$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4af4d692-09a1-34d2-a431-0d3e1c08ebab.roa File: 4af4d692-09a1-34d2-a431-0d3e1c08ebab.roa (raw, json) Hash identifier: 7jqMP8kev3QVgaObS3U4lewHYM6IG3R8ygLsdrXnxg4= Subject key identifier: 08:A5:A6:65:8A:AD:2D:34:5E:0C:26:F3:20:9A:2C:78:06:8E:0B:8A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F30526B57A311127B29C6D480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4af4d692-09a1-34d2-a431-0d3e1c08ebab.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 396588 IP address blocks: 2001:503:83eb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:6b:57:a3:11:12:7b:29:c6:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=b24cdfe0-4b5a-4763-a3cd-2fc44a1e16b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8d:48:f3:13:0d:90:6e:42:e8:92:a7:78:94: 51:44:8d:80:c4:b6:c5:b6:78:d0:34:f5:cd:e8:6a: c6:bd:49:2c:0b:d1:62:24:79:37:3e:cf:3f:ff:e4: 56:88:6b:68:93:d6:21:b4:11:af:90:9b:99:5a:b9: 78:bb:d5:67:4f:d3:21:28:43:4b:f9:e0:d4:d8:7e: 32:81:32:91:33:02:f2:4c:4b:dd:63:e4:e6:cc:b9: 6b:49:ab:27:45:27:d6:38:f0:75:81:7e:33:8c:6a: 39:32:2e:f2:ba:e3:6e:36:4e:43:ef:22:58:ef:b8: 5d:31:23:96:ac:dd:3c:70:23:0e:7c:94:a3:de:83: 3c:50:6b:72:7c:95:3a:7c:66:df:af:c6:d0:45:29: b9:c8:65:d8:a3:9f:fa:62:60:45:e3:fc:31:70:93: 0b:0b:aa:2a:e1:e3:45:96:28:5d:22:cf:d6:f2:32: 7f:78:1d:9c:e8:9c:c5:ec:1a:4a:7d:b7:df:df:fb: a8:59:82:ea:45:da:80:13:60:9a:9e:c1:ac:49:98: b8:e8:69:33:bc:f4:cb:6f:f4:cf:f2:34:17:1e:48: 6f:06:44:4b:18:35:1a:de:a7:eb:c0:11:74:78:eb: 34:0c:36:b0:e8:25:f3:5a:cc:b8:9f:cd:37:96:c2: 65:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A5:A6:65:8A:AD:2D:34:5E:0C:26:F3:20:9A:2C:78:06:8E:0B:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4af4d692-09a1-34d2-a431-0d3e1c08ebab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:83eb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:c1:aa:6c:e0:a4:0d:d0:f2:8d:a2:87:86:ee:99:6e:3d:38: 6f:39:4c:93:8f:b1:95:31:06:04:4f:41:fa:24:57:54:fe:57: 41:ec:ce:f0:57:89:14:60:b4:6e:e3:f3:4e:2c:82:63:bd:5a: 61:f8:b0:f9:2c:60:36:15:9e:be:c4:0a:79:b3:20:f1:1c:77: 67:ed:b0:9b:68:ee:e3:a7:4e:5b:08:59:b9:31:ba:65:46:53: b5:b2:ce:9c:a1:b6:3d:ae:6b:48:e1:53:7b:74:39:cd:59:22: 07:65:95:83:27:6c:1d:af:b3:8f:3b:fa:a3:6d:2c:8e:dc:c9: 2d:47:ed:27:15:47:97:8c:8c:04:98:e7:92:af:f5:74:1b:4e: 2e:ee:a6:73:62:10:f0:bf:71:ed:d2:ad:9e:f1:3b:a2:9d:87: 7c:09:30:82:af:ed:43:74:0e:81:69:03:4e:5a:bd:2d:04:6f: 94:b2:c8:07:9b:04:de:74:d1:62:09:9d:87:22:68:51:fe:61: 14:0f:1f:dd:e2:d9:c7:bf:f6:c9:38:9e:9c:f6:79:7f:06:a1: c3:10:62:d1:bb:eb:6e:20:85:ac:b9:37:70:b3:cb:43:15:37: 2e:9a:ef:9a:19:a1:71:d0:9b:4e:09:81:00:f3:07:45:98:26: b3:82:f6:25 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8wUmtXoxESeynG1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk YjI0Y2RmZTAtNGI1YS00NzYzLWEzY2QtMmZjNDRhMWUxNmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlY1I8xMNkG5C6JKneJRRRI2AxLbFtnjQNPXN 6GrGvUksC9FiJHk3Ps8//+RWiGtok9YhtBGvkJuZWrl4u9VnT9MhKENL+eDU2H4y gTKRMwLyTEvdY+TmzLlrSasnRSfWOPB1gX4zjGo5Mi7yuuNuNk5D7yJY77hdMSOW rN08cCMOfJSj3oM8UGtyfJU6fGbfr8bQRSm5yGXYo5/6YmBF4/wxcJMLC6oq4eNF lihdIs/W8jJ/eB2c6JzF7BpKfbff3/uoWYLqRdqAE2CansGsSZi46GkzvPTLb/TP 8jQXHkhvBkRLGDUa3qfrwBF0eOs0DDaw6CXzWsy4n803lsJlXwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAilpmWKrS00Xgwm8yCaLHgGjguKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGFmNGQ2OTItMDlhMS0z NGQyLWE0MzEtMGQzZTFjMDhlYmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA4Pr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL/BqmzgpA3Q8o2ih4bumW49OG85TJOPsZUxBgRPQfokV1T+V0Hs zvBXiRRgtG7j804sgmO9WmH4sPksYDYVnr7ECnmzIPEcd2ftsJto7uOnTlsIWbkx umVGU7Wyzpyhtj2ua0jhU3t0Oc1ZIgdllYMnbB2vs487+qNtLI7cyS1H7ScVR5eM jASY55Kv9XQbTi7upnNiEPC/ce3SrZ7xO6Kdh3wJMIKv7UN0DoFpA05avS0Eb5Sy yAebBN500WIJnYciaFH+YRQPH93i2ce/9sk4npz2eX8GocMQYtG7624ghay5N3Cz y0MVNy6a75oZoXHQm04JgQDzB0WYJrOC9iU= -----END CERTIFICATE-----Generated at Thu Sep 24 21:56:46 2026 by rpki-client