$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/097bb909-cb5f-34f9-9fb1-cb413712bf96.roa File: 097bb909-cb5f-34f9-9fb1-cb413712bf96.roa (raw, json) Hash identifier: ymGSdKLTbLrBQ7iKMubSuuKE9RPNs9G1QyuCWitET2Y= Subject key identifier: 6B:B0:24:DD:08:60:9E:F8:AA:5F:49:32:B6:73:B4:82:2A:8A:C5:AB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4974B72DB1F52CA54FB40700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/097bb909-cb5f-34f9-9fb1-cb413712bf96.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36620 IP address blocks: 2001:500:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:b7:2d:b1:f5:2c:a5:4f:b4:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=845182c5-e6bf-43bf-8552-1b995989c817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:71:c6:c1:cd:ab:08:ec:e2:ae:fc:84:f3:ed: 60:a3:a8:4b:8f:4d:30:7a:62:03:ce:4b:df:50:3f: d4:88:4e:9a:d0:f1:6e:de:36:89:28:d4:53:76:43: 3c:9c:fb:a7:97:8c:b0:6f:62:8d:d8:bd:08:4c:67: 64:21:42:a5:03:d0:2e:7b:27:33:4c:14:ef:98:c2: fd:17:9e:30:d3:2a:a3:2e:33:7f:22:5b:8e:22:ce: d5:55:76:04:e3:09:68:f3:81:aa:ee:0d:5a:67:30: 5c:19:ed:db:e7:89:2a:c1:e3:60:a3:d9:03:b5:68: 29:c3:45:ce:88:de:ba:c9:2e:8e:c5:c2:68:71:8c: 87:5d:e8:9c:08:37:ad:0f:31:65:29:97:3f:20:3c: 75:3d:02:23:cb:31:33:f9:b7:dc:f7:62:35:82:e7: 38:c6:61:4d:88:1c:f1:e2:4c:62:2c:12:67:2a:ee: 59:57:8e:3b:34:32:78:f7:26:2c:50:6d:0f:3f:5e: 21:46:92:96:f7:21:39:86:36:12:c1:52:14:4f:0e: 56:fa:ab:cd:e3:87:8e:43:76:1b:86:0b:ce:7e:58: fb:ab:41:66:56:25:43:95:27:fc:cc:19:cb:af:44: e4:cb:4a:07:29:ab:59:73:31:e9:3f:13:f1:9d:3c: 0e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B0:24:DD:08:60:9E:F8:AA:5F:49:32:B6:73:B4:82:2A:8A:C5:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/097bb909-cb5f-34f9-9fb1-cb413712bf96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:d7:33:14:47:a8:38:b3:e9:39:42:83:a9:23:52:bb:50:1b: 08:c1:49:d4:1e:ef:3f:65:1a:d8:53:56:48:3e:f8:63:a0:05: d6:f9:b7:ad:77:75:72:a6:d9:4a:b3:7d:d7:00:74:9a:9b:e4: ce:f7:07:4f:91:1d:a7:24:fd:06:c3:84:73:c3:cb:ba:bb:1c: 8c:5e:56:d1:cd:37:0d:c9:8d:46:36:f0:7e:40:74:0c:15:53: 99:49:37:8a:56:20:ce:ab:67:2f:51:2a:b2:79:94:a3:9f:1b: 0c:8c:c9:0a:6e:36:45:cf:cd:b8:7a:12:e2:4e:9e:fa:04:7b: 39:38:18:a4:62:cf:a3:b3:10:4f:6c:a0:8b:48:41:68:f7:58: fa:93:cb:53:d0:db:fb:fc:ee:f4:09:23:fc:c7:6e:9d:11:64: 34:0c:e6:c9:e0:95:e3:a6:89:af:a5:2e:07:7e:67:01:78:01: 13:f8:95:0b:38:d5:a4:98:5b:b9:26:cb:70:ee:1d:60:98:ec: 8f:07:d3:6d:ec:34:90:bb:f5:29:89:7d:70:5d:47:8d:ef:13: da:25:59:52:0a:37:60:a8:8d:3a:06:30:33:26:c1:14:70:f3: ef:34:8d:af:58:2a:f6:2e:ed:f8:c2:3a:0f:6a:f7:2c:8d:9a: c1:df:45:94 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdLctsfUspU+0BwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODQ1MTgyYzUtZTZiZi00M2JmLTg1NTItMWI5OTU5ODljODE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3HGwc2rCOzirvyE8+1go6hLj00wemIDzkvf UD/UiE6a0PFu3jaJKNRTdkM8nPunl4ywb2KN2L0ITGdkIUKlA9AueyczTBTvmML9 F54w0yqjLjN/IluOIs7VVXYE4wlo84Gq7g1aZzBcGe3b54kqweNgo9kDtWgpw0XO iN66yS6OxcJocYyHXeicCDetDzFlKZc/IDx1PQIjyzEz+bfc92I1guc4xmFNiBzx 4kxiLBJnKu5ZV447NDJ49yYsUG0PP14hRpKW9yE5hjYSwVIUTw5W+qvN44eOQ3Yb hgvOflj7q0FmViVDlSf8zBnLr0Tky0oHKatZczHpPxPxnTwOcQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGuwJN0IYJ74ql9JMrZztIIqisWrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDk3YmI5MDktY2I1Zi0z NGY5LTlmYjEtY2I0MTM3MTJiZjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEvXMxRHqDiz6TlCg6kjUrtQGwjBSdQe7z9lGthTVkg++GOgBdb5 t613dXKm2UqzfdcAdJqb5M73B0+RHack/QbDhHPDy7q7HIxeVtHNNw3JjUY28H5A dAwVU5lJN4pWIM6rZy9RKrJ5lKOfGwyMyQpuNkXPzbh6EuJOnvoEezk4GKRiz6Oz EE9soItIQWj3WPqTy1PQ2/v87vQJI/zHbp0RZDQM5sngleOmia+lLgd+ZwF4ARP4 lQs41aSYW7kmy3DuHWCY7I8H023sNJC79SmJfXBdR43vE9olWVIKN2CojToGMDMm wRRw8+80ja9YKvYu7fjCOg9q9yyNmsHfRZQ= -----END CERTIFICATE-----Generated at Sat Sep 26 18:03:25 2026 by rpki-client