$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0173f5b8-d53a-3a99-80e1-5e41bcbf77c0.roa File: 0173f5b8-d53a-3a99-80e1-5e41bcbf77c0.roa (raw, json) Hash identifier: EBKabvPHQ3tGN97B8KT8OkBd+dwXzl+Vpd2GjdfYPUE= Subject key identifier: 26:DA:09:AA:AF:28:28:39:46:97:EE:B0:77:7F:18:D9:26:73:1B:C3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4C3D439D17BD5C9B2BAAA360 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0173f5b8-d53a-3a99-80e1-5e41bcbf77c0.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 20172 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:43:9d:17:bd:5c:9b:2b:aa:a3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=5073ef34-44eb-4de7-8e6e-7ad0f45be614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2a:58:9c:b4:72:d7:f2:b5:c7:8c:a0:5f:37: 06:80:e7:6f:2f:65:8e:f4:7b:20:8f:29:69:a0:6d: 03:f0:78:34:ab:c4:d2:97:3c:a3:d8:23:86:89:70: 6d:b7:f0:95:ce:ff:e4:9d:8e:08:43:c2:f6:92:8b: 44:d4:25:97:6d:84:ce:ca:d6:d9:a2:e3:ee:83:77: fc:77:dd:a4:45:84:5a:52:6f:f1:4d:ba:d1:2a:4f: 39:58:36:bc:01:d3:af:95:bc:69:71:9a:dc:0d:6b: c6:e5:45:e7:02:48:0f:4b:6e:b9:20:8f:62:55:db: cd:40:3d:92:37:cf:42:df:a7:37:11:53:bf:50:a9: 35:3b:fd:f3:a8:c0:a5:59:f4:1b:b9:f7:28:ea:29: bf:0a:c0:e5:1d:f6:66:a2:53:21:d6:5d:c8:d4:c2: 8c:c1:dd:53:4a:bc:2f:20:c4:b9:7a:93:99:d2:4e: 94:e0:b9:e8:84:71:63:6c:b1:93:47:9f:96:cc:b2: 65:41:ca:ce:bd:a6:8a:ce:51:f4:fb:d8:30:8f:c9: f1:73:44:a7:38:7e:30:a0:05:b9:96:70:87:ef:94: 74:cc:a1:a1:fc:07:a8:b7:77:28:47:92:4c:fd:5e: da:c6:18:27:d5:0a:22:03:a7:91:53:24:11:2e:06: 17:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:DA:09:AA:AF:28:28:39:46:97:EE:B0:77:7F:18:D9:26:73:1B:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0173f5b8-d53a-3a99-80e1-5e41bcbf77c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:7c:fb:2a:73:92:a4:3c:7c:0d:0b:c9:0a:da:56:5c:fb:ec: 56:f8:a1:56:59:4b:4a:1f:50:29:9a:3c:1d:f0:f9:f8:da:16: 5b:3f:f5:53:4e:2f:e4:6b:ec:28:b7:7e:e1:46:56:1f:27:4b: 8d:d3:01:a7:fc:18:b1:05:69:19:13:81:11:01:a3:a1:9b:31: a4:ed:cb:ad:f3:01:ee:74:13:26:d5:5c:14:45:24:ac:6c:2a: cf:12:30:50:1c:df:0e:6b:65:a8:87:a3:23:16:d7:2d:5a:0a: 9a:52:b3:15:af:61:5f:ad:3b:b3:d9:86:e9:59:49:33:30:7b: ca:49:2f:a5:c8:9c:b2:02:74:39:4b:7e:c8:3e:30:bb:d5:ae: 06:00:67:25:b9:5e:d3:4c:cc:f3:10:8c:0b:70:2f:b3:49:19: d1:3c:2a:34:48:c7:62:a9:6f:9f:91:63:37:4e:06:0f:b1:6d: 52:21:0b:33:bf:cd:73:3e:2e:24:db:bc:8b:ac:86:bb:a5:c3: 98:9d:f7:0d:3f:57:ee:c4:18:7d:c5:33:5f:ca:b6:95:57:33: dd:3c:6b:ee:fb:cb:e4:b8:34:97:c3:b0:b5:4d:04:d0:b9:89: d2:69:c6:92:c6:64:92:92:74:c7:f5:c3:8a:2b:54:fa:c1:6f: 06:44:9a:6d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9MPUOdF71cmyuqo2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NTA3M2VmMzQtNDRlYi00ZGU3LThlNmUtN2FkMGY0NWJlNjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCpYnLRy1/K1x4ygXzcGgOdvL2WO9Hsgjylp oG0D8Hg0q8TSlzyj2COGiXBtt/CVzv/knY4IQ8L2kotE1CWXbYTOytbZouPug3f8 d92kRYRaUm/xTbrRKk85WDa8AdOvlbxpcZrcDWvG5UXnAkgPS265II9iVdvNQD2S N89C36c3EVO/UKk1O/3zqMClWfQbufco6im/CsDlHfZmolMh1l3I1MKMwd1TSrwv IMS5epOZ0k6U4LnohHFjbLGTR5+WzLJlQcrOvaaKzlH0+9gwj8nxc0SnOH4woAW5 lnCH75R0zKGh/Aeot3coR5JM/V7axhgn1QoiA6eRUyQRLgYXdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCbaCaqvKCg5RpfusHd/GNkmcxvDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDE3M2Y1YjgtZDUzYS0z YTk5LTgwZTEtNWU0MWJjYmY3N2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALd8+ypzkqQ8fA0LyQraVlz77Fb4oVZZS0ofUCmaPB3w+fjaFls/ 9VNOL+Rr7Ci3fuFGVh8nS43TAaf8GLEFaRkTgREBo6GbMaTty63zAe50EybVXBRF JKxsKs8SMFAc3w5rZaiHoyMW1y1aCppSsxWvYV+tO7PZhulZSTMwe8pJL6XInLIC dDlLfsg+MLvVrgYAZyW5XtNMzPMQjAtwL7NJGdE8KjRIx2Kpb5+RYzdOBg+xbVIh CzO/zXM+LiTbvIushrulw5id9w0/V+7EGH3FM1/KtpVXM908a+77y+S4NJfDsLVN BNC5idJpxpLGZJKSdMf1w4orVPrBbwZEmm0= -----END CERTIFICATE-----Generated at Mon Sep 28 14:15:36 2026 by rpki-client