$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2cdbaa3b-dee9-33da-9fd5-50423845c543.roa File: 2cdbaa3b-dee9-33da-9fd5-50423845c543.roa (raw, json) Hash identifier: +iQeu5xwPik0mNWQATJoVIbPsMwNBDvSVMDOL8Q8jIs= Subject key identifier: F5:71:3B:DE:9F:E4:2B:45:4A:30:07:D8:E1:BF:E2:E2:84:62:C8:CB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EF01CC0C1F6F707ED13083880 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2cdbaa3b-dee9-33da-9fd5-50423845c543.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 396585 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:c0:c1:f6:f7:07:ed:13:08:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=9f9470a5-6317-466f-b1a1-1f4cc845b503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:34:78:ed:7f:bb:33:a8:96:7c:40:42:43:3e: bb:8f:14:9e:27:69:62:38:ad:f1:09:60:99:29:fb: 2b:05:d0:d0:5a:1f:60:24:06:eb:f4:48:5a:cc:2a: d3:1f:c8:d7:82:bd:e9:3d:fa:c4:f5:1e:f5:3d:9f: 44:f7:c2:ed:37:4f:d7:04:47:93:d6:df:65:67:eb: 9e:a3:19:6e:d4:fa:1f:5f:81:9c:4e:ad:ea:53:9b: 08:1f:16:0c:32:78:2f:ce:cd:d5:c3:31:10:9f:19: 4e:12:7e:c3:d4:65:4c:de:7e:46:3e:48:bc:cf:f7: c4:ca:02:67:b5:70:fb:45:fb:dc:65:cd:41:e1:05: 16:32:35:32:c3:5e:9c:3d:18:8e:7f:7a:52:06:d1: 99:5e:60:8d:9b:b9:1b:e2:19:b9:26:bb:93:1b:ee: c9:02:07:5f:e4:62:3f:e4:26:e2:9d:66:22:88:e3: ca:74:b5:1b:28:d3:92:58:9d:a3:2c:66:46:99:47: 3d:a3:0e:3a:df:77:9a:a0:6e:7e:fa:84:8e:e5:2a: d5:94:fb:e2:6c:38:c2:21:74:b7:91:cb:33:b0:ca: 17:70:4b:79:b6:12:5a:4d:57:3e:29:e5:1b:78:fd: 9d:68:e7:cc:86:02:17:5c:72:22:c8:41:74:66:ed: 65:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:71:3B:DE:9F:E4:2B:45:4A:30:07:D8:E1:BF:E2:E2:84:62:C8:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2cdbaa3b-dee9-33da-9fd5-50423845c543.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:ee:5d:db:c2:82:7b:e9:e1:63:8b:6a:df:91:37:8c:a8:c2: 16:ef:de:fd:4a:1f:79:9b:9f:94:9b:7f:d8:85:bf:ce:60:e6: 14:56:ae:7c:1c:c6:fa:3d:80:0a:f0:19:ba:6f:3f:2e:87:66: 13:2d:42:e1:e1:0c:dc:fe:40:c5:01:77:ed:fa:f2:f7:90:b3: 7b:2b:2c:f3:15:ee:6d:b7:b3:4b:51:62:30:f7:94:79:80:a6: 22:43:84:af:a3:9f:56:5b:d1:df:ea:3e:31:ef:64:c8:c7:00: de:38:61:0a:a1:d5:f1:d9:39:22:4a:b5:6f:90:d2:ed:0d:31: e7:95:b8:15:61:97:e0:11:6f:d1:91:ed:0b:b3:be:bc:69:81: 67:2d:2b:81:b1:0d:3d:dd:df:6f:d9:76:ef:5f:7d:31:0f:f7: 1b:f5:02:25:52:8e:06:84:0f:61:3b:53:2f:32:af:e3:8e:d6: 67:65:f7:a8:f1:31:03:0e:e8:f2:6f:86:8d:d3:da:0f:a9:af: 80:01:f5:e8:7a:9c:a1:b0:8c:ce:3f:b9:e7:e1:71:e9:60:23: 99:bd:a5:8a:bc:f6:0b:00:79:cb:de:a4:3c:38:79:46:35:61: 3f:df:13:48:9c:98:5e:d6:7e:2a:5b:37:cc:5e:52:45:41:f9: 95:8f:26:58 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7wHMDB9vcH7RMIOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk OWY5NDcwYTUtNjMxNy00NjZmLWIxYTEtMWY0Y2M4NDViNTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDR47X+7M6iWfEBCQz67jxSeJ2liOK3xCWCZ KfsrBdDQWh9gJAbr9EhazCrTH8jXgr3pPfrE9R71PZ9E98LtN0/XBEeT1t9lZ+ue oxlu1PofX4GcTq3qU5sIHxYMMngvzs3VwzEQnxlOEn7D1GVM3n5GPki8z/fEygJn tXD7RfvcZc1B4QUWMjUyw16cPRiOf3pSBtGZXmCNm7kb4hm5JruTG+7JAgdf5GI/ 5CbinWYiiOPKdLUbKNOSWJ2jLGZGmUc9ow4633eaoG5++oSO5SrVlPvibDjCIXS3 kcszsMoXcEt5thJaTVc+KeUbeP2daOfMhgIXXHIiyEF0Zu1lfQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPVxO96f5CtFSjAH2OG/4uKEYsjLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmNkYmFhM2ItZGVlOS0z M2RhLTlmZDUtNTA0MjM4NDVjNTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ3uXdvCgnvp4WOLat+RN4yowhbv3v1KH3mbn5Sbf9iFv85g5hRW rnwcxvo9gArwGbpvPy6HZhMtQuHhDNz+QMUBd+368veQs3srLPMV7m23s0tRYjD3 lHmApiJDhK+jn1Zb0d/qPjHvZMjHAN44YQqh1fHZOSJKtW+Q0u0NMeeVuBVhl+AR b9GR7QuzvrxpgWctK4GxDT3d32/Zdu9ffTEP9xv1AiVSjgaED2E7Uy8yr+OO1mdl 96jxMQMO6PJvho3T2g+pr4AB9eh6nKGwjM4/uefhcelgI5m9pYq89gsAecvepDw4 eUY1YT/fE0icmF7WfipbN8xeUkVB+ZWPJlg= -----END CERTIFICATE-----Generated at Tue Sep 22 18:18:14 2026 by rpki-client