$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd659960-2235-3ea8-b959-e6885d93cff4.roa File: dd659960-2235-3ea8-b959-e6885d93cff4.roa (raw, json) Hash identifier: IU7JxpU0M0SXQYZSdgLycZFk7gJDhVRpJsteuffXSac= Subject key identifier: 45:B1:BA:6E:69:CF:53:63:CE:B9:7C:4A:36:B1:A9:00:D9:84:50:DD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EF5B20E88FE8D68F9BC4056C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd659960-2235-3ea8-b959-e6885d93cff4.roa Signing time: Wed 26 Aug 2026 01:00:12 +0000 ROA not before: Wed 26 Aug 2026 01:00:12 +0000 ROA not after: Tue 24 Nov 2026 02:00:12 +0000 asID: 396588 IP address blocks: 2001:500:133::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f5:b2:0e:88:fe:8d:68:f9:bc:40:56:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 26 01:00:12 2026 GMT Not After : Nov 24 02:00:12 2026 GMT Subject: CN=f77c18d6-798d-4baa-981c-cedcd53a56b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ae:c0:80:c5:ec:4c:2d:cd:87:d2:d1:56:7c: 0e:f3:94:13:89:e6:04:fc:ca:ae:fb:d5:74:a3:8e: 04:92:de:ce:ab:7b:43:e3:d9:4d:df:f9:45:20:54: 85:41:81:47:a4:d6:e4:a2:8a:d4:34:c7:f2:8c:e9: 4d:3d:16:e6:ce:d1:3d:52:bf:82:ff:4c:71:84:c0: df:5a:9c:33:9e:8e:da:73:2c:28:8d:35:f4:19:05: 5c:0a:c5:d9:9c:ce:a1:25:54:4d:c0:1d:b0:a4:9a: a2:b7:a4:08:f7:53:50:e0:9d:d7:7e:fe:48:12:37: f4:cd:37:93:73:d8:b4:ae:a7:bc:d1:8b:95:e6:7c: fa:70:16:cc:6d:5b:a7:63:89:10:7c:32:84:84:f4: dc:77:67:c7:ec:c9:02:80:a8:04:d5:bf:bc:6f:84: e2:43:55:20:6d:24:be:7c:ca:1f:e1:e6:94:f6:37: d6:2a:01:97:27:6e:98:c2:13:ea:a1:b5:06:fb:3b: c4:e4:c7:b0:5e:cc:54:9a:37:7b:e9:c3:2b:84:7c: 85:d8:cc:a7:ac:e5:04:ff:9d:e0:ed:e2:53:03:98: 32:db:6e:91:e9:38:55:4b:cb:aa:cc:a1:1f:17:eb: fc:9d:5a:42:08:ef:c7:3c:27:a2:6b:a6:a5:3c:3f: bc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B1:BA:6E:69:CF:53:63:CE:B9:7C:4A:36:B1:A9:00:D9:84:50:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd659960-2235-3ea8-b959-e6885d93cff4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:b4:11:5d:34:24:a0:47:3f:4b:32:c2:23:73:cb:f4:1c:a4: 00:eb:e6:c4:fc:13:4c:90:4e:db:ab:13:26:cd:64:68:d2:a1: db:7c:dd:7f:2d:70:98:d8:31:f3:d0:ea:e7:e5:ef:ef:f0:9a: d6:1e:bb:ba:b4:6a:88:17:42:24:1e:5c:29:98:24:ab:cf:41: 84:1e:0d:48:43:7d:b6:d1:36:89:d2:47:e5:b6:d1:6d:6c:0f: 2c:0c:29:57:d0:38:25:a4:ec:71:0b:b9:5b:91:2b:9d:0a:c8: fd:d2:ff:d1:d6:80:83:35:02:77:0c:95:cd:e8:67:af:4d:07: e8:57:bb:69:11:d3:88:83:d5:2b:03:b7:16:08:3c:d6:1e:49: 2d:d5:dc:5e:45:8f:f5:15:07:b2:70:d6:85:f0:cb:40:f5:4f: de:8b:a3:6a:f7:62:18:ca:1b:e7:ce:20:c4:59:f4:68:e5:3c: 35:00:c6:d0:12:0b:fb:ab:d1:3f:d1:1a:30:bd:b0:03:d7:4c: 89:98:60:7d:02:9d:c9:08:8c:76:94:3a:21:55:d3:d9:29:ff: e8:4b:24:65:e9:4c:e5:76:9e:b3:21:0c:86:0f:59:50:ce:e5: 53:82:9a:73:fd:6a:81:21:47:64:e6:85:71:ad:74:98:bd:d3: cc:4b:09:fa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE71sg6I/o1o+bxAVsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgyNjAxMDAxMloXDTI2MTEyNDAyMDAxMlowLzEtMCsGA1UEAxMk Zjc3YzE4ZDYtNzk4ZC00YmFhLTk4MWMtY2VkY2Q1M2E1NmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl67AgMXsTC3Nh9LRVnwO85QTieYE/Mqu+9V0 o44Ekt7Oq3tD49lN3/lFIFSFQYFHpNbkoorUNMfyjOlNPRbmztE9Ur+C/0xxhMDf Wpwzno7acywojTX0GQVcCsXZnM6hJVRNwB2wpJqit6QI91NQ4J3Xfv5IEjf0zTeT c9i0rqe80YuV5nz6cBbMbVunY4kQfDKEhPTcd2fH7MkCgKgE1b+8b4TiQ1UgbSS+ fMof4eaU9jfWKgGXJ26YwhPqobUG+zvE5MewXsxUmjd76cMrhHyF2MynrOUE/53g 7eJTA5gy226R6ThVS8uqzKEfF+v8nVpCCO/HPCeia6alPD+8OQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEWxum5pz1Njzrl8SjaxqQDZhFDdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGQ2NTk5NjAtMjIzNS0z ZWE4LWI5NTktZTY4ODVkOTNjZmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABC0EV00JKBHP0sywiNzy/QcpADr5sT8E0yQTturEybNZGjSodt8 3X8tcJjYMfPQ6ufl7+/wmtYeu7q0aogXQiQeXCmYJKvPQYQeDUhDfbbRNonSR+W2 0W1sDywMKVfQOCWk7HELuVuRK50KyP3S/9HWgIM1AncMlc3oZ69NB+hXu2kR04iD 1SsDtxYIPNYeSS3V3F5Fj/UVB7Jw1oXwy0D1T96Lo2r3YhjKG+fOIMRZ9GjlPDUA xtASC/ur0T/RGjC9sAPXTImYYH0CnckIjHaUOiFV09kp/+hLJGXpTOV2nrMhDIYP WVDO5VOCmnP9aoEhR2TmhXGtdJi908xLCfo= -----END CERTIFICATE-----Generated at Fri Sep 25 16:15:59 2026 by rpki-client