$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a2352a4-35d4-3897-93df-dd161c466425.roa File: 7a2352a4-35d4-3897-93df-dd161c466425.roa (raw, json) Hash identifier: fSI2mobOo+gDvQQhjBGbNt0/OlpQDL/c5WuGxWgq0+w= Subject key identifier: A8:EF:40:B4:9F:B5:4A:C2:CE:E4:5E:F3:F0:C9:46:22:B4:3D:D3:3C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4987E042F7C06769013C48C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a2352a4-35d4-3897-93df-dd161c466425.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396584 IP address blocks: 2001:500:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:e0:42:f7:c0:67:69:01:3c:48:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=91b58b3d-cad5-43b0-8912-48e11c092113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d2:5b:5b:cd:39:b5:55:56:08:ca:d5:0e:2c: 24:7c:07:88:c3:5a:79:3b:b8:54:fe:70:32:8f:5f: ad:ae:bd:16:b0:89:79:82:b7:f4:c6:e8:77:6c:00: 6a:c1:91:36:c1:ea:32:44:80:75:0b:b7:77:26:dd: de:b5:dd:b2:db:46:c5:ae:50:c5:2e:86:7f:33:05: c6:8c:a6:a9:ea:2c:80:57:8f:3f:dd:69:6f:12:93: c9:3f:fd:00:d8:e9:6b:df:a8:3d:8e:9b:df:0c:d0: 95:8d:04:70:86:86:23:cb:99:51:b0:5c:1c:b0:1d: dd:c7:c0:13:c3:6b:75:91:ac:49:d3:95:d8:a2:31: 8e:4f:a9:46:da:14:c8:30:10:fc:8d:18:6c:fd:33: 6a:49:12:ac:7c:61:b8:ac:5b:f0:6f:cb:a3:08:b5: 94:ec:8d:15:b5:fc:b8:61:82:1c:56:ef:84:ad:3c: 04:c6:ca:a3:e4:97:bf:56:26:89:0d:27:51:73:d1: 1a:88:c2:fd:57:56:47:c3:a1:2d:14:34:cd:d2:da: 4f:f9:35:ad:67:71:7b:e8:f3:9d:bb:86:7a:56:3e: 22:cf:47:ce:87:96:b0:96:27:11:f0:52:bf:25:0b: 3f:5b:a0:33:e5:05:5c:f5:89:e2:cb:37:93:10:49: ce:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:EF:40:B4:9F:B5:4A:C2:CE:E4:5E:F3:F0:C9:46:22:B4:3D:D3:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a2352a4-35d4-3897-93df-dd161c466425.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:8b:af:11:39:4b:b4:84:94:1d:13:52:14:4c:35:11:9d:68: 08:58:8b:1c:54:b4:47:05:f2:5c:17:82:c0:a9:5d:21:d5:19: 86:99:65:02:9d:0e:2a:9d:1f:aa:cb:fd:7e:55:5d:e3:93:51: 61:e1:b2:63:1e:5a:55:68:9e:18:ad:b5:1c:3b:4f:c5:58:96: 48:18:b8:18:56:aa:db:09:55:26:89:8b:15:ca:a6:62:e3:ed: 1c:6f:73:1c:55:14:1c:35:6b:fe:1c:1f:8a:f6:96:26:36:0a: 45:86:55:2f:f5:05:ec:d9:90:c4:b7:80:87:ac:be:eb:96:bb: a0:a5:e6:56:c7:4a:cb:50:2c:73:ec:af:d9:03:70:c4:79:b5: 79:c6:f0:41:53:df:42:54:fb:49:a4:a2:a2:eb:85:9b:74:17: dd:a7:55:cc:0c:fa:c7:5a:14:fd:29:1b:43:27:33:06:c6:3f: e3:f7:d8:e7:93:99:cf:3b:fc:5d:4e:fa:25:87:56:93:4c:9b: 90:9d:13:c6:9e:84:6d:e9:bd:58:7f:2a:79:6f:87:0d:eb:5f: af:df:e9:ef:30:9c:4e:0b:a6:31:37:d7:29:07:c9:30:54:47: d0:c5:1d:19:d4:2d:f2:cf:4d:91:43:7d:b1:95:25:4e:6b:d1: 7c:ac:d5:01 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jh+BC98BnaQE8SMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTFiNThiM2QtY2FkNS00M2IwLTg5MTItNDhlMTFjMDkyMTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdJbW805tVVWCMrVDiwkfAeIw1p5O7hU/nAy j1+trr0WsIl5grf0xuh3bABqwZE2weoyRIB1C7d3Jt3etd2y20bFrlDFLoZ/MwXG jKap6iyAV48/3WlvEpPJP/0A2Olr36g9jpvfDNCVjQRwhoYjy5lRsFwcsB3dx8AT w2t1kaxJ05XYojGOT6lG2hTIMBD8jRhs/TNqSRKsfGG4rFvwb8ujCLWU7I0Vtfy4 YYIcVu+ErTwExsqj5Je/ViaJDSdRc9EaiML9V1ZHw6EtFDTN0tpP+TWtZ3F76POd u4Z6Vj4iz0fOh5awlicR8FK/JQs/W6Az5QVc9YniyzeTEEnOqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKjvQLSftUrCzuRe8/DJRiK0PdM8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2EyMzUyYTQtMzVkNC0z ODk3LTkzZGYtZGQxNjFjNDY2NDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK2LrxE5S7SElB0TUhRMNRGdaAhYixxUtEcF8lwXgsCpXSHVGYaZ ZQKdDiqdH6rL/X5VXeOTUWHhsmMeWlVonhittRw7T8VYlkgYuBhWqtsJVSaJixXK pmLj7RxvcxxVFBw1a/4cH4r2liY2CkWGVS/1BezZkMS3gIesvuuWu6Cl5lbHSstQ LHPsr9kDcMR5tXnG8EFT30JU+0mkoqLrhZt0F92nVcwM+sdaFP0pG0MnMwbGP+P3 2OeTmc87/F1O+iWHVpNMm5CdE8aehG3pvVh/Knlvhw3rX6/f6e8wnE4LpjE31ykH yTBUR9DFHRnULfLPTZFDfbGVJU5r0Xys1QE= -----END CERTIFICATE-----Generated at Mon Sep 28 10:55:22 2026 by rpki-client