$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d02945e9-463a-3968-b978-cf92add53ffc.roa File: d02945e9-463a-3968-b978-cf92add53ffc.roa (raw, json) Hash identifier: h0NchRbxiWteyaJJB0tgsXBCrHH0u2BNhSsdyB0mjzY= Subject key identifier: 9C:66:95:7B:81:B0:D0:1A:F8:2B:8E:25:0D:62:10:C2:23:25:E0:65 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4972E16F6B634536494729C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d02945e9-463a-3968-b978-cf92add53ffc.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 10515 IP address blocks: 2001:503:ba3e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:e1:6f:6b:63:45:36:49:47:29:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b2bda3b7-1d53-4faa-a915-42ccbd81bb98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7f:6d:b8:74:38:b8:f1:09:65:89:e3:ff:65: 8d:2d:b7:35:7c:36:58:61:f8:0c:a4:c3:b4:34:07: a4:b3:0d:00:0c:d1:c3:d6:c5:fa:6d:9a:fe:de:3b: 28:43:1c:1c:3d:80:a0:c9:b1:fb:86:c8:48:66:53: 9b:7f:3e:ac:eb:78:3f:88:7c:e4:37:fd:f9:a6:98: 17:7c:29:65:36:9d:9d:5e:02:d4:0d:8b:e8:af:d6: a7:e7:56:78:b2:5b:56:4a:3c:a8:4c:11:97:21:eb: 6c:31:35:7e:6b:29:fa:c5:a3:8f:93:6a:15:26:b4: 00:e8:db:38:0b:b3:a6:04:85:78:14:cb:cb:00:dc: 53:1c:a8:76:91:01:6d:18:9f:80:04:ba:00:50:7d: 8a:4c:7a:c2:67:00:c8:2c:ac:1c:c0:0a:0f:93:b1: 34:09:93:c8:e8:6e:aa:93:1e:41:74:ee:4d:ec:46: 0a:54:91:63:c5:a0:7d:90:50:97:e8:f3:70:f7:5c: ec:f1:a0:a4:0e:29:61:30:a8:48:d6:8f:9a:01:9f: c1:0a:53:98:d2:b6:65:18:39:8a:70:f8:a0:bd:45: 41:1a:ac:bb:16:46:e4:a7:b8:72:af:b2:6d:ac:6c: dd:ca:e3:2e:16:13:3e:75:b9:f2:99:b2:f8:94:6c: bd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:66:95:7B:81:B0:D0:1A:F8:2B:8E:25:0D:62:10:C2:23:25:E0:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d02945e9-463a-3968-b978-cf92add53ffc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:4c:49:68:61:08:7f:35:b0:80:4a:92:2c:8d:62:e0:cf:d9: 4a:ba:d5:58:11:54:c4:06:18:e2:e9:c7:de:b4:d9:4d:42:ba: fa:5b:fb:8f:02:2d:94:5a:eb:48:d3:09:ea:3d:61:a2:eb:65: e5:62:e2:32:a4:b1:e4:69:4a:17:6a:ca:b2:25:00:a8:c1:e9: d8:76:62:3b:20:13:f2:ec:7b:70:f7:02:86:dc:b4:29:06:33: 46:c4:7e:40:bb:f1:61:82:9d:a4:56:14:9e:b9:44:9f:62:ca: 7d:de:54:82:70:36:38:5e:cb:cb:16:a6:8f:97:d5:2f:24:90: 15:d6:eb:4c:8f:f1:c3:a7:bb:ee:be:a8:44:a6:33:0c:23:d0: 1b:da:59:83:2d:f0:35:67:fe:1a:f9:75:cb:fb:bc:2b:20:d1: 17:95:24:26:5a:08:5d:35:4b:86:63:bd:e4:7a:79:a0:64:9c: 0d:4a:b8:54:b3:60:60:62:52:30:54:9c:80:35:d0:a2:9d:27: c1:cd:29:bd:c7:de:85:86:69:27:63:31:cf:f4:ce:74:7e:ac: 14:90:eb:23:64:f2:50:bc:37:03:da:ea:d4:b0:8b:2f:d7:a7: 18:5f:7f:9d:08:ea:6a:f4:75:eb:37:ac:4b:17:04:36:46:be: d2:50:4a:71 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JcuFva2NFNklHKcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjJiZGEzYjctMWQ1My00ZmFhLWE5MTUtNDJjY2JkODFiYjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArn9tuHQ4uPEJZYnj/2WNLbc1fDZYYfgMpMO0 NAeksw0ADNHD1sX6bZr+3jsoQxwcPYCgybH7hshIZlObfz6s63g/iHzkN/35ppgX fCllNp2dXgLUDYvor9an51Z4sltWSjyoTBGXIetsMTV+ayn6xaOPk2oVJrQA6Ns4 C7OmBIV4FMvLANxTHKh2kQFtGJ+ABLoAUH2KTHrCZwDILKwcwAoPk7E0CZPI6G6q kx5BdO5N7EYKVJFjxaB9kFCX6PNw91zs8aCkDilhMKhI1o+aAZ/BClOY0rZlGDmK cPigvUVBGqy7Fkbkp7hyr7JtrGzdyuMuFhM+dbnymbL4lGy90wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJxmlXuBsNAa+CuOJQ1iEMIjJeBlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDAyOTQ1ZTktNDYzYS0z OTY4LWI5NzgtY2Y5MmFkZDUzZmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA7o+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGRMSWhhCH81sIBKkiyNYuDP2Uq61VgRVMQGGOLpx9602U1Cuvpb +48CLZRa60jTCeo9YaLrZeVi4jKkseRpShdqyrIlAKjB6dh2YjsgE/Lse3D3Aobc tCkGM0bEfkC78WGCnaRWFJ65RJ9iyn3eVIJwNjhey8sWpo+X1S8kkBXW60yP8cOn u+6+qESmMwwj0BvaWYMt8DVn/hr5dcv7vCsg0ReVJCZaCF01S4ZjveR6eaBknA1K uFSzYGBiUjBUnIA10KKdJ8HNKb3H3oWGaSdjMc/0znR+rBSQ6yNk8lC8NwPa6tSw iy/Xpxhff50I6mr0des3rEsXBDZGvtJQSnE= -----END CERTIFICATE-----Generated at Tue Sep 29 00:28:44 2026 by rpki-client