$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b697bb53-34fe-3d47-b004-1559bc048449.roa File: b697bb53-34fe-3d47-b004-1559bc048449.roa (raw, json) Hash identifier: 0N02Gd+agSs7MklMOTSYP0pMD/y8Bi7VdZAp5dXlwxQ= Subject key identifier: AD:DE:F7:81:84:08:3A:78:6E:76:22:FF:33:27:B7:0B:78:75:6B:47 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4972D28F2D701CF354386880 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b697bb53-34fe-3d47-b004-1559bc048449.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396552 IP address blocks: 2001:500:134::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:d2:8f:2d:70:1c:f3:54:38:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2b3431e2-b1d8-4ecd-b885-5b0ce685b1bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:1e:7f:f1:65:17:cd:07:fb:a2:05:0d:59:ff: a4:a7:70:67:74:b9:a6:6c:f3:d5:86:fa:46:62:62: 50:8a:51:83:8a:ee:a0:ed:a6:e4:62:71:88:8c:4f: 0c:9f:8b:7c:30:66:4d:ae:e6:b5:12:67:39:4b:4b: a1:51:6e:1c:a4:1a:eb:a1:51:fb:49:6f:b9:84:16: dc:ea:22:ea:49:3c:0c:1b:ff:3d:c9:43:63:c0:b3: 11:af:a4:96:18:ea:dd:19:31:d7:cb:51:12:12:63: 41:cf:ad:09:48:c1:dd:e3:0d:03:ba:f0:51:e1:bd: 19:05:ec:fc:ee:70:98:21:74:4b:2e:9f:67:64:75: 03:5c:b8:fa:7d:fd:86:fd:c2:14:f2:0b:37:b6:5d: 1a:e3:37:5e:8a:c1:85:7f:fa:ff:9e:c9:ba:1c:c7: 49:3b:40:f2:0c:94:e0:2a:a6:47:f5:9a:a7:73:5c: f5:f0:12:74:13:d8:2a:7f:1f:34:12:6c:e4:c3:75: e2:97:67:ac:63:db:5d:7f:fb:52:8a:e7:7f:d2:c2: da:67:9d:4a:56:d6:17:4e:f4:bf:02:d3:48:02:c7: 5a:76:fc:ea:53:aa:d4:f0:27:38:85:a3:ee:c0:66: 88:f8:57:5d:9d:cc:e8:2d:f0:bc:e3:99:c9:71:2a: 91:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:DE:F7:81:84:08:3A:78:6E:76:22:FF:33:27:B7:0B:78:75:6B:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b697bb53-34fe-3d47-b004-1559bc048449.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:134::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:24:90:60:0c:8f:3a:68:27:42:49:24:bd:cc:e9:43:da:f6: c4:ec:bf:94:21:3d:03:4c:ff:72:7b:11:ab:bc:e6:76:09:9a: 11:7e:18:1e:a3:0e:e5:97:49:24:5d:c9:2e:33:ee:74:d8:6b: 5e:10:cb:22:6d:9d:9d:2e:00:bf:7b:5c:90:67:d7:83:ce:13: ad:4e:75:2a:53:32:39:45:71:b9:57:bd:23:2b:1e:74:29:41: 91:ef:d4:2d:0a:9f:1f:73:fb:9b:11:66:2c:a9:f8:59:57:42: b5:1e:e4:e5:57:6d:e6:2a:2e:0a:99:55:24:53:1a:72:ac:de: a6:43:85:4b:fd:e8:d0:10:bb:70:e0:21:f7:66:a1:22:37:a1: e9:9c:be:61:6d:ce:e7:2a:6d:02:90:b9:47:2a:26:07:c9:01: ca:e0:1d:50:39:ee:c6:c1:3e:cd:b8:90:50:e6:66:75:a7:aa: ed:84:09:b3:93:bd:f1:22:16:46:13:46:11:ab:15:00:3e:a8: 80:d3:11:40:30:a9:24:57:9c:60:a0:8e:e7:da:11:81:86:8d: d4:46:da:0d:71:24:ce:a3:a3:45:9f:bb:80:c8:78:ff:9c:df: d1:b8:eb:5a:ea:37:50:0b:00:38:a2:cf:7a:48:16:e0:c1:da: 0e:2e:b1:15 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JctKPLXAc81Q4aIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmIzNDMxZTItYjFkOC00ZWNkLWI4ODUtNWIwY2U2ODViMWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhB5/8WUXzQf7ogUNWf+kp3BndLmmbPPVhvpG YmJQilGDiu6g7abkYnGIjE8Mn4t8MGZNrua1Emc5S0uhUW4cpBrroVH7SW+5hBbc 6iLqSTwMG/89yUNjwLMRr6SWGOrdGTHXy1ESEmNBz60JSMHd4w0DuvBR4b0ZBez8 7nCYIXRLLp9nZHUDXLj6ff2G/cIU8gs3tl0a4zdeisGFf/r/nsm6HMdJO0DyDJTg KqZH9Zqnc1z18BJ0E9gqfx80Emzkw3Xil2esY9tdf/tSiud/0sLaZ51KVtYXTvS/ AtNIAsdadvzqU6rU8Cc4haPuwGaI+FddnczoLfC845nJcSqRqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK3e94GECDp4bnYi/zMntwt4dWtHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjY5N2JiNTMtMzRmZS0z ZDQ3LWIwMDQtMTU1OWJjMDQ4NDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE4kkGAMjzpoJ0JJJL3M6UPa9sTsv5QhPQNM/3J7Eau85nYJmhF+ GB6jDuWXSSRdyS4z7nTYa14QyyJtnZ0uAL97XJBn14POE61OdSpTMjlFcblXvSMr HnQpQZHv1C0Knx9z+5sRZiyp+FlXQrUe5OVXbeYqLgqZVSRTGnKs3qZDhUv96NAQ u3DgIfdmoSI3oemcvmFtzucqbQKQuUcqJgfJAcrgHVA57sbBPs24kFDmZnWnqu2E CbOTvfEiFkYTRhGrFQA+qIDTEUAwqSRXnGCgjufaEYGGjdRG2g1xJM6jo0Wfu4DI eP+c39G461rqN1ALADiiz3pIFuDB2g4usRU= -----END CERTIFICATE-----Generated at Fri Sep 25 05:27:24 2026 by rpki-client