$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33a14981-d517-30e1-8cf5-7bbbbb28b356.roa File: 33a14981-d517-30e1-8cf5-7bbbbb28b356.roa (raw, json) Hash identifier: owrmaE8xp3TIfg6+9Lp471DP2yb8vAXztm0R2RFf26o= Subject key identifier: B2:DC:E7:AE:C1:BD:0C:42:1F:BE:78:BD:E4:38:AC:DF:AA:09:AA:1B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F49746A20CF632BCFFC3BF180 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33a14981-d517-30e1-8cf5-7bbbbb28b356.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396551 IP address blocks: 2001:500:125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:6a:20:cf:63:2b:cf:fc:3b:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=83a7a37a-bbaf-4963-8288-22669fe271af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d0:5d:a9:53:33:93:8d:03:47:09:1c:5b:a6: e7:56:44:9f:07:f8:a1:f0:73:0e:74:fb:05:12:05: 9e:9d:5c:e3:8c:55:86:3e:8c:19:8b:4f:1d:ec:f6: 29:ea:06:bb:32:61:2f:bc:f0:1e:9c:ff:3a:11:42: 00:75:5a:56:01:a8:20:5d:21:32:cd:76:e6:07:6c: 97:25:43:15:54:af:d5:a9:fc:ef:87:71:29:88:6e: 68:a1:08:2d:f7:df:47:0a:ce:0f:3c:03:7b:1f:8f: b4:90:55:81:c0:5f:c6:fd:d1:bf:38:fb:82:62:f4: 21:81:fa:98:d8:d6:ac:31:28:a1:79:bc:ae:7e:02: 89:99:25:51:62:93:87:ab:62:cd:11:13:2b:4d:f3: 3c:4e:54:31:68:c0:e3:e2:3b:f1:ae:54:ff:ca:c0: 93:56:79:58:db:48:95:9b:f0:92:d9:b5:b0:f0:ae: a8:3c:ac:92:f3:f1:c8:1c:59:ee:53:69:4a:29:99: dc:19:9d:4a:2e:9a:61:20:dd:e3:2d:c8:8f:bd:81: d7:a5:f6:d2:45:f2:6c:b4:06:17:59:0b:2b:d4:32: 0c:4a:d9:0f:de:9e:fa:17:48:5e:43:83:90:c9:c2: 5a:ea:37:7f:68:44:e8:46:fc:29:71:65:fa:1f:d8: fa:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:DC:E7:AE:C1:BD:0C:42:1F:BE:78:BD:E4:38:AC:DF:AA:09:AA:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33a14981-d517-30e1-8cf5-7bbbbb28b356.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:d0:a9:9b:6d:ee:b3:56:94:08:d6:23:23:f1:10:dd:98:31: 08:50:e5:04:9d:c7:27:f2:e1:46:d9:a2:1b:ac:a8:f1:10:e6: 4d:9d:c7:b6:53:cf:21:96:90:02:22:aa:15:18:2c:0d:33:7e: ef:78:ce:4c:63:ed:a9:2a:fe:4c:ac:03:0f:6a:7e:d8:54:37: 01:4c:6b:0c:29:db:dc:37:9f:25:04:dc:7b:da:d3:0b:21:7f: 97:5d:9c:1e:95:90:b3:f5:f1:45:43:c4:36:06:43:04:6f:d5: 36:09:45:e5:7b:0a:27:14:d8:52:84:b0:3d:7e:8a:15:a7:a1: a8:9a:04:5a:4a:6a:a5:9c:25:dc:fc:06:83:38:3c:a9:c1:e1: dc:61:ff:e4:bd:f6:bc:89:05:f5:3d:5b:3d:10:87:53:e1:f9: a0:c3:b2:44:1a:7c:66:6a:b6:82:ef:56:31:ce:82:97:9d:b1: cf:f8:64:e9:af:3f:5c:95:a7:13:8a:ee:53:23:12:52:e6:d0: 78:72:97:79:ed:57:36:83:9e:90:17:f3:f0:63:53:00:32:9e: d2:61:f1:fd:7d:a3:6f:26:b2:92:8d:53:eb:72:28:e0:58:46: ba:8f:ed:cd:39:4a:67:63:82:b7:28:3c:d2:41:14:8a:94:98: 20:5d:67:cf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdGogz2Mrz/w78YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODNhN2EzN2EtYmJhZi00OTYzLTgyODgtMjI2NjlmZTI3MWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6tBdqVMzk40DRwkcW6bnVkSfB/ih8HMOdPsF EgWenVzjjFWGPowZi08d7PYp6ga7MmEvvPAenP86EUIAdVpWAaggXSEyzXbmB2yX JUMVVK/Vqfzvh3EpiG5ooQgt999HCs4PPAN7H4+0kFWBwF/G/dG/OPuCYvQhgfqY 2NasMSihebyufgKJmSVRYpOHq2LNERMrTfM8TlQxaMDj4jvxrlT/ysCTVnlY20iV m/CS2bWw8K6oPKyS8/HIHFnuU2lKKZncGZ1KLpphIN3jLciPvYHXpfbSRfJstAYX WQsr1DIMStkP3p76F0heQ4OQycJa6jd/aEToRvwpcWX6H9j6ZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLLc567BvQxCH754veQ4rN+qCaobMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzNhMTQ5ODEtZDUxNy0z MGUxLThjZjUtN2JiYmJiMjhiMzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGbQqZtt7rNWlAjWIyPxEN2YMQhQ5QSdxyfy4UbZohusqPEQ5k2d x7ZTzyGWkAIiqhUYLA0zfu94zkxj7akq/kysAw9qfthUNwFMawwp29w3nyUE3Hva 0wshf5ddnB6VkLP18UVDxDYGQwRv1TYJReV7CicU2FKEsD1+ihWnoaiaBFpKaqWc Jdz8BoM4PKnB4dxh/+S99ryJBfU9Wz0Qh1Ph+aDDskQafGZqtoLvVjHOgpedsc/4 ZOmvP1yVpxOK7lMjElLm0Hhyl3ntVzaDnpAX8/BjUwAyntJh8f19o28mspKNU+ty KOBYRrqP7c05SmdjgrcoPNJBFIqUmCBdZ88= -----END CERTIFICATE-----Generated at Sun Sep 27 21:10:54 2026 by rpki-client