$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4afd8722-9820-34dc-9863-63c0a5b6e737.roa File: 4afd8722-9820-34dc-9863-63c0a5b6e737.roa (raw, json) Hash identifier: u1uFaz8QnnzWU7Zfl/6u0e87c9d+6ouK3eweyDgvIpc= Subject key identifier: DC:6D:F5:C1:4E:3A:C5:68:E9:AF:E9:FF:E2:AB:6A:F5:5E:AF:A4:CC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F03A7746839388305353B9100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4afd8722-9820-34dc-9863-63c0a5b6e737.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 396588 IP address blocks: 2001:500:124::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:74:68:39:38:83:05:35:3b:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=bd3836d7-9463-4d99-b6a0-0e70d2fd6415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:da:6a:7e:bd:89:63:df:90:2c:4d:a6:86:b6: b6:12:c9:44:16:95:a2:56:8f:cc:b4:df:1f:aa:4c: 31:51:be:41:46:c2:47:16:35:e8:a5:2d:2f:88:2c: 46:b2:cb:04:97:23:36:af:2b:db:eb:8d:22:60:75: 33:4b:56:49:c1:07:ea:82:88:f3:b6:42:34:3f:29: 9a:d7:ea:e5:eb:f7:a6:41:cf:79:3b:cb:36:fb:cf: 90:37:8e:86:5d:07:5b:b0:8d:55:21:22:de:2a:3b: bb:36:ef:8f:e3:be:6b:1d:4e:08:83:84:5c:46:09: 69:a6:51:ef:ca:dd:b4:15:5d:de:08:6c:cb:a9:6e: f7:3c:b1:c0:d4:6a:31:6a:d2:69:16:2c:32:56:c8: f3:73:98:d1:51:54:cb:02:16:ed:9b:77:f7:08:7b: fb:3f:ca:5a:f2:52:0f:cf:6e:16:65:53:f0:ca:96: ad:54:47:59:03:d5:71:11:ac:db:f7:14:bb:72:46: ab:7d:2f:bb:f4:8a:f7:a1:e2:e4:67:c4:de:92:b6: e3:2f:e0:f6:4a:e7:6f:28:48:31:8f:5f:16:f2:c8: 70:77:f6:85:b5:28:ef:4f:73:63:67:40:66:72:fa: b3:ea:72:63:d3:19:02:da:4b:b3:e5:96:1d:2a:f4: 97:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:6D:F5:C1:4E:3A:C5:68:E9:AF:E9:FF:E2:AB:6A:F5:5E:AF:A4:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4afd8722-9820-34dc-9863-63c0a5b6e737.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:124::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:dc:36:30:c2:9d:a0:11:49:db:f2:3e:2e:58:07:b5:66:db: 18:f7:0f:80:07:88:68:51:a9:61:31:0c:38:36:cd:c7:53:f6: 3a:1c:ae:2e:a4:bb:d7:45:73:cf:be:6c:9c:ca:c4:ed:23:7c: 74:4e:bf:67:78:d1:54:93:fa:ed:9c:00:50:2e:c9:85:20:42: e3:15:c5:52:17:4b:9e:fa:2b:ba:24:ed:02:8a:1a:7a:21:c5: 6e:7a:5c:40:2b:ea:b5:c2:2b:64:92:82:37:ed:c2:b8:42:c4: 97:5b:bd:65:48:9c:3f:14:58:6e:8e:a7:2e:25:8e:57:83:c6: a5:d9:8e:eb:c0:06:15:87:5a:2e:75:6b:aa:38:b9:4a:3c:a0: c5:ab:ef:2d:f4:30:b8:e6:9e:63:a2:5e:9e:5c:37:0f:ea:7f: 68:2a:94:4c:60:3f:93:f2:73:6c:a5:10:48:cc:4d:55:17:0a: 93:bf:39:d7:e6:96:fc:6c:0d:e7:27:9d:cc:01:98:17:d8:44: 91:ee:05:68:ae:4c:aa:6c:03:29:89:0c:2f:cd:2c:d7:e3:0e: a2:b7:f8:8f:3c:5e:35:ef:b6:84:61:09:ae:02:ff:23:74:5c: 08:0b:eb:6f:df:e5:ae:74:cf:c8:3e:b3:5e:9b:3d:6f:eb:a3: 46:7e:4b:6b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8Dp3RoOTiDBTU7kQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk YmQzODM2ZDctOTQ2My00ZDk5LWI2YTAtMGU3MGQyZmQ2NDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNpqfr2JY9+QLE2mhra2EslEFpWiVo/MtN8f qkwxUb5BRsJHFjXopS0viCxGsssElyM2ryvb640iYHUzS1ZJwQfqgojztkI0Pyma 1+rl6/emQc95O8s2+8+QN46GXQdbsI1VISLeKju7Nu+P475rHU4Ig4RcRglpplHv yt20FV3eCGzLqW73PLHA1GoxatJpFiwyVsjzc5jRUVTLAhbtm3f3CHv7P8pa8lIP z24WZVPwypatVEdZA9VxEazb9xS7ckarfS+79Ir3oeLkZ8TekrbjL+D2SudvKEgx j18W8shwd/aFtSjvT3NjZ0Bmcvqz6nJj0xkC2kuz5ZYdKvSXKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNxt9cFOOsVo6a/p/+KravVer6TMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGFmZDg3MjItOTgyMC0z NGRjLTk4NjMtNjNjMGE1YjZlNzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA3cNjDCnaARSdvyPi5YB7Vm2xj3D4AHiGhRqWExDDg2zcdT9joc ri6ku9dFc8++bJzKxO0jfHROv2d40VST+u2cAFAuyYUgQuMVxVIXS576K7ok7QKK GnohxW56XEAr6rXCK2SSgjftwrhCxJdbvWVInD8UWG6Opy4ljleDxqXZjuvABhWH Wi51a6o4uUo8oMWr7y30MLjmnmOiXp5cNw/qf2gqlExgP5Pyc2ylEEjMTVUXCpO/ OdfmlvxsDecnncwBmBfYRJHuBWiuTKpsAymJDC/NLNfjDqK3+I88XjXvtoRhCa4C /yN0XAgL62/f5a50z8g+s16bPW/ro0Z+S2s= -----END CERTIFICATE-----Generated at Sat Sep 26 09:49:46 2026 by rpki-client