$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2135c46c-c6a0-313e-a123-2e27e1a3bd48.roa File: 2135c46c-c6a0-313e-a123-2e27e1a3bd48.roa (raw, json) Hash identifier: gpueN6C3LMr1z4ZwMaTX9yDqDi7bawh/Va2KekcMz+I= Subject key identifier: 27:B1:BF:72:D0:43:E4:0C:8E:2F:B3:E8:6E:9A:EC:68:42:0C:55:7A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F498B4B6C27D7AED9B2EB1C80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2135c46c-c6a0-313e-a123-2e27e1a3bd48.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396552 IP address blocks: 2001:500:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:4b:6c:27:d7:ae:d9:b2:eb:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0cd9ed1d-25e8-4735-9023-213114c42513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6e:3d:95:58:f8:6b:50:ff:6d:b8:93:2f:7f: 5b:b9:93:2b:66:15:46:16:97:0a:1c:99:8e:d5:f2: 44:3d:fe:f0:f5:ae:6a:2c:59:49:54:6f:29:2c:95: 11:ae:4b:8a:43:2a:c9:26:97:52:8e:a4:83:82:0d: f0:e5:4a:60:a1:88:02:58:1b:77:ad:e7:41:38:87: 45:89:98:41:ca:9a:fd:34:45:ff:06:8c:04:00:03: 2b:aa:2c:71:cf:a3:ac:69:49:c1:bd:3e:16:97:03: bd:a5:c4:22:f4:11:e3:97:cc:e1:83:1e:13:e2:34: 86:90:65:e4:0e:26:63:07:93:78:15:92:03:64:d6: 92:ee:05:2a:91:7d:74:5d:0d:cf:34:4a:39:0d:aa: 46:56:97:aa:21:bf:f2:97:9d:90:6a:4e:df:3b:cb: c5:1c:5f:98:83:b5:cc:28:f0:ce:3b:11:6d:b6:c0: f2:53:98:bc:7a:0c:1c:82:73:eb:1e:2f:b7:1a:d0: 44:44:59:05:44:b0:91:02:8c:0b:c1:1f:00:82:c6: 53:40:a3:7a:3e:6f:15:69:07:4f:e4:f1:76:e6:a5: 6a:bd:f0:c6:28:ba:28:18:33:5c:6d:7e:d6:66:16: c1:f1:e2:6e:50:33:47:a5:60:c0:46:2c:09:5d:d0: ed:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B1:BF:72:D0:43:E4:0C:8E:2F:B3:E8:6E:9A:EC:68:42:0C:55:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2135c46c-c6a0-313e-a123-2e27e1a3bd48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:2b:1e:a6:c9:07:17:c3:d2:fd:4a:8a:96:d0:c3:9d:2a:6c: cc:e2:10:f2:8e:42:93:8c:3c:cc:6a:be:a2:c4:45:75:0d:75: 38:2c:b3:9c:11:5e:c5:b4:1e:37:85:de:d7:0d:9c:9c:49:76: ff:a3:e5:21:69:3c:fa:3c:a2:63:23:d7:a7:b5:ee:00:83:9c: a8:c9:1e:4a:72:14:ad:a3:57:46:6f:34:35:38:f2:1a:4e:33: d2:2e:87:5d:fa:c6:c3:2d:79:21:1d:a3:ff:74:84:ac:3c:1e: 6b:be:43:17:46:60:ad:5e:5a:e8:f9:39:ca:e6:fc:2e:9b:13: 7e:3c:07:31:47:a6:a7:6e:da:73:83:6f:d3:63:b0:dc:99:2b: 42:a5:2e:cc:52:24:ed:b7:77:a0:aa:70:cd:8b:c9:5e:0b:01: eb:4f:01:6f:3d:31:4c:f7:84:5c:b1:8d:9b:ea:f6:1b:e5:5e: 56:1c:80:cf:68:8b:c1:d7:dd:db:ec:aa:5e:2d:06:cb:d4:05: b7:2a:69:30:45:07:0f:df:0f:f6:6e:a0:41:a6:2e:e2:cf:f7: d4:ed:58:b6:f4:55:ec:55:e1:da:c3:45:fd:76:6e:b4:33:0c: a9:fe:88:81:35:6e:f0:ff:5e:fb:89:c4:12:d1:03:72:ed:9a: 86:46:b9:2b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Ji0tsJ9eu2bLrHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGNkOWVkMWQtMjVlOC00NzM1LTkwMjMtMjEzMTE0YzQyNTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqW49lVj4a1D/bbiTL39buZMrZhVGFpcKHJmO 1fJEPf7w9a5qLFlJVG8pLJURrkuKQyrJJpdSjqSDgg3w5UpgoYgCWBt3redBOIdF iZhBypr9NEX/BowEAAMrqixxz6OsaUnBvT4WlwO9pcQi9BHjl8zhgx4T4jSGkGXk DiZjB5N4FZIDZNaS7gUqkX10XQ3PNEo5DapGVpeqIb/yl52Qak7fO8vFHF+Yg7XM KPDOOxFttsDyU5i8egwcgnPrHi+3GtBERFkFRLCRAowLwR8AgsZTQKN6Pm8VaQdP 5PF25qVqvfDGKLooGDNcbX7WZhbB8eJuUDNHpWDARiwJXdDtTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCexv3LQQ+QMji+z6G6a7GhCDFV6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjEzNWM0NmMtYzZhMC0z MTNlLWExMjMtMmUyN2UxYTNiZDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALYrHqbJBxfD0v1KipbQw50qbMziEPKOQpOMPMxqvqLERXUNdTgs s5wRXsW0HjeF3tcNnJxJdv+j5SFpPPo8omMj16e17gCDnKjJHkpyFK2jV0ZvNDU4 8hpOM9Iuh136xsMteSEdo/90hKw8Hmu+QxdGYK1eWuj5Ocrm/C6bE348BzFHpqdu 2nODb9NjsNyZK0KlLsxSJO23d6CqcM2LyV4LAetPAW89MUz3hFyxjZvq9hvlXlYc gM9oi8HX3dvsql4tBsvUBbcqaTBFBw/fD/ZuoEGmLuLP99TtWLb0VexV4drDRf12 brQzDKn+iIE1bvD/XvuJxBLRA3LtmoZGuSs= -----END CERTIFICATE-----Generated at Sat Sep 26 22:18:18 2026 by rpki-client