$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8c37e92-7cff-38cf-b0a2-f227cc9a0b06.roa File: a8c37e92-7cff-38cf-b0a2-f227cc9a0b06.roa (raw, json) Hash identifier: tDXROMoJIXPHSrIwGhSKrlB95nHQ0CLsXrj5wJrGgcg= Subject key identifier: 11:98:EB:DF:2E:63:86:29:2B:7C:F4:3B:93:53:D0:97:94:65:56:D7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EF01CF52C91FBA8ECBA573168 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8c37e92-7cff-38cf-b0a2-f227cc9a0b06.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 396615 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:f5:2c:91:fb:a8:ec:ba:57:31:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=6309e1cc-947c-4220-a807-68a19c7e0214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:61:90:50:5b:b7:e3:36:f9:5b:a5:dc:54:61: d5:36:92:62:70:cb:2a:2e:e2:23:ca:ad:5f:04:77: 16:28:89:2b:bc:b1:ac:87:f0:4b:1d:bb:25:73:a7: 19:0a:2b:7e:8e:fa:03:c2:5a:b1:31:ef:3a:61:44: 8c:73:09:14:18:b1:47:e7:44:ab:c0:1c:3d:53:2c: 87:b9:c1:ac:43:56:81:f2:73:84:ca:b8:62:75:6f: 97:21:25:9f:cb:cb:37:78:0b:79:2d:57:0e:53:03: e3:91:d7:fa:cd:c4:4d:78:58:78:51:1b:74:70:55: 5d:6f:49:cb:28:0c:0c:f8:0e:b6:1e:16:81:02:2d: 19:7a:67:00:99:54:0e:6d:40:4f:fe:1e:2e:9a:e1: 99:fe:81:89:7c:e3:8e:c5:66:2f:45:09:dc:86:7d: 40:39:fd:9e:77:f0:c6:6c:ec:f0:ae:1f:b2:5a:a7: b8:a9:e8:33:15:78:93:07:fa:ab:7d:bf:8d:b0:e9: 68:4d:b2:7c:e6:79:6a:ce:57:dc:ec:cb:02:77:67: c1:ce:26:8b:46:67:55:69:d6:66:e5:de:a1:78:57: d1:0a:32:89:7a:89:f2:17:46:86:2e:21:2e:7d:dd: a5:22:40:12:d4:4f:99:9a:6a:ce:38:9a:12:fc:85: 59:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:98:EB:DF:2E:63:86:29:2B:7C:F4:3B:93:53:D0:97:94:65:56:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8c37e92-7cff-38cf-b0a2-f227cc9a0b06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:d8:e9:d4:96:02:ee:6a:5d:3e:b4:78:89:3f:5b:a8:5e:96: 02:1a:53:72:6e:2b:63:ff:93:3c:b7:82:b3:ab:e6:34:e2:0c: 23:dd:5a:9b:4d:3b:10:f5:8d:2b:ef:5f:af:b7:38:2d:56:11: 9a:a3:4d:8a:18:f9:25:b8:7d:30:69:33:30:e0:82:38:dc:74: 7f:ec:9c:26:88:a8:fc:ca:c2:a9:82:8d:95:c7:f6:0f:54:5b: fc:44:c9:be:90:d6:16:9a:ea:a3:54:52:e0:34:5f:4d:ea:18: 98:e8:aa:4d:de:f7:b1:a5:2e:d8:38:76:bf:81:67:e1:e0:64: 83:54:ec:d5:3b:a4:24:f3:56:6e:b9:61:21:9f:4d:c9:85:17: 49:34:b9:e5:89:64:73:60:3c:17:ab:d0:ec:8e:5e:9e:b4:2a: ab:ec:a9:94:3b:c4:80:e1:53:25:72:e3:54:ec:9e:57:69:fc: 02:4e:44:b1:6b:f6:35:34:50:1e:5a:d7:03:03:9a:4b:f2:83: 1b:f2:ca:32:e5:73:51:36:42:8f:a0:9b:ab:a2:ea:27:2e:6c: d2:38:73:08:2d:d7:48:ea:3b:b1:68:97:18:bf:0d:16:06:d4: 28:3b:95:59:74:35:15:1f:f6:9b:35:9b:e5:15:46:86:c6:b1: cb:b7:f0:a4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7wHPUskfuo7LpXMWgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk NjMwOWUxY2MtOTQ3Yy00MjIwLWE4MDctNjhhMTljN2UwMjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGGQUFu34zb5W6XcVGHVNpJicMsqLuIjyq1f BHcWKIkrvLGsh/BLHbslc6cZCit+jvoDwlqxMe86YUSMcwkUGLFH50SrwBw9UyyH ucGsQ1aB8nOEyrhidW+XISWfy8s3eAt5LVcOUwPjkdf6zcRNeFh4URt0cFVdb0nL KAwM+A62HhaBAi0ZemcAmVQObUBP/h4umuGZ/oGJfOOOxWYvRQnchn1AOf2ed/DG bOzwrh+yWqe4qegzFXiTB/qrfb+NsOloTbJ85nlqzlfc7MsCd2fBziaLRmdVadZm 5d6heFfRCjKJeonyF0aGLiEufd2lIkAS1E+ZmmrOOJoS/IVZ/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBGY698uY4YpK3z0O5NT0JeUZVbXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYThjMzdlOTItN2NmZi0z OGNmLWIwYTItZjIyN2NjOWEwYjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALfY6dSWAu5qXT60eIk/W6helgIaU3JuK2P/kzy3grOr5jTiDCPd WptNOxD1jSvvX6+3OC1WEZqjTYoY+SW4fTBpMzDggjjcdH/snCaIqPzKwqmCjZXH 9g9UW/xEyb6Q1haa6qNUUuA0X03qGJjoqk3e97GlLtg4dr+BZ+HgZINU7NU7pCTz Vm65YSGfTcmFF0k0ueWJZHNgPBer0OyOXp60KqvsqZQ7xIDhUyVy41Tsnldp/AJO RLFr9jU0UB5a1wMDmkvygxvyyjLlc1E2Qo+gm6ui6icubNI4cwgt10jqO7Folxi/ DRYG1Cg7lVl0NRUf9ps1m+UVRobGscu38KQ= -----END CERTIFICATE-----Generated at Fri Sep 25 18:14:51 2026 by rpki-client