$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba3d2d8f-bf64-31ea-b11c-29ee099a7fa5.roa File: ba3d2d8f-bf64-31ea-b11c-29ee099a7fa5.roa (raw, json) Hash identifier: n7eFHXOi2R+HgdFIR5LjNj5bCGNRBIcY/6Gq1p8klU0= Subject key identifier: F3:C0:14:A5:56:61:F6:01:54:18:7F:4E:B1:2A:10:99:8E:CF:26:F6 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584FA593F9C68DFF1ACB1043CAE0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba3d2d8f-bf64-31ea-b11c-29ee099a7fa5.roa Signing time: Wed 28 Oct 2026 01:00:13 +0000 ROA not before: Wed 28 Oct 2026 01:00:13 +0000 ROA not after: Tue 26 Jan 2027 02:00:13 +0000 asID: 396603 IP address blocks: 2001:500:124::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a5:93:f9:c6:8d:ff:1a:cb:10:43:ca:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 28 01:00:13 2026 GMT Not After : Jan 26 02:00:13 2027 GMT Subject: CN=3a6ad833-1050-4b98-ba4e-1d1c6a8fcaab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f9:dd:aa:fc:ad:75:60:a7:ff:c5:dc:4a:42: 08:9e:db:1b:47:22:eb:a7:17:c5:6d:73:52:94:96: 19:a3:8c:12:09:6f:35:90:57:29:9c:1a:ad:87:e7: 03:54:af:34:10:82:72:4c:f7:6e:91:c5:5c:ec:2d: 88:80:db:7b:14:91:92:22:4b:e0:2d:26:c2:ca:ce: 89:70:ba:a7:bd:f7:c3:ca:85:c6:80:c0:3d:ce:c0: 2d:e0:18:19:12:fc:df:e8:a9:f6:a3:a9:cb:6e:2a: ee:54:af:af:0b:26:43:67:de:1b:ab:9a:76:37:82: ba:fa:c0:10:2b:68:79:cf:1a:52:4e:23:28:eb:ee: 9a:4f:ad:60:6c:82:5e:da:3f:be:f1:fc:27:87:ea: 54:19:f0:3e:70:5b:b7:47:07:1c:58:da:d4:db:45: 6b:c2:6f:66:69:0c:3c:d4:11:33:a7:f8:2d:ca:68: 6b:ec:ed:b6:82:8f:35:fa:46:84:4d:89:61:11:e9: 9e:71:65:dc:3f:ee:d6:26:9c:99:e6:8c:6f:16:78: 26:08:e9:2e:7f:01:99:57:b5:88:57:95:b5:06:28: 6f:3b:ed:4a:8a:8d:5f:e1:48:f5:11:92:56:8b:1e: 5a:21:49:f2:f6:aa:b8:9a:09:3c:b3:13:c4:cd:88: 57:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C0:14:A5:56:61:F6:01:54:18:7F:4E:B1:2A:10:99:8E:CF:26:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba3d2d8f-bf64-31ea-b11c-29ee099a7fa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:124::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:40:ad:9c:da:70:f8:16:50:17:69:89:1e:a4:ad:b6:a9:d6: c3:95:c6:65:57:82:30:d1:24:85:b9:78:20:0d:0b:7d:03:9d: a9:27:3f:9f:45:3e:c7:a6:38:5d:cd:11:92:8c:67:c1:f0:63: b6:c1:30:97:60:a1:96:da:3d:05:78:5e:b9:f8:05:d9:88:d0: 4a:e0:74:04:18:df:09:76:a4:75:a1:ce:30:8f:4f:0b:81:45: bd:72:98:18:a9:4d:eb:fa:ff:4a:0a:76:d1:f1:a6:fa:79:40: 62:f5:91:bc:69:1a:e3:19:3c:ed:61:92:07:63:dd:46:c8:d4: 44:69:18:be:25:ef:b3:a6:7d:1b:96:20:8d:a6:40:59:92:c3: e3:16:9a:39:d7:e9:11:e5:4c:cb:b9:5e:e3:7b:3e:1c:80:40: e0:6e:b2:5b:02:9d:db:d0:ee:9e:99:84:31:f4:69:dc:0a:b8: 33:3c:4a:83:8f:49:45:69:c1:11:f8:0c:ca:64:0d:d9:ca:67: cd:c0:3f:7e:ab:ef:58:6b:fd:5a:71:43:9e:bc:78:78:75:de: 60:2f:bf:d6:f4:0d:ed:f0:fd:c2:7b:53:8c:f9:98:7d:1e:47: a3:ce:09:e5:9d:59:ff:6e:db:e6:1a:ce:ec:be:be:2e:39:b2: c5:55:be:ff -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+lk/nGjf8ayxBDyuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAyODAxMDAxM1oXDTI3MDEyNjAyMDAxM1owLzEtMCsGA1UEAxMk M2E2YWQ4MzMtMTA1MC00Yjk4LWJhNGUtMWQxYzZhOGZjYWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvndqvytdWCn/8XcSkIIntsbRyLrpxfFbXNS lJYZo4wSCW81kFcpnBqth+cDVK80EIJyTPdukcVc7C2IgNt7FJGSIkvgLSbCys6J cLqnvffDyoXGgMA9zsAt4BgZEvzf6Kn2o6nLbiruVK+vCyZDZ94bq5p2N4K6+sAQ K2h5zxpSTiMo6+6aT61gbIJe2j++8fwnh+pUGfA+cFu3RwccWNrU20Vrwm9maQw8 1BEzp/gtymhr7O22go81+kaETYlhEemecWXcP+7WJpyZ5oxvFngmCOkufwGZV7WI V5W1BihvO+1Kio1f4Uj1EZJWix5aIUny9qq4mgk8sxPEzYhXhQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPPAFKVWYfYBVBh/TrEqEJmOzyb2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmEzZDJkOGYtYmY2NC0z MWVhLWIxMWMtMjllZTA5OWE3ZmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALZArZzacPgWUBdpiR6krbap1sOVxmVXgjDRJIW5eCANC30Dnakn P59FPsemOF3NEZKMZ8HwY7bBMJdgoZbaPQV4Xrn4BdmI0ErgdAQY3wl2pHWhzjCP TwuBRb1ymBipTev6/0oKdtHxpvp5QGL1kbxpGuMZPO1hkgdj3UbI1ERpGL4l77Om fRuWII2mQFmSw+MWmjnX6RHlTMu5XuN7PhyAQOBuslsCndvQ7p6ZhDH0adwKuDM8 SoOPSUVpwRH4DMpkDdnKZ83AP36r71hr/VpxQ568eHh13mAvv9b0De3w/cJ7U4z5 mH0eR6POCeWdWf9u2+Yazuy+vi45ssVVvv8= -----END CERTIFICATE-----Generated at Sun Nov 15 18:49:42 2026 by rpki-client