$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f36a9a6d-faff-3ad8-b371-08ce70942eb8.roa File: f36a9a6d-faff-3ad8-b371-08ce70942eb8.roa (raw, json) Hash identifier: ugL8sZPNIc4lUUAk4HJUzUQpei8wFM6DOIhlDJwK2MQ= Subject key identifier: 58:99:7C:D0:53:F2:83:D0:D1:69:AF:57:06:6E:18:77:AC:CA:2A:F9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F3E480864E22C59CB704DF980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f36a9a6d-faff-3ad8-b371-08ce70942eb8.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 396573 IP address blocks: 2001:503:39c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:48:08:64:e2:2c:59:cb:70:4d:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=039b037f-aa59-4690-b9ac-7cc74c9519d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f3:1f:14:27:ad:5f:9b:0f:f1:4b:c6:ec:bc: d0:fb:60:da:6c:d9:19:4e:e8:bc:08:e7:fc:49:89: e6:f8:dc:ee:db:9e:d2:5e:fe:65:4f:eb:cf:03:14: 5b:cd:c8:c9:ba:75:2a:0c:cd:f0:00:84:30:f8:bb: 55:b5:85:a4:93:94:15:78:f6:77:b9:e3:19:64:3f: 90:08:20:1f:fb:55:af:59:f8:97:60:05:99:00:77: 09:15:70:30:86:f1:04:6b:af:0f:97:67:7c:60:85: 7a:40:cb:b5:27:8f:82:80:22:8a:9f:12:55:c9:f3: 7f:93:cb:8d:9c:20:47:ef:c2:6b:f5:81:dd:66:5e: 33:68:1c:cd:58:c8:a9:30:12:d3:69:a0:c6:84:70: 6a:9d:77:93:3d:14:18:9a:12:cb:85:2b:a5:5b:5b: cb:60:bf:86:38:b3:ef:8c:df:20:4b:b1:7a:25:7b: b7:b1:2f:c5:89:2a:89:f8:73:13:c6:7a:42:9f:13: 14:b3:35:4d:47:0e:a3:aa:9d:a4:81:ea:5d:97:7c: d1:43:14:90:77:c6:1d:2b:a8:c4:c0:a7:a1:3e:36: aa:e1:d6:4a:03:78:58:76:2e:68:a6:86:bb:b1:d0: 7b:c0:88:1d:ce:1c:ce:82:b1:25:20:d5:ce:38:ab: bd:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:99:7C:D0:53:F2:83:D0:D1:69:AF:57:06:6E:18:77:AC:CA:2A:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f36a9a6d-faff-3ad8-b371-08ce70942eb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:39c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:76:33:9d:b8:18:95:5f:c0:74:cc:c8:87:5a:56:36:a1:68: f0:f9:ec:f9:ed:cb:4c:d8:9d:6e:76:7c:ce:09:3a:c6:93:5d: 05:4c:e4:1c:cb:ce:ef:30:25:25:19:01:a1:85:1a:6e:90:17: 49:0a:08:b4:9a:5a:a0:1e:00:49:c4:85:58:62:a7:88:14:c2: d4:bc:80:0c:19:86:d1:d6:e5:4d:84:25:97:6e:03:d1:77:d0: b6:94:81:3d:d9:08:2c:33:25:0f:d0:8e:92:9b:e9:57:81:94: 48:79:3f:0c:53:e1:02:d4:5b:bd:14:20:8a:b0:c7:d7:8a:3a: 14:95:0b:31:39:7d:f2:1a:ef:b7:ec:ee:ae:a7:82:0b:18:6d: f9:39:76:6b:19:33:ce:ea:cf:ba:f7:42:d1:d2:43:bd:25:05: ba:13:de:6c:de:a8:4b:d4:2a:d2:3b:e0:f2:fa:9f:7d:2f:12: 27:a3:81:18:0c:63:cf:2e:d0:8c:93:25:46:82:3f:8d:92:a6: e4:1a:25:04:0c:75:65:53:34:5d:f7:6e:e8:7a:da:7d:74:07: a8:3d:4b:47:50:a9:0c:ff:d5:9e:f9:4b:1d:42:9a:03:11:44: 24:51:8e:96:ec:fe:e4:ec:25:02:b0:a8:93:83:43:c2:a1:59: 7e:df:df:eb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8+SAhk4ixZy3BN+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk MDM5YjAzN2YtYWE1OS00NjkwLWI5YWMtN2NjNzRjOTUxOWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPMfFCetX5sP8UvG7LzQ+2DabNkZTui8COf8 SYnm+Nzu257SXv5lT+vPAxRbzcjJunUqDM3wAIQw+LtVtYWkk5QVePZ3ueMZZD+Q CCAf+1WvWfiXYAWZAHcJFXAwhvEEa68Pl2d8YIV6QMu1J4+CgCKKnxJVyfN/k8uN nCBH78Jr9YHdZl4zaBzNWMipMBLTaaDGhHBqnXeTPRQYmhLLhSulW1vLYL+GOLPv jN8gS7F6JXu3sS/FiSqJ+HMTxnpCnxMUszVNRw6jqp2kgepdl3zRQxSQd8YdK6jE wKehPjaq4dZKA3hYdi5opoa7sdB7wIgdzhzOgrElINXOOKu9CQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFiZfNBT8oPQ0WmvVwZuGHesyir5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjM2YTlhNmQtZmFmZi0z YWQ4LWIzNzEtMDhjZTcwOTQyZWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAznB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK52M524GJVfwHTMyIdaVjahaPD57Pnty0zYnW52fM4JOsaTXQVM 5BzLzu8wJSUZAaGFGm6QF0kKCLSaWqAeAEnEhVhip4gUwtS8gAwZhtHW5U2EJZdu A9F30LaUgT3ZCCwzJQ/QjpKb6VeBlEh5PwxT4QLUW70UIIqwx9eKOhSVCzE5ffIa 77fs7q6nggsYbfk5dmsZM87qz7r3QtHSQ70lBboT3mzeqEvUKtI74PL6n30vEiej gRgMY88u0IyTJUaCP42SpuQaJQQMdWVTNF33buh62n10B6g9S0dQqQz/1Z75Sx1C mgMRRCRRjpbs/uTsJQKwqJODQ8KhWX7f3+s= -----END CERTIFICATE-----Generated at Mon Sep 28 18:53:08 2026 by rpki-client