$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc0ad929-bfff-32de-a302-ad43710df0a9.roa File: dc0ad929-bfff-32de-a302-ad43710df0a9.roa (raw, json) Hash identifier: WUBF7HSoY5eBo5DFaqcIudNHvO1jDLP2YAveVbmkt2w= Subject key identifier: 2C:CE:C3:58:0E:78:A1:91:6E:60:95:BC:71:1F:47:78:E0:F4:59:60 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4C3D605144905243F945F24E Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc0ad929-bfff-32de-a302-ad43710df0a9.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396594 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:60:51:44:90:52:43:f9:45:f2:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=9a6dcb85-35c6-496f-af6b-ee008baa2333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:51:c7:15:6b:d0:5a:37:2b:10:b9:26:4f:ea: af:41:05:85:66:25:88:28:31:48:f5:bf:9e:06:99: 84:5e:00:32:57:01:f7:08:cf:77:dd:d5:c0:c3:cc: d4:44:34:c4:3a:0b:52:5c:03:b8:53:d8:fe:be:14: 29:c5:67:7c:35:5b:22:cd:08:a2:34:a4:42:b8:39: 67:c5:e6:c4:33:02:3a:71:3c:43:d0:60:21:96:d5: 3e:08:b7:c9:a3:9e:13:47:98:41:3c:ed:45:38:a6: cd:76:90:7b:ac:17:47:b6:1d:75:80:79:01:1e:ad: f5:e4:ff:c0:da:4f:bb:05:d5:c6:6a:84:db:87:a3: 84:aa:cd:7a:29:cb:67:18:94:74:d6:56:0f:19:55: 9d:9b:f5:f2:a9:67:63:db:cb:31:97:8e:79:61:03: fe:f3:3a:b8:8a:94:7b:31:d7:59:b2:a0:84:2f:6f: 78:1c:f1:62:ba:68:0c:1f:aa:66:63:bf:0b:da:dd: c9:63:81:fc:ab:7a:18:93:4b:a9:5f:6f:62:f3:d3: b7:a0:9a:f6:0c:e6:ba:c1:65:21:81:f2:cf:ed:e8: 84:95:fa:44:ed:f5:4a:85:e9:a3:32:5f:f9:af:51: 8a:53:9c:2a:3a:1a:4b:fb:03:0e:a9:02:76:89:ad: 02:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:CE:C3:58:0E:78:A1:91:6E:60:95:BC:71:1F:47:78:E0:F4:59:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc0ad929-bfff-32de-a302-ad43710df0a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:56:41:cf:2b:bc:a9:53:97:8e:50:25:4a:b4:ce:4a:ad:b3: 9e:6b:5a:a0:8b:2f:25:eb:27:b5:72:04:c5:9b:72:17:79:38: 73:32:23:43:dc:d1:75:73:86:ee:dc:50:b6:24:0f:70:cd:c5: 64:ad:00:56:3b:2e:68:15:2b:aa:6b:fa:a4:00:97:11:da:ae: 01:6d:26:55:69:7c:c9:e5:ea:df:60:39:fc:11:04:58:af:48: be:54:69:ef:c0:a9:12:6c:f1:2a:49:7f:5d:7f:0c:26:fc:db: db:de:74:4d:37:b6:c0:ba:7e:c6:6f:5c:03:b7:47:c0:6b:c1: f0:94:d2:9b:f8:26:bd:c5:09:9d:db:0d:1b:3f:99:44:68:2a: 65:1d:95:a3:59:27:a1:e2:71:3a:9f:24:b9:7c:cb:36:ff:22: 5d:e2:6e:a4:32:ed:03:27:3c:f0:c1:cf:e9:fb:a0:9e:71:7c: 34:25:60:56:3a:2c:dc:1b:dd:48:bd:9e:5c:1b:5f:bc:aa:e2: b7:94:59:9e:fd:99:09:48:f6:d0:bc:9f:df:8a:6f:f3:56:9d: ee:eb:9e:c5:e8:47:8c:45:ee:aa:30:58:80:27:86:45:dc:0b: 56:a0:fd:94:05:48:a6:ce:11:f2:c8:1b:93:f0:54:b3:3a:db: 8f:34:d9:43 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9MPWBRRJBSQ/lF8k4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk OWE2ZGNiODUtMzVjNi00OTZmLWFmNmItZWUwMDhiYWEyMzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1HHFWvQWjcrELkmT+qvQQWFZiWIKDFI9b+e BpmEXgAyVwH3CM933dXAw8zURDTEOgtSXAO4U9j+vhQpxWd8NVsizQiiNKRCuDln xebEMwI6cTxD0GAhltU+CLfJo54TR5hBPO1FOKbNdpB7rBdHth11gHkBHq315P/A 2k+7BdXGaoTbh6OEqs16KctnGJR01lYPGVWdm/XyqWdj28sxl455YQP+8zq4ipR7 MddZsqCEL294HPFiumgMH6pmY78L2t3JY4H8q3oYk0upX29i89O3oJr2DOa6wWUh gfLP7eiElfpE7fVKhemjMl/5r1GKU5wqOhpL+wMOqQJ2ia0ClwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCzOw1gOeKGRbmCVvHEfR3jg9FlgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGMwYWQ5MjktYmZmZi0z MmRlLWEzMDItYWQ0MzcxMGRmMGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHJWQc8rvKlTl45QJUq0zkqts55rWqCLLyXrJ7VyBMWbchd5OHMy I0Pc0XVzhu7cULYkD3DNxWStAFY7LmgVK6pr+qQAlxHargFtJlVpfMnl6t9gOfwR BFivSL5Uae/AqRJs8SpJf11/DCb829vedE03tsC6fsZvXAO3R8BrwfCU0pv4Jr3F CZ3bDRs/mURoKmUdlaNZJ6HicTqfJLl8yzb/Il3ibqQy7QMnPPDBz+n7oJ5xfDQl YFY6LNwb3Ui9nlwbX7yq4reUWZ79mQlI9tC8n9+Kb/NWne7rnsXoR4xF7qowWIAn hkXcC1ag/ZQFSKbOEfLIG5PwVLM624802UM= -----END CERTIFICATE-----Generated at Mon Oct 5 00:48:39 2026 by rpki-client