$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a20c508a-3c00-3d4f-a9d2-826820614010.roa File: a20c508a-3c00-3d4f-a9d2-826820614010.roa (raw, json) Hash identifier: MYJfwPJ8SNsuOB8wZkK8WXBnivr1Qq2hBedsUjCTjiU= Subject key identifier: 4D:D5:C9:72:FE:78:5C:8D:8B:E2:95:51:4C:4A:15:0E:79:ED:68:17 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4F082E394D978AB09E678380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a20c508a-3c00-3d4f-a9d2-826820614010.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 396766 IP address blocks: 2001:503:231d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:2e:39:4d:97:8a:b0:9e:67:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=be52b65d-c30f-436a-8ee9-9ff89d466540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:06:94:15:7c:01:c0:40:54:21:eb:ad:10:85: d8:b6:95:15:2a:5e:7f:a0:73:7c:36:6e:09:ee:63: 81:ed:e2:3a:cd:ab:6c:87:75:e5:83:b7:7b:de:ae: eb:1b:38:0e:c9:0c:ed:65:71:0a:dc:53:64:59:68: 9a:60:1a:13:e2:cb:1c:84:08:c9:f0:e7:a7:d5:9a: 6d:8e:19:81:8a:6e:d6:75:7e:9c:d6:19:7d:00:3e: 27:77:a6:e7:6e:b4:75:3d:99:0f:3e:0e:72:2c:e8: 57:20:71:b7:90:58:37:7f:d7:04:01:40:5b:7a:25: 92:a9:a9:23:ad:eb:ea:0a:7d:eb:ac:d7:87:05:7d: 45:20:07:ee:21:1e:2e:95:20:8a:b1:ff:35:5a:cb: b7:0e:bc:8c:91:80:5b:6f:d5:30:b7:57:74:ca:3c: ea:f8:bf:55:3c:2d:dc:23:16:89:71:ae:6c:cc:c9: a4:a6:52:1b:41:b5:c6:a6:5e:e4:77:53:4b:b2:d6: 2e:e2:3f:30:db:39:c8:b9:d3:8f:94:85:aa:46:94: bf:b0:ca:4e:21:72:87:2a:ed:a5:6a:52:97:63:2d: a3:94:a8:d1:85:93:23:9a:ac:f7:77:83:22:f5:ff: fc:29:60:a7:d5:4c:5e:6c:b9:30:df:0b:02:70:55: ca:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D5:C9:72:FE:78:5C:8D:8B:E2:95:51:4C:4A:15:0E:79:ED:68:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a20c508a-3c00-3d4f-a9d2-826820614010.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:231d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:65:5c:88:77:00:5c:72:b5:07:9a:46:8d:c9:66:46:f9:1b: 3b:e1:57:32:26:6e:46:89:1e:fd:fd:9b:5b:bd:cd:3f:90:3b: cb:d7:18:46:7e:e0:f3:41:ea:9f:e7:bf:4c:15:df:c9:9a:59: f9:e1:98:af:1b:b0:bd:b0:47:da:49:76:e5:ed:c7:0d:ad:e7: a1:1b:63:76:a2:f1:44:ea:41:d0:83:b5:1a:c3:2a:26:dd:e2: 7c:a3:b2:ba:01:4c:db:8d:82:62:d5:76:13:66:ae:bb:b1:a5: 6a:ee:08:74:ee:a6:9a:19:6f:39:68:6d:73:d8:19:c6:f8:22: 41:17:10:96:6b:ca:80:af:e6:56:0c:e6:92:3d:1a:a7:20:a6: b0:52:af:b6:8c:f4:d2:6c:db:6a:fa:fb:79:c1:32:14:b8:5f: 34:2a:10:2a:22:59:fa:fc:57:2c:46:07:b9:b9:83:7c:cb:8c: 3f:d3:d9:fa:12:43:1e:6b:fc:ce:9c:0e:f1:b2:8b:06:54:ee: 6b:61:1f:4b:9b:96:b3:e8:04:43:20:ca:2d:66:b8:ac:8e:e9: 01:53:90:24:11:af:20:c8:62:f0:98:4e:14:0e:e6:ab:9c:62: 5e:b5:5c:42:f2:70:65:e2:b8:4e:74:a4:64:98:81:fa:a5:bd: 7f:2e:bc:d6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9PCC45TZeKsJ5ng4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk YmU1MmI2NWQtYzMwZi00MzZhLThlZTktOWZmODlkNDY2NTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAaUFXwBwEBUIeutEIXYtpUVKl5/oHN8Nm4J 7mOB7eI6zatsh3Xlg7d73q7rGzgOyQztZXEK3FNkWWiaYBoT4sschAjJ8Oen1Zpt jhmBim7WdX6c1hl9AD4nd6bnbrR1PZkPPg5yLOhXIHG3kFg3f9cEAUBbeiWSqakj revqCn3rrNeHBX1FIAfuIR4ulSCKsf81Wsu3DryMkYBbb9Uwt1d0yjzq+L9VPC3c IxaJca5szMmkplIbQbXGpl7kd1NLstYu4j8w2znIudOPlIWqRpS/sMpOIXKHKu2l alKXYy2jlKjRhZMjmqz3d4Mi9f/8KWCn1UxebLkw3wsCcFXKlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE3VyXL+eFyNi+KVUUxKFQ557WgXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTIwYzUwOGEtM2MwMC0z ZDRmLWE5ZDItODI2ODIwNjE0MDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAyMd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALtlXIh3AFxytQeaRo3JZkb5GzvhVzImbkaJHv39m1u9zT+QO8vX GEZ+4PNB6p/nv0wV38maWfnhmK8bsL2wR9pJduXtxw2t56EbY3ai8UTqQdCDtRrD Kibd4nyjsroBTNuNgmLVdhNmrruxpWruCHTuppoZbzlobXPYGcb4IkEXEJZryoCv 5lYM5pI9GqcgprBSr7aM9NJs22r6+3nBMhS4XzQqECoiWfr8VyxGB7m5g3zLjD/T 2foSQx5r/M6cDvGyiwZU7mthH0ublrPoBEMgyi1muKyO6QFTkCQRryDIYvCYThQO 5qucYl61XELycGXiuE50pGSYgfqlvX8uvNY= -----END CERTIFICATE-----Generated at Tue Sep 29 00:52:37 2026 by rpki-client