$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d58c2f57-e9f3-3679-91ff-dcb41da7e794.roa File: d58c2f57-e9f3-3679-91ff-dcb41da7e794.roa (raw, json) Hash identifier: YQd7Q9AldxJ4R6SkxmbNkclLqqy80bnAxeeUW/BFa8k= Subject key identifier: 62:C6:B0:8B:89:58:97:9C:57:8D:68:BF:5A:99:5A:F3:54:90:47:88 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F497429D9E0FB6154C01DE080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d58c2f57-e9f3-3679-91ff-dcb41da7e794.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396599 IP address blocks: 2001:500:125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:29:d9:e0:fb:61:54:c0:1d:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ec5dc651-8a9c-4860-ba6e-14b9c7e262ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e5:14:82:45:84:23:f4:11:e2:3d:f9:03:4b: e8:19:b1:c9:74:5f:8e:47:40:67:97:8e:90:1b:94: 2e:07:47:2d:40:d3:9a:cc:65:e9:93:d6:c1:3d:50: 6b:5c:39:ce:fe:92:e8:d3:33:c2:11:12:3f:30:61: 18:63:3a:b8:39:10:25:f9:e8:d2:0c:bc:05:70:5a: 3b:74:7b:04:b3:b2:c9:c3:df:ec:87:95:46:09:c6: 5d:49:31:d2:5e:ef:ea:fb:8e:39:2f:19:52:8d:21: 06:b8:a0:25:5d:a6:59:96:e1:ac:31:1a:94:cb:9f: c8:b4:7d:6a:be:81:e2:ab:f6:73:4e:42:c7:55:5e: 39:de:64:47:2d:eb:c5:fe:4f:d1:a9:fa:73:7b:b4: af:04:d0:aa:e6:45:b9:66:de:1b:99:97:06:2d:d8: ff:6e:42:a1:b8:2a:5c:14:61:d2:a6:74:79:6a:26: e9:32:3e:5a:8c:f6:74:2e:be:d0:ce:63:1a:64:cd: a8:96:f2:08:e5:d3:29:7b:5b:1d:b9:af:76:28:6b: de:b3:84:1f:bf:2f:16:03:80:8b:01:29:85:35:55: 8d:a7:b5:aa:21:28:00:76:b4:ba:45:22:b2:02:3f: b8:12:19:da:3d:22:d5:ef:6e:03:d6:b6:40:4f:3e: 37:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:C6:B0:8B:89:58:97:9C:57:8D:68:BF:5A:99:5A:F3:54:90:47:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d58c2f57-e9f3-3679-91ff-dcb41da7e794.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:ec:b1:1b:e4:7a:4b:6e:ad:c1:0a:35:fc:c7:78:88:69:39: 25:ec:5c:55:77:6b:59:ec:91:36:f8:e5:94:38:db:83:fa:8c: 06:8b:c6:67:81:29:6b:75:d7:f9:da:fe:6c:e9:9e:92:03:70: b1:4e:54:d6:2e:d7:02:0e:3d:7a:fc:4c:d0:45:e7:0b:50:c9: ca:4d:c2:e5:55:ad:b6:5e:bf:65:f4:56:34:d7:81:19:22:03: 6a:c4:68:e7:23:87:7f:e1:86:60:1f:5d:a0:7f:57:36:d8:5d: d0:18:3e:d6:cd:99:25:fd:2f:53:ce:9f:31:fc:31:d8:e2:60: 5d:7d:7b:0c:de:dc:a3:09:fd:19:a2:6d:ea:e5:b8:f7:98:74: 4d:11:54:59:24:6e:c2:70:24:67:02:e1:67:f2:40:d0:85:30: 43:6d:ca:33:03:01:b7:aa:5c:4f:26:0c:84:bd:dc:fa:52:de: f4:7c:52:4b:8e:87:e3:5d:da:f6:c6:0a:e7:d3:c2:0a:72:eb: af:e3:2b:aa:30:ab:9c:ca:fe:71:77:a5:43:bf:ce:80:bb:48: 47:a4:3b:8e:ea:c1:78:9b:f1:61:9c:d6:f5:18:cd:d8:9f:b1: 08:6c:11:48:a6:9a:db:48:53:95:bc:0e:3d:35:91:92:64:35: ab:cd:99:5e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdCnZ4PthVMAd4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWM1ZGM2NTEtOGE5Yy00ODYwLWJhNmUtMTRiOWM3ZTI2MmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOUUgkWEI/QR4j35A0voGbHJdF+OR0Bnl46Q G5QuB0ctQNOazGXpk9bBPVBrXDnO/pLo0zPCERI/MGEYYzq4ORAl+ejSDLwFcFo7 dHsEs7LJw9/sh5VGCcZdSTHSXu/q+445LxlSjSEGuKAlXaZZluGsMRqUy5/ItH1q voHiq/ZzTkLHVV453mRHLevF/k/Rqfpze7SvBNCq5kW5Zt4bmZcGLdj/bkKhuCpc FGHSpnR5aibpMj5ajPZ0Lr7QzmMaZM2olvII5dMpe1sdua92KGves4Qfvy8WA4CL ASmFNVWNp7WqISgAdrS6RSKyAj+4EhnaPSLV724D1rZATz43+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGLGsIuJWJecV41ov1qZWvNUkEeIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDU4YzJmNTctZTlmMy0z Njc5LTkxZmYtZGNiNDFkYTdlNzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAADssRvkekturcEKNfzHeIhpOSXsXFV3a1nskTb45ZQ424P6jAaL xmeBKWt11/na/mzpnpIDcLFOVNYu1wIOPXr8TNBF5wtQycpNwuVVrbZev2X0VjTX gRkiA2rEaOcjh3/hhmAfXaB/VzbYXdAYPtbNmSX9L1POnzH8MdjiYF19ewze3KMJ /RmiberluPeYdE0RVFkkbsJwJGcC4WfyQNCFMENtyjMDAbeqXE8mDIS93PpS3vR8 UkuOh+Nd2vbGCufTwgpy66/jK6owq5zK/nF3pUO/zoC7SEekO47qwXib8WGc1vUY zdifsQhsEUimmttIU5W8Dj01kZJkNavNmV4= -----END CERTIFICATE-----Generated at Sat Sep 26 14:08:42 2026 by rpki-client