$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3282c4d4-cd82-30c9-9295-f17089c0d06e.roa File: 3282c4d4-cd82-30c9-9295-f17089c0d06e.roa (raw, json) Hash identifier: SGybYIHe0wuSrdPI0MNLob5zSXhAdaDHF1wlY9cYSPo= Subject key identifier: F8:42:A7:3E:D6:47:11:38:2F:DD:88:6E:80:6D:B8:87:22:9F:9C:8D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F3E4801EE6989C4178DB91D80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3282c4d4-cd82-30c9-9295-f17089c0d06e.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 396543 IP address blocks: 2001:503:39c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:48:01:ee:69:89:c4:17:8d:b9:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=6bec83fc-4ee8-4d28-911b-5d15363b1af0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:66:91:47:d3:61:e3:0b:25:cc:b2:2d:ad:21: 60:5c:1f:af:1a:b2:19:57:b5:31:41:8e:66:f7:fe: de:37:e5:64:f1:9e:95:fa:e1:df:12:e7:e6:14:81: c9:d4:8f:30:a7:48:51:d8:d7:2b:d8:04:8a:75:38: ca:26:69:32:a2:de:5f:77:aa:fd:6f:99:b9:39:ad: f0:75:83:b7:15:2e:c5:96:25:2a:c4:27:9f:34:e2: cc:aa:52:d7:f3:38:c4:d6:2f:fd:1d:49:3e:4a:6e: 09:2f:ee:57:1c:ff:28:cb:6b:12:b4:96:8b:cc:92: 76:48:1f:42:5e:83:65:3d:68:f3:11:80:06:c5:dc: 0a:d3:2b:eb:69:68:2f:e2:03:9f:dc:9f:b9:bc:46: 9f:f0:91:fe:45:f9:19:96:eb:d9:86:08:96:11:97: 0d:b8:af:0f:1b:7f:51:ab:db:ab:72:24:c6:67:0a: aa:03:33:56:1a:54:8c:13:8f:bd:bb:43:dd:d3:de: 3f:2e:50:cd:93:2a:eb:75:a7:f9:e8:f3:06:77:ad: ba:0b:95:78:d7:01:90:5d:a4:41:f0:c1:bb:91:da: 0e:50:69:4a:86:8f:6d:6f:55:7c:13:e3:33:e1:b0: 66:7e:34:ef:c8:7b:bd:98:98:35:3d:b8:7d:c0:a5: a7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:42:A7:3E:D6:47:11:38:2F:DD:88:6E:80:6D:B8:87:22:9F:9C:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3282c4d4-cd82-30c9-9295-f17089c0d06e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:39c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:bb:46:df:57:dd:dc:5e:48:8a:10:20:27:06:d1:95:80:99: 2a:95:59:5b:88:05:ff:05:85:4e:b3:df:84:64:c9:01:8f:b1: 9b:03:d8:d4:3a:92:73:c9:15:e5:6f:1c:72:96:74:85:af:c4: 27:23:c3:35:f8:77:26:95:b8:9a:0c:95:2d:36:21:a8:c0:07: dd:1f:40:40:b4:84:82:18:60:5b:93:55:c7:57:8b:9d:12:f7: 47:06:98:03:f6:b8:cc:53:de:89:99:6a:86:24:e2:72:a9:57: d9:4d:2d:f6:ef:cc:cb:16:fa:bc:e1:24:cb:a5:07:43:e1:a4: f2:1d:ac:6d:6c:3a:9b:64:a4:5b:10:dd:ef:5b:e5:35:f0:3d: 79:6b:77:95:43:ce:25:1d:7a:97:5c:05:63:94:c6:0e:c8:74: ad:66:d3:d1:91:e4:60:69:ce:50:b1:cc:23:db:ac:30:8e:01: f8:6a:3e:21:ba:2f:df:28:c6:d4:a2:93:79:86:31:0b:83:32: b8:bc:3a:63:ff:00:a0:46:37:0f:c6:ec:56:de:da:2b:5c:f5: 1e:f1:70:6d:3a:e3:67:b7:38:e6:8b:f6:33:91:1c:38:2c:78: bf:9e:27:c2:2d:3e:a9:18:cf:d7:da:cc:f5:84:9c:e5:15:6b: d0:94:c3:ef -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8+SAHuaYnEF425HYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk NmJlYzgzZmMtNGVlOC00ZDI4LTkxMWItNWQxNTM2M2IxYWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGaRR9Nh4wslzLItrSFgXB+vGrIZV7UxQY5m 9/7eN+Vk8Z6V+uHfEufmFIHJ1I8wp0hR2Ncr2ASKdTjKJmkyot5fd6r9b5m5Oa3w dYO3FS7FliUqxCefNOLMqlLX8zjE1i/9HUk+Sm4JL+5XHP8oy2sStJaLzJJ2SB9C XoNlPWjzEYAGxdwK0yvraWgv4gOf3J+5vEaf8JH+RfkZluvZhgiWEZcNuK8PG39R q9urciTGZwqqAzNWGlSME4+9u0Pd094/LlDNkyrrdaf56PMGd626C5V41wGQXaRB 8MG7kdoOUGlKho9tb1V8E+Mz4bBmfjTvyHu9mJg1Pbh9wKWniQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPhCpz7WRxE4L92IboBtuIcin5yNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzI4MmM0ZDQtY2Q4Mi0z MGM5LTkyOTUtZjE3MDg5YzBkMDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAznB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJS7Rt9X3dxeSIoQICcG0ZWAmSqVWVuIBf8FhU6z34RkyQGPsZsD 2NQ6knPJFeVvHHKWdIWvxCcjwzX4dyaVuJoMlS02IajAB90fQEC0hIIYYFuTVcdX i50S90cGmAP2uMxT3omZaoYk4nKpV9lNLfbvzMsW+rzhJMulB0PhpPIdrG1sOptk pFsQ3e9b5TXwPXlrd5VDziUdepdcBWOUxg7IdK1m09GR5GBpzlCxzCPbrDCOAfhq PiG6L98oxtSik3mGMQuDMri8OmP/AKBGNw/G7Fbe2itc9R7xcG0642e3OOaL9jOR HDgseL+eJ8ItPqkYz9fazPWEnOUVa9CUw+8= -----END CERTIFICATE-----Generated at Thu Oct 8 18:33:51 2026 by rpki-client