$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e97cfdcf-5bf0-3cb1-ba7a-0bbbecbcdd41.roa File: e97cfdcf-5bf0-3cb1-ba7a-0bbbecbcdd41.roa (raw, json) Hash identifier: dbZPe80GDAMgpGuF3vYhsZxWKFllSohBVk9J/v0J5As= Subject key identifier: F4:7B:FB:C5:1E:18:08:D6:36:05:33:FD:0A:D6:E1:4B:5A:0A:82:97 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F7E7DB8D465235FA7201FC480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e97cfdcf-5bf0-3cb1-ba7a-0bbbecbcdd41.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 397206 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:b8:d4:65:23:5f:a7:20:1f:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=5d50e8f5-c77d-427a-a820-67ea2a7777d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:94:b7:aa:08:e5:81:c5:65:e0:04:70:0a:7d: e1:93:cc:1a:f1:4e:be:5c:77:2a:a6:09:eb:0b:46: fb:67:5f:7b:7e:7c:11:2c:16:8e:04:74:b7:9d:7e: ce:b5:6a:3b:2a:64:11:07:b4:e6:34:57:dd:c6:37: dc:d7:0e:19:56:d4:9b:2b:1e:74:86:d1:86:ee:4b: 1a:0f:24:9c:a3:5f:9c:09:76:3d:13:e0:61:7a:b5: b7:6d:d7:5e:cd:2a:69:b0:69:31:2f:e4:34:a2:ef: 23:4c:c9:75:96:2d:71:5d:3c:b7:02:aa:fa:d2:94: c3:77:e0:8e:f5:ff:07:2a:76:c1:58:d1:e5:5b:cf: 03:b8:1a:d7:e5:7f:f2:94:d0:49:99:a8:80:70:20: be:c4:f2:df:ce:89:3b:0f:70:72:b3:95:04:6d:61: 51:3f:6b:be:d7:a5:92:a0:4e:1b:80:18:ba:8c:cc: 0c:56:3b:f0:4b:01:cc:33:8d:a4:df:62:ae:b1:62: a7:72:fa:b6:06:df:31:1c:02:ad:e4:41:a1:01:7c: a3:76:be:00:48:56:b1:b5:3f:94:95:51:9b:50:17: 96:52:fd:a1:1e:f4:16:ae:7b:83:2a:6e:e7:12:4b: d0:db:95:e6:2e:9a:0a:0a:38:bc:a3:a8:27:03:b6: 18:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:7B:FB:C5:1E:18:08:D6:36:05:33:FD:0A:D6:E1:4B:5A:0A:82:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e97cfdcf-5bf0-3cb1-ba7a-0bbbecbcdd41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:44:a5:81:d5:c3:bb:3d:c0:bb:bc:27:e8:c3:f2:13:a0:a2: 86:7b:33:5c:85:30:44:9d:04:62:9f:bc:03:1a:18:66:db:8a: 04:bd:a7:1a:d5:66:3f:fc:30:5e:fc:16:54:4b:9a:27:af:2e: c9:8c:1a:a2:73:2e:db:dc:b8:bc:2f:e7:92:d0:6d:6f:02:c3: fa:ca:9a:7a:2e:f7:88:65:37:3e:8e:63:49:ab:c1:dc:dd:0c: 9d:cd:13:cf:e5:ae:04:cd:52:83:a5:cf:9e:4c:96:60:4c:91: 57:58:f7:50:cd:1d:ed:a7:0f:52:12:b0:8c:7b:6a:a9:41:5d: 25:4e:15:c1:33:cb:5a:12:bd:33:20:05:fb:68:1c:cb:e3:99: 25:20:23:43:3b:b7:1d:4e:60:ec:4e:f8:e4:64:77:e9:14:ce: fe:05:99:67:ef:38:97:f8:91:cd:6b:1a:c7:0a:ef:d0:8a:4b: ab:e0:07:d0:36:6c:ec:8d:c3:fc:15:2b:3e:9e:20:8a:b7:df: 90:70:43:8b:28:a3:39:5a:cf:ab:16:73:ac:50:cd:70:bf:b6: 73:e5:eb:95:db:1a:21:54:0f:b1:b9:66:8b:ea:cd:50:63:7b: 71:b6:8b:5e:38:63:5a:e1:b4:ac:c3:b2:16:ea:62:cd:49:bd: 6b:00:bd:08 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+fbjUZSNfpyAfxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk NWQ1MGU4ZjUtYzc3ZC00MjdhLWE4MjAtNjdlYTJhNzc3N2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpS3qgjlgcVl4ARwCn3hk8wa8U6+XHcqpgnr C0b7Z197fnwRLBaOBHS3nX7OtWo7KmQRB7TmNFfdxjfc1w4ZVtSbKx50htGG7ksa DySco1+cCXY9E+BherW3bddezSppsGkxL+Q0ou8jTMl1li1xXTy3Aqr60pTDd+CO 9f8HKnbBWNHlW88DuBrX5X/ylNBJmaiAcCC+xPLfzok7D3Bys5UEbWFRP2u+16WS oE4bgBi6jMwMVjvwSwHMM42k32KusWKncvq2Bt8xHAKt5EGhAXyjdr4ASFaxtT+U lVGbUBeWUv2hHvQWrnuDKm7nEkvQ25XmLpoKCji8o6gnA7YY/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPR7+8UeGAjWNgUz/QrW4UtaCoKXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTk3Y2ZkY2YtNWJmMC0z Y2IxLWJhN2EtMGJiYmVjYmNkZDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAhEpYHVw7s9wLu8J+jD8hOgooZ7M1yFMESdBGKfvAMaGGbbigS9 pxrVZj/8MF78FlRLmievLsmMGqJzLtvcuLwv55LQbW8Cw/rKmnou94hlNz6OY0mr wdzdDJ3NE8/lrgTNUoOlz55MlmBMkVdY91DNHe2nD1ISsIx7aqlBXSVOFcEzy1oS vTMgBftoHMvjmSUgI0M7tx1OYOxO+ORkd+kUzv4FmWfvOJf4kc1rGscK79CKS6vg B9A2bOyNw/wVKz6eIIq335BwQ4soozlaz6sWc6xQzXC/tnPl65XbGiFUD7G5Zovq zVBje3G2i144Y1rhtKzDshbqYs1JvWsAvQg= -----END CERTIFICATE-----Generated at Sun Nov 15 18:06:26 2026 by rpki-client