$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1b56e9a-ead8-3757-9fcb-e7617f0299b8.roa File: c1b56e9a-ead8-3757-9fcb-e7617f0299b8.roa (raw, json) Hash identifier: pKMgM37tO9+BLHjO7/GAYOvULAMeQRPwK5RRRpdQTQE= Subject key identifier: 59:25:8C:96:D4:D2:83:B2:50:8A:5C:DF:89:7B:0F:E9:90:99:BF:D2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4974E4AE5FB88907F7982940 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1b56e9a-ead8-3757-9fcb-e7617f0299b8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396589 IP address blocks: 2001:500:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:e4:ae:5f:b8:89:07:f7:98:29:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=dc459a29-0702-4807-9b3a-3380f60812b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6d:25:92:5c:4b:b3:05:2f:95:c1:ab:d3:3e: 99:60:60:f1:8a:b3:35:09:db:11:4c:94:2d:d8:f0: 7e:e2:cc:27:f7:98:46:19:1c:25:47:ce:81:49:d6: 52:c4:cc:f1:2b:80:96:32:0e:eb:03:f3:8c:ee:b5: 42:4d:be:d0:4c:9f:35:a4:7f:96:30:7b:30:71:25: 58:88:92:4c:f8:72:e0:66:6e:93:75:2a:69:7d:44: 2e:ba:c8:c9:ba:6f:54:d6:ad:88:fe:56:49:bb:ac: df:c6:8a:09:8b:f3:a2:1f:4a:be:31:e2:d6:b2:c9: a1:e6:3d:07:1a:37:76:7f:bf:e1:77:0e:71:61:51: 58:55:ea:3a:b3:85:2a:0d:8b:4c:7c:02:98:48:f4: cd:57:6d:96:1e:5e:a9:85:4a:a9:a3:6f:9d:bd:92: af:6f:54:e7:6c:b2:3e:10:e4:33:ad:e5:11:7a:e8: 8d:c7:8e:7d:25:6b:74:1f:14:4a:f3:9a:ea:d8:5f: 8b:03:c0:31:d0:68:95:8b:2a:34:3a:61:8a:5d:5e: 53:02:52:5b:c6:e5:b5:09:f3:95:e1:0f:eb:86:6a: e0:58:b1:f4:8d:93:59:7e:21:d2:cc:ae:80:73:7c: 91:81:65:6d:ce:ca:e5:ea:80:3e:2e:80:60:ba:41: ba:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:25:8C:96:D4:D2:83:B2:50:8A:5C:DF:89:7B:0F:E9:90:99:BF:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1b56e9a-ead8-3757-9fcb-e7617f0299b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:26:aa:a1:ba:5c:5b:7a:5d:eb:a4:65:24:46:6d:14:75:31: ed:e1:75:57:9e:e2:4c:c9:df:a9:98:d1:e7:c3:52:14:1e:f9: e2:fb:d8:46:82:e5:89:e5:dc:f5:e2:0e:2a:14:a4:c8:b3:2f: 39:99:71:8c:16:4b:6c:6e:11:b2:81:d0:e3:b5:7f:e2:97:dc: 68:9e:2f:ff:2f:eb:bc:be:1e:d0:5e:16:3d:cc:2a:15:04:8b: 8a:a7:fd:e2:68:f9:24:cc:3c:61:a6:bf:42:19:a8:3b:f0:69: f0:72:c8:cf:d5:df:f5:c6:e5:c7:13:c0:74:40:18:0b:28:38: 41:6e:c6:fb:9a:45:6d:af:c8:59:5f:dc:e9:62:91:2b:6e:14: e4:31:a0:81:de:a6:72:c6:85:0c:41:b2:d0:98:22:99:35:33: e4:4e:3c:c3:0b:14:13:0d:ca:b1:1e:5f:bc:96:92:3c:06:87: 5d:86:9b:6e:92:b7:af:25:37:d5:94:ac:ce:a3:fe:5e:97:13: 3c:3f:6f:ce:19:ab:43:03:99:97:0e:f4:e0:ba:0b:32:b8:16: fc:7c:eb:d9:15:02:c0:83:5a:e1:08:40:15:e4:1f:75:d4:9e: c1:7d:bc:7e:fd:25:47:02:a4:d4:8a:a8:1a:cb:61:0d:51:66: f6:17:63:60 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdOSuX7iJB/eYKUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGM0NTlhMjktMDcwMi00ODA3LTliM2EtMzM4MGY2MDgxMmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG0lklxLswUvlcGr0z6ZYGDxirM1CdsRTJQt 2PB+4swn95hGGRwlR86BSdZSxMzxK4CWMg7rA/OM7rVCTb7QTJ81pH+WMHswcSVY iJJM+HLgZm6TdSppfUQuusjJum9U1q2I/lZJu6zfxooJi/OiH0q+MeLWssmh5j0H Gjd2f7/hdw5xYVFYVeo6s4UqDYtMfAKYSPTNV22WHl6phUqpo2+dvZKvb1TnbLI+ EOQzreUReuiNx459JWt0HxRK85rq2F+LA8Ax0GiViyo0OmGKXV5TAlJbxuW1CfOV 4Q/rhmrgWLH0jZNZfiHSzK6Ac3yRgWVtzsrl6oA+LoBgukG6KQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFkljJbU0oOyUIpc34l7D+mQmb/SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzFiNTZlOWEtZWFkOC0z NzU3LTlmY2ItZTc2MTdmMDI5OWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG8mqqG6XFt6XeukZSRGbRR1Me3hdVee4kzJ36mY0efDUhQe+eL7 2EaC5Ynl3PXiDioUpMizLzmZcYwWS2xuEbKB0OO1f+KX3GieL/8v67y+HtBeFj3M KhUEi4qn/eJo+STMPGGmv0IZqDvwafByyM/V3/XG5ccTwHRAGAsoOEFuxvuaRW2v yFlf3OlikStuFOQxoIHepnLGhQxBstCYIpk1M+ROPMMLFBMNyrEeX7yWkjwGh12G m26St68lN9WUrM6j/l6XEzw/b84Zq0MDmZcO9OC6CzK4Fvx869kVAsCDWuEIQBXk H3XUnsF9vH79JUcCpNSKqBrLYQ1RZvYXY2A= -----END CERTIFICATE-----Generated at Sun Sep 27 21:21:41 2026 by rpki-client