$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4409e14c-a8f8-3649-b120-88f50bfb96f5.roa File: 4409e14c-a8f8-3649-b120-88f50bfb96f5.roa (raw, json) Hash identifier: 26xYz25xQlaR9s4gM5oZrrL6nr0HgjNYuMAc7Q/gkfU= Subject key identifier: 8A:33:9D:BB:C2:4F:CC:25:5F:B2:6C:69:2D:6C:53:07:68:9D:7F:97 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EF5B2029FB2331A3CD61F4200 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4409e14c-a8f8-3649-b120-88f50bfb96f5.roa Signing time: Wed 26 Aug 2026 01:00:12 +0000 ROA not before: Wed 26 Aug 2026 01:00:12 +0000 ROA not after: Tue 24 Nov 2026 02:00:12 +0000 asID: 396594 IP address blocks: 2001:500:133::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f5:b2:02:9f:b2:33:1a:3c:d6:1f:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 26 01:00:12 2026 GMT Not After : Nov 24 02:00:12 2026 GMT Subject: CN=6e681586-f268-428b-880b-69c71fff95ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2f:b1:ae:43:48:ba:6c:84:63:c7:9c:dc:ad: ed:fc:c5:85:e8:9a:00:6a:7a:11:fe:06:97:fb:f6: 36:e8:fa:8b:05:d3:33:89:e8:ea:b5:d3:54:97:7c: 2d:2e:e8:dd:2a:d6:e4:fc:5b:bb:02:55:5f:92:6b: 1b:27:7a:b3:09:6f:e7:fa:49:06:eb:dd:9d:2b:43: 31:48:c2:72:af:35:0e:0c:d4:17:77:a5:ad:12:db: 82:a4:63:6f:c9:d3:5e:20:2a:53:cb:46:09:28:44: f1:06:48:0a:27:20:5b:48:81:0f:86:ee:98:63:09: 17:bc:84:5f:91:af:f0:31:a3:c3:08:e6:79:0a:c6: e1:d2:7e:01:e0:c0:56:d0:5a:08:dc:3c:aa:39:15: f7:27:8f:99:16:15:10:56:a0:f5:11:7d:ca:0d:45: 7f:b5:a3:6e:3d:b3:88:97:f0:44:b9:9c:c6:0a:72: 64:70:a6:f0:41:32:d3:e9:b4:3a:30:d1:db:59:98: a2:7c:46:e9:29:e8:3d:e3:21:bc:05:d4:58:f8:6d: 12:36:24:88:d5:50:95:c3:27:ef:41:25:ff:c7:71: 87:e2:4f:a7:80:ce:59:fe:b0:00:94:e5:7c:df:a0: 7a:5f:12:c5:3c:49:12:bc:08:04:c7:70:3e:f6:43: 5d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:33:9D:BB:C2:4F:CC:25:5F:B2:6C:69:2D:6C:53:07:68:9D:7F:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4409e14c-a8f8-3649-b120-88f50bfb96f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:66:a6:3b:de:52:1c:01:b3:02:51:68:28:ad:e2:e8:74:4a: e7:bb:ab:51:98:5f:5a:45:19:a5:f3:26:0c:6b:87:74:a8:9c: 7a:d1:6f:30:95:0a:47:b0:d2:af:0c:a5:21:9d:0a:76:0c:30: f7:54:b5:e0:95:dc:18:72:a4:60:2f:63:cf:f9:80:01:b9:42: 2c:e9:93:a2:dd:9f:4d:fc:d1:42:4b:0a:9c:d1:dd:6b:ce:f0: 4a:e7:d7:56:16:d0:f8:4a:1d:1d:78:8a:7e:fa:c8:2f:63:ba: cc:93:dd:0e:3b:02:cc:70:9e:56:96:87:67:2b:cd:23:ae:79: ad:d3:a3:4c:5f:6c:b9:9a:e1:5e:53:28:f5:dc:16:9e:84:a4: 5e:c5:8b:b0:f7:a6:90:b5:4e:15:59:cd:13:b4:b0:95:39:ef: 68:b6:f4:e6:97:45:85:63:7d:af:5d:d7:ab:65:46:cd:78:87: f6:63:a3:72:a6:b9:61:ca:cc:b9:8b:ce:8a:a7:3a:5e:95:e4: 0b:09:30:45:dc:4c:ea:2c:85:14:57:ff:af:24:ad:7b:08:7d: fe:53:bd:9e:af:c5:9c:4e:52:81:08:07:bf:12:00:14:5c:1e: 82:ce:2b:fc:40:d8:33:52:9f:fc:48:c5:a4:9f:0d:8e:cd:ca: 8c:cc:4a:0b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE71sgKfsjMaPNYfQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgyNjAxMDAxMloXDTI2MTEyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmU2ODE1ODYtZjI2OC00MjhiLTg4MGItNjljNzFmZmY5NWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlS+xrkNIumyEY8ec3K3t/MWF6JoAanoR/gaX +/Y26PqLBdMziejqtdNUl3wtLujdKtbk/Fu7AlVfkmsbJ3qzCW/n+kkG692dK0Mx SMJyrzUODNQXd6WtEtuCpGNvydNeICpTy0YJKETxBkgKJyBbSIEPhu6YYwkXvIRf ka/wMaPDCOZ5Csbh0n4B4MBW0FoI3DyqORX3J4+ZFhUQVqD1EX3KDUV/taNuPbOI l/BEuZzGCnJkcKbwQTLT6bQ6MNHbWZiifEbpKeg94yG8BdRY+G0SNiSI1VCVwyfv QSX/x3GH4k+ngM5Z/rAAlOV836B6XxLFPEkSvAgEx3A+9kNdXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIoznbvCT8wlX7JsaS1sUwdonX+XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDQwOWUxNGMtYThmOC0z NjQ5LWIxMjAtODhmNTBiZmI5NmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ5mpjveUhwBswJRaCit4uh0Sue7q1GYX1pFGaXzJgxrh3SonHrR bzCVCkew0q8MpSGdCnYMMPdUteCV3BhypGAvY8/5gAG5Qizpk6Ldn0380UJLCpzR 3WvO8Ern11YW0PhKHR14in76yC9jusyT3Q47AsxwnlaWh2crzSOuea3To0xfbLma 4V5TKPXcFp6EpF7Fi7D3ppC1ThVZzRO0sJU572i29OaXRYVjfa9d16tlRs14h/Zj o3KmuWHKzLmLzoqnOl6V5AsJMEXcTOoshRRX/68krXsIff5TvZ6vxZxOUoEIB78S ABRcHoLOK/xA2DNSn/xIxaSfDY7NyozMSgs= -----END CERTIFICATE-----Generated at Fri Sep 25 18:54:57 2026 by rpki-client