$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03921380-683a-39cd-af49-7de2f2d9a773.roa File: 03921380-683a-39cd-af49-7de2f2d9a773.roa (raw, json) Hash identifier: mtjy49XE5IxxJjFuDnJjMyD6gbb7DJ+T3+Ke27WoelM= Subject key identifier: 18:1A:B5:35:CE:0D:91:9C:80:A5:F3:72:49:E9:B9:03:C9:E4:97:0B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F3E47D1749D2F027DBD1AFBD0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03921380-683a-39cd-af49-7de2f2d9a773.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 32651 IP address blocks: 2001:503:39c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:d1:74:9d:2f:02:7d:bd:1a:fb:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=fb99c384-4bb1-4aab-b789-684d2b6a001d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:0e:ad:3a:10:2c:91:f8:ac:99:8b:c4:f0:37: 7a:16:fb:b8:3e:ab:3c:24:99:16:1b:77:bb:a6:95: 4d:1a:7d:6d:fa:18:63:a8:54:2c:ba:33:06:09:7b: e0:54:9a:40:48:c5:d2:4d:38:c2:20:54:af:ec:a4: 29:84:50:df:7a:a1:ac:a8:4b:24:6e:7e:b2:14:d0: e0:cb:0d:16:fb:8a:68:33:f1:91:ff:e1:ff:87:2e: 05:7d:f7:2d:1d:d0:fa:98:2a:8f:ce:32:82:b3:e8: 6b:69:db:5f:77:b2:05:40:4e:f7:1a:91:91:80:94: 50:df:41:99:ee:c2:69:3b:d9:13:4a:71:2c:70:a8: 5a:de:12:8a:90:c4:29:23:6e:30:7c:cb:96:cc:1d: b3:49:2b:7d:c2:95:cc:74:00:08:ac:dc:0d:38:b5: c8:40:3b:25:bc:a0:3a:5b:f3:1c:9c:7d:9e:b8:72: ef:31:1e:5b:97:fa:fc:2c:60:bf:89:26:86:44:6e: 07:cc:bd:2b:15:c6:9c:f2:28:c9:94:5e:a1:89:b6: e4:23:fa:61:d9:a9:99:00:45:42:86:e0:a3:55:bc: a8:3e:a6:a7:a7:75:96:d4:0d:a5:98:48:f1:8f:9a: d0:fc:df:0b:93:48:b9:1e:77:90:50:5e:da:43:cd: 97:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:1A:B5:35:CE:0D:91:9C:80:A5:F3:72:49:E9:B9:03:C9:E4:97:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03921380-683a-39cd-af49-7de2f2d9a773.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:39c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:ea:05:57:a5:1c:8a:9a:b0:3f:8f:53:3e:84:b6:58:cf:cf: d4:89:45:7c:89:2d:2e:58:83:5d:45:90:84:41:bf:30:4d:5d: f7:4c:bc:61:14:e8:c1:e7:ce:4c:9d:6b:7e:9b:2a:59:c3:1c: 7d:91:e5:85:2c:ee:fd:bb:88:48:f6:d5:02:8d:ed:92:6d:91: d4:be:47:8d:fd:4a:ff:72:f8:2b:42:20:5f:77:05:00:65:32: 54:25:7c:39:ef:4c:8f:7d:00:20:15:6e:ce:a0:f9:dc:42:19: 84:94:04:61:6d:ea:44:44:59:93:f7:fa:21:2c:9a:5f:6f:f2: db:29:47:14:df:a9:36:a3:20:aa:ec:0d:91:2b:0f:50:13:29: 23:4a:80:a3:72:c8:d6:49:38:cc:fb:82:d2:57:40:96:6b:6e: 79:9b:68:82:9f:87:87:0d:0a:eb:80:e8:73:d0:32:5f:47:00: a3:c7:a8:bd:09:22:38:b8:19:a3:f2:e0:eb:7a:e4:e3:91:46: a0:c3:77:57:e0:66:4f:12:50:cb:bf:8f:a4:06:e7:28:3a:1e: 0a:cc:f9:e9:d7:c5:b3:57:24:e8:04:d6:32:26:71:2a:90:4b: 1a:33:63:10:6c:a7:92:48:7b:80:f7:da:8b:ee:1d:81:ae:1b: cf:f9:60:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8+R9F0nS8Cfb0a+9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk ZmI5OWMzODQtNGJiMS00YWFiLWI3ODktNjg0ZDJiNmEwMDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgA6tOhAskfismYvE8Dd6Fvu4Pqs8JJkWG3e7 ppVNGn1t+hhjqFQsujMGCXvgVJpASMXSTTjCIFSv7KQphFDfeqGsqEskbn6yFNDg yw0W+4poM/GR/+H/hy4FffctHdD6mCqPzjKCs+hradtfd7IFQE73GpGRgJRQ30GZ 7sJpO9kTSnEscKha3hKKkMQpI24wfMuWzB2zSSt9wpXMdAAIrNwNOLXIQDslvKA6 W/McnH2euHLvMR5bl/r8LGC/iSaGRG4HzL0rFcac8ijJlF6hibbkI/ph2amZAEVC huCjVbyoPqanp3WW1A2lmEjxj5rQ/N8Lk0i5HneQUF7aQ82XGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBgatTXODZGcgKXzcknpuQPJ5JcLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDM5MjEzODAtNjgzYS0z OWNkLWFmNDktN2RlMmYyZDlhNzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAznB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ7qBVelHIqasD+PUz6EtljPz9SJRXyJLS5Yg11FkIRBvzBNXfdM vGEU6MHnzkyda36bKlnDHH2R5YUs7v27iEj21QKN7ZJtkdS+R439Sv9y+CtCIF93 BQBlMlQlfDnvTI99ACAVbs6g+dxCGYSUBGFt6kREWZP3+iEsml9v8tspRxTfqTaj IKrsDZErD1ATKSNKgKNyyNZJOMz7gtJXQJZrbnmbaIKfh4cNCuuA6HPQMl9HAKPH qL0JIji4GaPy4Ot65OORRqDDd1fgZk8SUMu/j6QG5yg6HgrM+enXxbNXJOgE1jIm cSqQSxozYxBsp5JIe4D32ovuHYGuG8/5YGE= -----END CERTIFICATE-----Generated at Fri Sep 25 01:25:58 2026 by rpki-client