$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5158a879-dec2-33be-9e82-31f4c43665a2.roa File: 5158a879-dec2-33be-9e82-31f4c43665a2.roa (raw, json) Hash identifier: OH/zktYRGkGmKxYfq7jd2sq+br7yi5+YGvW4RgNPXnA= Subject key identifier: D7:B1:B7:24:CD:97:7B:7C:AD:AF:93:3C:A6:21:2A:26:71:AD:86:6E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4986A1FFE316600345DD9BC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5158a879-dec2-33be-9e82-31f4c43665a2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396590 IP address blocks: 2001:500:135::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:a1:ff:e3:16:60:03:45:dd:9b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=04725b94-002a-4edd-87be-6a59e73ff281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d4:ca:fe:63:1b:38:c6:f8:20:b2:92:3a:87: a3:8d:41:0a:db:27:94:ae:d2:98:36:03:40:e5:52: 0d:61:7c:87:f4:a0:b9:2a:01:e9:43:7f:02:1c:2a: 38:85:03:f4:0f:74:3b:f6:9f:df:6f:9b:3f:2f:cf: 1e:09:c5:b7:f5:64:7e:9c:4e:a3:de:d7:bb:4e:88: a2:d0:f5:76:e6:99:64:ee:e6:32:c6:43:6f:45:46: 25:b9:8e:9e:94:10:0d:7b:23:a5:ee:c6:d5:b3:2c: 34:60:d4:8f:ca:c1:98:c2:f9:b5:07:bf:a0:61:26: b7:54:9e:25:62:f8:e4:00:11:b0:58:41:3a:b2:2c: a5:bc:5a:b1:95:15:d8:7a:67:f5:d8:7b:34:fa:49: 1f:3d:b8:17:dd:7e:c4:e5:2a:53:7f:75:6e:65:51: 50:06:4e:d2:87:3f:b5:01:b0:c2:f8:4c:da:ac:f0: a9:a0:c1:9e:51:d5:ee:27:cb:0b:a0:ba:fe:24:7f: 42:86:0e:c7:ac:a5:00:e2:d2:2b:78:f8:b4:df:2f: ae:ac:01:dd:95:13:df:14:5a:bb:de:bc:3d:0d:03: 4a:cf:50:48:4a:9e:67:a6:b8:46:11:00:37:60:93: 86:62:36:c4:20:da:a3:cf:cc:e5:1c:b6:77:41:6b: 07:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B1:B7:24:CD:97:7B:7C:AD:AF:93:3C:A6:21:2A:26:71:AD:86:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5158a879-dec2-33be-9e82-31f4c43665a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:71:d9:71:86:08:e9:f1:ef:fc:8c:3e:cd:0f:94:6d:31:3c: c0:72:f6:67:81:2a:4c:79:7b:24:73:04:4a:22:c7:9d:a1:81: 05:61:d1:0b:29:9d:fd:4f:70:60:e3:ac:5f:c0:4f:59:f1:ea: 00:96:2a:a4:f0:5f:1a:4e:21:1c:c7:90:73:ac:4d:f1:d6:cd: a0:d7:fa:56:b1:10:1f:cd:d8:75:4c:ec:94:0f:c5:24:b1:cb: a2:f9:52:94:a5:5b:96:1c:d6:8a:f1:d5:1d:56:08:e7:92:96: 67:04:9c:8c:12:37:63:ca:4f:27:3f:8a:50:c5:1f:67:88:49: af:f3:05:56:e6:a4:11:61:a8:86:7a:60:5c:8f:9e:1e:c6:9a: 48:70:1c:93:75:61:a3:be:1c:a2:14:cc:3a:95:fd:ad:05:1e: f0:bc:5d:ba:54:0a:29:bb:34:ef:44:49:8b:9a:b8:9a:03:33: 42:6d:c3:31:ca:82:64:4d:4f:c8:10:3c:ec:32:cb:84:75:89: 96:da:73:af:9d:65:ff:48:d0:bc:1a:be:28:36:d0:1b:07:53: dc:35:00:0c:e7:5c:26:3a:2b:ae:b0:90:1b:4d:01:d0:e9:63: d9:27:e7:67:e4:5e:57:96:49:74:50:5c:f6:cc:34:2f:f9:69: 97:f3:a1:27 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9JhqH/4xZgA0Xdm8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDQ3MjViOTQtMDAyYS00ZWRkLTg3YmUtNmE1OWU3M2ZmMjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9TK/mMbOMb4ILKSOoejjUEK2yeUrtKYNgNA 5VINYXyH9KC5KgHpQ38CHCo4hQP0D3Q79p/fb5s/L88eCcW39WR+nE6j3te7Toii 0PV25plk7uYyxkNvRUYluY6elBANeyOl7sbVsyw0YNSPysGYwvm1B7+gYSa3VJ4l YvjkABGwWEE6siylvFqxlRXYemf12Hs0+kkfPbgX3X7E5SpTf3VuZVFQBk7Shz+1 AbDC+EzarPCpoMGeUdXuJ8sLoLr+JH9Chg7HrKUA4tIrePi03y+urAHdlRPfFFq7 3rw9DQNKz1BISp5nprhGEQA3YJOGYjbEINqjz8zlHLZ3QWsHvQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNextyTNl3t8ra+TPKYhKiZxrYZuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTE1OGE4NzktZGVjMi0z M2JlLTllODItMzFmNGM0MzY2NWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAjcdlxhgjp8e/8jD7ND5RtMTzAcvZngSpMeXsk cwRKIsedoYEFYdELKZ39T3Bg46xfwE9Z8eoAliqk8F8aTiEcx5BzrE3x1s2g1/pW sRAfzdh1TOyUD8Ukscui+VKUpVuWHNaK8dUdVgjnkpZnBJyMEjdjyk8nP4pQxR9n iEmv8wVW5qQRYaiGemBcj54exppIcByTdWGjvhyiFMw6lf2tBR7wvF26VAopuzTv REmLmriaAzNCbcMxyoJkTU/IEDzsMsuEdYmW2nOvnWX/SNC8Gr4oNtAbB1PcNQAM 51wmOiuusJAbTQHQ6WPZJ+dn5F5Xlkl0UFz2zDQv+WmX86En -----END CERTIFICATE-----Generated at Sat Sep 26 09:09:20 2026 by rpki-client