$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d9280d0-3fe5-3036-b1c2-86ddd36d6a45.roa File: 8d9280d0-3fe5-3036-b1c2-86ddd36d6a45.roa (raw, json) Hash identifier: FfWOQSsoGo8Y/ojcfUYiG+i773AYSm1vl8UdXOmHWdM= Subject key identifier: 48:52:B3:C9:88:F8:F3:E6:4C:CE:67:78:66:E8:F7:27:2D:54:58:53 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F497F7BC1080B4CDB10080C40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d9280d0-3fe5-3036-b1c2-86ddd36d6a45.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396545 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:7b:c1:08:0b:4c:db:10:08:0c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5a3a36da-a3f3-42b2-86af-ef2852eb8fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2b:22:8a:1e:a9:56:71:ce:01:e7:16:e4:16: f0:9a:fc:fc:df:d0:35:90:91:72:3d:5f:35:06:7c: ba:94:32:1c:0b:9d:86:93:60:27:9f:35:dc:db:19: 07:b6:67:61:f2:a1:b5:79:40:d8:df:ed:02:a5:64: 45:32:99:c3:66:85:c9:07:e4:78:0b:77:25:9c:28: cc:94:20:37:ff:db:56:24:df:92:10:87:69:85:f9: 94:42:f7:2e:e6:ea:f2:32:6c:1f:ec:11:12:8e:2b: 68:38:4e:91:48:68:1a:18:cb:c0:a1:69:21:1a:02: 82:ea:79:6f:80:ef:66:80:97:ca:7e:0f:2c:fa:85: cf:bc:c8:73:e5:18:18:7a:8d:a2:03:d3:e4:85:fe: 2d:fa:0f:3c:70:2f:93:34:f7:38:d8:3a:41:13:4d: 6f:a9:65:46:5c:dd:2d:8e:fa:fc:87:59:14:2e:40: 62:02:05:a7:a7:65:af:ae:82:b1:ce:02:f9:11:3f: 6b:3a:fe:de:49:08:f9:21:07:10:30:5d:ad:6d:01: df:6b:ca:5b:3f:fd:64:26:b7:84:5c:5f:32:cf:1a: 01:ac:ca:5a:ef:8a:eb:4e:6a:da:3e:15:7f:52:ce: ae:92:d2:35:67:36:ba:f5:6b:d2:39:27:e8:37:e5: ff:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:52:B3:C9:88:F8:F3:E6:4C:CE:67:78:66:E8:F7:27:2D:54:58:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d9280d0-3fe5-3036-b1c2-86ddd36d6a45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:b6:68:86:2b:d1:f5:41:38:87:87:8e:3b:8b:bb:bc:d6:ee: da:ec:fc:4f:67:18:ed:c8:f2:ea:49:f5:27:e1:a4:c8:e9:df: b5:21:38:22:73:bf:49:ca:3e:ab:40:67:41:5c:b1:0f:91:2a: 28:11:9a:de:34:b1:69:d5:9f:6a:af:10:a4:81:02:4c:11:cc: cd:d9:d6:7e:6b:b0:dc:75:80:e4:55:2e:5c:60:33:2a:f9:92: 3c:4b:cd:0d:fd:49:8d:cc:70:62:3f:3a:6d:bd:7c:63:ba:c4: e6:27:94:a7:70:e7:b7:ef:c6:2b:f5:9b:1d:27:cf:f7:aa:93: 54:98:a7:a0:62:f0:da:5f:56:fb:0b:15:a1:2e:80:df:7a:e3: 14:e7:e9:e6:1b:3c:a2:64:d8:26:fd:f1:ab:41:e5:65:89:4f: 79:99:e7:6a:5f:eb:c4:df:96:88:42:34:c4:27:f0:f2:09:4e: 33:69:8b:62:56:2b:ba:18:6e:ba:cd:b0:7c:00:31:96:57:a6: 9d:bf:6a:bc:de:a0:76:b1:e5:d7:49:ac:e5:91:55:8f:28:4c: c5:5d:c0:f5:c8:3f:05:23:b6:0b:df:cf:c4:f9:de:ef:63:30: 40:03:2b:85:83:63:69:34:dc:44:f0:68:87:18:27:e1:bc:22: 41:52:4b:ef -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9Jf3vBCAtM2xAIDEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWEzYTM2ZGEtYTNmMy00MmIyLTg2YWYtZWYyODUyZWI4ZmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnysiih6pVnHOAecW5Bbwmvz839A1kJFyPV81 Bny6lDIcC52Gk2AnnzXc2xkHtmdh8qG1eUDY3+0CpWRFMpnDZoXJB+R4C3clnCjM lCA3/9tWJN+SEIdphfmUQvcu5uryMmwf7BESjitoOE6RSGgaGMvAoWkhGgKC6nlv gO9mgJfKfg8s+oXPvMhz5RgYeo2iA9Pkhf4t+g88cC+TNPc42DpBE01vqWVGXN0t jvr8h1kULkBiAgWnp2WvroKxzgL5ET9rOv7eSQj5IQcQMF2tbQHfa8pbP/1kJreE XF8yzxoBrMpa74rrTmraPhV/Us6uktI1Zza69WvSOSfoN+X/GwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEhSs8mI+PPmTM5neGbo9yctVFhTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGQ5MjgwZDAtM2ZlNS0z MDM2LWIxYzItODZkZGQzNmQ2YTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAvtmiGK9H1QTiHh447i7u81u7a7PxPZxjtyPLq SfUn4aTI6d+1ITgic79Jyj6rQGdBXLEPkSooEZreNLFp1Z9qrxCkgQJMEczN2dZ+ a7DcdYDkVS5cYDMq+ZI8S80N/UmNzHBiPzptvXxjusTmJ5SncOe378Yr9ZsdJ8/3 qpNUmKegYvDaX1b7CxWhLoDfeuMU5+nmGzyiZNgm/fGrQeVliU95medqX+vE35aI QjTEJ/DyCU4zaYtiViu6GG66zbB8ADGWV6adv2q83qB2seXXSazlkVWPKEzFXcD1 yD8FI7YL38/E+d7vYzBAAyuFg2NpNNxE8GiHGCfhvCJBUkvv -----END CERTIFICATE-----Generated at Fri Sep 25 23:27:45 2026 by rpki-client