$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43df424b-8041-30e0-bf83-a35ba1b54f1a.roa File: 43df424b-8041-30e0-bf83-a35ba1b54f1a.roa (raw, json) Hash identifier: IVlFLYOOkYOYPq3BI4UigR9+7cWuPWh09+ukLI5GdZA= Subject key identifier: 09:EF:E0:79:18:02:B7:40:74:9D:28:EA:6F:F4:F3:3B:0C:0A:00:0D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F497F7C01032B8CD08BC80C80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43df424b-8041-30e0-bf83-a35ba1b54f1a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397203 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:7c:01:03:2b:8c:d0:8b:c8:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8d095f57-939b-42b8-acec-f2762cc86bbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e0:fd:33:03:b5:ae:2d:38:0a:6b:34:8b:5a: d7:57:4e:58:34:83:4b:12:39:32:79:47:fd:32:99: 9a:d8:52:4e:8e:d8:59:1d:16:bf:ce:21:eb:f8:8c: 76:9e:ba:31:60:a3:90:e7:29:a4:7a:79:2f:05:fc: 6e:f9:0b:e3:f0:ae:5b:cb:86:5b:5b:30:e6:9d:0e: 1f:31:ba:6f:10:05:59:98:63:f1:ca:2a:fb:58:4f: 49:3c:66:0e:09:e0:a7:05:68:f8:35:48:26:c6:51: 50:5c:f5:2e:7f:50:27:73:85:d7:b1:a1:ea:8a:ca: 6c:bb:bb:98:fc:c2:8a:fd:d8:92:9d:15:e7:79:c3: 4e:6c:c4:bc:ee:07:fb:69:de:df:db:de:8b:37:9e: 0a:c3:6f:02:4c:8b:05:65:e9:35:dc:11:d5:34:8c: 71:93:7b:3b:17:04:50:e4:27:d0:f0:95:d3:b5:0a: 20:6e:e0:cc:4a:30:8c:7d:c8:72:c1:96:24:ef:44: 3b:a4:c0:44:9f:fe:3f:6f:90:7b:71:67:0d:70:e8: e0:8a:76:b8:0d:eb:c6:77:c6:08:59:2b:e8:ab:cb: 12:77:9b:10:a0:ba:ff:91:2b:b2:8b:24:fb:7a:95: 3d:ea:06:f3:e8:c2:27:66:93:61:4a:02:49:12:f4: ea:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:EF:E0:79:18:02:B7:40:74:9D:28:EA:6F:F4:F3:3B:0C:0A:00:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43df424b-8041-30e0-bf83-a35ba1b54f1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:fb:e4:b5:ff:b2:f7:2c:89:66:18:01:e8:12:c8:10:e8:7f: da:a3:c7:fa:2d:28:01:78:50:c1:7b:f5:2d:82:d4:d9:e0:15: 20:1c:c4:a6:35:e9:e3:2b:1a:57:10:c0:c8:a6:71:08:fd:12: 7e:b8:1a:36:8d:d4:fd:fb:ab:1f:f0:db:e4:d3:ca:f0:9a:58: 9b:6c:d3:3d:a3:97:00:43:dd:d7:55:53:76:49:48:98:89:90: 65:bf:68:6c:b3:c3:23:54:ea:3c:a8:fb:e8:69:21:39:e1:f7: c3:86:38:b4:90:0a:dd:0f:73:25:4c:52:45:28:81:c8:ba:ed: 34:da:1b:4b:b0:a5:64:44:55:d5:71:34:e5:f5:46:ce:27:48: cb:13:a0:fe:24:39:ed:ec:d8:d5:fc:d0:c1:7b:28:17:cb:3b: 65:c3:d2:1f:78:84:57:7e:ba:1a:d6:0a:9d:c0:cd:b5:f1:5a: 8d:b6:c5:2f:14:9e:c0:b0:16:d5:c2:1c:4f:7e:c1:46:d9:88: 57:21:c3:f9:ee:4e:ba:0d:94:a8:5b:3d:54:11:c2:7e:d9:f2: ea:d2:2f:60:46:4a:91:e2:c8:6b:90:40:c6:49:e8:5e:2a:3e: 6f:43:c9:f1:dd:20:ca:eb:5f:70:0e:d5:bc:14:f0:02:16:3b: 27:77:98:7f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9Jf3wBAyuM0IvIDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGQwOTVmNTctOTM5Yi00MmI4LWFjZWMtZjI3NjJjYzg2YmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+D9MwO1ri04Cms0i1rXV05YNINLEjkyeUf9 Mpma2FJOjthZHRa/ziHr+Ix2nroxYKOQ5ymkenkvBfxu+Qvj8K5by4ZbWzDmnQ4f MbpvEAVZmGPxyir7WE9JPGYOCeCnBWj4NUgmxlFQXPUuf1Anc4XXsaHqispsu7uY /MKK/diSnRXnecNObMS87gf7ad7f296LN54Kw28CTIsFZek13BHVNIxxk3s7FwRQ 5CfQ8JXTtQogbuDMSjCMfchywZYk70Q7pMBEn/4/b5B7cWcNcOjgina4DevGd8YI WSvoq8sSd5sQoLr/kSuyiyT7epU96gbz6MInZpNhSgJJEvTqtQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAnv4HkYArdAdJ0o6m/08zsMCgANMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDNkZjQyNGItODA0MS0z MGUwLWJmODMtYTM1YmExYjU0ZjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCa++S1/7L3LIlmGAHoEsgQ6H/ao8f6LSgBeFDB e/UtgtTZ4BUgHMSmNenjKxpXEMDIpnEI/RJ+uBo2jdT9+6sf8Nvk08rwmlibbNM9 o5cAQ93XVVN2SUiYiZBlv2hss8MjVOo8qPvoaSE54ffDhji0kArdD3MlTFJFKIHI uu002htLsKVkRFXVcTTl9UbOJ0jLE6D+JDnt7NjV/NDBeygXyztlw9IfeIRXfroa 1gqdwM218VqNtsUvFJ7AsBbVwhxPfsFG2YhXIcP57k66DZSoWz1UEcJ+2fLq0i9g RkqR4shrkEDGSeheKj5vQ8nx3SDK619wDtW8FPACFjsnd5h/ -----END CERTIFICATE-----Generated at Sat Sep 26 06:53:43 2026 by rpki-client