$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b21e70dc-58a0-3eea-b9f3-be6d8a4e1e29.roa File: b21e70dc-58a0-3eea-b9f3-be6d8a4e1e29.roa (raw, json) Hash identifier: uZ1gGQudQB20XTJEXvSLN6I8I2jhWkdH4z/pRfMieDU= Subject key identifier: 05:5B:0B:21:2D:42:49:33:EC:FA:AE:0B:37:DC:F9:B9:80:6D:6A:DC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F5E62B7A0937041556F413F80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b21e70dc-58a0-3eea-b9f3-be6d8a4e1e29.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 396661 IP address blocks: 2001:503:c27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:b7:a0:93:70:41:55:6f:41:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=91a805fc-c7b0-49d8-bc6a-2ac117bbdeeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:9b:8a:e4:6a:02:9b:95:04:98:cd:ae:a6:c7: bf:7e:a1:b5:e7:da:ba:08:46:ab:bd:23:4f:42:4d: 79:27:f7:06:db:c7:da:da:ca:44:f9:7a:94:e6:aa: 4d:6f:a4:3f:fb:45:da:7d:43:68:92:0a:a8:7e:9d: d6:96:ad:e5:32:18:c6:4a:65:ba:a0:8d:c2:1f:c1: 22:ea:3c:9b:4e:67:7f:80:8a:3d:ee:77:29:94:86: 6b:f2:eb:d4:8b:99:d4:cd:95:9b:10:4f:92:07:8a: ec:5a:9a:3f:56:3f:9a:cf:09:e7:78:c7:b4:5e:8a: ae:9b:45:40:06:96:8d:89:62:64:31:1c:41:aa:22: 21:85:0b:e2:c3:15:a1:39:a9:5c:eb:1b:e4:47:23: 6e:67:b0:e0:8b:43:7d:2d:57:9c:ae:1c:48:1c:81: f8:6b:0d:da:e5:d5:14:9f:f9:5d:1f:f4:ba:fd:07: c8:41:6a:df:39:c9:1f:51:26:9f:eb:78:93:a7:cf: ee:a0:88:6a:44:5e:3c:08:af:35:87:2b:9e:2c:4f: da:8f:fe:60:89:20:9a:9e:f6:fe:e9:4a:89:7c:ab: dd:87:60:96:c2:a7:69:c6:a6:5e:16:93:37:10:68: 1e:7e:fc:24:ea:b2:d3:d3:5f:ef:f4:81:15:a4:d8: d6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:5B:0B:21:2D:42:49:33:EC:FA:AE:0B:37:DC:F9:B9:80:6D:6A:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b21e70dc-58a0-3eea-b9f3-be6d8a4e1e29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:1e:3f:87:cf:00:29:20:a8:cc:67:59:11:c5:c8:d6:34:da: f6:63:c0:e3:1c:5b:0c:c2:b2:35:34:8b:43:81:7e:6c:78:9b: d2:36:37:7d:ff:7d:89:40:d5:36:ee:76:fc:ea:8f:4f:49:22: 95:11:a7:ae:5a:82:35:41:9e:49:c1:bd:9c:66:9e:81:f5:2a: fa:2d:62:18:d8:28:2f:60:89:f3:67:21:48:a1:75:a2:32:b6: 3e:95:ec:39:02:93:a5:b9:c6:2d:97:3f:ad:ff:bb:85:7b:c7: e9:c8:7c:9f:47:da:22:a9:f9:d0:2f:b7:ed:9d:02:0f:3d:ee: 7f:f1:3f:bb:a7:0a:5c:2f:41:fe:b6:1a:25:e4:de:4a:b3:89: e7:9a:62:98:d2:24:71:5c:58:1a:74:0d:c5:a8:e1:c4:7c:b9: 1b:66:c1:3c:fc:cf:e3:8b:4c:63:b0:74:fd:e0:17:85:0b:c7: ae:0b:a5:e1:90:09:6c:a3:37:59:52:39:2b:eb:ed:7c:08:6f: 92:4d:3c:34:ea:44:98:94:ed:c5:0c:69:b1:ba:26:34:6c:14: 5f:b4:b1:66:64:43:8c:fe:78:e5:5f:1d:20:51:2d:a4:20:0b: 5c:4a:e2:ee:4d:fc:86:eb:22:ca:12:ab:c0:04:64:31:b6:c6: 9b:26:1e:a0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9eYregk3BBVW9BP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk OTFhODA1ZmMtYzdiMC00OWQ4LWJjNmEtMmFjMTE3YmJkZWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpuK5GoCm5UEmM2upse/fqG159q6CEarvSNP Qk15J/cG28fa2spE+XqU5qpNb6Q/+0XafUNokgqofp3Wlq3lMhjGSmW6oI3CH8Ei 6jybTmd/gIo97ncplIZr8uvUi5nUzZWbEE+SB4rsWpo/Vj+azwnneMe0Xoqum0VA BpaNiWJkMRxBqiIhhQviwxWhOalc6xvkRyNuZ7Dgi0N9LVecrhxIHIH4aw3a5dUU n/ldH/S6/QfIQWrfOckfUSaf63iTp8/uoIhqRF48CK81hyueLE/aj/5giSCanvb+ 6UqJfKvdh2CWwqdpxqZeFpM3EGgefvwk6rLT01/v9IEVpNjWTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAVbCyEtQkkz7PquCzfc+bmAbWrcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjIxZTcwZGMtNThhMC0z ZWVhLWI5ZjMtYmU2ZDhhNGUxZTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGgeP4fPACkgqMxnWRHFyNY02vZjwOMcWwzCsjU0i0OBfmx4m9I2 N33/fYlA1Tbudvzqj09JIpURp65agjVBnknBvZxmnoH1KvotYhjYKC9gifNnIUih daIytj6V7DkCk6W5xi2XP63/u4V7x+nIfJ9H2iKp+dAvt+2dAg897n/xP7unClwv Qf62GiXk3kqzieeaYpjSJHFcWBp0DcWo4cR8uRtmwTz8z+OLTGOwdP3gF4ULx64L peGQCWyjN1lSOSvr7XwIb5JNPDTqRJiU7cUMabG6JjRsFF+0sWZkQ4z+eOVfHSBR LaQgC1xK4u5N/IbrIsoSq8AEZDG2xpsmHqA= -----END CERTIFICATE-----Generated at Wed Oct 7 19:44:52 2026 by rpki-client