$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/091e1eae-9e65-366d-8fd1-e43991ecaef8.roa File: 091e1eae-9e65-366d-8fd1-e43991ecaef8.roa (raw, json) Hash identifier: FK2Kwtcpfe3n3oHJMMnZ2atvWoxmb3MPoVf26RYJexc= Subject key identifier: 3A:D8:E9:79:3D:98:F9:DB:66:92:AD:71:6A:11:4C:3E:61:BD:4B:F0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584FD25BDE69C0967211D70DA280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/091e1eae-9e65-366d-8fd1-e43991ecaef8.roa Signing time: Fri 13 Nov 2026 02:00:14 +0000 ROA not before: Fri 13 Nov 2026 02:00:14 +0000 ROA not after: Thu 11 Feb 2027 02:00:14 +0000 asID: 32651 IP address blocks: 2001:503:83eb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d2:5b:de:69:c0:96:72:11:d7:0d:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 13 02:00:14 2026 GMT Not After : Feb 11 02:00:14 2027 GMT Subject: CN=212ee3a3-db0d-4925-b0e9-8e25fe2ae297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9b:bd:2a:00:5a:e1:ef:a7:98:68:b4:df:f7: db:0a:c3:fb:cb:56:f8:6f:d8:a3:b0:d6:be:63:99: e6:9f:eb:75:24:c5:e3:fc:bc:de:88:bd:a5:76:de: be:0d:bd:80:0e:36:60:86:4e:67:e6:57:c7:da:9e: 58:2e:17:68:29:12:2a:11:af:37:a1:df:36:c3:d9: 8f:9f:48:74:44:80:e5:13:73:51:5c:d6:e9:9a:6a: 4e:1b:f7:60:d6:f7:d3:b0:29:1c:d1:a7:99:42:cb: f1:e8:25:9c:7c:bf:90:84:b6:a0:25:cf:fd:b2:71: 0f:02:26:0a:5a:72:bc:eb:e9:e3:84:8d:42:3c:89: b0:fb:bc:cf:38:eb:7d:78:b3:db:f5:13:49:ce:03: 4e:76:38:77:15:70:97:35:a2:99:dd:8d:4c:1c:b7: 95:f0:53:9b:1a:ee:ab:ca:1b:cd:22:49:39:39:7f: 3d:49:3c:1a:d7:d6:e4:3e:80:6b:89:51:bb:9f:77: ba:1b:00:b4:b6:2d:fe:e5:2c:35:57:29:6d:77:a5: 68:3b:f1:a7:fb:eb:52:2a:78:a1:95:b1:cf:c0:8e: e1:82:a2:05:b5:bb:81:ba:0c:49:0a:f0:47:75:e2: fd:56:26:10:a8:ee:29:35:25:9e:f1:e0:ea:5f:80: 5e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D8:E9:79:3D:98:F9:DB:66:92:AD:71:6A:11:4C:3E:61:BD:4B:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/091e1eae-9e65-366d-8fd1-e43991ecaef8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:83eb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:33:26:d2:76:64:aa:3c:d8:98:cd:a7:07:99:b7:90:29:a8: cb:92:2a:b5:3e:dd:74:b4:50:2d:e8:04:19:2c:fc:76:fa:07: 4c:a7:6b:5d:f1:64:0e:7a:9e:56:5c:f7:ee:28:53:9e:a4:27: c9:5a:fa:c0:71:a5:1e:da:46:9a:b4:5b:27:28:eb:47:1f:ea: ac:35:ce:03:2e:f2:38:1a:9c:38:20:ce:1e:be:00:1b:61:af: 27:58:64:b0:6c:20:53:04:93:9e:ad:f3:0f:54:6b:b7:e9:f2: f1:64:19:e4:ea:e0:99:fc:07:1d:b9:fd:fb:fe:55:99:59:22: 56:df:2f:e9:b8:f3:f3:b9:73:c5:63:e8:59:52:79:db:15:4d: 6e:24:17:e6:40:e5:7d:bb:3f:0d:9f:56:4f:38:23:03:65:2f: 43:94:e1:f5:cd:8d:db:29:d3:ec:57:a1:d9:69:76:aa:f4:d4: 6a:fd:6b:76:8d:35:16:8e:14:62:0d:1c:8d:fb:72:17:84:76: 1e:a8:f2:c4:ac:a4:92:9f:ce:e8:ac:1f:28:9d:e9:aa:9b:51: 91:51:b9:b1:d3:42:dc:13:f7:e4:90:4f:d2:2c:f9:95:8b:1d: dc:f3:aa:1a:f1:ff:1e:65:fd:b4:85:57:75:75:ee:69:6b:f1: 17:f1:38:51 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE/SW95pwJZyEdcNooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTExMzAyMDAxNFoXDTI3MDIxMTAyMDAxNFowLzEtMCsGA1UEAxMk MjEyZWUzYTMtZGIwZC00OTI1LWIwZTktOGUyNWZlMmFlMjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpu9KgBa4e+nmGi03/fbCsP7y1b4b9ijsNa+ Y5nmn+t1JMXj/LzeiL2ldt6+Db2ADjZghk5n5lfH2p5YLhdoKRIqEa83od82w9mP n0h0RIDlE3NRXNbpmmpOG/dg1vfTsCkc0aeZQsvx6CWcfL+QhLagJc/9snEPAiYK WnK86+njhI1CPImw+7zPOOt9eLPb9RNJzgNOdjh3FXCXNaKZ3Y1MHLeV8FObGu6r yhvNIkk5OX89STwa19bkPoBriVG7n3e6GwC0ti3+5Sw1Vyltd6VoO/Gn++tSKnih lbHPwI7hgqIFtbuBugxJCvBHdeL9ViYQqO4pNSWe8eDqX4Be/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDrY6Xk9mPnbZpKtcWoRTD5hvUvwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDkxZTFlYWUtOWU2NS0z NjZkLThmZDEtZTQzOTkxZWNhZWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA4Pr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFMzJtJ2ZKo82JjNpweZt5ApqMuSKrU+3XS0UC3oBBks/Hb6B0yn a13xZA56nlZc9+4oU56kJ8la+sBxpR7aRpq0Wyco60cf6qw1zgMu8jganDggzh6+ ABthrydYZLBsIFMEk56t8w9Ua7fp8vFkGeTq4Jn8Bx25/fv+VZlZIlbfL+m48/O5 c8Vj6FlSedsVTW4kF+ZA5X27Pw2fVk84IwNlL0OU4fXNjdsp0+xXodlpdqr01Gr9 a3aNNRaOFGINHI37cheEdh6o8sSspJKfzuisHyid6aqbUZFRubHTQtwT9+SQT9Is +ZWLHdzzqhrx/x5l/bSFV3V17mlr8RfxOFE= -----END CERTIFICATE-----Generated at Sun Nov 15 18:14:06 2026 by rpki-client