$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be78e87d-9377-3e2d-b68b-ad8fdfeb84e1.roa File: be78e87d-9377-3e2d-b68b-ad8fdfeb84e1.roa (raw, json) Hash identifier: KomM+oOu/4qCO/+xZZsGsAlAIN0HRIYHS6TjKehVE6o= Subject key identifier: FA:8F:EA:3B:0A:B8:7A:11:A4:90:71:22:91:EC:0B:43:6C:A7:D8:F6 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F498A68D63CA69D6548C00780 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be78e87d-9377-3e2d-b68b-ad8fdfeb84e1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396549 IP address blocks: 2001:503:d414::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:68:d6:3c:a6:9d:65:48:c0:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=78da5086-3d96-40b4-b003-48c7fb5c069f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c0:b3:9e:67:ab:89:47:57:64:4e:ba:52:ed: 67:fe:cb:03:0f:cd:7a:e2:dd:a5:a6:9e:ee:ea:75: c6:22:a2:23:ee:67:af:3c:e3:dd:e5:75:bf:d8:24: ea:4b:4a:7f:1e:b9:2d:58:85:e1:23:95:17:62:57: 5a:c4:94:92:63:0e:dc:1f:de:38:72:fd:82:65:3f: 77:4f:78:9f:ab:ff:75:7e:c4:af:0e:4b:cb:91:1f: 39:40:cc:ba:41:76:01:83:4b:52:15:f5:8e:11:73: 5c:34:0d:36:ec:5a:b0:d4:d3:9f:0f:2a:5a:c6:63: 08:55:bf:d2:e1:a0:c1:77:94:a0:75:48:31:8c:15: 79:71:ba:d3:65:84:31:9a:d9:ea:79:85:fe:09:cc: b2:3c:4b:b7:f5:6b:56:36:0a:8b:7b:34:04:d3:c3: 74:15:fe:2e:4f:d7:fb:47:2d:2b:45:c3:fa:a1:bf: 11:bb:85:ba:3e:b7:36:55:53:a9:48:02:c9:df:5d: 35:07:8d:cc:25:d5:35:a4:3a:5e:37:aa:6d:51:36: 53:db:2c:35:3e:eb:c5:50:b5:58:22:e9:3c:e0:1f: 97:59:3d:ee:c5:06:2b:d9:03:ff:3b:60:37:33:a0: af:6d:f4:b6:64:5f:48:b7:d8:dc:68:f2:f3:21:08: d9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:8F:EA:3B:0A:B8:7A:11:A4:90:71:22:91:EC:0B:43:6C:A7:D8:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be78e87d-9377-3e2d-b68b-ad8fdfeb84e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:d414::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:fc:d4:cf:74:af:e2:d8:4a:76:77:3f:c6:f3:1e:b3:55:28: 1c:0e:fd:da:29:8a:89:97:d8:3a:43:88:4e:18:65:70:99:85: d2:87:45:c7:4a:e2:37:6f:3b:18:5a:51:09:55:ed:0a:39:19: a7:95:3f:a6:e4:13:fc:91:bf:85:95:10:7e:3d:1f:3a:90:fc: d7:2b:42:ca:3a:5b:f4:e6:7f:98:d2:80:0b:2e:b0:fb:9f:19: 94:e3:ab:5d:98:0f:ee:34:6a:1f:ba:fa:1e:62:fe:11:71:57: 43:46:aa:db:7a:d1:e6:0e:be:71:2c:59:cf:3d:8e:b7:4f:39: 1c:0f:10:7f:d7:58:3d:50:da:bb:95:99:f4:ec:fa:77:3b:22: 2e:77:98:28:87:21:01:0a:12:36:0a:9e:df:53:65:cd:6c:e6: da:a2:57:47:1c:dc:f6:4c:9c:41:30:8e:0f:04:bd:08:bd:ae: 05:a3:8c:c8:04:51:52:49:7d:4b:4d:4f:d3:a5:bc:c4:ab:d5: 31:0a:83:b9:0a:c4:9b:5b:c4:9f:88:8b:92:39:36:e7:28:11: 78:7f:06:af:06:76:40:6e:10:9d:0c:ae:e0:71:f1:f6:c4:a5: 33:49:4a:91:2b:e2:1d:d4:79:3a:7e:b7:2b:ad:f8:cb:de:03: e1:2e:b0:99 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JimjWPKadZUjAB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzhkYTUwODYtM2Q5Ni00MGI0LWIwMDMtNDhjN2ZiNWMwNjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5sCznmeriUdXZE66Uu1n/ssDD8164t2lpp7u 6nXGIqIj7mevPOPd5XW/2CTqS0p/HrktWIXhI5UXYldaxJSSYw7cH944cv2CZT93 T3ifq/91fsSvDkvLkR85QMy6QXYBg0tSFfWOEXNcNA027Fqw1NOfDypaxmMIVb/S 4aDBd5SgdUgxjBV5cbrTZYQxmtnqeYX+CcyyPEu39WtWNgqLezQE08N0Ff4uT9f7 Ry0rRcP6ob8Ru4W6Prc2VVOpSALJ3101B43MJdU1pDpeN6ptUTZT2yw1PuvFULVY Iuk84B+XWT3uxQYr2QP/O2A3M6CvbfS2ZF9It9jcaPLzIQjZvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPqP6jsKuHoRpJBxIpHsC0Nsp9j2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmU3OGU4N2QtOTM3Ny0z ZTJkLWI2OGItYWQ4ZmRmZWI4NGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA9QU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALf81M90r+LYSnZ3P8bzHrNVKBwO/dopiomX2DpDiE4YZXCZhdKH RcdK4jdvOxhaUQlV7Qo5GaeVP6bkE/yRv4WVEH49HzqQ/NcrQso6W/Tmf5jSgAsu sPufGZTjq12YD+40ah+6+h5i/hFxV0NGqtt60eYOvnEsWc89jrdPORwPEH/XWD1Q 2ruVmfTs+nc7Ii53mCiHIQEKEjYKnt9TZc1s5tqiV0cc3PZMnEEwjg8EvQi9rgWj jMgEUVJJfUtNT9OlvMSr1TEKg7kKxJtbxJ+Ii5I5NucoEXh/Bq8GdkBuEJ0MruBx 8fbEpTNJSpEr4h3UeTp+tyut+MveA+EusJk= -----END CERTIFICATE-----Generated at Sun Sep 27 08:49:00 2026 by rpki-client