$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/021cebc6-a5be-3609-ae8f-692d71e2b480.roa File: 021cebc6-a5be-3609-ae8f-692d71e2b480.roa (raw, json) Hash identifier: sM777oqc8QdfTnlyML575amwXQ9NG1HTxNPkt/m8JXw= Subject key identifier: 9A:DF:D1:68:E2:8D:65:ED:24:A9:79:A1:29:2B:7C:0E:28:3B:2D:46 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EF01CF189D470042B21F10100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/021cebc6-a5be-3609-ae8f-692d71e2b480.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 396592 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:f1:89:d4:70:04:2b:21:f1:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=59b6aebd-ecd8-4127-b6f3-41b8a8e3429b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:be:79:cc:e4:cd:06:60:13:c3:48:64:c2:48: b5:57:cc:c9:0d:a7:6d:33:9c:2b:af:82:13:00:26: b4:96:e7:75:3a:e5:66:f3:5a:79:8e:99:31:fe:dc: 37:44:5a:c6:f3:1e:5e:22:05:6e:91:2e:50:15:1c: 92:9f:1a:7c:9b:a3:92:0f:d6:68:3c:86:96:91:e2: 4e:50:ac:ce:12:c6:7d:25:67:21:8c:6a:61:fa:77: 00:6f:4c:12:f4:5d:9c:c2:3e:c7:df:d9:88:e4:e7: 23:20:63:09:10:94:d5:f9:f0:80:4b:61:32:25:d5: 81:29:fa:cd:c1:fc:97:1b:b6:37:6d:cd:39:e3:dd: e0:c6:6b:95:bb:64:25:87:a5:24:55:0e:03:18:31: 49:9d:50:b1:11:0b:1b:8b:e2:8f:6f:18:26:cb:48: bd:b9:04:89:a1:bf:af:f4:5d:6e:33:da:f3:11:a9: 49:89:68:b6:90:c0:b5:0d:bb:5a:9e:98:6c:2c:98: aa:75:0a:cc:08:f9:06:7e:78:8a:80:af:24:49:e8: ce:cb:28:10:de:b1:4a:7e:7b:3b:9d:32:52:3e:05: 4d:7d:a3:d1:f7:d3:16:1c:86:f7:bd:49:7f:f0:2c: 83:8e:b8:b0:46:b6:89:5c:e1:c1:f7:e3:d1:d0:e5: 82:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:DF:D1:68:E2:8D:65:ED:24:A9:79:A1:29:2B:7C:0E:28:3B:2D:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/021cebc6-a5be-3609-ae8f-692d71e2b480.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:92:24:fa:9c:4f:0c:db:18:07:b7:ab:a2:78:da:eb:35:2c: dc:28:8b:68:a0:c4:3e:83:3e:fa:7a:5c:bf:69:d3:78:6f:0f: 96:01:21:ff:bb:a2:80:19:f7:98:cd:ba:c0:9a:01:97:f0:74: 4b:1c:50:eb:d0:3f:6a:1a:81:0a:d6:7b:d1:3b:eb:12:d2:68: f8:47:dc:5b:84:2a:8e:46:a2:e5:40:62:95:d9:45:52:92:62: ea:2c:b9:e0:ca:4d:b0:dd:6b:b7:54:d7:6f:4a:79:ae:ec:ba: 7a:48:18:d2:a9:ae:58:53:7a:ef:7a:cb:cb:2a:e4:35:b1:03: 0b:53:08:ac:d0:45:a5:bf:e1:a9:83:0e:92:24:18:03:44:19: a9:23:dc:8e:9a:06:2d:6f:24:d0:cb:f9:4e:fc:25:df:a4:b8: 9d:e8:54:df:59:e8:ca:7d:cd:25:96:ba:38:39:21:25:74:ce: b8:50:0b:97:7b:29:8f:cb:b5:71:3e:5f:81:db:c3:27:e0:28: ec:37:a9:e9:15:1e:b8:9b:36:15:d3:d1:af:9f:c3:41:5d:34: 40:35:52:04:18:a4:88:00:d3:f9:2a:90:5f:a6:74:c6:1b:1a: 8d:b3:7a:ca:69:bf:95:1b:16:1e:64:9d:4a:ef:1d:cb:ac:46: 87:fa:2f:4f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7wHPGJ1HAEKyHxAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk NTliNmFlYmQtZWNkOC00MTI3LWI2ZjMtNDFiOGE4ZTM0MjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL55zOTNBmATw0hkwki1V8zJDadtM5wrr4IT ACa0lud1OuVm81p5jpkx/tw3RFrG8x5eIgVukS5QFRySnxp8m6OSD9ZoPIaWkeJO UKzOEsZ9JWchjGph+ncAb0wS9F2cwj7H39mI5OcjIGMJEJTV+fCAS2EyJdWBKfrN wfyXG7Y3bc05493gxmuVu2Qlh6UkVQ4DGDFJnVCxEQsbi+KPbxgmy0i9uQSJob+v 9F1uM9rzEalJiWi2kMC1DbtanphsLJiqdQrMCPkGfniKgK8kSejOyygQ3rFKfns7 nTJSPgVNfaPR99MWHIb3vUl/8CyDjriwRraJXOHB9+PR0OWCOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJrf0WjijWXtJKl5oSkrfA4oOy1GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDIxY2ViYzYtYTViZS0z NjA5LWFlOGYtNjkyZDcxZTJiNDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKiSJPqcTwzbGAe3q6J42us1LNwoi2igxD6DPvp6XL9p03hvD5YB If+7ooAZ95jNusCaAZfwdEscUOvQP2oagQrWe9E76xLSaPhH3FuEKo5GouVAYpXZ RVKSYuosueDKTbDda7dU129Kea7sunpIGNKprlhTeu96y8sq5DWxAwtTCKzQRaW/ 4amDDpIkGANEGakj3I6aBi1vJNDL+U78Jd+kuJ3oVN9Z6Mp9zSWWujg5ISV0zrhQ C5d7KY/LtXE+X4HbwyfgKOw3qekVHribNhXT0a+fw0FdNEA1UgQYpIgA0/kqkF+m dMYbGo2zesppv5UbFh5knUrvHcusRof6L08= -----END CERTIFICATE-----Generated at Mon Sep 21 19:16:26 2026 by rpki-client