe-8a1d-2a9289ea5dee.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 396604 IP address blocks: 2001:503:d2d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:a9:9d:29:86:c6:6e:18:b3:26:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=92cb5944-6a91-4e29-a695-decf64ca90a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b8:bf:ff:5b:95:27:58:b5:ed:d5:20:be:15: 6f:51:df:29:98:bc:79:50:5d:00:39:05:f2:86:07: 22:2b:39:33:5f:4d:87:2a:1a:73:79:57:29:44:99: bd:79:0e:b1:24:5c:e4:d3:76:ad:fe:5e:7b:3b:6e: 57:a9:e2:75:96:9d:c1:fc:03:38:49:21:b5:09:0a: 3c:7a:1f:8e:3a:97:2b:8d:d5:b3:9b:ec:fb:a3:de: 34:fa:9f:52:aa:6e:16:32:18:90:a4:a4:a5:8b:f4: 38:c9:04:e7:14:a6:a9:a6:9f:71:2f:d4:7a:d6:98: 98:05:78:70:47:1e:0f:1d:e2:7f:d7:f7:10:49:c6: 9e:2d:51:48:3f:c1:8a:6b:20:10:85:b8:7c:2a:92: 9c:71:b6:a8:b1:54:c5:ae:a2:e2:2f:81:e8:1d:40: e8:c6:c6:10:8b:3f:47:ab:9a:8c:71:da:a1:6f:4c: f0:b6:05:01:12:7c:cb:e2:83:39:82:e5:84:5c:6a: 77:7c:ed:18:38:11:f8:93:28:d7:ee:66:ca:47:b4: 30:6d:55:23:c2:d1:5b:10:4e:7e:97:35:8e:d7:a6: 6d:8f:0f:e5:96:b4:4a:76:62:80:49:2e:8a:65:6a: b0:d5:e8:8a:f6:49:c4:9e:9f:d4:39:16:f4:e2:21: cf:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:45:A2:70:E2:CD:13:FE:1D:7E:BB:87:D9:AD:C1:6D:90:0B:34:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f3fad05-a56d-33fe-8a1d-2a9289ea5dee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:d2d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:96:be:1d:af:5c:dd:f3:0e:0c:05:d2:0f:dd:34:26:62:dd: 2f:dc:9b:55:81:e6:02:b6:1d:57:37:ae:fc:7d:9a:59:d7:8e: 3c:7a:37:48:63:1a:fa:60:a1:4d:ac:14:ba:5e:00:78:85:b8: 6b:46:b1:35:85:83:4e:d4:fc:72:22:20:f9:2a:07:df:a8:f7: 7b:5a:c5:e1:14:ad:f2:b7:71:5a:8e:14:08:8f:ed:20:0e:d6: 4d:ac:37:a8:14:a6:a6:e9:45:34:34:4c:7b:92:1e:ff:a4:e4: 95:2c:28:75:bb:8a:40:da:65:f8:b6:b6:1a:d4:98:04:c0:60: aa:0d:c2:57:e6:31:a9:71:31:59:67:56:94:0d:df:bd:0d:ac: 28:c1:f0:09:83:95:2f:5e:32:b3:84:64:5c:ce:37:61:2c:7d: 77:bf:c9:c3:9d:a3:4b:12:66:44:6d:7d:e0:3d:8e:ab:e4:4a: e2:f7:da:8b:01:df:69:e7:c4:bf:86:53:66:b8:1c:26:27:33: 6f:61:e1:e7:7b:ed:f3:d9:7a:ef:8f:92:75:9b:58:a8:d5:ef: e1:10:7a:f6:13:26:ea:65:49:9e:c4:1e:e2:98:1c:29:19:58: 08:b7:d1:2f:83:52:b8:57:d9:59:d5:22:83:09:e6:f6:7d:78: 0d:5b:c6:2e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9UnamdKYbGbhizJqYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk OTJjYjU5NDQtNmE5MS00ZTI5LWE2OTUtZGVjZjY0Y2E5MGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbi//1uVJ1i17dUgvhVvUd8pmLx5UF0AOQXy hgciKzkzX02HKhpzeVcpRJm9eQ6xJFzk03at/l57O25XqeJ1lp3B/AM4SSG1CQo8 eh+OOpcrjdWzm+z7o940+p9Sqm4WMhiQpKSli/Q4yQTnFKappp9xL9R61piYBXhw Rx4PHeJ/1/cQScaeLVFIP8GKayAQhbh8KpKccbaosVTFrqLiL4HoHUDoxsYQiz9H q5qMcdqhb0zwtgUBEnzL4oM5guWEXGp3fO0YOBH4kyjX7mbKR7QwbVUjwtFbEE5+ lzWO16Ztjw/llrRKdmKASS6KZWqw1eiK9knEnp/UORb04iHPWwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOlFonDizRP+HX67h9mtwW2QCzS9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGYzZmFkMDUtYTU2ZC0z M2ZlLThhMWQtMmE5Mjg5ZWE1ZGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAw0t MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB6Wvh2vXN3zDgwF0g/dNCZi3S/cm1WB5gK2HVc3rvx9mlnXjjx6 N0hjGvpgoU2sFLpeAHiFuGtGsTWFg07U/HIiIPkqB9+o93taxeEUrfK3cVqOFAiP 7SAO1k2sN6gUpqbpRTQ0THuSHv+k5JUsKHW7ikDaZfi2thrUmATAYKoNwlfmMalx MVlnVpQN370NrCjB8AmDlS9eMrOEZFzON2EsfXe/ycOdo0sSZkRtfeA9jqvkSuL3 2osB32nnxL+GU2a4HCYnM29h4ed77fPZeu+PknWbWKjV7+EQevYTJuplSZ7EHuKY HCkZWAi30S+DUrhX2VnVIoMJ5vZ9eA1bxi4= -----END CERTIFICATE-----Generated at Tue Oct 6 14:55:42 2026 by rpki-client