$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/defbb7ba-d2cb-3482-8f14-be1d98b2856a.roa File: defbb7ba-d2cb-3482-8f14-be1d98b2856a.roa (raw, json) Hash identifier: 31i2OUlVnL06TmsmmjUVJhK650+zYjOtLJUTpvB65M4= Subject key identifier: 57:3C:A4:DF:0E:CE:A0:0E:EB:51:B0:D9:15:1C:D1:5B:EB:E4:0F:C5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F497476E37F58A71E9A6BCAA0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/defbb7ba-d2cb-3482-8f14-be1d98b2856a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396544 IP address blocks: 2001:503:d414::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:76:e3:7f:58:a7:1e:9a:6b:ca:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3cf67ed0-49ce-4383-85c3-cce5bd518b6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d5:5e:e7:35:31:8a:f9:0d:2d:49:1b:05:af: 5a:5a:70:50:a5:f0:b4:ae:2a:05:14:78:ce:f3:94: 8e:76:31:1c:c0:e5:ad:66:b8:39:a9:5c:2b:c5:b6: d8:60:9e:f4:e6:4b:7e:3c:c8:32:19:ab:e0:f6:83: d7:59:ee:9b:33:65:fa:20:f7:c7:d5:02:5f:24:2e: db:73:f0:e1:49:2b:ac:0f:02:4a:86:7e:92:fe:82: 5a:6f:e7:46:8b:38:64:05:29:40:04:46:7a:c8:02: 66:8a:40:30:37:0e:05:a6:c0:b5:8f:47:dd:ad:32: 9f:c1:c1:05:12:09:df:03:ea:47:5f:17:8a:19:8f: 09:10:c2:62:9f:e5:af:6c:e5:95:cc:9d:7c:73:b1: ce:11:9f:fa:44:8d:1a:66:c0:35:bf:1c:16:16:cb: 0b:d3:1e:fd:cc:3f:59:29:fc:c9:db:72:2d:46:44: 2a:08:81:62:23:14:4d:d6:06:26:a1:25:2d:f6:92: c7:4e:c8:cc:b6:75:93:88:c6:00:c8:f6:ed:fa:b5: f5:6a:6c:5f:e9:f3:6d:c2:c1:57:ac:d1:ca:7c:6a: 11:bb:d2:6b:7e:84:f0:4f:61:16:c3:98:95:77:9c: a7:30:04:8a:ba:4c:0a:9a:a3:c2:e5:44:92:ba:3e: 62:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:3C:A4:DF:0E:CE:A0:0E:EB:51:B0:D9:15:1C:D1:5B:EB:E4:0F:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/defbb7ba-d2cb-3482-8f14-be1d98b2856a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:d414::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:bd:7c:08:44:cd:17:eb:cd:56:0d:82:d2:d6:dd:72:34:8a: 42:71:09:3e:83:4c:48:32:b6:7a:b9:fc:bd:62:8b:16:8a:6f: b4:b8:58:a9:e5:91:49:35:06:95:83:22:bd:b4:23:0c:1f:c5: f3:a7:ad:be:8b:c7:43:db:49:26:bd:ae:f5:18:06:60:ed:a0: 50:4a:21:63:7d:3e:35:82:6b:15:ed:c1:b7:cb:d0:05:e1:47: 78:c1:53:2d:da:6a:b2:3a:dc:e8:0d:4d:6a:7d:10:f1:ea:b2: 0c:92:0b:b7:61:8b:02:4e:9a:80:5a:46:be:62:e5:92:97:72: 1b:90:cf:71:ec:d1:db:cb:d6:00:44:ed:fb:4e:82:c6:8e:1a: e6:70:2b:9f:43:e2:d5:b1:17:59:1f:5b:ff:2e:2e:e9:fc:be: 4d:22:29:d3:0c:e3:17:c5:10:7b:d5:42:f5:b3:68:82:e9:b8: fa:a6:1a:56:9a:be:8c:53:2f:f5:f2:8a:ff:9e:17:f2:1f:dc: 6a:b8:52:47:25:ec:6f:f4:56:d6:ce:e9:6a:aa:af:c3:19:9b: ef:3d:89:94:89:9e:32:11:29:ef:a3:97:56:9a:d6:dd:47:ad: 22:d9:4e:d1:59:8a:2d:5b:78:cf:90:eb:90:b9:25:28:19:9e: 73:12:72:99 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdHbjf1inHppryqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2NmNjdlZDAtNDljZS00MzgzLTg1YzMtY2NlNWJkNTE4YjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNVe5zUxivkNLUkbBa9aWnBQpfC0rioFFHjO 85SOdjEcwOWtZrg5qVwrxbbYYJ705kt+PMgyGavg9oPXWe6bM2X6IPfH1QJfJC7b c/DhSSusDwJKhn6S/oJab+dGizhkBSlABEZ6yAJmikAwNw4FpsC1j0fdrTKfwcEF EgnfA+pHXxeKGY8JEMJin+WvbOWVzJ18c7HOEZ/6RI0aZsA1vxwWFssL0x79zD9Z KfzJ23ItRkQqCIFiIxRN1gYmoSUt9pLHTsjMtnWTiMYAyPbt+rX1amxf6fNtwsFX rNHKfGoRu9JrfoTwT2EWw5iVd5ynMASKukwKmqPC5USSuj5i6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFc8pN8OzqAO61Gw2RUc0Vvr5A/FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGVmYmI3YmEtZDJjYi0z NDgyLThmMTQtYmUxZDk4YjI4NTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA9QU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHO9fAhEzRfrzVYNgtLW3XI0ikJxCT6DTEgytnq5/L1iixaKb7S4 WKnlkUk1BpWDIr20IwwfxfOnrb6Lx0PbSSa9rvUYBmDtoFBKIWN9PjWCaxXtwbfL 0AXhR3jBUy3aarI63OgNTWp9EPHqsgySC7dhiwJOmoBaRr5i5ZKXchuQz3Hs0dvL 1gBE7ftOgsaOGuZwK59D4tWxF1kfW/8uLun8vk0iKdMM4xfFEHvVQvWzaILpuPqm GlaavoxTL/Xyiv+eF/If3Gq4Ukcl7G/0VtbO6Wqqr8MZm+89iZSJnjIRKe+jl1aa 1t1HrSLZTtFZii1beM+Q65C5JSgZnnMScpk= -----END CERTIFICATE-----Generated at Fri Sep 25 21:58:36 2026 by rpki-client