$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/948f34c2-4400-3cca-b8ab-dc762f25ca3c.roa File: 948f34c2-4400-3cca-b8ab-dc762f25ca3c.roa (raw, json) Hash identifier: 7U8kdF83Jr0o5Ossz05+lRlEZZKhCWZtni49+Pl4vl0= Subject key identifier: 28:20:D5:9D:53:15:EE:34:95:52:DB:3A:B1:05:F7:14:E3:E5:F6:67 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F497345EC4CF5F3204CC7D000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/948f34c2-4400-3cca-b8ab-dc762f25ca3c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396608 IP address blocks: 2001:500:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:45:ec:4c:f5:f3:20:4c:c7:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ff5f926e-0224-459f-9d8a-2a6d01abd54b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:20:26:55:6c:8a:82:dc:ae:3d:7f:d1:ea:17: a3:a0:38:a6:74:62:69:98:04:19:75:4b:2a:e0:3d: 37:52:03:e8:d3:31:6d:b7:c7:31:cf:7a:83:a6:70: 12:b7:e6:14:51:cd:74:48:b9:97:4c:c9:8c:d8:9b: 85:0f:83:fb:f9:1f:4f:37:c1:c2:b8:ce:ff:7e:c9: 52:60:b7:54:1f:75:3b:ed:5b:31:40:f3:b6:84:1f: 4f:6c:cd:86:2e:ed:88:a4:a6:fc:ff:e6:d1:54:06: b1:c1:b9:85:e6:3b:33:20:e9:f8:80:c9:c1:12:66: 36:00:0f:cd:49:ad:3f:59:2b:3d:27:29:43:d4:29: fa:71:de:87:c2:95:04:1c:d8:ab:33:5c:97:87:b1: f1:47:93:47:be:86:9a:16:1f:9d:a5:11:63:cf:3e: 5a:00:6d:9d:92:06:41:1f:e3:19:be:6c:d6:19:0e: 28:19:bc:0b:aa:01:6b:28:b9:db:98:ba:cb:8c:d9: ef:c6:71:48:7e:af:e9:4c:96:66:be:35:88:45:79: 3b:4b:52:b0:8d:85:fc:4d:eb:88:62:e5:89:b5:f2: 41:1c:b8:b5:ff:1d:96:d1:00:2e:61:41:82:59:61: 6a:92:f2:7a:b8:e0:ed:4b:48:f6:bd:ce:c3:0b:9d: b3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:20:D5:9D:53:15:EE:34:95:52:DB:3A:B1:05:F7:14:E3:E5:F6:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/948f34c2-4400-3cca-b8ab-dc762f25ca3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:2b:77:49:8f:9b:91:fa:c3:b7:68:b1:1b:11:29:c2:c7:e0: 71:87:08:25:cf:44:35:89:06:e8:11:76:f0:b6:33:03:e9:9d: 67:0b:3f:01:ae:25:c5:9f:cf:43:b8:dd:ec:ab:95:6b:c6:6b: ce:9b:53:c5:e5:ec:67:63:04:04:c7:84:c4:05:a0:5a:69:ab: 3f:3f:3a:aa:d1:39:f0:16:d8:54:d3:bf:08:b5:de:74:13:e7: 32:a6:36:78:f9:ad:48:25:6f:00:34:04:ef:48:15:c8:c8:d6: aa:f5:14:e7:21:18:a8:94:58:e4:97:5d:50:41:72:94:ad:64: 1a:72:ed:98:7b:2e:a4:93:52:9e:43:35:0e:59:96:de:6e:bc: ae:d5:79:84:10:e6:f2:3f:cd:88:d1:30:fe:c1:46:7e:eb:47: 75:d4:fa:9f:c7:a6:06:21:20:80:be:0f:8e:ac:6d:e1:31:b3: 5e:ca:3a:d0:51:2e:32:33:33:46:4d:f6:0d:d7:f4:01:45:b9: 39:b7:27:7b:fe:07:00:9b:93:59:c1:bd:e2:76:3e:cd:9f:a0: ae:6f:55:15:a6:ca:d2:96:a1:ef:77:fc:07:45:e9:af:cc:2a: 12:65:ae:83:17:5a:07:65:fd:68:09:2f:37:a1:8d:33:b6:17: de:50:af:08 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc0XsTPXzIEzH0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmY1ZjkyNmUtMDIyNC00NTlmLTlkOGEtMmE2ZDAxYWJkNTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSAmVWyKgtyuPX/R6hejoDimdGJpmAQZdUsq 4D03UgPo0zFtt8cxz3qDpnASt+YUUc10SLmXTMmM2JuFD4P7+R9PN8HCuM7/fslS YLdUH3U77VsxQPO2hB9PbM2GLu2IpKb8/+bRVAaxwbmF5jszIOn4gMnBEmY2AA/N Sa0/WSs9JylD1Cn6cd6HwpUEHNirM1yXh7HxR5NHvoaaFh+dpRFjzz5aAG2dkgZB H+MZvmzWGQ4oGbwLqgFrKLnbmLrLjNnvxnFIfq/pTJZmvjWIRXk7S1KwjYX8TeuI YuWJtfJBHLi1/x2W0QAuYUGCWWFqkvJ6uODtS0j2vc7DC52z7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCgg1Z1TFe40lVLbOrEF9xTj5fZnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTQ4ZjM0YzItNDQwMC0z Y2NhLWI4YWItZGM3NjJmMjVjYTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADgrd0mPm5H6w7dosRsRKcLH4HGHCCXPRDWJBugRdvC2MwPpnWcL PwGuJcWfz0O43eyrlWvGa86bU8Xl7GdjBATHhMQFoFppqz8/OqrROfAW2FTTvwi1 3nQT5zKmNnj5rUglbwA0BO9IFcjI1qr1FOchGKiUWOSXXVBBcpStZBpy7Zh7LqST Up5DNQ5Zlt5uvK7VeYQQ5vI/zYjRMP7BRn7rR3XU+p/HpgYhIIC+D46sbeExs17K OtBRLjIzM0ZN9g3X9AFFuTm3J3v+BwCbk1nBveJ2Ps2foK5vVRWmytKWoe93/AdF 6a/MKhJlroMXWgdl/WgJLzehjTO2F95Qrwg= -----END CERTIFICATE-----Generated at Sun Sep 27 14:47:15 2026 by rpki-client