$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a0a3139-6b5b-3b5a-b60e-c7f1cba394af.roa File: 8a0a3139-6b5b-3b5a-b60e-c7f1cba394af.roa (raw, json) Hash identifier: 9AK/D6i0Ur+d3wLl865fbYD2kEt4rIPFQs+ehcwBoo8= Subject key identifier: 59:E5:EB:E0:09:29:85:C5:0B:A1:CB:1B:21:7E:A7:CC:5B:C7:4A:D0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4987324A1C72397F82D6BCC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a0a3139-6b5b-3b5a-b60e-c7f1cba394af.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397195 IP address blocks: 2001:500:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:32:4a:1c:72:39:7f:82:d6:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2d46aa03-7518-4aa3-848c-59c01d3ef56e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9d:b2:50:93:66:a8:7b:fe:ea:da:10:2e:d4: b3:b6:84:e9:03:8a:ca:69:24:37:5e:ea:ae:9f:5e: c9:db:8b:03:b3:18:3f:be:f8:ec:b9:47:c3:e1:0b: d6:c3:23:84:07:e6:d6:8c:7b:ba:8a:1d:8c:5a:4e: bc:cd:8b:dd:53:68:ef:3a:ed:3b:4a:d8:b9:ff:00: 20:08:33:38:9f:7a:70:4f:61:0e:14:22:34:b7:2b: b8:ce:c7:25:01:9d:d8:1c:d0:50:5b:35:6c:3d:71: f2:98:59:73:75:16:78:2c:e9:96:a2:0a:4c:79:f0: ee:a9:eb:f9:1c:59:b3:a6:2d:13:63:bd:c9:9f:c6: 95:c5:44:77:15:25:11:96:91:bb:8c:4a:ce:28:a3: 10:89:2e:23:3e:2b:d4:fb:66:c8:79:70:81:57:1e: 84:1f:22:1b:fe:4e:13:1f:d2:34:ae:e9:b7:0a:09: c6:bc:e1:ee:4a:4c:6f:ba:0c:be:fb:67:0a:31:ba: 76:ac:3b:29:7f:c6:c0:26:3d:c1:42:3f:77:6e:34: 73:f4:64:87:8a:40:b0:13:99:12:27:7d:bb:f2:e1: cd:57:8c:b4:38:94:81:ac:3c:9e:14:48:f6:c6:b4: 98:08:64:71:50:07:0c:e3:e6:7a:f6:0e:1b:41:56: 45:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E5:EB:E0:09:29:85:C5:0B:A1:CB:1B:21:7E:A7:CC:5B:C7:4A:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a0a3139-6b5b-3b5a-b60e-c7f1cba394af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:ee:49:3e:58:d5:53:f4:a1:e8:b9:b6:07:8e:b4:67:63:82: 79:09:de:90:31:b9:e0:5b:5d:21:89:75:c3:da:0e:c9:f3:55: e4:71:cf:d8:c1:2c:4f:0a:5e:cd:e7:22:ce:3f:66:dc:99:4f: 36:09:66:af:9f:1f:b0:54:5b:de:9b:40:4a:b6:22:dd:55:42: 72:1c:9d:36:3b:41:d3:e8:1f:92:ce:8a:64:b8:52:a8:63:b2: 37:e2:6f:81:bc:e3:f2:4e:5c:3b:2c:1c:76:cc:a0:2f:0f:85: 87:6b:42:5e:72:87:9f:16:26:04:4a:35:8a:5a:fe:ca:73:56: e8:19:0a:b5:e8:36:f4:70:8b:d6:82:51:b8:7c:67:8a:cd:40: a9:6d:9d:f0:46:37:bc:96:59:ef:57:5f:13:a0:ab:7d:f3:5f: ed:90:63:55:af:93:b3:cc:3c:e1:ab:f7:32:b3:4a:d2:d9:38: e1:fe:78:15:4f:c7:d8:61:4d:aa:6f:8f:3f:bf:23:5f:a7:6b: e5:01:73:9f:a2:9d:1b:82:99:e0:2b:e8:b9:66:58:35:1e:fe: eb:7e:16:11:0a:3d:39:53:eb:59:e2:93:b2:37:e7:a8:f6:9c: 52:89:22:57:2e:23:27:9d:63:2a:35:eb:97:cd:06:16:14:17: d2:3c:cb:22 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JhzJKHHI5f4LWvMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmQ0NmFhMDMtNzUxOC00YWEzLTg0OGMtNTljMDFkM2VmNTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp2yUJNmqHv+6toQLtSztoTpA4rKaSQ3Xuqu n17J24sDsxg/vvjsuUfD4QvWwyOEB+bWjHu6ih2MWk68zYvdU2jvOu07Sti5/wAg CDM4n3pwT2EOFCI0tyu4zsclAZ3YHNBQWzVsPXHymFlzdRZ4LOmWogpMefDuqev5 HFmzpi0TY73Jn8aVxUR3FSURlpG7jErOKKMQiS4jPivU+2bIeXCBVx6EHyIb/k4T H9I0rum3CgnGvOHuSkxvugy++2cKMbp2rDspf8bAJj3BQj93bjRz9GSHikCwE5kS J3278uHNV4y0OJSBrDyeFEj2xrSYCGRxUAcM4+Z69g4bQVZFyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFnl6+AJKYXFC6HLGyF+p8xbx0rQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGEwYTMxMzktNmI1Yi0z YjVhLWI2MGUtYzdmMWNiYTM5NGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADruST5Y1VP0oei5tgeOtGdjgnkJ3pAxueBbXSGJdcPaDsnzVeRx z9jBLE8KXs3nIs4/ZtyZTzYJZq+fH7BUW96bQEq2It1VQnIcnTY7QdPoH5LOimS4 Uqhjsjfib4G84/JOXDssHHbMoC8PhYdrQl5yh58WJgRKNYpa/spzVugZCrXoNvRw i9aCUbh8Z4rNQKltnfBGN7yWWe9XXxOgq33zX+2QY1Wvk7PMPOGr9zKzStLZOOH+ eBVPx9hhTapvjz+/I1+na+UBc5+inRuCmeAr6LlmWDUe/ut+FhEKPTlT61nik7I3 56j2nFKJIlcuIyedYyo165fNBhYUF9I8yyI= -----END CERTIFICATE-----Generated at Sat Sep 26 18:47:15 2026 by rpki-client