$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a358c0ff-da2d-31a5-a6d2-bd4d03d63a3b.roa File: a358c0ff-da2d-31a5-a6d2-bd4d03d63a3b.roa (raw, json) Hash identifier: yMj5siNMr86nxxk0jlDTLPLkrI02TkHiSD7ZRBv6yFY= Subject key identifier: CB:D5:0C:E1:45:59:DE:B6:90:51:15:D3:21:BA:E7:FA:77:8A:EE:71 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F49739727D45DC04B59BF0700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a358c0ff-da2d-31a5-a6d2-bd4d03d63a3b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 25485 IP address blocks: 2001:503:d414::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:97:27:d4:5d:c0:4b:59:bf:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6d9dc525-c030-41c9-8f71-fc14af0ee2aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f3:42:99:03:e1:e9:e4:f6:c5:ec:b0:53:2f: fb:b5:d4:30:66:ba:9e:de:a8:9b:b6:fe:1a:68:34: 72:45:ed:fd:b0:63:f8:37:1d:94:7a:68:8f:42:6f: 6a:80:1a:d0:32:e3:21:cc:91:62:f0:9e:5b:26:2f: 68:0c:db:55:c1:78:56:53:79:6d:ad:b1:60:d7:bc: 5c:b9:95:ad:1f:a2:38:ad:28:35:41:be:dc:0a:17: 60:0a:57:db:4c:97:ef:b5:c4:9e:0e:0e:b6:a9:8b: dd:ed:cd:24:c2:83:90:40:ac:83:82:95:38:4d:b4: 1f:7d:5c:d9:f5:6c:50:e0:20:70:a3:99:9f:2b:cf: 6d:04:ac:88:a8:6b:22:68:97:66:ae:a9:ad:3e:f5: 03:2c:9d:4d:c5:37:69:04:ed:ab:68:bd:10:78:ce: c3:ca:fb:1d:07:c7:d1:a6:13:95:3d:51:fe:41:d6: 7d:af:9f:06:bc:58:af:a4:d0:75:6b:c5:da:6b:ef: 37:4d:a5:51:f3:a3:be:24:c4:26:92:8c:8d:7b:01: 37:8f:89:f4:7d:62:c5:45:23:af:28:98:25:6a:ec: 34:f6:75:07:f6:b3:41:46:ff:7c:b5:9c:2d:55:0e: e3:1a:ef:8e:f7:09:39:d3:b2:55:32:08:63:42:06: 5b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D5:0C:E1:45:59:DE:B6:90:51:15:D3:21:BA:E7:FA:77:8A:EE:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a358c0ff-da2d-31a5-a6d2-bd4d03d63a3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:d414::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:39:e3:60:66:4b:22:50:8c:b4:01:49:a8:67:1f:d2:66:34: 95:9e:fa:66:7d:c6:29:d9:7c:f6:01:ef:9f:42:18:10:2c:54: cf:05:15:68:02:4b:c0:4b:ef:4a:a0:fa:ad:77:f4:67:9a:20: 6e:f7:12:05:1c:3c:03:6f:2e:41:ab:25:cc:76:95:9a:59:47: 4e:b8:5b:2b:de:de:d1:55:04:67:5d:d8:81:8e:50:34:43:49: 06:f4:06:76:c5:79:50:cb:6d:18:62:97:4e:95:78:c3:01:49: b3:3b:d8:8c:7a:ea:46:84:52:03:ab:34:f5:c5:a2:90:dc:65: 47:1f:e6:ce:ab:eb:6c:19:95:0e:68:a4:45:17:10:fa:fa:ab: fb:7e:df:fe:80:db:44:ca:83:8b:29:80:a0:78:ad:96:f7:48: 06:be:cf:6c:38:55:7d:1d:85:ae:10:b8:73:a4:39:6c:97:6e: df:24:5b:59:f1:08:55:23:5e:c0:73:4f:33:df:9b:a9:07:74: b3:83:b1:53:63:d4:83:f7:c2:25:2f:25:db:45:45:5e:58:24: 60:01:0e:ae:20:b1:ba:11:1e:d8:b0:c5:e1:16:dd:be:f8:11: 46:92:c9:1d:77:b4:d5:d0:9b:b7:c1:13:b1:c9:a9:48:60:3f: ec:fd:f4:25 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc5cn1F3AS1m/BwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmQ5ZGM1MjUtYzAzMC00MWM5LThmNzEtZmMxNGFmMGVlMmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPNCmQPh6eT2xeywUy/7tdQwZrqe3qibtv4a aDRyRe39sGP4Nx2UemiPQm9qgBrQMuMhzJFi8J5bJi9oDNtVwXhWU3ltrbFg17xc uZWtH6I4rSg1Qb7cChdgClfbTJfvtcSeDg62qYvd7c0kwoOQQKyDgpU4TbQffVzZ 9WxQ4CBwo5mfK89tBKyIqGsiaJdmrqmtPvUDLJ1NxTdpBO2raL0QeM7DyvsdB8fR phOVPVH+QdZ9r58GvFivpNB1a8Xaa+83TaVR86O+JMQmkoyNewE3j4n0fWLFRSOv KJglauw09nUH9rNBRv98tZwtVQ7jGu+O9wk507JVMghjQgZbOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMvVDOFFWd62kFEV0yG65/p3iu5xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTM1OGMwZmYtZGEyZC0z MWE1LWE2ZDItYmQ0ZDAzZDYzYTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA9QU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHw542BmSyJQjLQBSahnH9JmNJWe+mZ9xinZfPYB759CGBAsVM8F FWgCS8BL70qg+q139GeaIG73EgUcPANvLkGrJcx2lZpZR064Wyve3tFVBGdd2IGO UDRDSQb0BnbFeVDLbRhil06VeMMBSbM72Ix66kaEUgOrNPXFopDcZUcf5s6r62wZ lQ5opEUXEPr6q/t+3/6A20TKg4spgKB4rZb3SAa+z2w4VX0dha4QuHOkOWyXbt8k W1nxCFUjXsBzTzPfm6kHdLODsVNj1IP3wiUvJdtFRV5YJGABDq4gsboRHtiwxeEW 3b74EUaSyR13tNXQm7fBE7HJqUhgP+z99CU= -----END CERTIFICATE-----Generated at Sat Sep 26 13:51:36 2026 by rpki-client