$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/94df13e7-7f6a-3fab-8fa6-b4a9154edd6d.roa File: 94df13e7-7f6a-3fab-8fa6-b4a9154edd6d.roa (raw, json) Hash identifier: rZbgEqX37wDqrT7zmZai/kg2mZcUOrzGRgdJWaX6qqY= Subject key identifier: 77:CE:62:6F:45:45:F9:F6:76:42:4E:55:D4:39:DC:45:26:BB:95:FE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EF01CBA4AE9EC748B54CC99A0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/94df13e7-7f6a-3fab-8fa6-b4a9154edd6d.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 396578 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:ba:4a:e9:ec:74:8b:54:cc:99:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=8c4ec7d1-aa9f-43aa-8c1e-d6dfcebda27e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:24:e3:ea:14:58:e5:f9:00:1d:be:03:ef:53: a9:a6:15:52:a0:a1:da:53:0b:af:12:9d:88:88:f6: f1:d6:46:f8:0e:35:6b:e0:31:4f:c3:73:22:18:84: 18:da:1c:30:50:8e:67:24:af:1f:f2:b2:3f:c2:38: 1d:df:d4:ed:4a:06:67:78:3f:8f:62:36:c0:0b:8c: 67:fb:98:b9:74:d7:5c:b8:d1:d5:0e:b8:02:d4:4d: de:e1:bc:5a:50:a5:ca:1d:05:a2:be:73:c2:16:2f: 83:d5:28:08:c7:5d:93:1c:5c:34:aa:00:e5:16:7d: 7c:bd:e6:22:4e:04:c0:70:98:f7:de:11:86:79:84: 9c:94:ff:7e:fe:9b:0f:3f:38:80:39:af:80:77:fa: 4e:3b:44:c4:a2:98:74:24:0f:be:3a:78:f4:f9:5a: bc:20:8d:b4:ae:16:67:c8:f9:e5:70:3f:84:a3:1b: 6e:14:2a:49:d3:0c:cb:d8:50:19:83:aa:e7:0f:4f: 65:65:d0:ca:db:ad:c9:e3:27:3d:a1:70:a2:72:67: 41:5a:63:1f:99:61:0d:d9:73:3d:94:e8:a5:58:79: f2:0d:2b:05:bf:3c:23:5b:bb:5b:7d:d9:6d:b1:62: 0b:4e:b9:e9:7f:1e:b6:81:fe:67:36:53:29:6e:5b: 16:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:CE:62:6F:45:45:F9:F6:76:42:4E:55:D4:39:DC:45:26:BB:95:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/94df13e7-7f6a-3fab-8fa6-b4a9154edd6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:84:e7:b2:fa:2a:12:8e:69:2a:72:11:96:c0:e2:5d:31:0f: b4:6a:f8:f5:47:31:c3:87:37:1d:50:9d:44:59:ce:e8:ed:af: f8:c6:91:72:33:c9:67:d8:da:55:83:7c:5c:72:09:f6:50:a9: 04:90:f5:4d:da:39:16:27:54:42:9a:4c:d2:b8:25:f3:69:38: d8:d3:ae:d9:d6:25:1e:ef:9f:c4:25:fd:ba:aa:21:30:05:a5: e5:24:10:4f:f6:9b:99:4a:37:67:89:4b:dd:f1:eb:28:62:78: 6f:bc:d8:d6:80:15:f5:46:f6:12:35:8e:8e:28:c0:73:1b:58: 90:83:46:ce:19:7c:d0:bb:1b:ae:ed:26:47:96:4a:ab:9e:68: d2:86:b3:cb:86:e6:92:91:20:55:dc:7e:9a:d2:d1:02:17:92: c0:9d:76:36:00:0b:64:e0:8f:1c:3f:1b:38:36:6c:92:6c:80: 7a:89:a9:26:38:69:72:6f:58:3a:95:28:83:11:b5:16:f8:a4: ef:72:64:72:a3:6c:48:20:81:9c:bc:8a:13:db:6c:10:30:eb: 7b:5c:21:69:99:38:88:aa:b9:14:b6:83:10:08:fe:5c:8f:38: fa:00:40:59:1a:b5:53:36:ec:4c:1f:40:54:19:05:b3:b6:da: 9a:c2:60:fe -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7wHLpK6ex0i1TMmaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk OGM0ZWM3ZDEtYWE5Zi00M2FhLThjMWUtZDZkZmNlYmRhMjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriTj6hRY5fkAHb4D71OpphVSoKHaUwuvEp2I iPbx1kb4DjVr4DFPw3MiGIQY2hwwUI5nJK8f8rI/wjgd39TtSgZneD+PYjbAC4xn +5i5dNdcuNHVDrgC1E3e4bxaUKXKHQWivnPCFi+D1SgIx12THFw0qgDlFn18veYi TgTAcJj33hGGeYSclP9+/psPPziAOa+Ad/pOO0TEoph0JA++Onj0+Vq8II20rhZn yPnlcD+EoxtuFCpJ0wzL2FAZg6rnD09lZdDK263J4yc9oXCicmdBWmMfmWEN2XM9 lOilWHnyDSsFvzwjW7tbfdltsWILTrnpfx62gf5nNlMpblsWSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHfOYm9FRfn2dkJOVdQ53EUmu5X+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTRkZjEzZTctN2Y2YS0z ZmFiLThmYTYtYjRhOTE1NGVkZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG2E57L6KhKOaSpyEZbA4l0xD7Rq+PVHMcOHNx1QnURZzujtr/jG kXIzyWfY2lWDfFxyCfZQqQSQ9U3aORYnVEKaTNK4JfNpONjTrtnWJR7vn8Ql/bqq ITAFpeUkEE/2m5lKN2eJS93x6yhieG+82NaAFfVG9hI1jo4owHMbWJCDRs4ZfNC7 G67tJkeWSqueaNKGs8uG5pKRIFXcfprS0QIXksCddjYAC2Tgjxw/Gzg2bJJsgHqJ qSY4aXJvWDqVKIMRtRb4pO9yZHKjbEgggZy8ihPbbBAw63tcIWmZOIiquRS2gxAI /lyPOPoAQFkatVM27EwfQFQZBbO22prCYP4= -----END CERTIFICATE-----Generated at Tue Sep 22 19:41:42 2026 by rpki-client