$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6817238a-5108-3014-8f3a-ea538d4c450e.roa File: 6817238a-5108-3014-8f3a-ea538d4c450e.roa (raw, json) Hash identifier: 0jKM/2ACJIW2qQMyjP3q5/dJEmSexQw9Ft6L1gPeizQ= Subject key identifier: 5A:8B:2B:7E:79:C8:4A:F2:0F:36:CB:76:70:9C:11:FC:5E:4A:A0:A7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EF01CE7D9B8BCDAA8BDA2F180 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6817238a-5108-3014-8f3a-ea538d4c450e.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 396606 IP address blocks: 2001:500:13f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:e7:d9:b8:bc:da:a8:bd:a2:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=82f3a9ce-785a-4c81-bdea-a2d2d875c23e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:78:a3:fe:17:bb:d2:cc:7c:5e:cc:77:29:ca: 36:87:45:96:0a:c4:b6:13:b8:d7:8b:fe:70:7e:5c: 23:28:25:05:30:1c:fb:5d:8b:3c:a1:f7:66:3c:b7: b0:42:52:4f:33:04:88:31:c6:f1:1a:d4:6b:af:1f: fa:01:81:84:49:a1:a0:e0:32:fd:80:78:ab:8d:aa: 06:6d:0a:53:b2:fb:a7:b8:05:7a:53:22:f6:96:28: cf:46:e7:63:9e:6e:33:fa:bc:15:0f:0a:c2:a7:aa: 62:f6:bd:3f:da:b1:67:10:19:45:8d:56:62:42:42: b7:de:a8:bd:16:69:2c:b6:a9:c4:f0:1f:c2:f2:46: e8:61:0e:2b:d4:c4:6a:52:66:4c:13:5c:6c:21:a1: 68:8f:8b:31:3c:0f:b6:89:1f:b5:38:cd:a2:8b:73: a6:86:a9:a3:90:cd:8c:9f:7a:f2:11:fc:12:b2:26: 59:2c:84:3d:d6:60:79:44:bf:4b:96:78:53:ee:50: 84:1f:e1:e1:c1:1a:b3:69:96:fc:cc:22:88:82:7b: 5a:a1:16:c1:a2:fc:d0:06:aa:96:22:be:f7:68:1d: f3:c7:0c:75:4a:f4:5f:75:0f:6d:bc:6b:e0:f9:c9: 88:94:67:6d:48:27:91:32:f2:d5:6f:20:be:0b:5e: 8b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:8B:2B:7E:79:C8:4A:F2:0F:36:CB:76:70:9C:11:FC:5E:4A:A0:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6817238a-5108-3014-8f3a-ea538d4c450e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:13f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:c5:b1:60:59:2d:fb:c9:f9:b9:8d:95:05:17:d9:67:1b:5c: c1:94:f3:5d:57:42:7c:dc:1f:76:b1:8d:bf:7b:2c:54:34:c7: d2:04:df:e2:c5:3c:43:29:4b:75:16:be:f5:4c:47:33:aa:51: a1:b2:11:63:11:b5:4b:19:f7:6a:df:d6:da:6e:ec:5b:b6:e2: 1a:7c:63:ff:d3:f4:67:ca:67:2e:7d:40:f8:7f:dd:dd:1e:e7: df:9a:20:da:2a:3f:f2:12:35:63:68:dc:83:7f:a7:e7:4d:3e: f5:5b:3a:4d:a3:ec:27:35:4e:51:c2:bc:14:d7:f1:78:9b:4b: e7:a8:15:90:19:f6:a8:aa:ab:f3:33:9e:f8:70:c2:ea:4f:52: f7:eb:a9:87:64:b8:fc:9f:f0:5f:8f:89:af:69:21:d8:31:66: a7:d0:da:9a:3f:2c:de:a7:2e:20:d4:ff:c6:b9:e2:5f:74:49: cb:91:06:72:54:62:39:34:f3:2b:fd:6f:c8:f5:a4:4b:77:61: 8f:39:96:8d:df:e5:49:93:7e:f6:60:62:e5:4b:09:f9:4f:58: fb:c2:78:47:b4:22:38:8d:90:f9:c6:ab:ea:b3:fa:e5:9e:6e: b0:ba:8a:01:4a:9f:94:98:3a:1e:e3:eb:de:0f:7d:df:02:25: ee:ad:0f:2d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7wHOfZuLzaqL2i8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk ODJmM2E5Y2UtNzg1YS00YzgxLWJkZWEtYTJkMmQ4NzVjMjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXij/he70sx8Xsx3Kco2h0WWCsS2E7jXi/5w flwjKCUFMBz7XYs8ofdmPLewQlJPMwSIMcbxGtRrrx/6AYGESaGg4DL9gHirjaoG bQpTsvunuAV6UyL2lijPRudjnm4z+rwVDwrCp6pi9r0/2rFnEBlFjVZiQkK33qi9 FmkstqnE8B/C8kboYQ4r1MRqUmZME1xsIaFoj4sxPA+2iR+1OM2ii3OmhqmjkM2M n3ryEfwSsiZZLIQ91mB5RL9LlnhT7lCEH+HhwRqzaZb8zCKIgntaoRbBovzQBqqW Ir73aB3zxwx1SvRfdQ9tvGvg+cmIlGdtSCeRMvLVbyC+C16LVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFqLK355yEryDzbLdnCcEfxeSqCnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjgxNzIzOGEtNTEwOC0z MDE0LThmM2EtZWE1MzhkNGM0NTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADjFsWBZLfvJ+bmNlQUX2WcbXMGU811XQnzcH3axjb97LFQ0x9IE 3+LFPEMpS3UWvvVMRzOqUaGyEWMRtUsZ92rf1tpu7Fu24hp8Y//T9GfKZy59QPh/ 3d0e59+aINoqP/ISNWNo3IN/p+dNPvVbOk2j7Cc1TlHCvBTX8XibS+eoFZAZ9qiq q/MznvhwwupPUvfrqYdkuPyf8F+Pia9pIdgxZqfQ2po/LN6nLiDU/8a54l90ScuR BnJUYjk08yv9b8j1pEt3YY85lo3f5UmTfvZgYuVLCflPWPvCeEe0IjiNkPnGq+qz +uWebrC6igFKn5SYOh7j694Pfd8CJe6tDy0= -----END CERTIFICATE-----Generated at Mon Sep 21 18:41:15 2026 by rpki-client