$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28dd1550-c898-38f5-ba14-7855cf1747c5.roa File: 28dd1550-c898-38f5-ba14-7855cf1747c5.roa (raw, json) Hash identifier: kqrgVgY5ybsy0lfe7MehgmILRCBsODI6qDHAScYMBvc= Subject key identifier: 1F:C1:98:F4:90:D3:0B:B6:5D:99:9E:A8:7F:C2:9C:3E:CB:1A:5F:81 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F49745590FF00C6652754D6A0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28dd1550-c898-38f5-ba14-7855cf1747c5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396564 IP address blocks: 2001:500:125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:55:90:ff:00:c6:65:27:54:d6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e80095d4-1356-4f72-b57e-51c3ff1a44c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2a:4a:6a:9e:10:97:93:d3:b2:2e:62:4d:4f: 25:77:d4:da:14:fa:5b:a8:e8:11:6f:5f:38:7d:26: 58:b3:86:a7:06:21:97:90:92:0b:62:8f:49:db:43: 6f:c8:59:7b:49:c6:af:6d:cc:46:19:56:a2:44:73: ef:a8:25:bf:fd:b6:fc:6e:5f:d2:1d:24:6c:f7:a5: e3:8a:b3:8a:6e:16:f1:19:71:33:b7:84:f1:29:71: 7c:db:dd:0e:3d:ad:0e:97:2f:bf:eb:82:65:30:17: 6c:8a:8a:0d:9d:db:be:5f:98:78:3e:42:c3:66:e0: d8:e5:28:1e:cf:58:9a:43:c9:66:ff:54:6b:48:9c: ad:e0:aa:9c:65:13:84:72:d8:ed:76:97:45:e6:86: 1b:9d:65:5e:96:75:64:9a:ee:2d:da:04:f7:36:79: 3c:0a:16:ca:8a:55:ae:de:a8:9c:56:c4:44:b2:d5: b9:18:1d:91:3c:2c:69:94:20:e5:cb:00:11:1a:8b: 3c:b1:05:46:50:52:fe:21:1e:e8:e0:6b:6e:ee:e6: 11:82:e0:43:4f:6f:a9:17:5f:ae:68:26:e9:9f:31: 7e:2e:56:55:86:21:b7:47:5d:0a:c0:37:66:34:bc: 20:2e:f6:ba:16:42:be:d2:8b:07:06:47:b1:1e:3e: 10:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C1:98:F4:90:D3:0B:B6:5D:99:9E:A8:7F:C2:9C:3E:CB:1A:5F:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28dd1550-c898-38f5-ba14-7855cf1747c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:18:1a:02:01:ad:06:f4:35:b0:c9:3b:f0:37:b2:0c:56:78: 19:01:8e:f6:cc:3a:1d:2a:f9:ee:90:39:b0:0a:93:17:61:6e: 67:db:f0:62:8b:a6:2d:33:99:78:2a:74:27:33:67:62:c2:9b: 2b:8f:e4:37:48:6b:2e:ac:a9:37:1a:2f:fe:c6:06:3a:2b:5e: eb:7f:5a:a5:eb:96:da:d0:75:25:bb:9b:28:69:b6:ef:24:a4: 0f:15:30:09:50:1a:a5:df:4f:b0:d1:17:08:2d:25:54:cc:3c: 38:19:14:74:5b:db:e0:32:4e:9d:99:26:a1:77:fa:55:31:3b: 94:f3:02:68:2c:99:ba:77:a1:6c:20:60:a9:6a:0e:ff:bb:47: 14:39:d9:3b:28:ea:bf:4a:3f:d1:0c:19:d1:65:ca:74:dc:47: be:49:f5:85:d4:39:5f:6e:63:7f:51:c6:1d:9e:ef:57:3e:01: 12:68:13:04:7d:14:a8:c4:e5:01:e8:f1:74:7e:ee:37:df:fd: e3:db:4d:8d:44:c4:a3:83:fd:e2:32:64:04:4c:7a:49:c7:ed: d5:d9:6f:ea:26:16:72:8c:b8:21:35:10:61:25:27:91:dd:36: 3e:2b:d4:66:10:4a:83:51:38:b7:8b:e0:f9:79:40:2b:77:02: c5:02:9f:27 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdFWQ/wDGZSdU1qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTgwMDk1ZDQtMTM1Ni00ZjcyLWI1N2UtNTFjM2ZmMWE0NGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SpKap4Ql5PTsi5iTU8ld9TaFPpbqOgRb184 fSZYs4anBiGXkJILYo9J20NvyFl7ScavbcxGGVaiRHPvqCW//bb8bl/SHSRs96Xj irOKbhbxGXEzt4TxKXF8290OPa0Oly+/64JlMBdsiooNndu+X5h4PkLDZuDY5Sge z1iaQ8lm/1RrSJyt4KqcZROEctjtdpdF5oYbnWVelnVkmu4t2gT3Nnk8ChbKilWu 3qicVsREstW5GB2RPCxplCDlywARGos8sQVGUFL+IR7o4Gtu7uYRguBDT2+pF1+u aCbpnzF+LlZVhiG3R10KwDdmNLwgLva6FkK+0osHBkexHj4Q9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB/BmPSQ0wu2XZmeqH/CnD7LGl+BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjhkZDE1NTAtYzg5OC0z OGY1LWJhMTQtNzg1NWNmMTc0N2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABwYGgIBrQb0NbDJO/A3sgxWeBkBjvbMOh0q+e6QObAKkxdhbmfb 8GKLpi0zmXgqdCczZ2LCmyuP5DdIay6sqTcaL/7GBjorXut/WqXrltrQdSW7myhp tu8kpA8VMAlQGqXfT7DRFwgtJVTMPDgZFHRb2+AyTp2ZJqF3+lUxO5TzAmgsmbp3 oWwgYKlqDv+7RxQ52Tso6r9KP9EMGdFlynTcR75J9YXUOV9uY39Rxh2e71c+ARJo EwR9FKjE5QHo8XR+7jff/ePbTY1ExKOD/eIyZARMeknH7dXZb+omFnKMuCE1EGEl J5HdNj4r1GYQSoNROLeL4Pl5QCt3AsUCnyc= -----END CERTIFICATE-----Generated at Fri Oct 2 01:10:31 2026 by rpki-client