$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8689b51-a31e-3a1d-a3c6-e1b5546472d4.roa File: a8689b51-a31e-3a1d-a3c6-e1b5546472d4.roa (raw, json) Hash identifier: UK3N/f7KLoONpmcgptiQtigFOlXnA4r4Z7FhZ2KaEpI= Subject key identifier: 05:42:11:B0:F1:AF:4C:E2:33:F0:67:16:BA:9C:F9:19:EA:20:11:FA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F49748B58C2F0585267446580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8689b51-a31e-3a1d-a3c6-e1b5546472d4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396588 IP address blocks: 2001:500:125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:8b:58:c2:f0:58:52:67:44:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7d3c2272-d493-4ece-ae89-9b5a35c7e796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bf:40:61:b0:b9:03:8e:4e:08:0d:22:1d:9c: 79:ab:5b:d9:6b:1d:ec:f3:0e:a9:18:cd:76:a8:34: 25:9c:8e:33:05:43:0c:90:bb:f5:4f:06:65:f1:62: 0b:9b:8b:82:26:7a:e1:e1:87:5b:81:48:89:9d:7a: f6:95:f8:cc:54:10:7e:2f:35:77:d1:2a:33:19:06: 89:24:d3:65:bd:7d:9d:f7:34:cc:00:ff:5c:82:4b: 7b:d5:b0:11:53:43:40:e2:96:cd:08:75:30:04:ee: 7f:7d:fd:df:69:95:a4:b2:4c:ec:0c:bd:e0:55:83: 1c:8f:fd:ee:e5:9d:3a:16:c9:bb:45:75:ef:cb:a6: 40:e7:ae:e5:31:34:2c:25:46:2e:e2:28:92:ac:d0: 35:84:e3:cf:e0:58:4f:5c:9a:6f:c5:9c:3c:82:d1: 35:6d:bd:36:98:8a:3c:6f:81:a0:e5:92:d6:b7:a6: 19:03:b5:98:eb:e9:80:13:ad:e9:f9:72:dd:0f:8b: 73:bb:f0:61:56:c3:c3:24:17:30:e6:08:8b:4f:88: b3:ec:07:83:4f:bb:3b:ed:e1:9b:61:5c:de:9b:5e: cb:33:8c:d0:78:8b:c6:59:72:f4:40:aa:13:9e:65: c7:41:70:3d:c6:8e:40:95:07:1a:a0:7f:26:28:2e: e4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:42:11:B0:F1:AF:4C:E2:33:F0:67:16:BA:9C:F9:19:EA:20:11:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8689b51-a31e-3a1d-a3c6-e1b5546472d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:36:45:61:3e:72:63:84:44:33:c7:67:ab:88:76:32:ff:e1: bb:0d:95:d3:b0:e7:fb:0c:8d:d0:53:fa:91:7d:ae:d8:96:a3: 1c:e4:55:56:f2:79:6c:e6:f4:8a:78:ce:3b:97:80:ca:56:76: 1a:aa:0e:b2:e7:8c:54:27:a5:d1:8e:05:1e:e4:1e:d0:fc:08: db:91:69:36:36:e2:61:b9:de:30:e1:7c:7d:89:2b:f6:e1:9a: b8:d1:d0:85:8b:66:e4:3d:12:42:3f:bd:93:02:97:0c:07:00: 74:64:e3:59:87:3f:a1:92:98:78:a4:1a:ea:50:24:4c:94:df: cf:a3:c2:10:96:2e:ed:6d:39:4d:f0:03:3a:a9:c1:aa:63:c3: 8e:1a:91:6b:9e:f4:e1:95:e7:9e:3c:0d:c8:6d:34:da:89:de: b1:98:b7:ed:33:49:ab:e1:81:7d:ea:47:6d:75:00:92:ec:03: 76:4d:28:c3:13:e3:3c:b4:8a:82:f4:60:f6:3f:f7:f8:9a:10: 8a:f1:5a:e4:a8:13:30:7b:52:fc:73:63:bf:23:d5:3f:13:16: 4f:98:d0:b2:0a:52:b7:c6:d4:92:ea:d3:90:84:61:24:cc:99: fe:7e:7d:d2:2b:8c:24:c4:04:cc:8b:87:d1:88:d3:1f:cb:a4: 5f:ad:9c:52 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdItYwvBYUmdEZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2QzYzIyNzItZDQ5My00ZWNlLWFlODktOWI1YTM1YzdlNzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy79AYbC5A45OCA0iHZx5q1vZax3s8w6pGM12 qDQlnI4zBUMMkLv1TwZl8WILm4uCJnrh4YdbgUiJnXr2lfjMVBB+LzV30SozGQaJ JNNlvX2d9zTMAP9cgkt71bARU0NA4pbNCHUwBO5/ff3faZWkskzsDL3gVYMcj/3u 5Z06Fsm7RXXvy6ZA567lMTQsJUYu4iiSrNA1hOPP4FhPXJpvxZw8gtE1bb02mIo8 b4Gg5ZLWt6YZA7WY6+mAE63p+XLdD4tzu/BhVsPDJBcw5giLT4iz7AeDT7s77eGb YVzem17LM4zQeIvGWXL0QKoTnmXHQXA9xo5AlQcaoH8mKC7kRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAVCEbDxr0ziM/BnFrqc+RnqIBH6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTg2ODliNTEtYTMxZS0z YTFkLWEzYzYtZTFiNTU0NjQ3MmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF02RWE+cmOERDPHZ6uIdjL/4bsNldOw5/sMjdBT+pF9rtiWoxzk VVbyeWzm9Ip4zjuXgMpWdhqqDrLnjFQnpdGOBR7kHtD8CNuRaTY24mG53jDhfH2J K/bhmrjR0IWLZuQ9EkI/vZMClwwHAHRk41mHP6GSmHikGupQJEyU38+jwhCWLu1t OU3wAzqpwapjw44akWue9OGV5548DchtNNqJ3rGYt+0zSavhgX3qR211AJLsA3ZN KMMT4zy0ioL0YPY/9/iaEIrxWuSoEzB7UvxzY78j1T8TFk+Y0LIKUrfG1JLq05CE YSTMmf5+fdIrjCTEBMyLh9GI0x/LpF+tnFI= -----END CERTIFICATE-----Generated at Sat Sep 26 18:35:39 2026 by rpki-client