$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa8aa787-8e59-375f-b871-7aee5ebefafd.roa File: fa8aa787-8e59-375f-b871-7aee5ebefafd.roa (raw, json) Hash identifier: N6HHhEg6DPC/ybkNpbfOWEyaK2Rhbnw4r1LHaQ9u5ig= Subject key identifier: 5E:96:82:40:63:30:6F:82:4C:83:D0:B7:D3:50:BA:8E:59:1F:65:69 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4973725CD0B3298D7BC78380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa8aa787-8e59-375f-b871-7aee5ebefafd.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20172 IP address blocks: 2001:503:d414::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:72:5c:d0:b3:29:8d:7b:c7:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=aee77bbf-4e50-4562-a925-320b4292bf2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3f:08:40:b0:ee:9e:c2:c4:ca:f7:0c:9f:c6: 04:36:2a:5d:8f:78:c4:de:2a:c5:a6:6f:c1:0e:b8: 43:ba:5a:1e:4d:df:02:08:ca:7f:ea:d3:01:69:c0: 61:4b:73:f3:38:18:6b:4a:f2:f6:cb:19:4f:3c:75: 9e:fe:74:ba:ed:99:50:f5:e0:77:14:d3:11:82:1a: dd:0c:fb:cf:c3:d8:4c:26:f0:f5:ec:78:77:ad:64: e5:da:3d:b1:60:75:df:4f:fd:78:2e:6f:44:db:50: 8a:18:7f:cf:b4:a4:c2:42:be:48:f4:30:92:ac:f8: 43:e0:e0:5b:95:46:4f:91:c4:34:c3:23:ab:48:1b: 85:cc:6c:e5:6d:97:e6:f3:98:ff:5c:61:6a:74:d4: a9:ec:24:c0:af:86:23:06:ac:5e:94:6f:e2:46:ec: 19:7b:b9:e2:88:60:35:5e:f8:0f:63:a9:91:e4:e2: 03:d2:d9:0e:f8:8e:95:49:f2:bb:dd:b2:fc:a1:53: e8:74:c1:76:20:29:72:ba:d9:82:1b:16:4d:b3:72: c3:96:08:94:6c:79:0c:08:60:fe:78:85:ee:82:d9: a7:ab:6a:95:21:51:c0:f0:bc:47:c5:db:de:3c:a5: c6:06:5d:2a:7c:af:d9:7b:48:b7:b0:f2:fe:f2:e5: d2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:96:82:40:63:30:6F:82:4C:83:D0:B7:D3:50:BA:8E:59:1F:65:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa8aa787-8e59-375f-b871-7aee5ebefafd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:d414::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:77:a5:85:9b:36:2c:e8:55:4d:4d:a5:38:fe:b1:09:e7:54: 94:05:4f:8f:a2:24:a2:d0:4b:06:97:e6:37:8d:1c:a9:5e:32: 6f:96:d2:1d:1f:0a:f2:1c:04:81:30:22:8f:22:36:fc:c8:b9: e2:00:a3:51:24:b6:aa:07:c5:af:7f:34:85:ef:f0:95:ab:46: 40:e3:eb:f9:8d:71:ae:ff:2c:9b:7f:d4:e5:6b:86:00:50:93: d0:5e:fd:fb:91:a0:59:68:49:dc:8e:d5:bd:2b:d0:38:5a:dd: f6:52:3a:2a:b7:18:30:17:ec:29:d7:3d:9b:d6:d1:52:af:72: 42:21:81:f8:01:ea:5d:58:4e:33:de:4b:9f:1b:3e:eb:eb:98: 18:17:90:f0:b5:0e:89:bf:f8:99:33:dc:72:57:4b:26:7b:b4: 83:b2:2f:63:ec:3d:73:86:82:c9:f2:36:7f:8d:ef:15:18:70: bf:0f:13:85:7c:1c:95:e1:c4:6c:95:f7:74:92:ba:6d:9a:8b: 98:7f:e9:e5:92:b8:84:5b:d2:0f:e8:5c:9e:4f:56:8d:b6:36: 2a:03:f3:44:8e:cb:3a:ce:8f:5a:e6:92:f2:6c:61:85:43:d3: 2a:25:f5:21:fd:ea:4d:d3:65:a4:46:62:e1:de:18:19:17:c0: ad:11:95:e3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc3Jc0LMpjXvHg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWVlNzdiYmYtNGU1MC00NTYyLWE5MjUtMzIwYjQyOTJiZjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnz8IQLDunsLEyvcMn8YENipdj3jE3irFpm/B DrhDuloeTd8CCMp/6tMBacBhS3PzOBhrSvL2yxlPPHWe/nS67ZlQ9eB3FNMRghrd DPvPw9hMJvD17Hh3rWTl2j2xYHXfT/14Lm9E21CKGH/PtKTCQr5I9DCSrPhD4OBb lUZPkcQ0wyOrSBuFzGzlbZfm85j/XGFqdNSp7CTAr4YjBqxelG/iRuwZe7niiGA1 XvgPY6mR5OID0tkO+I6VSfK73bL8oVPodMF2IClyutmCGxZNs3LDlgiUbHkMCGD+ eIXugtmnq2qVIVHA8LxHxdvePKXGBl0qfK/Ze0i3sPL+8uXSlwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF6WgkBjMG+CTIPQt9NQuo5ZH2VpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmE4YWE3ODctOGU1OS0z NzVmLWI4NzEtN2FlZTVlYmVmYWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA9QU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEp3pYWbNizoVU1NpTj+sQnnVJQFT4+iJKLQSwaX5jeNHKleMm+W 0h0fCvIcBIEwIo8iNvzIueIAo1EktqoHxa9/NIXv8JWrRkDj6/mNca7/LJt/1OVr hgBQk9Be/fuRoFloSdyO1b0r0Dha3fZSOiq3GDAX7CnXPZvW0VKvckIhgfgB6l1Y TjPeS58bPuvrmBgXkPC1Dom/+Jkz3HJXSyZ7tIOyL2PsPXOGgsnyNn+N7xUYcL8P E4V8HJXhxGyV93SSum2ai5h/6eWSuIRb0g/oXJ5PVo22NioD80SOyzrOj1rmkvJs YYVD0yol9SH96k3TZaRGYuHeGBkXwK0RleM= -----END CERTIFICATE-----Generated at Sun Sep 27 12:49:24 2026 by rpki-client