$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/152c8aff-d0b4-3d77-9dea-edbdc3653e6f.roa File: 152c8aff-d0b4-3d77-9dea-edbdc3653e6f.roa (raw, json) Hash identifier: nLiBVVGKPv4c6Zy5nT6XqFPScA5gZ75vAGv0+DjSadc= Subject key identifier: 40:F8:14:46:08:F6:9A:18:A0:69:D0:9E:16:FB:6E:7B:B9:5C:0E:F5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F497F8AB07CA8C881C686D600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/152c8aff-d0b4-3d77-9dea-edbdc3653e6f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20431 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:8a:b0:7c:a8:c8:81:c6:86:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5c45785e-5ea7-4baf-9d64-cf0206016183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:67:3f:6e:02:dd:c2:bf:c9:6b:d3:fc:a7:1f: 5a:d7:9c:8c:d4:cd:f8:34:51:25:ad:7c:2b:62:c6: ef:c6:69:ac:9c:30:59:65:33:b1:8d:ca:28:4b:bc: 6c:d9:10:7d:3d:1f:a9:69:22:02:e0:74:00:a6:d7: 07:93:3b:df:6a:ac:92:cf:0a:03:ce:c2:63:2c:33: de:9d:c9:2c:d1:96:c1:33:01:04:26:17:c3:b4:8b: 90:4c:7d:40:53:b9:74:07:a1:1a:c8:2a:80:2b:4d: 9b:b5:15:5f:49:8b:de:7b:e1:a6:a9:c8:2f:1d:88: ba:a9:ea:31:89:5a:4a:ce:32:bb:ea:f1:8d:c5:65: da:b0:fd:e8:32:77:bc:72:bb:ec:98:82:8b:91:1c: e5:c0:02:dc:9a:86:e1:b7:38:66:a2:63:d6:5c:54: 5e:61:a1:00:d4:12:f1:cf:e5:e2:62:a7:f9:71:14: 9d:f5:da:ff:89:e3:0d:78:67:30:17:98:62:19:db: 56:e0:d1:fc:15:87:0e:49:6b:f8:63:57:67:04:b8: 13:f4:c0:2b:e5:9b:df:de:69:57:97:87:20:7d:eb: 79:ae:74:40:7e:60:69:dd:81:9c:67:10:d6:21:e0: df:31:65:20:39:ac:7e:56:fd:1f:8f:f2:9a:1e:12: 88:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F8:14:46:08:F6:9A:18:A0:69:D0:9E:16:FB:6E:7B:B9:5C:0E:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/152c8aff-d0b4-3d77-9dea-edbdc3653e6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:4d:a6:55:5f:6b:11:d2:31:9c:f3:ec:17:18:94:ee:f3:92: 51:b5:81:53:01:56:a3:3a:95:9b:9e:14:be:18:ca:ac:6c:1f: bc:68:58:80:a0:9a:b7:86:6a:8c:f7:90:f3:e3:cd:53:ed:5c: df:b5:f2:c2:fe:cb:72:e2:74:fe:e4:ac:85:af:50:f5:89:91: d9:cd:e0:06:50:c6:70:0a:0e:a7:1c:34:fb:ff:9d:4b:f6:65: ef:64:cd:0d:c0:51:f5:24:ad:bf:84:ae:f3:dc:53:91:b0:26: 6a:f4:d0:25:25:06:74:16:44:53:53:e4:38:c4:c6:a0:ca:a2: d5:2e:7d:77:92:ef:59:f0:83:85:bd:48:97:12:64:3e:19:99: fd:be:f7:0f:20:24:9a:41:48:99:04:8c:01:9d:8a:8d:87:4f: 32:39:ca:5f:23:ca:c7:d5:15:0a:be:c6:2d:b4:ef:db:b2:2d: 2f:61:99:72:64:d1:85:9a:41:11:74:ae:2c:a6:fd:04:4f:ef: fd:87:c0:e3:c1:36:27:00:0f:9a:44:d1:28:ad:bb:8d:71:2b: b9:c7:6a:47:63:94:56:cc:b4:c1:98:1d:f1:da:d1:6e:9f:eb: b2:35:43:a5:5d:85:92:a5:0a:11:9f:c5:3c:6f:33:ae:05:76: 6c:40:84:67 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9Jf4qwfKjIgcaG1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWM0NTc4NWUtNWVhNy00YmFmLTlkNjQtY2YwMjA2MDE2MTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWc/bgLdwr/Ja9P8px9a15yM1M34NFElrXwr YsbvxmmsnDBZZTOxjcooS7xs2RB9PR+paSIC4HQAptcHkzvfaqySzwoDzsJjLDPe ncks0ZbBMwEEJhfDtIuQTH1AU7l0B6EayCqAK02btRVfSYvee+GmqcgvHYi6qeox iVpKzjK76vGNxWXasP3oMne8crvsmIKLkRzlwALcmobhtzhmomPWXFReYaEA1BLx z+XiYqf5cRSd9dr/ieMNeGcwF5hiGdtW4NH8FYcOSWv4Y1dnBLgT9MAr5Zvf3mlX l4cgfet5rnRAfmBp3YGcZxDWIeDfMWUgOax+Vv0fj/KaHhKIiQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFED4FEYI9poYoGnQnhb7bnu5XA71MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTUyYzhhZmYtZDBiNC0z ZDc3LTlkZWEtZWRiZGMzNjUzZTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA/TaZVX2sR0jGc8+wXGJTu85JRtYFTAVajOpWb nhS+GMqsbB+8aFiAoJq3hmqM95Dz481T7VzftfLC/sty4nT+5KyFr1D1iZHZzeAG UMZwCg6nHDT7/51L9mXvZM0NwFH1JK2/hK7z3FORsCZq9NAlJQZ0FkRTU+Q4xMag yqLVLn13ku9Z8IOFvUiXEmQ+GZn9vvcPICSaQUiZBIwBnYqNh08yOcpfI8rH1RUK vsYttO/bsi0vYZlyZNGFmkERdK4spv0ET+/9h8DjwTYnAA+aRNEorbuNcSu5x2pH Y5RWzLTBmB3x2tFun+uyNUOlXYWSpQoRn8U8bzOuBXZsQIRn -----END CERTIFICATE-----Generated at Fri Sep 25 09:25:20 2026 by rpki-client