$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a166452-a67e-3e35-ac19-f7effc22bfd2.roa File: 1a166452-a67e-3e35-ac19-f7effc22bfd2.roa (raw, json) Hash identifier: M2LY08alB5oj9yHEJmCgRzKP95tS0eE+nlaCqxQhN1g= Subject key identifier: 39:E0:14:70:2F:F5:0D:FC:0B:89:89:A5:9B:19:B2:1E:73:38:8A:9F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EF01CF040C567D1AAD0D59A80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a166452-a67e-3e35-ac19-f7effc22bfd2.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 396600 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:f0:40:c5:67:d1:aa:d0:d5:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=0a9b42bb-c35a-4e39-a41f-fdb37f1b3c3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:40:2b:5d:cd:5c:3b:9a:bd:70:b0:b7:05:fc: c6:db:4e:ea:83:43:6a:56:dd:74:85:9d:64:20:45: c0:fc:7e:90:86:03:19:25:40:d4:08:f4:3a:30:23: 14:e1:f0:96:7e:34:78:31:04:d3:10:c7:93:53:a1: b1:38:89:4a:d7:e5:ec:20:50:7b:4a:02:41:ee:5b: 4b:b2:66:8d:16:02:cd:ad:78:ef:49:33:a7:8d:f3: b0:f6:23:6d:70:90:27:9c:c9:f6:eb:b7:7f:0d:eb: 43:fb:eb:b6:17:73:c4:66:d7:ea:e4:95:30:a3:21: aa:8e:ac:bb:c8:e6:d1:5d:39:6f:cf:e8:d9:84:37: 6a:1f:41:b9:c7:0b:81:16:fa:b9:00:07:df:2b:f8: b1:fa:34:09:06:44:51:55:3c:82:a3:56:f2:9d:56: d3:89:89:e7:64:f8:3d:fe:b9:dc:d1:85:3a:85:41: 3b:08:5b:2f:93:5d:b0:32:2e:a9:5b:56:cc:5f:97: b8:70:12:bc:a2:23:54:9a:97:fc:a9:f2:08:82:23: ce:a8:ad:43:66:36:c9:a6:20:37:7c:86:83:bc:cf: 47:0b:0a:cb:91:60:43:e3:03:85:87:6a:f8:7f:41: 46:ba:c5:a6:b3:1d:9c:5b:7e:16:3f:5a:6c:35:a2: 56:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E0:14:70:2F:F5:0D:FC:0B:89:89:A5:9B:19:B2:1E:73:38:8A:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a166452-a67e-3e35-ac19-f7effc22bfd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:52:ab:46:2c:4a:40:74:d4:53:12:e1:2f:b4:12:bc:ed:61: b7:79:8b:01:6b:7e:44:9e:78:6a:fd:ce:32:33:95:e2:07:47: bd:43:80:92:1b:b8:d5:77:60:1f:d1:a8:54:b8:c9:6f:aa:91: 8d:ac:10:79:d3:2a:89:09:67:6b:99:4a:c0:3a:98:7e:91:a9: e1:a4:af:e0:15:40:02:9b:47:7b:b4:2e:44:fd:7e:1c:d7:e5: 9a:1b:68:51:32:05:9b:29:50:86:79:12:eb:ad:63:14:8c:d8: b9:45:76:a4:d7:7c:0e:7e:94:a6:b9:a4:df:0b:7e:cd:26:c8: 05:5b:9a:34:42:6c:7e:ee:9b:7a:bc:87:1c:3f:41:ca:1d:9a: 6b:a5:56:0d:1e:01:a4:98:06:60:e7:2b:83:3b:68:35:09:26: 20:d1:1d:54:43:0c:0b:3d:dc:2d:9d:69:81:25:6e:25:ab:73: 7f:e8:96:29:b9:e9:7f:d5:fb:98:29:69:5c:d7:c8:a8:36:f1: 8b:8b:62:6d:93:41:c7:99:e6:86:74:ca:ad:c5:c3:68:a9:31: cd:12:83:2c:b3:1e:6f:63:3e:77:7a:97:fd:d6:2e:d4:28:fd: 16:34:75:e9:e2:57:a4:a5:50:06:1c:16:f2:ac:25:cd:f4:3c: f1:73:31:39 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7wHPBAxWfRqtDVmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk MGE5YjQyYmItYzM1YS00ZTM5LWE0MWYtZmRiMzdmMWIzYzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEArXc1cO5q9cLC3BfzG207qg0NqVt10hZ1k IEXA/H6QhgMZJUDUCPQ6MCMU4fCWfjR4MQTTEMeTU6GxOIlK1+XsIFB7SgJB7ltL smaNFgLNrXjvSTOnjfOw9iNtcJAnnMn267d/DetD++u2F3PEZtfq5JUwoyGqjqy7 yObRXTlvz+jZhDdqH0G5xwuBFvq5AAffK/ix+jQJBkRRVTyCo1bynVbTiYnnZPg9 /rnc0YU6hUE7CFsvk12wMi6pW1bMX5e4cBK8oiNUmpf8qfIIgiPOqK1DZjbJpiA3 fIaDvM9HCwrLkWBD4wOFh2r4f0FGusWmsx2cW34WP1psNaJW1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDngFHAv9Q38C4mJpZsZsh5zOIqfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWExNjY0NTItYTY3ZS0z ZTM1LWFjMTktZjdlZmZjMjJiZmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGNSq0YsSkB01FMS4S+0ErztYbd5iwFrfkSeeGr9zjIzleIHR71D gJIbuNV3YB/RqFS4yW+qkY2sEHnTKokJZ2uZSsA6mH6RqeGkr+AVQAKbR3u0LkT9 fhzX5ZobaFEyBZspUIZ5EuutYxSM2LlFdqTXfA5+lKa5pN8Lfs0myAVbmjRCbH7u m3q8hxw/QcodmmulVg0eAaSYBmDnK4M7aDUJJiDRHVRDDAs93C2daYElbiWrc3/o lim56X/V+5gpaVzXyKg28YuLYm2TQceZ5oZ0yq3Fw2ipMc0SgyyzHm9jPnd6l/3W LtQo/RY0deniV6SlUAYcFvKsJc30PPFzMTk= -----END CERTIFICATE-----Generated at Sat Sep 26 08:54:42 2026 by rpki-client