$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b2f91b3-4a75-3428-bf8e-d31bea5f5b24.roa File: 7b2f91b3-4a75-3428-bf8e-d31bea5f5b24.roa (raw, json) Hash identifier: xrVWxayIdnIVtdq/RrJyZBdVN8sC5HbATirUzqddVYU= Subject key identifier: 10:C9:36:21:93:69:16:AD:4F:8A:EF:14:30:77:8F:1A:AF:E5:CB:0E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EF01CF2D0B71B508F5E35BA80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b2f91b3-4a75-3428-bf8e-d31bea5f5b24.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 396564 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:f2:d0:b7:1b:50:8f:5e:35:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=9b6c031e-5295-4a93-91bf-a4cf97ef5dab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9c:e7:6d:2b:c7:bf:a6:c0:ce:53:42:17:31: 67:9b:b6:78:32:ae:5e:6b:ec:cd:aa:9e:99:70:6c: c4:89:d8:63:36:bb:be:6d:ee:c2:18:b5:ef:a1:b6: 07:d5:a2:e4:e6:8b:02:09:d7:5c:bf:b2:aa:d0:86: 77:89:b4:1b:e6:e5:4e:5c:9a:12:21:ee:bc:86:d8: ea:9d:4b:6a:92:dc:89:11:32:4e:2d:72:6a:47:7f: cc:57:44:44:27:a6:bf:83:c2:35:0b:2d:c2:3e:95: 49:87:62:80:bf:22:75:0a:4e:79:2d:ac:c9:f6:e4: 61:83:71:14:fd:68:2f:7b:dd:d0:23:f7:b2:25:35: d9:3c:fd:c1:7f:91:7b:9a:9f:92:2f:af:1a:9c:a7: b7:2d:c6:85:12:0a:e5:5c:d3:c1:cf:24:56:8d:0c: ef:b3:64:9b:48:e1:a0:74:4b:37:ae:71:8d:31:d3: 7f:71:72:56:ff:6f:dc:e2:40:57:3b:81:95:49:7b: 62:6f:cf:25:d9:5b:b5:eb:ff:28:af:c9:67:63:23: 26:e8:b9:dc:f1:e2:4f:56:29:0b:79:2e:51:a2:2b: 1d:c6:df:7b:f7:02:df:6b:d7:aa:dc:ed:3f:00:3c: 3f:25:a3:e5:4a:a3:92:ec:fb:2d:7b:47:c8:99:b8: 12:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C9:36:21:93:69:16:AD:4F:8A:EF:14:30:77:8F:1A:AF:E5:CB:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b2f91b3-4a75-3428-bf8e-d31bea5f5b24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:52:80:68:a6:20:9c:05:4c:7b:01:c5:9b:f4:4c:c2:c3:b6: d0:50:22:46:f9:78:13:64:ad:15:a6:92:15:f9:8a:e7:89:b0: 80:03:76:ff:2b:1f:5d:e1:37:30:d8:c3:d3:70:19:7d:dc:95: 2d:ed:ad:00:1b:2b:9e:23:38:8d:08:a2:49:d3:ca:b8:b3:48: 62:13:82:ce:33:42:5c:9d:c6:d9:76:15:e0:fe:e7:46:b4:45: a4:cd:e3:0a:ba:dd:3e:03:4e:f9:04:e4:9e:30:9d:12:a8:cc: 8c:fa:33:0e:9f:ae:96:f7:69:aa:75:24:a5:95:82:80:d8:8e: 9e:a1:54:4e:61:ad:b7:d0:5c:fb:2e:82:c3:bc:1c:fe:75:dd: 85:17:2e:60:aa:96:d1:bc:0f:38:d7:db:7b:07:92:a8:4c:88: 3c:da:e6:cc:12:86:07:eb:ff:17:2d:be:71:aa:94:39:45:15: e7:17:3f:00:e0:a7:db:00:a8:b9:d6:95:6e:c8:dc:7a:cd:08: 0e:cd:50:e4:ae:8b:43:3f:78:7c:0c:15:25:f4:44:f1:bf:03: ef:e2:2e:a8:d5:d6:fc:ee:6b:30:09:fe:a9:48:99:75:3b:c7: 53:44:fc:59:15:47:45:5d:8c:b9:ee:10:0f:2b:57:a8:ed:b8: 12:83:af:3d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7wHPLQtxtQj141uoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk OWI2YzAzMWUtNTI5NS00YTkzLTkxYmYtYTRjZjk3ZWY1ZGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZznbSvHv6bAzlNCFzFnm7Z4Mq5ea+zNqp6Z cGzEidhjNru+be7CGLXvobYH1aLk5osCCddcv7Kq0IZ3ibQb5uVOXJoSIe68htjq nUtqktyJETJOLXJqR3/MV0REJ6a/g8I1Cy3CPpVJh2KAvyJ1Ck55LazJ9uRhg3EU /Wgve93QI/eyJTXZPP3Bf5F7mp+SL68anKe3LcaFEgrlXNPBzyRWjQzvs2SbSOGg dEs3rnGNMdN/cXJW/2/c4kBXO4GVSXtib88l2Vu16/8or8lnYyMm6Lnc8eJPVikL eS5Roisdxt979wLfa9eq3O0/ADw/JaPlSqOS7Pste0fImbgS+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBDJNiGTaRatT4rvFDB3jxqv5csOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2IyZjkxYjMtNGE3NS0z NDI4LWJmOGUtZDMxYmVhNWY1YjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADFSgGimIJwFTHsBxZv0TMLDttBQIkb5eBNkrRWmkhX5iueJsIAD dv8rH13hNzDYw9NwGX3clS3trQAbK54jOI0IoknTyrizSGITgs4zQlydxtl2FeD+ 50a0RaTN4wq63T4DTvkE5J4wnRKozIz6Mw6frpb3aap1JKWVgoDYjp6hVE5hrbfQ XPsugsO8HP513YUXLmCqltG8DzjX23sHkqhMiDza5swShgfr/xctvnGqlDlFFecX PwDgp9sAqLnWlW7I3HrNCA7NUOSui0M/eHwMFSX0RPG/A+/iLqjV1vzuazAJ/qlI mXU7x1NE/FkVR0VdjLnuEA8rV6jtuBKDrz0= -----END CERTIFICATE-----Generated at Tue Sep 22 18:13:38 2026 by rpki-client