$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbd4d28b-129a-351d-b45d-6975b7d14724.roa File: bbd4d28b-129a-351d-b45d-6975b7d14724.roa (raw, json) Hash identifier: t7cm4yiaQplfUsDUjCOt3VoaG5YEFh9GsNFda29Ma9s= Subject key identifier: 5D:C8:F8:68:E7:EA:A2:FA:CB:01:89:60:E9:5A:D0:77:92:A0:FD:0E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4972FA19CF86F18FD77CF940 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbd4d28b-129a-351d-b45d-6975b7d14724.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20172 IP address blocks: 2001:503:ba3e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:fa:19:cf:86:f1:8f:d7:7c:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3d6849fe-3bfc-47ea-b21b-13449b012dc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e9:5e:51:ca:a8:66:0c:ab:31:aa:48:78:90: 52:84:b0:e5:af:93:1c:be:15:21:58:db:6f:76:7e: 32:6c:ae:07:11:7d:bf:82:75:6f:ae:27:af:06:05: 68:b9:66:1d:69:93:20:e0:8c:75:43:68:3d:fc:e7: 4d:cf:e0:8e:68:8a:ff:62:d6:8b:86:58:b6:ab:0a: 22:cd:23:ac:01:34:0d:a9:ac:95:e4:7f:3c:40:39: 98:d2:bd:d0:21:d0:87:07:40:47:8a:aa:07:35:56: a2:d6:5a:bc:3b:25:7f:15:8b:c6:3b:65:4c:9b:a8: 81:49:47:0d:ee:ed:40:c4:b3:3d:24:78:c0:b7:24: 03:32:ba:ba:88:c2:f4:87:46:3a:c0:f6:81:68:a0: 74:59:f7:f9:b1:20:32:60:42:00:5d:05:32:b0:a0: f3:db:a1:76:28:23:26:2e:13:89:4b:27:3c:e7:5f: 49:4b:82:f7:86:36:f8:9e:47:5d:64:80:b8:94:c9: 9e:fe:09:8e:9c:50:f6:c6:85:d2:19:b6:a6:69:ab: 54:3d:48:b1:c8:4a:77:17:8e:6b:48:39:f9:07:cb: 4e:12:56:65:0c:f7:a7:f1:76:6b:06:0e:ac:61:b1: 9e:00:97:38:ea:be:ee:e2:b0:7d:fc:59:86:32:57: ec:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C8:F8:68:E7:EA:A2:FA:CB:01:89:60:E9:5A:D0:77:92:A0:FD:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbd4d28b-129a-351d-b45d-6975b7d14724.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:59:87:35:00:0e:25:23:7b:cc:37:0e:ba:6f:50:49:71:6a: 0c:9b:24:75:ea:37:6a:b7:87:27:68:5a:80:76:76:f5:0e:50: 61:19:2d:f4:6d:fd:45:7a:89:8d:58:a9:b5:95:cd:36:f4:5f: 71:35:8c:57:10:d2:c0:4c:a0:e3:93:18:ce:35:0c:de:6c:e1: 0c:c5:c8:61:f2:39:55:0d:a9:f2:28:09:b2:9f:79:ff:b1:dc: 5a:89:72:33:b9:e8:17:ac:dc:d7:85:8e:e5:21:1e:60:bc:c2: c6:5a:f1:08:bf:0e:df:5c:ee:d9:01:93:01:5e:75:31:a8:52: 3e:a2:cb:c0:db:d0:5f:d8:79:8b:63:9a:62:7c:07:9b:58:e5: 76:bc:e1:e3:6a:87:a6:1c:7f:8c:1e:42:ca:18:63:1f:8e:85: a5:a1:36:0c:ce:31:8b:ca:d9:3c:5f:60:b4:28:b2:67:9c:cb: 92:de:a4:98:1e:41:2d:f4:8b:e6:7b:47:dd:7f:38:91:df:e5: 83:17:8c:72:0c:ae:3e:4e:76:ec:1d:76:c9:9d:25:68:ef:6a: d8:d7:a3:6c:a8:2f:bb:48:1a:6e:e5:b7:de:50:61:ea:b9:fd: da:d5:ba:e1:fc:9c:17:15:7c:57:91:20:f3:ba:1a:7c:32:d9: b0:84:9a:28 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JcvoZz4bxj9d8+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2Q2ODQ5ZmUtM2JmYy00N2VhLWIyMWItMTM0NDliMDEyZGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuleUcqoZgyrMapIeJBShLDlr5McvhUhWNtv dn4ybK4HEX2/gnVvrievBgVouWYdaZMg4Ix1Q2g9/OdNz+COaIr/YtaLhli2qwoi zSOsATQNqayV5H88QDmY0r3QIdCHB0BHiqoHNVai1lq8OyV/FYvGO2VMm6iBSUcN 7u1AxLM9JHjAtyQDMrq6iML0h0Y6wPaBaKB0Wff5sSAyYEIAXQUysKDz26F2KCMm LhOJSyc8519JS4L3hjb4nkddZIC4lMme/gmOnFD2xoXSGbamaatUPUixyEp3F45r SDn5B8tOElZlDPen8XZrBg6sYbGeAJc46r7u4rB9/FmGMlfsRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF3I+Gjn6qL6ywGJYOla0HeSoP0OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmJkNGQyOGItMTI5YS0z NTFkLWI0NWQtNjk3NWI3ZDE0NzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA7o+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJlZhzUADiUje8w3DrpvUElxagybJHXqN2q3hydoWoB2dvUOUGEZ LfRt/UV6iY1YqbWVzTb0X3E1jFcQ0sBMoOOTGM41DN5s4QzFyGHyOVUNqfIoCbKf ef+x3FqJcjO56Bes3NeFjuUhHmC8wsZa8Qi/Dt9c7tkBkwFedTGoUj6iy8Db0F/Y eYtjmmJ8B5tY5Xa84eNqh6Ycf4weQsoYYx+OhaWhNgzOMYvK2TxfYLQosmecy5Le pJgeQS30i+Z7R91/OJHf5YMXjHIMrj5OduwddsmdJWjvatjXo2yoL7tIGm7lt95Q Yeq5/drVuuH8nBcVfFeRIPO6Gnwy2bCEmig= -----END CERTIFICATE-----Generated at Fri Sep 25 16:40:50 2026 by rpki-client