$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9a90c4d-bc05-3308-9338-25fc2a5a1fa5.roa File: a9a90c4d-bc05-3308-9338-25fc2a5a1fa5.roa (raw, json) Hash identifier: ftd28cOtTR1K0MAl8ZoK5fSPYcJpP5Ckh0+pGS4z8z4= Subject key identifier: A3:9A:69:C7:4C:75:DC:35:9E:B0:3D:A8:B2:BA:79:2F:9C:43:84:1F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F497F7EA840E83D4433BB85E0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9a90c4d-bc05-3308-9338-25fc2a5a1fa5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396563 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:7e:a8:40:e8:3d:44:33:bb:85:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=54779f40-837c-4397-9adc-502dc9321c9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:23:5a:42:c4:e4:fd:83:c1:7e:09:b6:89:39: 22:ba:18:7a:90:ac:a0:0f:24:f6:19:4c:30:2a:06: 9b:5d:5e:ab:6f:28:42:a2:05:1b:30:a0:4d:ed:db: a7:4a:43:fb:86:96:b7:0c:a3:30:db:3f:69:1c:66: c0:25:75:cd:ed:c0:35:2d:d7:cb:b9:10:6f:24:ae: 64:7d:cf:04:e5:d1:4b:f1:49:08:d7:af:ea:1d:f6: 96:79:bc:42:b9:0b:d0:c9:79:1d:bc:55:aa:d9:1c: c9:52:8c:f0:bd:bb:a3:36:e1:d7:9e:36:8a:bf:42: ab:ff:7d:76:db:0d:1f:59:02:54:e5:f7:a2:7e:67: 7a:f0:ce:74:7c:f0:6b:1c:d8:af:d9:cb:11:7f:1a: 74:f2:c1:a3:9e:c1:94:ce:85:04:dc:7c:3b:66:e4: 6f:21:d1:7f:8e:69:bb:1b:66:a2:6e:ae:6a:f1:89: 0d:88:6d:18:46:9f:18:09:07:14:87:ce:49:59:00: f5:b6:c9:5e:33:e0:74:83:0a:c7:54:1f:60:9c:d2: 36:7e:13:01:58:f1:17:56:dd:cb:31:1e:d0:c8:dd: 93:2d:45:84:2b:4c:8b:cd:89:25:c4:fb:1d:67:25: ce:ce:83:af:ea:06:31:46:34:f7:b6:25:65:64:d2: 8f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:9A:69:C7:4C:75:DC:35:9E:B0:3D:A8:B2:BA:79:2F:9C:43:84:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9a90c4d-bc05-3308-9338-25fc2a5a1fa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:f8:2d:a2:11:29:5a:62:17:e9:85:2f:34:c5:2b:36:1f:34: 28:9f:e1:e8:ef:0d:13:3a:65:d5:84:81:a6:64:17:3b:ba:67: 63:59:af:e2:7a:0b:d0:e7:73:74:e0:e4:97:60:87:35:a1:92: 58:35:4e:a8:d0:9e:25:f7:1a:89:43:f5:c0:38:46:2d:39:55: 5c:7a:ff:d4:37:b0:25:c9:02:1e:c8:b0:3f:1f:18:ca:65:df: db:a4:06:18:b2:af:fa:96:54:d9:52:00:1a:8a:be:86:7b:4a: 27:77:1c:f5:d5:54:67:91:df:d4:fe:26:9e:35:2a:f4:bc:7c: 2f:c5:f7:1b:ba:f5:b6:2b:72:3d:16:81:65:df:5d:c3:7c:ed: 45:b2:92:7e:3f:0c:ae:fe:ed:78:7e:b2:a3:58:7f:32:66:e1: 53:08:aa:d8:11:39:80:dc:83:34:5c:23:7c:77:11:84:37:fa: a2:d9:5c:a3:e2:26:e6:43:66:a1:26:72:72:40:25:d7:01:dc: 06:05:f3:50:88:70:09:09:e7:84:8d:41:d6:54:6c:d1:3d:83: c7:b0:71:77:9f:6b:c7:3f:4a:4f:be:0a:69:7a:01:f5:a1:a0: 4f:88:88:00:dc:da:3f:45:77:a4:69:15:54:5c:37:14:23:66: 8f:54:8d:00 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9Jf36oQOg9RDO7heAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTQ3NzlmNDAtODM3Yy00Mzk3LTlhZGMtNTAyZGM5MzIxYzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiNaQsTk/YPBfgm2iTkiuhh6kKygDyT2GUww KgabXV6rbyhCogUbMKBN7dunSkP7hpa3DKMw2z9pHGbAJXXN7cA1LdfLuRBvJK5k fc8E5dFL8UkI16/qHfaWebxCuQvQyXkdvFWq2RzJUozwvbujNuHXnjaKv0Kr/312 2w0fWQJU5feifmd68M50fPBrHNiv2csRfxp08sGjnsGUzoUE3Hw7ZuRvIdF/jmm7 G2aibq5q8YkNiG0YRp8YCQcUh85JWQD1tsleM+B0gwrHVB9gnNI2fhMBWPEXVt3L MR7QyN2TLUWEK0yLzYklxPsdZyXOzoOv6gYxRjT3tiVlZNKPkQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKOaacdMddw1nrA9qLK6eS+cQ4QfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTlhOTBjNGQtYmMwNS0z MzA4LTkzMzgtMjVmYzJhNWExZmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAA+C2iESlaYhfphS80xSs2HzQon+Ho7w0TOmXV hIGmZBc7umdjWa/iegvQ53N04OSXYIc1oZJYNU6o0J4l9xqJQ/XAOEYtOVVcev/U N7AlyQIeyLA/HxjKZd/bpAYYsq/6llTZUgAair6Ge0ondxz11VRnkd/U/iaeNSr0 vHwvxfcbuvW2K3I9FoFl313DfO1FspJ+Pwyu/u14frKjWH8yZuFTCKrYETmA3IM0 XCN8dxGEN/qi2Vyj4ibmQ2ahJnJyQCXXAdwGBfNQiHAJCeeEjUHWVGzRPYPHsHF3 n2vHP0pPvgppegH1oaBPiIgA3No/RXekaRVUXDcUI2aPVI0A -----END CERTIFICATE-----Generated at Sat Sep 26 08:00:16 2026 by rpki-client