$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaaf5775-3df3-3476-a9d6-a63c88b65f7c.roa File: aaaf5775-3df3-3476-a9d6-a63c88b65f7c.roa (raw, json) Hash identifier: 2nt0VocnweZpSbJ+UCpQ55lYaF1Ib/q3L368QhWvrJk= Subject key identifier: 6B:DC:35:30:AC:87:E1:01:C4:99:01:A9:23:F6:C1:DE:AB:72:2E:32 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4F082F09FFCECE8BC7EBA280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaaf5775-3df3-3476-a9d6-a63c88b65f7c.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 397196 IP address blocks: 2001:503:231d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:2f:09:ff:ce:ce:8b:c7:eb:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=c0c2f1e1-82e5-40ca-b1c6-6b6338f29f7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:88:a8:82:dd:47:22:b6:39:63:3b:7d:22:59: 95:08:60:df:5b:78:f2:e2:9a:9f:22:82:03:a6:b1: 70:e6:f4:3d:0c:76:6d:90:a6:76:79:ea:76:c2:f8: b7:9c:ca:3f:b3:98:91:e5:fa:b7:7e:59:4b:af:80: 64:c6:aa:c2:89:5f:f5:25:80:e2:c4:6a:13:d7:4e: 48:aa:a7:f0:f9:14:4c:db:8a:ef:a1:6d:a3:56:c6: 89:16:55:e6:1d:07:69:fa:96:6f:35:d5:9c:53:b2: 22:75:f2:f5:ee:40:c1:bc:c0:d0:17:d1:ed:a2:7c: 2d:62:fd:64:56:59:87:53:df:d7:7a:9e:58:75:38: e2:72:4c:ce:0a:af:65:e9:c4:95:c9:2f:3d:1b:ff: ae:50:d8:93:60:87:00:bb:9a:86:78:ca:e4:38:d5: 82:4d:4d:cc:19:bd:c9:6c:27:02:bf:01:0e:bd:88: 4c:0c:b9:c1:4e:6a:d9:7a:5a:62:5b:50:fa:2f:8c: 91:45:aa:39:0e:b8:bc:6e:ae:20:e9:a2:7c:13:bd: 62:0a:38:42:ec:62:82:07:8e:4d:79:b6:d7:90:8a: 16:b9:05:e1:23:93:87:03:fc:98:38:31:b7:be:25: 30:0e:1c:45:3e:1f:f4:e7:73:00:74:e4:72:3a:a7: d4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:DC:35:30:AC:87:E1:01:C4:99:01:A9:23:F6:C1:DE:AB:72:2E:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaaf5775-3df3-3476-a9d6-a63c88b65f7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:231d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:ec:29:32:1b:c4:21:2e:88:1c:32:10:9c:76:66:19:2e:e1: de:f4:b2:63:01:3a:4d:97:60:c7:ec:80:2c:ac:06:d9:ef:56: d7:e3:14:63:00:03:d5:6b:9b:2f:c3:92:f9:b4:63:b4:9a:13: 7c:3c:a2:c6:9c:13:9a:ed:11:1d:d3:35:f3:af:13:7f:0a:c4: d2:61:76:90:b1:f7:b6:11:1f:83:e8:23:ef:fc:7c:37:98:b4: fe:ba:f8:82:a9:a7:bb:b9:6d:42:a8:15:b6:89:73:4b:df:5d: af:d5:94:d2:e9:84:13:98:4a:57:4f:76:ad:90:fe:52:87:17: df:a4:87:9f:34:c7:f0:d9:97:b4:56:2a:35:e1:16:10:be:c6: aa:b7:13:48:4e:52:a3:92:7e:c8:40:63:50:b2:da:38:c8:b3: 7e:9a:bb:11:72:07:23:04:ee:cd:b6:c8:80:0a:bd:57:a3:b1: 9f:21:db:fb:e6:c8:27:4a:6e:67:3c:dd:54:f1:31:10:e4:4d: 4e:2e:2b:8b:3f:ce:31:8b:4d:f7:e4:3d:6f:85:8d:2c:6e:cb: 22:ec:12:cd:52:90:d8:49:1f:d3:28:72:18:bc:41:7f:9e:6a: 79:35:be:9a:28:19:ac:76:ac:1e:c9:62:86:7d:1c:42:58:e2: 9e:3a:f0:53 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9PCC8J/87Oi8frooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk YzBjMmYxZTEtODJlNS00MGNhLWIxYzYtNmI2MzM4ZjI5ZjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloiogt1HIrY5Yzt9IlmVCGDfW3jy4pqfIoID prFw5vQ9DHZtkKZ2eep2wvi3nMo/s5iR5fq3fllLr4BkxqrCiV/1JYDixGoT105I qqfw+RRM24rvoW2jVsaJFlXmHQdp+pZvNdWcU7IidfL17kDBvMDQF9HtonwtYv1k VlmHU9/Xep5YdTjickzOCq9l6cSVyS89G/+uUNiTYIcAu5qGeMrkONWCTU3MGb3J bCcCvwEOvYhMDLnBTmrZelpiW1D6L4yRRao5Dri8bq4g6aJ8E71iCjhC7GKCB45N ebbXkIoWuQXhI5OHA/yYODG3viUwDhxFPh/053MAdORyOqfUiQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGvcNTCsh+EBxJkBqSP2wd6rci4yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWFhZjU3NzUtM2RmMy0z NDc2LWE5ZDYtYTYzYzg4YjY1ZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAyMd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAETsKTIbxCEuiBwyEJx2Zhku4d70smMBOk2XYMfsgCysBtnvVtfj FGMAA9Vrmy/Dkvm0Y7SaE3w8osacE5rtER3TNfOvE38KxNJhdpCx97YRH4PoI+/8 fDeYtP66+IKpp7u5bUKoFbaJc0vfXa/VlNLphBOYSldPdq2Q/lKHF9+kh580x/DZ l7RWKjXhFhC+xqq3E0hOUqOSfshAY1Cy2jjIs36auxFyByME7s22yIAKvVejsZ8h 2/vmyCdKbmc83VTxMRDkTU4uK4s/zjGLTffkPW+FjSxuyyLsEs1SkNhJH9Mochi8 QX+eank1vpooGax2rB7JYoZ9HEJY4p468FM= -----END CERTIFICATE-----Generated at Tue Oct 6 23:18:13 2026 by rpki-client