$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9a214dff-c150-32d9-931d-2f7ec980671c.roa File: 9a214dff-c150-32d9-931d-2f7ec980671c.roa (raw, json) Hash identifier: dIRRJxZQgchaeNJ5UQCH/REotBgdqqn+Dm1nGtE4++c= Subject key identifier: F7:F8:5D:3F:AB:96:37:61:8D:58:F9:4E:21:6E:2B:3B:3C:F4:4E:35 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EF5B20B96ED56B879F9C5D8C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9a214dff-c150-32d9-931d-2f7ec980671c.roa Signing time: Wed 26 Aug 2026 01:00:12 +0000 ROA not before: Wed 26 Aug 2026 01:00:12 +0000 ROA not after: Tue 24 Nov 2026 02:00:12 +0000 asID: 396606 IP address blocks: 2001:500:133::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f5:b2:0b:96:ed:56:b8:79:f9:c5:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 26 01:00:12 2026 GMT Not After : Nov 24 02:00:12 2026 GMT Subject: CN=a56581d7-bef8-482a-ba22-85620e0a4c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9d:94:a6:df:39:44:9d:9d:d2:25:23:cf:08: c0:da:8d:13:4f:47:eb:e5:9d:be:e4:3d:f8:7f:91: 71:63:6c:41:c2:4e:6c:7d:5c:67:66:9e:62:d9:4d: a5:47:c1:a5:85:09:0e:78:68:bb:44:62:51:4b:7f: e9:f2:a7:31:16:56:e2:5e:d4:21:2e:5a:0b:c7:d7: 23:28:73:a2:d3:5a:81:07:59:a0:65:4b:20:cf:64: ed:ce:3c:f6:fa:3d:11:38:84:58:48:ed:93:54:54: 07:e8:16:db:60:ce:ff:25:7e:e9:1b:f7:f5:37:7c: 08:70:90:54:ab:c5:63:29:cf:76:50:c9:56:d2:58: e6:a7:91:d9:db:66:09:d4:22:32:f2:80:f3:20:d2: d5:31:d5:7e:2a:fb:d1:aa:39:32:e4:b4:01:d2:bf: 4e:6c:26:25:6e:ec:46:50:e5:e3:9b:bc:94:11:0b: d3:c7:97:04:d1:09:8b:fb:4c:3b:db:3c:f0:15:95: 97:01:d1:f9:a6:87:7d:d2:67:33:9c:f6:8c:0c:1c: 46:08:c5:4b:7d:20:da:8b:b9:b6:af:08:eb:14:de: f1:de:61:20:a7:19:3e:1a:25:3f:98:5e:ce:bf:7f: 60:08:45:61:ac:4f:e6:d7:4a:76:79:80:ad:3b:82: 6c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:F8:5D:3F:AB:96:37:61:8D:58:F9:4E:21:6E:2B:3B:3C:F4:4E:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9a214dff-c150-32d9-931d-2f7ec980671c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:d8:cc:c3:0e:f1:82:f3:3e:8a:b3:7d:d5:04:3d:f5:c5:fe: 47:54:79:85:c0:0d:eb:4b:60:a0:84:84:7c:f0:ce:92:1d:fe: d8:ec:34:6d:70:3e:29:38:1b:53:18:e6:a7:03:af:5e:16:85: c1:88:21:c9:57:dc:e5:1c:fc:08:15:ca:76:ee:85:dd:31:07: 66:a7:5b:4c:73:76:c4:7c:87:e4:39:e9:80:ba:be:d9:b9:ad: d9:cc:a1:7c:31:02:03:da:26:9a:a0:35:0a:bc:6a:c5:38:b3: 40:a5:f6:ea:31:cf:69:22:31:77:65:21:78:5d:bf:b0:0e:22: 9e:7d:1f:6b:96:be:6b:3c:f5:ab:60:5a:c4:e6:25:3d:e6:f7: d8:fb:c4:41:01:db:17:5d:65:cd:07:ae:6a:ce:b4:ee:c8:7d: d1:35:0b:0d:ae:ec:30:7d:68:85:ac:70:ee:1e:1a:cc:d6:fb: 69:4c:e4:88:20:22:eb:88:87:be:46:6b:16:44:6d:c8:69:02: f3:2c:aa:3e:f3:c1:a0:6a:f4:ea:9c:e9:b0:0a:b6:ff:fa:88: 9e:99:40:db:36:85:a2:a2:ee:eb:6d:c2:07:2d:3a:79:93:0f: 22:dc:f2:c7:d9:1f:a3:6b:26:8e:01:c2:b1:c5:a0:1c:2c:f0: 51:a3:50:57 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE71sguW7Va4efnF2MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgyNjAxMDAxMloXDTI2MTEyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTU2NTgxZDctYmVmOC00ODJhLWJhMjItODU2MjBlMGE0YzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZ2Upt85RJ2d0iUjzwjA2o0TT0fr5Z2+5D34 f5FxY2xBwk5sfVxnZp5i2U2lR8GlhQkOeGi7RGJRS3/p8qcxFlbiXtQhLloLx9cj KHOi01qBB1mgZUsgz2Ttzjz2+j0ROIRYSO2TVFQH6BbbYM7/JX7pG/f1N3wIcJBU q8VjKc92UMlW0ljmp5HZ22YJ1CIy8oDzINLVMdV+KvvRqjky5LQB0r9ObCYlbuxG UOXjm7yUEQvTx5cE0QmL+0w72zzwFZWXAdH5pod90mcznPaMDBxGCMVLfSDai7m2 rwjrFN7x3mEgpxk+GiU/mF7Ov39gCEVhrE/m10p2eYCtO4JseQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPf4XT+rljdhjVj5TiFuKzs89E41MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWEyMTRkZmYtYzE1MC0z MmQ5LTkzMWQtMmY3ZWM5ODA2NzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAArYzMMO8YLzPoqzfdUEPfXF/kdUeYXADetLYKCEhHzwzpId/tjs NG1wPik4G1MY5qcDr14WhcGIIclX3OUc/AgVynbuhd0xB2anW0xzdsR8h+Q56YC6 vtm5rdnMoXwxAgPaJpqgNQq8asU4s0Cl9uoxz2kiMXdlIXhdv7AOIp59H2uWvms8 9atgWsTmJT3m99j7xEEB2xddZc0HrmrOtO7IfdE1Cw2u7DB9aIWscO4eGszW+2lM 5IggIuuIh75GaxZEbchpAvMsqj7zwaBq9Oqc6bAKtv/6iJ6ZQNs2haKi7uttwgct OnmTDyLc8sfZH6NrJo4BwrHFoBws8FGjUFc= -----END CERTIFICATE-----Generated at Tue Sep 22 08:21:32 2026 by rpki-client