$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c67f318-9c9e-3cd3-bad0-913e1263503a.roa File: 2c67f318-9c9e-3cd3-bad0-913e1263503a.roa (raw, json) Hash identifier: P7VY8OfQgcZVUIlNePSTlyQuMxcjrdYoDal+szibwA0= Subject key identifier: E9:61:D3:1F:07:E9:25:A1:17:02:4A:43:71:25:F3:1F:F3:F1:36:3C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F498BDD7DBB64B02F1CD16B40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c67f318-9c9e-3cd3-bad0-913e1263503a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396541 IP address blocks: 2001:500:125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:dd:7d:bb:64:b0:2f:1c:d1:6b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=40915879-45d1-43f6-8e27-2d6696647aac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d2:8c:93:4c:21:34:ee:0a:8b:83:07:16:9b: 53:b9:ef:9d:50:58:5b:bd:fb:b5:2f:56:3c:82:6e: 93:e4:7a:d7:a5:69:0f:4c:53:7c:57:44:38:85:c2: a2:b0:18:f9:5d:f4:2a:bc:9a:fc:9a:1f:6d:b2:81: 08:8c:c6:44:c8:98:d0:d5:b6:5e:da:9e:6a:ec:d5: 0d:97:f2:c0:d0:16:34:43:d5:12:fa:bb:12:68:61: 05:ea:90:a3:0e:fe:a5:b3:d0:63:5c:47:5b:56:d5: f4:e0:82:85:22:cb:36:c6:2e:67:b4:cb:46:de:90: a4:5a:53:fd:28:63:41:3e:78:9f:c7:64:5e:6d:ad: 62:49:24:e1:ee:c9:a4:d6:72:3c:f1:50:0b:3c:05: 9b:9e:2c:8f:21:1c:45:16:75:6f:c1:19:55:03:f7: 9c:d4:72:0e:46:f2:31:92:9b:4e:c3:1b:23:8f:ee: 07:68:32:f3:46:de:f9:26:e1:85:4a:a1:4f:8a:b0: 52:f7:a6:2f:4a:6f:25:ab:5b:d4:75:06:dd:1f:8f: 04:32:29:5b:e7:cf:00:0c:b3:b5:7d:8e:0a:b3:56: dc:67:62:23:37:fc:1e:95:fd:2b:df:19:8a:5e:bc: 14:fb:aa:8b:71:9a:af:69:05:24:f1:f6:b3:15:28: eb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:61:D3:1F:07:E9:25:A1:17:02:4A:43:71:25:F3:1F:F3:F1:36:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c67f318-9c9e-3cd3-bad0-913e1263503a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:2f:a2:a5:50:e7:2e:da:e0:2b:de:03:6a:3e:cd:7e:04:21: 20:ac:8a:80:9a:8b:4d:a8:78:ab:45:ff:76:ff:48:47:0b:99: 52:96:ae:5a:4b:52:d8:cd:e2:1b:0b:cb:46:5a:42:c7:bb:25: 72:ce:6d:87:82:6b:85:10:40:45:dc:6e:99:12:3d:2f:86:9a: 31:34:38:df:2d:7b:1d:4d:f2:0a:e5:32:4e:8f:79:33:3d:58: e2:e5:34:8e:96:74:ff:55:ca:64:0c:42:6b:a8:84:54:23:ba: b6:e2:ee:d0:98:0b:86:fa:a1:05:44:49:8a:93:6b:5f:2a:9f: ce:18:99:7a:65:0d:9f:5f:00:15:6d:70:9a:19:d3:18:95:2a: f8:ff:0b:cb:50:c6:92:b3:ce:1b:a6:a8:7e:89:2a:c6:b7:88: 85:c8:f1:eb:f0:61:0e:1b:63:b2:a2:a6:dc:51:a7:27:33:3c: 83:e0:de:5e:a1:05:9a:d8:1b:be:58:b4:1f:91:67:65:42:08: cf:7d:dd:15:27:02:36:80:a7:a9:b9:36:9a:d4:70:3a:02:84: 2d:3a:f3:a8:57:27:57:a6:0f:86:9b:9f:4f:c9:1b:fd:9d:dd: d6:de:5e:de:d9:26:d1:02:64:aa:5c:cd:bf:55:bf:da:d3:7b: ce:6b:fb:f1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Ji919u2SwLxzRa0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDA5MTU4NzktNDVkMS00M2Y2LThlMjctMmQ2Njk2NjQ3YWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdKMk0whNO4Ki4MHFptTue+dUFhbvfu1L1Y8 gm6T5HrXpWkPTFN8V0Q4hcKisBj5XfQqvJr8mh9tsoEIjMZEyJjQ1bZe2p5q7NUN l/LA0BY0Q9US+rsSaGEF6pCjDv6ls9BjXEdbVtX04IKFIss2xi5ntMtG3pCkWlP9 KGNBPnifx2Reba1iSSTh7smk1nI88VALPAWbniyPIRxFFnVvwRlVA/ec1HIORvIx kptOwxsjj+4HaDLzRt75JuGFSqFPirBS96YvSm8lq1vUdQbdH48EMilb588ADLO1 fY4Ks1bcZ2IjN/welf0r3xmKXrwU+6qLcZqvaQUk8fazFSjrXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOlh0x8H6SWhFwJKQ3El8x/z8TY8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmM2N2YzMTgtOWM5ZS0z Y2QzLWJhZDAtOTEzZTEyNjM1MDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK0voqVQ5y7a4CveA2o+zX4EISCsioCai02oeKtF/3b/SEcLmVKW rlpLUtjN4hsLy0ZaQse7JXLObYeCa4UQQEXcbpkSPS+GmjE0ON8tex1N8grlMk6P eTM9WOLlNI6WdP9VymQMQmuohFQjurbi7tCYC4b6oQVESYqTa18qn84YmXplDZ9f ABVtcJoZ0xiVKvj/C8tQxpKzzhumqH6JKsa3iIXI8evwYQ4bY7KiptxRpyczPIPg 3l6hBZrYG75YtB+RZ2VCCM993RUnAjaAp6m5NprUcDoChC0686hXJ1emD4abn0/J G/2d3dbeXt7ZJtECZKpczb9Vv9rTe85r+/E= -----END CERTIFICATE-----Generated at Mon Sep 28 11:21:17 2026 by rpki-client