$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a161e11f-71af-35bb-8ce2-82fdb1b65224.roa File: a161e11f-71af-35bb-8ce2-82fdb1b65224.roa (raw, json) Hash identifier: rjaPbfhYFZk7AWAMcksxPQqFmWVP4AHWibg9XgrV+6g= Subject key identifier: F8:68:3A:4A:56:50:A2:13:B2:46:9F:C4:F1:3B:F3:63:D0:B9:2B:A9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F49745A68D366A65F51D0C300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a161e11f-71af-35bb-8ce2-82fdb1b65224.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36621 IP address blocks: 2001:500:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:5a:68:d3:66:a6:5f:51:d0:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c5ef1b83-80bc-4f0f-83b8-ebe89987dbff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:45:f7:47:69:95:82:35:e5:f9:8e:a8:06:c4: 63:9e:84:6a:f7:94:b5:94:24:7f:04:46:ad:3c:8c: fd:1e:59:12:9a:d0:c7:c2:fa:04:55:1f:92:89:88: 3e:22:83:74:b2:6c:06:8b:a5:5d:f2:55:36:14:97: 42:d9:e8:ff:81:5d:2d:f6:7a:83:5f:49:ed:b0:f9: 0d:ea:06:8e:22:ba:8c:20:52:3d:01:14:b5:88:b4: f1:47:b5:41:5c:a1:9d:14:69:7d:9f:a3:4e:c5:b4: 92:f8:50:03:97:3f:15:05:50:45:52:d1:50:40:b0: 47:d1:51:63:64:78:59:f5:75:6d:d0:78:72:5a:ef: 62:cb:2d:aa:5d:78:7d:c3:e4:ea:80:77:b9:30:3b: b8:de:e4:78:12:fa:05:22:b2:3c:23:ec:43:cb:29: c7:4f:17:67:f6:32:48:72:79:be:d2:80:b0:4d:3b: 68:58:69:b8:f6:50:b7:7a:3d:55:fa:3c:ca:ef:0e: 0a:7e:ee:b8:05:58:42:12:e6:c2:7f:8a:00:2b:ec: c3:f2:c1:81:cc:9b:17:86:92:63:51:c9:0f:93:75: 0b:9a:aa:1c:9c:61:79:9c:36:07:97:e7:ee:0a:d3: 97:ee:ee:cd:6c:08:f5:7a:c9:bd:1c:3a:2b:e6:86: 8b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:68:3A:4A:56:50:A2:13:B2:46:9F:C4:F1:3B:F3:63:D0:B9:2B:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a161e11f-71af-35bb-8ce2-82fdb1b65224.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:e0:50:f6:45:76:14:7b:90:65:df:f3:72:9e:c2:d1:80:52: 91:70:51:84:09:2b:95:07:f4:61:a3:43:f0:85:49:ec:81:52: 3c:1f:db:5d:6d:b8:7c:82:71:d4:c0:a7:8d:a2:13:b4:28:cb: a2:11:bc:d9:ca:8b:ed:8b:22:0e:6d:ba:ae:76:c5:0e:78:3b: ff:88:e6:62:b5:8b:de:46:54:ed:34:79:46:a4:93:32:d7:3c: 6d:7a:99:77:8c:f8:9f:dc:f0:13:dd:02:0a:9e:74:cd:1f:ea: 63:71:98:8f:c5:66:84:a5:31:26:39:cb:14:c8:68:b4:64:2f: ad:5a:3a:71:42:a6:a5:18:5a:b4:71:25:1d:ab:9f:97:63:fb: 15:c9:a9:74:6a:b8:15:25:54:0c:a6:91:86:2b:11:51:65:27: 62:82:ca:a6:d3:f8:cc:26:b2:5e:cb:f9:30:e1:b1:31:cc:61: 27:48:0f:ac:01:7f:59:16:9d:a2:ad:07:aa:78:97:a4:a2:d9: ac:19:ad:1d:68:4e:e9:88:d9:bf:04:81:9d:70:14:1a:89:f1: e1:a2:be:52:40:08:02:c2:90:97:8c:32:ec:39:e8:84:7e:05: 32:4d:8d:2e:8e:83:a3:fa:f2:0b:8e:17:b9:fe:66:78:d1:c7: 3f:ad:bb:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdFpo02amX1HQwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzVlZjFiODMtODBiYy00ZjBmLTgzYjgtZWJlODk5ODdkYmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUX3R2mVgjXl+Y6oBsRjnoRq95S1lCR/BEat PIz9HlkSmtDHwvoEVR+SiYg+IoN0smwGi6Vd8lU2FJdC2ej/gV0t9nqDX0ntsPkN 6gaOIrqMIFI9ARS1iLTxR7VBXKGdFGl9n6NOxbSS+FADlz8VBVBFUtFQQLBH0VFj ZHhZ9XVt0HhyWu9iyy2qXXh9w+TqgHe5MDu43uR4EvoFIrI8I+xDyynHTxdn9jJI cnm+0oCwTTtoWGm49lC3ej1V+jzK7w4Kfu64BVhCEubCf4oAK+zD8sGBzJsXhpJj UckPk3ULmqocnGF5nDYHl+fuCtOX7u7NbAj1esm9HDor5oaLbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPhoOkpWUKITskafxPE782PQuSupMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTE2MWUxMWYtNzFhZi0z NWJiLThjZTItODJmZGIxYjY1MjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD3gUPZFdhR7kGXf83KewtGAUpFwUYQJK5UH9GGjQ/CFSeyBUjwf 211tuHyCcdTAp42iE7Qoy6IRvNnKi+2LIg5tuq52xQ54O/+I5mK1i95GVO00eUak kzLXPG16mXeM+J/c8BPdAgqedM0f6mNxmI/FZoSlMSY5yxTIaLRkL61aOnFCpqUY WrRxJR2rn5dj+xXJqXRquBUlVAymkYYrEVFlJ2KCyqbT+Mwmsl7L+TDhsTHMYSdI D6wBf1kWnaKtB6p4l6Si2awZrR1oTumI2b8EgZ1wFBqJ8eGivlJACALCkJeMMuw5 6IR+BTJNjS6Og6P68guOF7n+ZnjRxz+tu0s= -----END CERTIFICATE-----Generated at Fri Sep 25 09:15:40 2026 by rpki-client