$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49f7c9c0-60f0-3cb7-a858-24d9dac160cc.roa File: 49f7c9c0-60f0-3cb7-a858-24d9dac160cc.roa (raw, json) Hash identifier: Xt0eC23uY8UjbyyMnPxImqFB/tQ18rAWokBo8qpbwgM= Subject key identifier: DA:22:64:FD:2B:C7:9C:F1:F7:91:3A:60:A5:EF:84:F5:2B:94:5A:90 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EF01CDA13DBA494B592361C40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49f7c9c0-60f0-3cb7-a858-24d9dac160cc.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 396610 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:da:13:db:a4:94:b5:92:36:1c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=5fcfd67f-853c-4421-be32-34714b868e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1e:94:63:c8:cd:01:b3:e6:00:95:cb:8b:4d: d1:49:70:83:af:c4:e4:8f:a6:08:5f:d0:86:fc:18: 8c:10:16:bc:1a:56:18:01:b6:0e:b6:13:94:6c:18: 52:83:38:24:f0:e4:b3:bc:68:85:13:0a:5b:41:d8: 5d:ab:6c:c5:6a:f4:95:b7:8c:da:19:61:71:29:90: 04:c0:d3:a3:dd:3b:67:15:61:07:e2:f0:3f:4a:1b: f6:57:01:b4:a5:8a:5d:c1:dd:66:c7:14:0e:57:1b: 3f:5f:b5:b2:79:0c:03:a9:14:f8:40:1e:46:68:37: 13:aa:8e:f8:a1:36:11:ff:9f:3e:15:85:5b:6d:a2: 0c:fe:86:ca:02:02:f3:d2:0d:b3:38:48:cd:9f:f8: 1e:b8:e6:ed:fe:61:f4:c9:4b:ce:89:89:f8:56:94: 04:72:ef:93:6e:0d:02:8f:2e:48:24:69:ad:4a:b7: 56:a4:90:77:9b:fd:12:bd:a3:0f:92:64:f7:a4:06: 5e:53:9e:9f:19:df:a4:57:3f:eb:cc:5a:cf:df:e3: 10:2d:df:fd:c6:2c:14:13:57:8c:93:91:c1:8e:04: 1e:8e:54:c8:5c:74:4e:97:e1:67:ec:e1:61:a7:e3: 2c:4f:81:73:d8:6a:15:2a:25:41:da:ce:07:3c:b9: c0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:22:64:FD:2B:C7:9C:F1:F7:91:3A:60:A5:EF:84:F5:2B:94:5A:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49f7c9c0-60f0-3cb7-a858-24d9dac160cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:0c:ab:1b:8b:ad:04:0d:23:33:66:1d:d1:80:d2:f6:0b:f6: 4a:72:cb:fd:fe:00:aa:d5:c9:e5:0b:76:fb:65:a3:ad:ea:34: ba:4b:c8:41:14:2d:19:4b:5f:5a:8a:8b:62:22:b2:ec:a6:cd: 07:a1:7d:b7:d1:79:6a:48:bf:65:81:16:0d:09:0a:c3:e5:a4: a8:9f:9a:c0:bd:e1:df:bd:08:39:82:8c:46:e4:d3:38:29:a8: 72:5f:ae:57:f1:68:41:a6:f6:65:15:41:03:3e:e6:bf:ee:4d: 7d:6e:e4:e1:49:48:c7:41:59:9f:b7:52:9e:b6:ef:55:26:47: df:80:25:96:04:5e:7c:05:77:b4:b3:36:44:ac:54:cf:67:ba: 3e:0f:f9:8b:b1:73:b9:1e:7b:64:1c:59:68:dd:f7:2c:af:a4: 32:f6:ff:2a:fa:79:36:62:53:68:68:64:56:13:ff:35:50:b5: 28:e3:bf:b4:e2:26:af:3f:71:ba:a0:38:75:56:79:99:15:5a: 56:69:54:71:ba:e3:85:ca:1e:13:d2:ad:54:95:86:c1:e0:20: df:1a:ad:af:cc:5d:29:92:bd:e9:4c:72:8d:45:74:1c:08:a7: f6:20:0e:45:7c:e9:58:53:5a:28:4b:61:bf:e2:8b:0c:89:d8: 32:d0:3d:f1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7wHNoT26SUtZI2HEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk NWZjZmQ2N2YtODUzYy00NDIxLWJlMzItMzQ3MTRiODY4ZTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhh6UY8jNAbPmAJXLi03RSXCDr8Tkj6YIX9CG /BiMEBa8GlYYAbYOthOUbBhSgzgk8OSzvGiFEwpbQdhdq2zFavSVt4zaGWFxKZAE wNOj3TtnFWEH4vA/Shv2VwG0pYpdwd1mxxQOVxs/X7WyeQwDqRT4QB5GaDcTqo74 oTYR/58+FYVbbaIM/obKAgLz0g2zOEjNn/geuObt/mH0yUvOiYn4VpQEcu+Tbg0C jy5IJGmtSrdWpJB3m/0SvaMPkmT3pAZeU56fGd+kVz/rzFrP3+MQLd/9xiwUE1eM k5HBjgQejlTIXHROl+Fn7OFhp+MsT4Fz2GoVKiVB2s4HPLnAxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNoiZP0rx5zx95E6YKXvhPUrlFqQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDlmN2M5YzAtNjBmMC0z Y2I3LWE4NTgtMjRkOWRhYzE2MGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHAMqxuLrQQNIzNmHdGA0vYL9kpyy/3+AKrVyeULdvtlo63qNLpL yEEULRlLX1qKi2IisuymzQehfbfReWpIv2WBFg0JCsPlpKifmsC94d+9CDmCjEbk 0zgpqHJfrlfxaEGm9mUVQQM+5r/uTX1u5OFJSMdBWZ+3Up6271UmR9+AJZYEXnwF d7SzNkSsVM9nuj4P+Yuxc7kee2QcWWjd9yyvpDL2/yr6eTZiU2hoZFYT/zVQtSjj v7TiJq8/cbqgOHVWeZkVWlZpVHG644XKHhPSrVSVhsHgIN8ara/MXSmSvelMco1F dBwIp/YgDkV86VhTWihLYb/iiwyJ2DLQPfE= -----END CERTIFICATE-----Generated at Sat Sep 26 22:26:25 2026 by rpki-client