$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaa7eefe-a4ce-3940-af91-b16cc9c7c7db.roa File: aaa7eefe-a4ce-3940-af91-b16cc9c7c7db.roa (raw, json) Hash identifier: LAyKeL5pAwW4lSMWJhyISf/keuOurFVLCZ8NUqFjiI4= Subject key identifier: 0C:DB:9D:F9:A9:53:83:C8:CE:5C:CE:63:45:0F:18:A4:B4:CA:D8:77 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F549D5BE3EBF929AF6EDEFB80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaa7eefe-a4ce-3940-af91-b16cc9c7c7db.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 397206 IP address blocks: 2001:503:d2d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:5b:e3:eb:f9:29:af:6e:de:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=959a49de-18bf-440f-a6ed-7f61d8b19b54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:29:ce:8b:64:cd:c7:ac:be:ab:7e:fb:3f:b5: 9a:ff:a5:e3:7d:ee:05:4b:c8:55:2d:7b:2a:25:d7: c0:e0:fd:84:9b:0c:be:83:75:ea:85:6c:72:e3:bc: 0e:5b:68:0d:6b:bf:b9:fb:9f:f9:eb:80:11:d4:59: 9c:da:ff:63:9c:62:54:36:62:ce:b1:62:7f:a0:f9: be:f0:01:b9:84:39:ea:04:09:0b:4f:bc:db:a1:f5: 97:4e:3e:07:59:a8:df:5a:fb:c7:5e:08:19:7b:75: 7c:d1:84:d8:64:03:b6:8a:92:ad:4c:85:37:e8:ac: 28:d0:e7:4e:99:ab:1c:65:e1:2a:57:aa:d0:9d:65: ac:ac:51:32:31:c7:cf:e7:4f:96:ca:ab:61:f5:dd: 5e:bb:49:9c:5c:27:e3:86:0a:c5:81:0a:52:29:2c: bc:d9:d4:41:7a:c2:64:20:8d:db:81:ed:e1:ed:3e: eb:88:82:6b:0f:27:d9:a7:a8:bd:3d:e7:fe:a4:1d: 0a:39:a9:ed:f4:5a:7e:24:05:5f:b0:14:2f:5a:89: 86:71:ac:6b:60:6f:fb:e8:40:ab:2e:5d:24:09:3b: 61:73:54:07:94:df:84:cd:f0:ce:62:3b:18:0e:29: 98:26:26:57:a2:2c:94:e6:11:21:71:c0:c1:6d:69: fb:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:DB:9D:F9:A9:53:83:C8:CE:5C:CE:63:45:0F:18:A4:B4:CA:D8:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaa7eefe-a4ce-3940-af91-b16cc9c7c7db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:d2d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:8e:ae:72:be:aa:90:fe:68:b5:13:7b:aa:82:88:f2:2a:f4: a5:11:71:26:44:dd:24:61:3a:9a:9d:6f:3b:82:9a:2c:87:71: 0a:57:70:a4:1a:71:ad:b1:90:a4:8c:26:66:4e:6a:d4:67:05: 63:40:98:81:33:de:97:09:71:df:cb:69:00:69:93:68:e5:5a: 87:b0:0d:d7:b4:c5:08:6c:9a:99:ae:83:8b:ca:96:76:4b:17: 79:df:76:3d:2f:d3:26:3a:65:ce:af:3a:b8:02:6f:02:2e:f7: 89:79:2d:65:3d:0c:16:67:da:30:51:53:8a:36:49:0d:4f:f9: b1:5c:bf:05:ee:16:48:54:ec:f6:53:ff:89:e1:16:2b:94:3f: 63:ee:e5:a8:81:16:ff:4c:4c:0b:05:19:b1:cc:e0:3c:fe:40: 74:c7:c9:ed:b1:fd:c5:d1:66:7b:6a:37:2b:07:6c:9b:cc:9e: 70:0b:0a:48:0c:49:16:75:09:b7:da:9f:1d:69:da:f5:03:6f: 94:2d:bd:0d:96:fc:b3:3a:dc:0a:a3:d1:b5:ce:12:8c:ab:34: af:c2:f9:f9:5a:b4:c0:30:f7:14:9b:44:1c:c3:1f:d5:a1:ba: e4:53:9e:dc:5e:73:3d:0f:10:61:bb:97:45:0e:e1:3f:b0:52: de:59:8f:56 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9UnVvj6/kpr27e+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk OTU5YTQ5ZGUtMThiZi00NDBmLWE2ZWQtN2Y2MWQ4YjE5YjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSnOi2TNx6y+q377P7Wa/6Xjfe4FS8hVLXsq JdfA4P2Emwy+g3XqhWxy47wOW2gNa7+5+5/564AR1Fmc2v9jnGJUNmLOsWJ/oPm+ 8AG5hDnqBAkLT7zbofWXTj4HWajfWvvHXggZe3V80YTYZAO2ipKtTIU36Kwo0OdO mascZeEqV6rQnWWsrFEyMcfP50+Wyqth9d1eu0mcXCfjhgrFgQpSKSy82dRBesJk II3bge3h7T7riIJrDyfZp6i9Pef+pB0KOant9Fp+JAVfsBQvWomGcaxrYG/76ECr Ll0kCTthc1QHlN+EzfDOYjsYDimYJiZXoiyU5hEhccDBbWn7WwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAzbnfmpU4PIzlzOY0UPGKS0yth3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWFhN2VlZmUtYTRjZS0z OTQwLWFmOTEtYjE2Y2M5YzdjN2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAw0t MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG6OrnK+qpD+aLUTe6qCiPIq9KURcSZE3SRhOpqdbzuCmiyHcQpX cKQaca2xkKSMJmZOatRnBWNAmIEz3pcJcd/LaQBpk2jlWoewDde0xQhsmpmug4vK lnZLF3nfdj0v0yY6Zc6vOrgCbwIu94l5LWU9DBZn2jBRU4o2SQ1P+bFcvwXuFkhU 7PZT/4nhFiuUP2Pu5aiBFv9MTAsFGbHM4Dz+QHTHye2x/cXRZntqNysHbJvMnnAL CkgMSRZ1Cbfanx1p2vUDb5QtvQ2W/LM63Aqj0bXOEoyrNK/C+flatMAw9xSbRBzD H9WhuuRTntxecz0PEGG7l0UO4T+wUt5Zj1Y= -----END CERTIFICATE-----Generated at Tue Oct 6 23:11:44 2026 by rpki-client