$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3f0d963-68ea-3872-81e3-914cd5c02a95.roa File: c3f0d963-68ea-3872-81e3-914cd5c02a95.roa (raw, json) Hash identifier: zTHykxEhwiij+IYg8GU3qFRROACpGiS1jCpStc1iJIA= Subject key identifier: 0A:AD:11:9A:1F:DD:02:36:3E:15:E8:BC:96:99:63:82:D4:2F:74:67 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F119D013ACF79132C919E7A60 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3f0d963-68ea-3872-81e3-914cd5c02a95.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 397206 IP address blocks: 2001:502:8cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:01:3a:cf:79:13:2c:91:9e:7a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=152f3898-4e39-477d-a9ef-ac7c2e2d0057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bf:c8:5f:42:4e:7c:4a:13:fe:f9:a6:93:96: ff:20:fb:1f:31:b1:94:a3:78:71:17:bb:d7:73:f4: 0a:1d:7d:b1:0f:37:98:ff:b6:13:02:c0:6d:7e:fa: c5:9a:fd:e7:45:54:cb:ea:8d:37:3f:f3:62:78:e7: b4:58:45:be:0c:10:ab:95:c8:97:41:03:03:37:9f: e4:b3:c2:29:75:ae:8f:27:b8:cd:af:4a:61:53:db: 87:32:e2:84:79:eb:b8:9c:6a:62:00:13:e8:01:a1: 7d:63:34:48:1a:51:e9:98:7d:e6:24:5b:5b:17:c6: 6c:4f:57:fa:ae:8a:c6:7f:2d:96:ee:4a:f7:dd:20: fd:7c:f3:b4:b2:de:4c:77:b1:ec:2f:48:23:31:2f: 8d:41:8a:8f:dc:da:7c:06:20:1b:8d:43:aa:8a:b0: 16:33:77:79:c8:7b:91:24:52:c1:e1:ed:a1:75:48: 3e:96:3b:82:5c:6b:79:d0:8c:ab:23:e6:d3:d1:05: 2a:e0:bd:1d:38:d7:fb:f7:8f:f8:8c:ec:4c:aa:45: 0c:4f:27:aa:ab:e7:43:b7:0a:e0:2e:f9:71:2e:ac: 26:ec:73:9e:70:cb:12:98:1c:21:a4:b7:2d:19:81: 34:7f:47:6c:7b:6f:06:e4:0d:70:1c:9d:ed:95:0e: 6f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:AD:11:9A:1F:DD:02:36:3E:15:E8:BC:96:99:63:82:D4:2F:74:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3f0d963-68ea-3872-81e3-914cd5c02a95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:97:f1:20:bc:7e:ad:ad:6a:4b:1b:59:58:39:e9:ba:0b:3e: 40:ac:e2:2b:ce:5d:14:4e:b3:cb:96:05:35:cc:db:64:cd:bc: f7:08:d9:dc:48:1b:33:72:ec:67:44:90:9e:79:e5:46:d1:46: 31:08:67:7a:44:5d:86:ba:c5:95:0c:58:db:00:81:d8:47:91: 5a:e8:04:97:83:83:55:0b:51:5f:90:8d:7f:40:d1:22:b2:a9: 61:67:31:6b:dc:f9:75:02:d6:91:1c:3a:88:8c:d0:10:97:e9: b4:8e:ba:8e:2b:59:d4:79:b7:cd:3d:c4:25:2c:a6:b0:01:48: d8:11:27:9d:cd:ed:27:33:9f:91:3b:75:1a:68:34:e8:c6:09: ab:42:a4:08:15:52:f2:4b:c3:f8:bb:8a:38:81:6d:c8:66:d2: aa:d0:22:b7:79:8c:15:9f:d0:93:30:04:b2:7d:1e:be:cf:fe: e6:cd:23:5b:b6:dd:4d:b4:23:d8:7b:59:b9:c0:e6:fd:f9:56: be:8f:f7:26:6b:63:34:a7:ac:91:e7:97:67:99:58:5b:8f:47: 5a:ee:1b:90:f0:38:d0:9c:cb:fe:cf:4b:ff:a7:58:e4:c2:0b: bf:8f:29:49:70:cc:53:ce:a0:3e:07:2d:c5:b8:d4:84:51:b1: a9:75:17:27 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8RnQE6z3kTLJGeemAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MTUyZjM4OTgtNGUzOS00NzdkLWE5ZWYtYWM3YzJlMmQwMDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7/IX0JOfEoT/vmmk5b/IPsfMbGUo3hxF7vX c/QKHX2xDzeY/7YTAsBtfvrFmv3nRVTL6o03P/NieOe0WEW+DBCrlciXQQMDN5/k s8Ipda6PJ7jNr0phU9uHMuKEeeu4nGpiABPoAaF9YzRIGlHpmH3mJFtbF8ZsT1f6 rorGfy2W7kr33SD9fPO0st5Md7HsL0gjMS+NQYqP3Np8BiAbjUOqirAWM3d5yHuR JFLB4e2hdUg+ljuCXGt50IyrI+bT0QUq4L0dONf794/4jOxMqkUMTyeqq+dDtwrg LvlxLqwm7HOecMsSmBwhpLctGYE0f0dse28G5A1wHJ3tlQ5vkwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAqtEZof3QI2PhXovJaZY4LUL3RnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzNmMGQ5NjMtNjhlYS0z ODcyLTgxZTMtOTE0Y2Q1YzAyYTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAgjM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ+X8SC8fq2taksbWVg56boLPkCs4ivOXRROs8uWBTXM22TNvPcI 2dxIGzNy7GdEkJ555UbRRjEIZ3pEXYa6xZUMWNsAgdhHkVroBJeDg1ULUV+QjX9A 0SKyqWFnMWvc+XUC1pEcOoiM0BCX6bSOuo4rWdR5t809xCUsprABSNgRJ53N7Scz n5E7dRpoNOjGCatCpAgVUvJLw/i7ijiBbchm0qrQIrd5jBWf0JMwBLJ9Hr7P/ubN I1u23U20I9h7WbnA5v35Vr6P9yZrYzSnrJHnl2eZWFuPR1ruG5DwONCcy/7PS/+n WOTCC7+PKUlwzFPOoD4HLcW41IRRsal1Fyc= -----END CERTIFICATE-----Generated at Sun Sep 27 21:48:21 2026 by rpki-client