$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddf0256d-f4c8-3c11-81f8-a2da66601315.roa File: ddf0256d-f4c8-3c11-81f8-a2da66601315.roa (raw, json) Hash identifier: eP+fgNZKVBEz5pgMotxWpXNJ5grnxWaO05YcrKftlNk= Subject key identifier: 41:EA:8E:62:36:95:FE:C6:71:53:04:20:04:06:32:83:D5:47:C3:7F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F3E4805F1ABA63D3CBB9459D0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddf0256d-f4c8-3c11-81f8-a2da66601315.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 397209 IP address blocks: 2001:503:39c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:48:05:f1:ab:a6:3d:3c:bb:94:59:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=b85a4325-3220-4fa7-a186-2a75649ade8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:08:e3:e8:53:ef:49:be:eb:e7:f2:dd:28:7e: 1c:38:ae:63:9c:4c:ee:5d:89:1b:21:f9:34:3c:c0: e2:50:d8:4e:05:9f:03:5c:57:02:84:0a:75:9d:49: cf:75:b9:12:15:ff:12:6c:8e:15:af:d9:44:c8:f7: d8:3d:81:18:af:16:f3:f2:d8:c1:9a:ef:a1:8c:73: e0:95:ca:27:a4:eb:60:93:90:69:82:c1:1c:36:30: 63:5e:7f:94:57:3f:e5:8f:cd:fd:01:74:9d:55:46: b4:e1:46:16:f0:86:a2:4c:17:0a:aa:a0:8a:2b:d4: 7c:2c:e9:75:75:66:32:13:0a:23:c6:4a:02:fe:ae: 5f:d2:4e:16:eb:90:22:17:4c:e5:be:be:27:ae:87: 87:e5:cf:b5:c6:14:5e:56:f7:da:12:b3:e7:c3:61: 46:1b:4c:bc:06:67:fc:96:a9:67:e1:1e:f5:5f:66: ed:f4:89:84:0f:b7:c0:d0:fc:02:cd:bb:10:f2:3c: ef:88:fd:0d:5e:95:26:64:22:00:a4:50:d7:ad:d4: f3:15:5f:63:d3:75:2f:d0:5d:c5:b8:67:aa:04:3e: 4d:14:7c:39:6d:ee:0e:f0:2c:92:6c:ad:12:61:c4: f1:b5:32:12:2f:cb:06:8a:ed:4e:6d:61:3f:b5:e3: c2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:EA:8E:62:36:95:FE:C6:71:53:04:20:04:06:32:83:D5:47:C3:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddf0256d-f4c8-3c11-81f8-a2da66601315.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:39c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:86:56:13:b7:02:9a:08:0c:b6:7f:9b:05:90:82:95:b8:93: bc:09:46:bb:32:d5:54:39:3b:8a:34:06:c2:f5:26:38:54:e8: bd:62:11:6e:db:2c:21:ed:d2:e8:93:bc:6d:2f:a3:88:28:9a: a7:c3:39:1a:fd:92:b4:1d:6a:82:38:39:b5:24:9e:43:ba:5e: 54:64:97:85:2d:2b:73:af:bc:0f:65:5e:23:07:34:81:d8:00: 56:2d:d1:2a:b2:0f:0d:51:80:17:28:a5:78:0b:b6:d4:ca:6a: 84:57:4c:0e:2a:58:c3:53:d3:3d:7b:29:77:c1:12:74:47:56: 0f:fd:57:70:c4:f3:32:dc:1a:0f:9a:53:a0:de:30:92:e3:c5: ee:66:ba:79:8c:d1:5a:d7:08:8b:fc:5c:4c:be:d4:59:a8:84: 61:2f:29:cb:40:46:2d:10:3e:66:34:81:b1:27:93:0f:2a:86: 25:dd:60:28:3d:72:5c:e8:5c:9e:8d:79:65:dd:af:c1:2b:38: ab:f3:0e:75:d0:be:6d:ad:3d:2d:4d:0f:11:e1:99:1a:b1:f8: 43:d2:b3:82:72:6b:b2:bd:6a:1b:c1:a9:d4:00:1b:bd:61:e9: e4:e8:2c:a0:f7:13:66:4d:8e:5a:73:70:96:bc:b4:40:48:8c: 92:ce:06:a2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8+SAXxq6Y9PLuUWdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk Yjg1YTQzMjUtMzIyMC00ZmE3LWExODYtMmE3NTY0OWFkZThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQjj6FPvSb7r5/LdKH4cOK5jnEzuXYkbIfk0 PMDiUNhOBZ8DXFcChAp1nUnPdbkSFf8SbI4Vr9lEyPfYPYEYrxbz8tjBmu+hjHPg lconpOtgk5BpgsEcNjBjXn+UVz/lj839AXSdVUa04UYW8IaiTBcKqqCKK9R8LOl1 dWYyEwojxkoC/q5f0k4W65AiF0zlvr4nroeH5c+1xhReVvfaErPnw2FGG0y8Bmf8 lqln4R71X2bt9ImED7fA0PwCzbsQ8jzviP0NXpUmZCIApFDXrdTzFV9j03Uv0F3F uGeqBD5NFHw5be4O8CySbK0SYcTxtTISL8sGiu1ObWE/tePC8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEHqjmI2lf7GcVMEIAQGMoPVR8N/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGRmMDI1NmQtZjRjOC0z YzExLTgxZjgtYTJkYTY2NjAxMzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAznB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFWGVhO3ApoIDLZ/mwWQgpW4k7wJRrsy1VQ5O4o0BsL1JjhU6L1i EW7bLCHt0uiTvG0vo4gomqfDORr9krQdaoI4ObUknkO6XlRkl4UtK3OvvA9lXiMH NIHYAFYt0SqyDw1RgBcopXgLttTKaoRXTA4qWMNT0z17KXfBEnRHVg/9V3DE8zLc Gg+aU6DeMJLjxe5munmM0VrXCIv8XEy+1FmohGEvKctARi0QPmY0gbEnkw8qhiXd YCg9clzoXJ6NeWXdr8ErOKvzDnXQvm2tPS1NDxHhmRqx+EPSs4Jya7K9ahvBqdQA G71h6eToLKD3E2ZNjlpzcJa8tEBIjJLOBqI= -----END CERTIFICATE-----Generated at Sat Oct 3 20:41:26 2026 by rpki-client