$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca404941-8900-31e5-82bc-9d980bfce593.roa File: ca404941-8900-31e5-82bc-9d980bfce593.roa (raw, json) Hash identifier: LLlXAuA0iLxjc1rkHGoHLSS4+mofAoGMrDAmwlcZDaA= Subject key identifier: FF:5C:D0:D3:94:75:68:76:DF:4B:29:3F:BE:28:B0:AE:87:0C:33:16 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F03A787F092C9EF4858CDAF00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca404941-8900-31e5-82bc-9d980bfce593.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 396604 IP address blocks: 2001:500:124::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:87:f0:92:c9:ef:48:58:cd:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=df8f0443-e72b-4332-be9a-825837ccc03f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1d:08:b4:b8:c4:88:77:68:d1:e4:2a:e4:48: cd:bb:61:f8:b8:5e:43:eb:65:e7:f3:d5:94:7e:40: ba:c8:6a:33:82:80:9c:72:87:d0:1a:70:d8:6b:41: 02:e9:5f:cd:eb:c1:ad:a7:e0:c3:35:22:08:89:b8: e3:18:22:25:f5:18:ca:56:18:44:b9:00:2a:54:44: a2:db:73:54:35:ec:de:4d:03:df:69:20:a0:27:70: e2:77:c1:44:8f:7c:2b:65:e1:83:80:2e:fe:c5:cb: 50:0c:b6:54:67:a5:c0:8b:32:0d:d8:83:a6:1d:a9: e5:33:bb:50:1d:e2:b8:d0:77:f6:76:47:75:75:80: 9a:a1:ac:be:27:c6:a9:f5:b2:9b:c9:24:4f:20:fb: 17:bf:b7:05:c6:b5:56:58:5b:64:b9:48:d5:76:06: e0:f8:c7:f0:27:0c:6a:d8:af:38:cf:55:5e:44:3f: dd:bd:28:aa:5a:60:6a:07:d2:91:10:24:23:d6:08: 06:61:4c:fd:0f:9a:8a:8f:38:37:e9:00:23:eb:e2: 92:f8:56:ca:db:47:ee:c0:e3:12:61:07:5e:ba:dc: ba:7d:8f:54:a8:16:05:22:6f:05:67:90:0e:92:80: a1:5a:c1:7f:4a:7e:99:76:71:bc:b3:72:ed:0d:1e: 4b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:5C:D0:D3:94:75:68:76:DF:4B:29:3F:BE:28:B0:AE:87:0C:33:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca404941-8900-31e5-82bc-9d980bfce593.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:124::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:6d:a3:fe:68:22:4c:24:31:1b:1e:b7:41:95:e5:fd:10:7e: c3:29:2c:93:80:7d:40:3f:54:d6:18:66:a0:6a:19:74:66:a3: 32:f7:13:14:6e:e4:44:9a:79:98:dd:bc:a6:ce:f3:51:4e:e8: 59:d7:25:00:88:a0:bc:61:cd:1e:8e:62:30:cc:b3:34:2b:4e: 7f:21:ad:7b:7f:29:36:04:d3:6e:4a:6b:53:85:5b:dc:75:f8: c9:99:23:e6:6b:4a:ac:78:45:3a:35:53:26:dd:ad:48:29:77: c1:10:4c:6c:43:1b:60:4e:14:06:1e:87:85:f2:56:42:78:31: f9:6f:b3:c1:a1:75:c0:ea:4c:24:4e:8e:0c:03:bd:af:ab:48: 99:6e:dd:f7:de:dd:b4:a1:06:b7:8f:85:cd:e3:aa:62:42:95: d1:b6:01:21:d4:4b:58:0a:e1:b9:36:fa:f0:cd:71:06:e4:e1: bb:5f:f4:52:7f:9b:b4:2c:89:ce:6b:99:57:40:ef:4b:33:5f: 55:a1:32:66:4c:de:f1:f0:9b:c5:36:6c:02:37:d6:aa:61:0a: 1e:8c:85:66:7d:d5:28:ab:c5:c2:9c:49:5e:34:a1:c8:72:79: 5b:71:e4:40:0a:f5:bb:34:1c:a9:5d:59:b4:3b:91:36:43:22: 2b:e7:8c:37 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8Dp4fwksnvSFjNrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk ZGY4ZjA0NDMtZTcyYi00MzMyLWJlOWEtODI1ODM3Y2NjMDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzh0ItLjEiHdo0eQq5EjNu2H4uF5D62Xn89WU fkC6yGozgoCccofQGnDYa0EC6V/N68Gtp+DDNSIIibjjGCIl9RjKVhhEuQAqVESi 23NUNezeTQPfaSCgJ3Did8FEj3wrZeGDgC7+xctQDLZUZ6XAizIN2IOmHanlM7tQ HeK40Hf2dkd1dYCaoay+J8ap9bKbySRPIPsXv7cFxrVWWFtkuUjVdgbg+MfwJwxq 2K84z1VeRD/dvSiqWmBqB9KRECQj1ggGYUz9D5qKjzg36QAj6+KS+FbK20fuwOMS YQdeuty6fY9UqBYFIm8FZ5AOkoChWsF/Sn6ZdnG8s3LtDR5L1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP9c0NOUdWh230spP74osK6HDDMWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2E0MDQ5NDEtODkwMC0z MWU1LTgyYmMtOWQ5ODBiZmNlNTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL1to/5oIkwkMRset0GV5f0QfsMpLJOAfUA/VNYYZqBqGXRmozL3 ExRu5ESaeZjdvKbO81FO6FnXJQCIoLxhzR6OYjDMszQrTn8hrXt/KTYE025Ka1OF W9x1+MmZI+ZrSqx4RTo1UybdrUgpd8EQTGxDG2BOFAYeh4XyVkJ4Mflvs8GhdcDq TCROjgwDva+rSJlu3ffe3bShBrePhc3jqmJCldG2ASHUS1gK4bk2+vDNcQbk4btf 9FJ/m7Qsic5rmVdA70szX1WhMmZM3vHwm8U2bAI31qphCh6MhWZ91SirxcKcSV40 ochyeVtx5EAK9bs0HKldWbQ7kTZDIivnjDc= -----END CERTIFICATE-----Generated at Sat Oct 3 19:56:55 2026 by rpki-client