$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db638a98-8c91-3c07-8d1f-b5d48341e72b.roa File: db638a98-8c91-3c07-8d1f-b5d48341e72b.roa (raw, json) Hash identifier: VB1aij43MJCCPAAgDxxukHSrhWiLRp0H3qi9aMg8kNI= Subject key identifier: 15:F8:81:86:5B:5E:16:0B:BC:CE:03:9C:F6:B6:AD:1A:83:6D:18:5C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F549DA32FF03A7EFE511B5E80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db638a98-8c91-3c07-8d1f-b5d48341e72b.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 396583 IP address blocks: 2001:503:d2d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:a3:2f:f0:3a:7e:fe:51:1b:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=216464f9-7aca-45f1-aa8c-7e108be3d832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7c:9f:64:3a:c6:c2:2b:33:91:f7:62:2b:7b: 2d:ce:67:59:07:70:ca:59:fb:9d:23:0e:01:d4:7e: 2f:81:9f:6c:3e:fc:1d:0c:94:7c:c0:c6:86:3b:b4: 9a:c1:8b:ba:a5:5e:be:9b:5d:be:cc:e8:d6:5e:82: f0:49:e0:26:8f:99:1e:c3:d7:0a:ed:01:73:e5:9e: b2:1c:d0:a5:0f:8e:ca:d5:14:32:ab:47:d7:84:44: 89:dd:a0:34:6b:ea:cf:70:cd:af:b1:d1:49:64:c8: 9b:c2:23:5f:58:3a:a9:0b:92:96:4d:cb:93:cd:6b: 01:43:8e:4b:bc:57:67:0c:73:42:52:2c:93:ee:ff: 29:da:e5:81:18:83:8e:c9:f8:04:20:42:0c:46:4b: 76:2f:05:3e:4d:29:72:94:6c:21:33:b6:58:49:36: 0b:db:3b:93:17:dd:1d:8e:2d:41:42:a9:ef:9a:d0: 64:ae:79:23:09:26:62:5e:c2:c2:51:30:48:7b:df: 84:7d:c7:a4:c4:da:4a:c9:42:70:98:09:5d:32:12: bd:58:91:e5:a9:77:e3:0b:eb:fd:1b:7f:0c:01:70: df:e9:08:4d:1d:01:7a:bd:79:3a:09:d6:04:a1:ed: 3c:02:9c:3a:8b:7f:50:c8:5a:0b:17:f4:ff:34:7b: 99:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F8:81:86:5B:5E:16:0B:BC:CE:03:9C:F6:B6:AD:1A:83:6D:18:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db638a98-8c91-3c07-8d1f-b5d48341e72b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:d2d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:96:79:eb:38:e9:17:34:1c:b2:ce:b0:21:cc:00:71:41:49: 58:b7:31:a6:6c:f9:01:ef:c6:9e:09:a1:52:ce:1b:fd:23:36: bc:f9:e2:d8:58:6b:8f:20:a6:87:23:9c:18:67:bc:bb:70:d7: b7:1d:e4:d9:08:d2:9f:d4:ed:70:d1:a6:da:b2:0a:ad:16:ca: f5:3e:8d:19:8c:ef:2d:4d:db:55:da:58:d7:7a:02:af:7f:38: d7:56:bc:dc:0e:a2:11:aa:84:6b:94:7f:bc:a8:dc:5e:af:09: dc:47:0f:1e:c3:10:96:39:2a:6e:c7:c3:6b:1e:a8:96:4c:58: 0d:29:9c:da:aa:33:c1:df:1c:d9:65:da:b6:c7:0f:30:e8:c1: f6:21:0f:e0:43:14:0f:25:72:c5:64:ce:eb:2a:29:e8:06:1b: 98:ca:4e:ea:0b:4f:ca:2b:ae:bc:5b:39:c5:3e:65:54:be:b6: d7:04:79:ca:2b:9b:a9:46:ef:50:44:ad:2d:59:fd:c9:dd:02: c1:0f:c9:fc:ad:95:69:10:1b:be:ab:1a:e6:ad:f9:95:c5:3e: c0:c6:1c:bf:f1:14:fa:d7:77:a0:35:8e:56:4a:66:2f:46:d3: 54:ad:98:d9:1f:07:b7:90:fa:a5:b8:32:75:3b:35:67:b8:5e: a5:a4:f1:17 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9UnaMv8Dp+/lEbXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk MjE2NDY0ZjktN2FjYS00NWYxLWFhOGMtN2UxMDhiZTNkODMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXyfZDrGwiszkfdiK3stzmdZB3DKWfudIw4B 1H4vgZ9sPvwdDJR8wMaGO7SawYu6pV6+m12+zOjWXoLwSeAmj5kew9cK7QFz5Z6y HNClD47K1RQyq0fXhESJ3aA0a+rPcM2vsdFJZMibwiNfWDqpC5KWTcuTzWsBQ45L vFdnDHNCUiyT7v8p2uWBGIOOyfgEIEIMRkt2LwU+TSlylGwhM7ZYSTYL2zuTF90d ji1BQqnvmtBkrnkjCSZiXsLCUTBIe9+EfcekxNpKyUJwmAldMhK9WJHlqXfjC+v9 G38MAXDf6QhNHQF6vXk6CdYEoe08Apw6i39QyFoLF/T/NHuZYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBX4gYZbXhYLvM4DnPa2rRqDbRhcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGI2MzhhOTgtOGM5MS0z YzA3LThkMWYtYjVkNDgzNDFlNzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAw0t MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAyWees46Rc0HLLOsCHMAHFBSVi3MaZs+QHvxp4JoVLOG/0jNrz5 4thYa48gpocjnBhnvLtw17cd5NkI0p/U7XDRptqyCq0WyvU+jRmM7y1N21XaWNd6 Aq9/ONdWvNwOohGqhGuUf7yo3F6vCdxHDx7DEJY5Km7Hw2seqJZMWA0pnNqqM8Hf HNll2rbHDzDowfYhD+BDFA8lcsVkzusqKegGG5jKTuoLT8orrrxbOcU+ZVS+ttcE ecorm6lG71BErS1Z/cndAsEPyfytlWkQG76rGuat+ZXFPsDGHL/xFPrXd6A1jlZK Zi9G01StmNkfB7eQ+qW4MnU7NWe4XqWk8Rc= -----END CERTIFICATE-----Generated at Wed Sep 30 19:44:47 2026 by rpki-client