$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71f31753-f9c4-3aaa-aede-05fd5210dd1b.roa File: 71f31753-f9c4-3aaa-aede-05fd5210dd1b.roa (raw, json) Hash identifier: QLGynYjRSxY1xo77gPOGZLk+40xU5Gf4jJg8ZSC3+7k= Subject key identifier: 84:5D:CE:48:20:6F:45:84:38:11:83:0A:E3:D5:A1:28:4D:8A:16:2A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4C3D56FD5633A511B9174E80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71f31753-f9c4-3aaa-aede-05fd5210dd1b.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396585 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:56:fd:56:33:a5:11:b9:17:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=2d35c967-e3ac-4862-921c-8c8b43cd442e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e8:e8:c1:09:32:36:4a:d3:69:8b:76:73:fb: c3:a4:e9:d5:c5:d8:34:94:57:47:86:7f:2c:90:5e: 2f:2b:79:d9:eb:84:19:2b:c1:df:ef:23:9d:34:9e: 9d:c4:44:1f:1a:95:11:11:7f:ac:93:1b:8f:6c:cd: d3:c5:75:98:e1:23:8b:01:59:7e:17:a2:c0:7a:02: 66:4c:b3:9d:2a:94:cb:f0:58:ad:8f:91:9d:1e:3a: 4d:2f:bc:b0:9f:77:aa:a9:79:0d:f4:65:74:2d:0d: 49:ed:c6:f9:ba:82:6b:bb:50:27:81:4e:c5:c2:f8: 73:63:45:5b:68:f1:08:ba:12:d0:c5:c0:21:21:68: 75:0b:53:44:67:e4:de:bf:64:2d:5e:53:58:9c:29: 35:4f:39:23:0d:3b:35:8f:2d:8b:57:bb:44:50:a1: 60:23:4b:42:4d:7c:88:92:66:6f:11:68:ac:93:1e: 32:c1:23:90:75:6f:b5:58:99:0e:a1:6e:14:32:58: 64:fa:91:ca:d7:b3:d9:8c:d0:0f:a5:4d:4e:c5:c2: 29:9d:a1:f9:44:57:db:bf:c2:dc:d7:f9:14:41:7c: 03:17:b1:91:07:39:2f:6c:16:3e:0a:35:33:93:ee: 12:bc:ee:f0:9c:41:10:67:33:22:eb:9b:3b:47:25: 45:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:5D:CE:48:20:6F:45:84:38:11:83:0A:E3:D5:A1:28:4D:8A:16:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71f31753-f9c4-3aaa-aede-05fd5210dd1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:24:ef:ab:b8:fc:07:80:c2:e5:30:59:f5:9b:ae:4f:cb:f6: 54:88:7e:1e:8d:cd:8c:1d:11:c7:61:1e:97:04:e1:5b:31:84: cd:a3:6f:19:24:91:84:f1:4f:60:40:21:28:00:9a:1c:8b:a5: 5d:6b:07:69:ec:b0:22:70:28:89:e5:05:c6:6f:8e:33:b1:c3: 4d:5e:38:fc:1f:c0:fb:9a:10:fc:0d:bb:21:0f:7d:bc:fd:41: 45:21:90:54:11:bf:75:4d:0f:98:20:dd:aa:6f:f5:52:38:cc: ed:b4:a5:13:45:1e:d4:d8:92:89:6a:a8:f3:eb:9b:cd:8e:59: dd:4c:67:22:82:4a:63:63:3d:49:0d:ff:4a:0c:c6:98:33:b5: e9:f4:6e:78:6f:5d:5f:a4:78:e1:f2:8d:e5:73:72:eb:7a:d9: 7c:6c:26:1b:d5:a7:80:3c:c5:5d:e9:dd:02:8c:1e:2b:4a:60: 6a:d7:53:16:e8:c3:f4:b5:56:17:17:73:e6:96:d3:dc:95:84: 40:fb:51:fb:1b:3b:8c:64:0d:f0:d3:25:19:ba:50:2b:b4:87: 83:ab:5b:b6:fa:13:be:28:d8:a1:57:fd:84:2c:ea:7e:36:d9: 24:ed:6c:d5:d3:f5:10:80:76:30:9a:10:79:60:a9:25:c1:84: 86:bf:e9:92 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9MPVb9VjOlEbkXToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MmQzNWM5NjctZTNhYy00ODYyLTkyMWMtOGM4YjQzY2Q0NDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjejowQkyNkrTaYt2c/vDpOnVxdg0lFdHhn8s kF4vK3nZ64QZK8Hf7yOdNJ6dxEQfGpUREX+skxuPbM3TxXWY4SOLAVl+F6LAegJm TLOdKpTL8Fitj5GdHjpNL7ywn3eqqXkN9GV0LQ1J7cb5uoJru1AngU7FwvhzY0Vb aPEIuhLQxcAhIWh1C1NEZ+Tev2QtXlNYnCk1TzkjDTs1jy2LV7tEUKFgI0tCTXyI kmZvEWiskx4ywSOQdW+1WJkOoW4UMlhk+pHK17PZjNAPpU1OxcIpnaH5RFfbv8Lc 1/kUQXwDF7GRBzkvbBY+CjUzk+4SvO7wnEEQZzMi65s7RyVF7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIRdzkggb0WEOBGDCuPVoShNihYqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzFmMzE3NTMtZjljNC0z YWFhLWFlZGUtMDVmZDUyMTBkZDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIQk76u4/AeAwuUwWfWbrk/L9lSIfh6NzYwdEcdhHpcE4VsxhM2j bxkkkYTxT2BAISgAmhyLpV1rB2nssCJwKInlBcZvjjOxw01eOPwfwPuaEPwNuyEP fbz9QUUhkFQRv3VND5gg3apv9VI4zO20pRNFHtTYkolqqPPrm82OWd1MZyKCSmNj PUkN/0oMxpgzten0bnhvXV+keOHyjeVzcut62XxsJhvVp4A8xV3p3QKMHitKYGrX Uxbow/S1VhcXc+aW09yVhED7UfsbO4xkDfDTJRm6UCu0h4OrW7b6E74o2KFX/YQs 6n422STtbNXT9RCAdjCaEHlgqSXBhIa/6ZI= -----END CERTIFICATE-----Generated at Sat Sep 26 23:44:11 2026 by rpki-client