$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3adac478-b98d-3b62-ae00-c6ddbc46f6ba.roa File: 3adac478-b98d-3b62-ae00-c6ddbc46f6ba.roa (raw, json) Hash identifier: gC+fbCGgs+vdRlnCuMyYx89OaA/kuD5jmTOzvVGmXd4= Subject key identifier: 85:50:90:0F:9E:58:A4:3F:13:A7:18:16:28:A9:12:FC:2C:09:AA:72 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4974ED95E7BAF8F3164FE780 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3adac478-b98d-3b62-ae00-c6ddbc46f6ba.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396561 IP address blocks: 2001:500:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:ed:95:e7:ba:f8:f3:16:4f:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=652d1ecc-9a94-4f18-a1ec-7f747a94b953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3d:87:fd:ea:ec:28:42:56:78:7d:89:e1:aa: 0a:4a:15:e6:5a:a3:37:37:2f:48:9d:6b:24:c7:37: ad:5d:11:8e:54:a6:d6:bc:3a:a9:31:b4:0e:6f:fe: 2e:67:22:73:56:19:a2:32:c1:d2:b1:ee:61:fa:da: 9a:32:20:c4:6b:e4:12:d0:80:75:c5:66:01:cf:72: 9c:47:ac:74:cb:d0:1e:ab:79:c9:d7:3b:41:76:96: 65:14:46:cd:11:e1:eb:be:6c:e6:29:d6:16:3b:53: ef:dc:92:52:ae:5d:ed:9f:f6:d4:f9:03:4c:50:1b: 2e:88:aa:cf:c3:80:9e:5f:90:9b:fe:66:f9:29:5c: 19:7b:7a:d4:95:9d:b7:59:03:4e:53:4d:c6:21:62: 78:7e:70:66:6d:7b:15:bf:6b:54:87:2f:a0:2d:8c: 07:7f:1a:5e:48:5f:ba:38:3f:9f:14:dc:bd:4c:f7: 53:af:5c:90:8a:95:66:02:0d:aa:09:50:3a:4e:fa: 07:04:2b:33:e0:8f:2e:62:4b:be:bf:44:e5:d3:59: 21:49:45:8c:7e:4e:ce:fd:6e:96:98:9e:ac:46:e8: 22:a0:51:b9:78:8f:ab:bf:56:b9:af:55:f8:85:26: 09:d3:52:7c:b1:a1:72:f5:aa:c2:e5:cf:28:ab:24: 2b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:50:90:0F:9E:58:A4:3F:13:A7:18:16:28:A9:12:FC:2C:09:AA:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3adac478-b98d-3b62-ae00-c6ddbc46f6ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:41:aa:74:47:57:dc:50:c5:eb:c8:4b:7f:8a:1c:7b:8c:9d: 93:7b:5d:d8:2b:3f:5c:97:79:7b:0f:14:e5:06:3d:f8:fc:f2: 31:6e:70:51:6f:bf:48:a6:99:d2:5e:92:a5:14:e2:62:e0:51: 8a:7e:b0:2a:b8:87:bf:7f:5a:01:3e:c1:c7:f1:d4:e6:ec:c3: 13:76:f2:36:9d:8e:aa:a8:ce:48:c4:34:b2:01:71:6a:6e:d4: 6a:40:b1:71:1d:92:e8:2b:0d:f5:25:c0:42:10:a9:a9:57:f3: 77:c2:b5:4a:b9:45:e7:3c:1c:0d:ca:ed:50:d5:8b:5f:ff:a9: 6a:1e:76:56:d3:dd:71:2f:67:cd:b8:55:e9:37:dd:d2:3b:d3: 43:eb:ef:52:06:c1:9d:25:55:90:25:b5:0d:ac:03:a6:df:e8: 6d:cf:33:60:63:6a:74:e6:76:fa:48:94:ac:0a:5b:8c:ef:60: 56:da:1b:7a:7e:c8:12:6e:80:76:39:e9:2f:08:41:4e:fc:0e: df:c4:1d:f6:c0:7b:4e:1e:d1:a7:f6:df:15:9b:89:f0:d8:2f: 93:06:8a:1e:4a:93:f8:e1:ba:dc:30:ce:b0:e9:23:fd:78:28: dc:7a:54:fb:22:ae:16:1f:a6:e9:a4:d7:3a:6c:17:0b:88:66: 21:82:fd:b1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdO2V57r48xZP54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjUyZDFlY2MtOWE5NC00ZjE4LWExZWMtN2Y3NDdhOTRiOTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiT2H/ersKEJWeH2J4aoKShXmWqM3Ny9InWsk xzetXRGOVKbWvDqpMbQOb/4uZyJzVhmiMsHSse5h+tqaMiDEa+QS0IB1xWYBz3Kc R6x0y9Aeq3nJ1ztBdpZlFEbNEeHrvmzmKdYWO1Pv3JJSrl3tn/bU+QNMUBsuiKrP w4CeX5Cb/mb5KVwZe3rUlZ23WQNOU03GIWJ4fnBmbXsVv2tUhy+gLYwHfxpeSF+6 OD+fFNy9TPdTr1yQipVmAg2qCVA6TvoHBCsz4I8uYku+v0Tl01khSUWMfk7O/W6W mJ6sRugioFG5eI+rv1a5r1X4hSYJ01J8saFy9arC5c8oqyQr1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIVQkA+eWKQ/E6cYFiipEvwsCapyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2FkYWM0NzgtYjk4ZC0z YjYyLWFlMDAtYzZkZGJjNDZmNmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEdBqnRHV9xQxevIS3+KHHuMnZN7XdgrP1yXeXsPFOUGPfj88jFu cFFvv0immdJekqUU4mLgUYp+sCq4h79/WgE+wcfx1ObswxN28jadjqqozkjENLIB cWpu1GpAsXEdkugrDfUlwEIQqalX83fCtUq5Rec8HA3K7VDVi1//qWoedlbT3XEv Z824Vek33dI700Pr71IGwZ0lVZAltQ2sA6bf6G3PM2BjanTmdvpIlKwKW4zvYFba G3p+yBJugHY56S8IQU78Dt/EHfbAe04e0af23xWbifDYL5MGih5Kk/jhutwwzrDp I/14KNx6VPsirhYfpumk1zpsFwuIZiGC/bE= -----END CERTIFICATE-----Generated at Sun Sep 27 12:21:44 2026 by rpki-client