$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1a905c8-a8a9-3681-be6f-44faac0e5c23.roa File: a1a905c8-a8a9-3681-be6f-44faac0e5c23.roa (raw, json) Hash identifier: ScAiYfRQAFVGsyL4gBbiDktC6q5+KSe/8fHwaRKr6Hs= Subject key identifier: 38:04:70:3C:53:59:B1:CC:43:83:A8:5C:96:6C:AE:FF:3D:2F:31:A2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4986A21E46E383C3FF263480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1a905c8-a8a9-3681-be6f-44faac0e5c23.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396573 IP address blocks: 2001:500:135::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:a2:1e:46:e3:83:c3:ff:26:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bc1ed73a-cf31-4c2d-9ad6-79cee020a3bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:98:64:f1:96:f8:3a:31:2a:3f:23:8e:b7:74: 72:a1:1f:f6:09:be:9f:e7:ef:ac:4d:7f:53:87:fd: 7d:93:c2:48:2d:fc:f8:51:50:5c:bd:7a:87:7d:c1: a7:ce:c1:28:78:cd:8c:56:08:ca:76:c9:ac:05:8c: 62:85:a2:40:70:be:28:d6:7f:0e:62:e8:5d:05:9a: 43:5a:79:72:e2:24:e3:a2:e1:e7:40:17:ab:79:ff: 23:0d:3c:93:af:6a:dc:76:2f:8b:a6:26:e2:e8:24: 52:9b:53:86:1a:04:93:30:ad:2b:d6:66:05:7c:3e: 36:f2:54:d2:a6:5f:7c:05:87:78:a5:71:c0:81:50: 06:7a:ee:86:74:dd:81:c7:56:0c:80:c3:b2:7b:fb: 8a:8e:e7:f0:7b:ef:f7:01:f3:a4:0e:69:0a:a5:a2: 80:b4:17:07:38:5f:69:6b:2c:0a:47:8e:b8:98:ac: 30:3c:cf:c0:1e:ad:2a:cb:47:a1:b3:38:c3:1c:36: 5b:82:4f:7d:ac:93:7d:53:97:c3:56:ee:93:d6:2c: 5f:c5:71:37:88:a1:6a:5f:77:9d:d2:40:64:20:3c: 66:c3:81:dd:92:c7:b1:f2:3a:a4:a1:f3:15:59:68: 40:b8:26:80:67:18:93:8d:e0:10:4d:cd:8e:95:47: e1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:04:70:3C:53:59:B1:CC:43:83:A8:5C:96:6C:AE:FF:3D:2F:31:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1a905c8-a8a9-3681-be6f-44faac0e5c23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:3d:ed:43:78:97:1f:d2:e9:c3:c0:ce:ca:65:a1:ed:4e:d7: 23:be:f8:2c:f6:21:61:df:d1:61:af:40:e4:c9:be:c4:bd:5e: ee:1c:1c:94:93:63:f2:28:8d:94:a3:6b:d2:45:90:96:96:fa: 91:b2:0e:fb:62:3a:91:3e:c8:e2:f3:93:5f:8e:6c:29:56:63: 50:c9:91:a2:bc:5e:e4:3f:c5:cd:e2:e5:c2:4d:03:0e:87:7f: 86:c8:82:e0:82:01:2c:19:ca:5d:2f:77:63:68:54:6a:68:d3: 13:d3:7a:c0:e2:c2:c6:82:86:97:e9:49:9d:82:7e:6d:d3:f5: df:8d:3e:83:48:ac:45:09:55:4f:48:a1:2f:1b:68:93:18:48: 3d:28:3d:46:01:5e:89:dd:d7:be:8d:bb:49:d6:ea:fa:a9:15: ac:04:c1:de:aa:55:a1:e4:07:da:a8:bc:23:fd:7e:92:0d:0f: 83:0a:d8:70:e3:78:f3:41:1a:bd:ba:dd:81:99:3b:64:7a:0f: 6e:b9:70:eb:c4:95:af:bd:d4:c6:dd:81:23:2b:d0:bf:40:83: a0:8a:eb:0b:be:dd:34:0a:79:fe:99:c1:6b:fc:a5:47:c3:c4: 38:a7:6c:4d:98:59:4f:97:37:f6:4b:63:82:84:6c:37:e5:ca: be:f3:44:f6 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9JhqIeRuODw/8mNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmMxZWQ3M2EtY2YzMS00YzJkLTlhZDYtNzljZWUwMjBhM2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJhk8Zb4OjEqPyOOt3RyoR/2Cb6f5++sTX9T h/19k8JILfz4UVBcvXqHfcGnzsEoeM2MVgjKdsmsBYxihaJAcL4o1n8OYuhdBZpD Wnly4iTjouHnQBeref8jDTyTr2rcdi+Lpibi6CRSm1OGGgSTMK0r1mYFfD428lTS pl98BYd4pXHAgVAGeu6GdN2Bx1YMgMOye/uKjufwe+/3AfOkDmkKpaKAtBcHOF9p aywKR464mKwwPM/AHq0qy0ehszjDHDZbgk99rJN9U5fDVu6T1ixfxXE3iKFqX3ed 0kBkIDxmw4Hdksex8jqkofMVWWhAuCaAZxiTjeAQTc2OlUfhYQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDgEcDxTWbHMQ4OoXJZsrv89LzGiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTFhOTA1YzgtYThhOS0z NjgxLWJlNmYtNDRmYWFjMGU1YzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCkPe1DeJcf0unDwM7KZaHtTtcjvvgs9iFh39Fh r0Dkyb7EvV7uHByUk2PyKI2Uo2vSRZCWlvqRsg77YjqRPsji85NfjmwpVmNQyZGi vF7kP8XN4uXCTQMOh3+GyILgggEsGcpdL3djaFRqaNMT03rA4sLGgoaX6Umdgn5t 0/XfjT6DSKxFCVVPSKEvG2iTGEg9KD1GAV6J3de+jbtJ1ur6qRWsBMHeqlWh5Afa qLwj/X6SDQ+DCthw43jzQRq9ut2BmTtkeg9uuXDrxJWvvdTG3YEjK9C/QIOgiusL vt00Cnn+mcFr/KVHw8Q4p2xNmFlPlzf2S2OChGw35cq+80T2 -----END CERTIFICATE-----Generated at Sun Sep 27 02:58:13 2026 by rpki-client