$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3821673e-6bee-3996-9ffa-e0c7b3532a7e.roa File: 3821673e-6bee-3996-9ffa-e0c7b3532a7e.roa (raw, json) Hash identifier: YasFsh2N5/UqsBGz1o7zfu0oUFFaKaY63Coxi4h7RNQ= Subject key identifier: D8:D1:03:30:5C:B3:47:01:96:F2:91:1D:61:C5:F2:0A:EC:A3:35:0B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EF01CB31850EDEC4713D38220 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3821673e-6bee-3996-9ffa-e0c7b3532a7e.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 396565 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:b3:18:50:ed:ec:47:13:d3:82:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=8a045887-db61-4441-9a60-0a327f7cffee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ab:e5:0f:95:e2:47:21:58:90:bd:18:ee:75: 91:90:5f:47:78:43:af:56:c8:13:d0:6c:b3:99:9a: 31:f0:88:ff:a3:4c:fd:3d:9d:75:5f:d2:e4:8b:cc: 7a:ea:ff:07:f0:08:a7:e9:3c:9b:ef:f3:82:47:d2: c7:1f:4f:43:e2:23:dc:d0:d4:71:9c:63:dc:ba:6a: e5:6e:37:72:9d:00:9e:ed:8a:d5:3d:3d:52:b6:0d: 3f:ea:31:64:3e:34:6e:cd:04:88:4f:73:f1:4a:7d: 84:cc:0b:c8:f3:79:2c:53:1b:15:5d:15:3e:ae:18: a2:87:70:cf:90:a9:b7:ea:c4:fa:7c:fe:70:99:eb: 6e:db:67:55:f1:b0:a6:2b:13:3b:78:59:1b:fc:6f: cc:e0:22:aa:d4:cb:be:82:65:eb:19:c4:9d:9c:9b: de:17:09:90:a7:03:05:d8:6d:8d:9a:fb:0f:26:01: 4f:fb:81:80:4e:77:9d:f1:91:53:ab:41:83:6b:aa: ed:d2:62:d3:db:cc:ec:92:3f:e3:98:c1:6c:49:ad: 89:17:36:15:b8:9b:d6:8a:aa:f7:7d:bf:3c:71:86: 4d:77:a6:7b:3b:65:fa:e7:0a:c6:61:2d:b4:0b:d4: 55:89:23:43:9c:f4:d6:53:40:86:49:07:6a:33:10: 29:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D1:03:30:5C:B3:47:01:96:F2:91:1D:61:C5:F2:0A:EC:A3:35:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3821673e-6bee-3996-9ffa-e0c7b3532a7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:24:c9:1b:ff:0a:96:91:2b:e7:5d:1d:4f:a3:50:43:11:7f: ab:fa:d2:1f:da:d7:1f:56:d6:21:da:7c:5c:b2:56:a5:75:32: 82:90:3f:fe:d2:5f:f9:9c:a3:6b:06:75:f2:53:33:34:c1:41: 00:8a:03:f1:9a:8e:c9:0e:f8:a8:78:75:ef:78:2d:5b:8a:9d: 83:3a:5b:54:25:c0:8b:af:88:75:bc:a1:0d:34:68:d3:68:b9: b5:03:91:ad:f5:93:f2:bc:06:18:80:05:aa:77:1b:98:39:d5: 2d:c2:a4:d6:be:ed:62:28:b8:fa:aa:62:ce:e4:79:4d:94:f0: 51:79:8f:6f:2d:60:ad:44:05:a4:0e:e8:6c:59:70:99:8d:ef: a7:58:67:fa:46:73:48:81:69:c6:9d:91:90:af:04:00:4e:e7: d0:b8:86:12:f0:bc:d2:f4:fe:8d:e4:ed:cd:0e:e8:92:c8:72: 83:5c:38:5f:a8:51:f9:5a:2c:3f:26:e3:c0:54:76:f5:72:75: 92:d6:8e:fb:70:a7:82:74:de:94:f7:6a:c5:ad:0f:fc:e1:8d: 54:81:3f:5b:af:96:71:4a:03:6f:78:fa:9c:05:79:95:9d:52: f0:d9:69:1c:8c:8c:ce:10:ed:8f:8a:6e:b8:e6:d4:b2:93:a3: 04:14:79:48 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7wHLMYUO3sRxPTgiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk OGEwNDU4ODctZGI2MS00NDQxLTlhNjAtMGEzMjdmN2NmZmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKvlD5XiRyFYkL0Y7nWRkF9HeEOvVsgT0Gyz mZox8Ij/o0z9PZ11X9Lki8x66v8H8Ain6Tyb7/OCR9LHH09D4iPc0NRxnGPcumrl bjdynQCe7YrVPT1Stg0/6jFkPjRuzQSIT3PxSn2EzAvI83ksUxsVXRU+rhiih3DP kKm36sT6fP5wmetu22dV8bCmKxM7eFkb/G/M4CKq1Mu+gmXrGcSdnJveFwmQpwMF 2G2NmvsPJgFP+4GATned8ZFTq0GDa6rt0mLT28zskj/jmMFsSa2JFzYVuJvWiqr3 fb88cYZNd6Z7O2X65wrGYS20C9RViSNDnPTWU0CGSQdqMxApXwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNjRAzBcs0cBlvKRHWHF8grsozULMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzgyMTY3M2UtNmJlZS0z OTk2LTlmZmEtZTBjN2IzNTMyYTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADgkyRv/CpaRK+ddHU+jUEMRf6v60h/a1x9W1iHafFyyVqV1MoKQ P/7SX/mco2sGdfJTMzTBQQCKA/GajskO+Kh4de94LVuKnYM6W1QlwIuviHW8oQ00 aNNoubUDka31k/K8BhiABap3G5g51S3CpNa+7WIouPqqYs7keU2U8FF5j28tYK1E BaQO6GxZcJmN76dYZ/pGc0iBacadkZCvBABO59C4hhLwvNL0/o3k7c0O6JLIcoNc OF+oUflaLD8m48BUdvVydZLWjvtwp4J03pT3asWtD/zhjVSBP1uvlnFKA294+pwF eZWdUvDZaRyMjM4Q7Y+Kbrjm1LKTowQUeUg= -----END CERTIFICATE-----Generated at Tue Sep 22 18:17:49 2026 by rpki-client