$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f955122-5ce4-3b0f-833c-ef618161669e.roa File: 4f955122-5ce4-3b0f-833c-ef618161669e.roa (raw, json) Hash identifier: J2oiD7WkIVl+ihn73nBB9jehjzLxKqFEL6ZeS2Qy7T0= Subject key identifier: D9:AD:95:CA:91:3A:2C:A9:59:61:97:15:99:61:D9:81:78:C8:21:85 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EF01CF2070A16C09B00689D00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f955122-5ce4-3b0f-833c-ef618161669e.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 396567 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:f2:07:0a:16:c0:9b:00:68:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=092eac38-9fa4-44ec-a841-26b5a1a181f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:66:16:cf:f9:77:a4:1c:80:c1:28:ce:34:6b: d0:14:07:5f:40:39:ce:10:40:3b:a7:1e:b7:97:99: 38:7e:fc:4a:8d:13:6e:bf:a0:2f:41:28:82:33:3d: 14:d5:55:6a:38:21:a9:4e:b1:14:9c:52:ed:71:77: c5:03:c2:0f:88:c0:0a:24:0b:2d:4d:35:03:30:75: b7:ad:9a:fb:27:5d:e8:ca:94:e9:e6:b6:a5:a0:2a: 70:78:47:75:7f:26:b6:fb:05:ca:e9:aa:b9:ea:a3: a2:c6:3b:c9:9b:0d:03:63:1d:2c:6e:cb:46:a3:7a: 6e:11:e8:e1:c9:49:68:57:13:ec:6a:3e:db:56:84: eb:32:b2:4c:b3:e8:56:ad:0f:c3:30:22:c2:12:11: d4:41:9f:2a:b8:46:9f:af:8d:b7:64:e5:5f:02:1d: cd:39:50:40:04:27:13:ae:d3:b1:83:e4:72:59:ee: f2:f9:ab:00:c2:cf:cd:14:3e:c6:23:0b:8c:49:40: 20:86:42:ec:90:17:dd:77:b5:1c:b3:85:d4:ef:0e: 5d:de:be:02:e0:93:ff:f1:59:8c:70:5b:32:d6:b6: 11:d7:f8:af:48:94:e2:e0:13:9e:19:8b:54:ad:14: 5d:50:c2:6e:62:83:06:a7:dd:c1:3d:48:0b:d5:ae: f8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:AD:95:CA:91:3A:2C:A9:59:61:97:15:99:61:D9:81:78:C8:21:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f955122-5ce4-3b0f-833c-ef618161669e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:c3:26:98:2a:c5:07:e2:f3:49:14:ba:a0:d4:f3:d0:62:6b: 41:20:33:da:5b:f1:bb:16:29:28:f4:20:4a:07:f6:a3:e8:ba: d5:f0:e1:20:41:86:52:2b:19:56:73:45:e5:4a:7c:1a:90:42: eb:5d:da:72:e8:49:61:94:9b:41:fb:4d:fd:43:40:29:5d:ec: 97:2b:02:14:6e:e8:59:65:ff:c8:91:27:f5:a9:65:74:8b:36: dd:f7:70:d6:79:d5:92:2e:a8:e4:df:75:49:68:84:de:14:58: 2b:0f:d2:1b:27:88:b6:39:d6:ad:0b:fd:46:4b:aa:4b:1d:c1: 4d:d0:67:9e:40:e3:49:84:24:66:31:4d:8e:43:45:8c:46:42: 24:31:f6:fd:96:4e:ae:ea:2e:cb:5f:67:80:0a:ba:34:41:93: 88:80:db:92:be:ed:68:b5:1b:04:17:05:4d:3d:34:67:56:2a: fd:35:64:5b:c6:6a:3a:fc:7e:ab:7f:72:99:33:9a:7e:9c:bb: 2a:af:17:dd:e4:34:f2:89:99:75:87:8a:1c:f8:7b:4e:ac:19: cd:ac:dd:2e:80:9c:4b:e5:c5:50:36:7e:b1:0a:c9:ea:53:8b: 4c:00:19:a4:71:86:21:c1:ba:3b:48:b5:a8:e8:67:8b:ba:15: 8f:2a:2e:fe -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7wHPIHChbAmwBonQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk MDkyZWFjMzgtOWZhNC00NGVjLWE4NDEtMjZiNWExYTE4MWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWYWz/l3pByAwSjONGvQFAdfQDnOEEA7px63 l5k4fvxKjRNuv6AvQSiCMz0U1VVqOCGpTrEUnFLtcXfFA8IPiMAKJAstTTUDMHW3 rZr7J13oypTp5raloCpweEd1fya2+wXK6aq56qOixjvJmw0DYx0sbstGo3puEejh yUloVxPsaj7bVoTrMrJMs+hWrQ/DMCLCEhHUQZ8quEafr423ZOVfAh3NOVBABCcT rtOxg+RyWe7y+asAws/NFD7GIwuMSUAghkLskBfdd7Ucs4XU7w5d3r4C4JP/8VmM cFsy1rYR1/ivSJTi4BOeGYtUrRRdUMJuYoMGp93BPUgL1a74swIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNmtlcqROiypWWGXFZlh2YF4yCGFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGY5NTUxMjItNWNlNC0z YjBmLTgzM2MtZWY2MTgxNjE2NjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI3DJpgqxQfi80kUuqDU89Bia0EgM9pb8bsWKSj0IEoH9qPoutXw 4SBBhlIrGVZzReVKfBqQQutd2nLoSWGUm0H7Tf1DQCld7JcrAhRu6Fll/8iRJ/Wp ZXSLNt33cNZ51ZIuqOTfdUlohN4UWCsP0hsniLY51q0L/UZLqksdwU3QZ55A40mE JGYxTY5DRYxGQiQx9v2WTq7qLstfZ4AKujRBk4iA25K+7Wi1GwQXBU09NGdWKv01 ZFvGajr8fqt/cpkzmn6cuyqvF93kNPKJmXWHihz4e06sGc2s3S6AnEvlxVA2frEK yepTi0wAGaRxhiHBujtItajoZ4u6FY8qLv4= -----END CERTIFICATE-----Generated at Mon Sep 21 18:40:07 2026 by rpki-client