$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2c7ec40-25c1-3ee5-ac8e-5d2973ac48f3.roa File: a2c7ec40-25c1-3ee5-ac8e-5d2973ac48f3.roa (raw, json) Hash identifier: /Y+68y3ea/pkigs2sFckKF3bELQ/Q7mySE/HwH4SnQY= Subject key identifier: B4:E5:75:9A:5D:83:1A:9B:2E:36:FA:E7:2A:4D:B4:7C:A6:63:B6:60 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F497F7BE9ADF54AF32C12BF60 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2c7ec40-25c1-3ee5-ac8e-5d2973ac48f3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396606 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:7b:e9:ad:f5:4a:f3:2c:12:bf:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2bd1f6f1-8e1c-4d3d-9b75-f0292f4f4aa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8c:9a:07:98:82:bb:ab:2b:69:d4:84:dd:6f: 8d:48:0d:c2:df:15:3e:b2:1c:73:ed:21:08:25:ba: eb:f2:b7:fd:ed:47:ee:26:39:85:e9:56:9f:be:6f: f3:e3:5c:77:f8:e9:4f:9d:3e:89:1b:1c:5d:d1:85: 2c:51:47:50:23:dd:9f:ae:24:c7:9a:4b:1f:e5:e1: ab:3a:bc:15:6f:fb:26:e8:07:cd:2b:ef:0c:5c:b7: 47:5f:ae:92:3b:ce:12:08:86:62:c5:c9:47:e5:c1: b9:8c:2d:53:63:e8:9e:9d:88:c7:f7:a9:8e:c1:82: 62:e6:bc:5b:dd:be:a7:c4:fc:11:7c:c2:e9:a1:17: 90:09:94:b4:72:da:f0:1e:f2:73:4c:9f:47:97:8c: 09:af:76:82:7d:72:21:46:ba:d8:af:7f:d6:6f:1e: 77:da:3c:1f:06:5f:96:7d:80:ab:a8:4f:81:e2:24: 32:a5:8b:04:4c:f3:98:53:bb:fc:d5:d1:6c:9f:bb: 0b:eb:b0:12:bf:05:23:c2:49:a5:58:11:96:e9:5e: 99:b3:81:cc:23:54:92:4f:8a:64:74:9f:53:22:4f: a3:30:f3:15:49:c3:f9:51:08:51:d6:73:a0:c0:01: 32:73:ac:a4:50:7b:9c:4c:2e:59:f5:58:6c:25:a6: c9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E5:75:9A:5D:83:1A:9B:2E:36:FA:E7:2A:4D:B4:7C:A6:63:B6:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2c7ec40-25c1-3ee5-ac8e-5d2973ac48f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:cf:7e:7f:e9:7f:62:a6:a5:7e:2a:cd:15:3f:12:c3:09:d1: d7:5d:40:26:7b:b8:04:30:47:59:59:86:4b:19:76:09:2c:ff: 98:48:54:96:75:6d:82:8f:61:9f:cd:51:0c:d2:54:89:fa:03: 35:6f:f8:4a:3e:3a:fa:e4:d7:eb:6d:98:6a:cb:56:2f:ec:2e: fb:de:48:6b:da:7d:af:eb:77:b3:4c:4b:bd:db:6c:de:dc:c5: 54:e0:00:3b:66:3e:df:93:07:b9:e3:6e:cb:3e:1c:d9:0f:bb: d8:c7:ce:cb:f5:31:c3:ec:1d:f5:a6:b8:65:87:de:58:1b:0b: 74:4c:49:60:d7:22:d2:89:20:86:c6:ed:cc:8c:7b:77:3f:e2: 4c:18:a3:f9:9e:52:bb:c0:09:96:eb:1a:1c:ba:07:67:c8:65: 7f:4b:4a:81:3f:ed:98:11:de:e3:53:aa:2c:56:c8:de:9f:61: 0b:bb:60:d4:9d:8c:ea:60:3f:85:46:04:8e:62:44:e4:55:ec: 1b:60:82:d4:4a:01:7e:a7:9d:75:30:d6:0b:67:84:e6:d1:49: 25:d4:a2:dc:f7:14:bb:c3:d8:94:cc:37:ca:ed:46:28:bc:ec: 7e:bd:9f:64:ec:f2:5f:db:f7:ec:36:92:45:0d:98:0a:db:d5: ee:78:3f:1c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9Jf3vprfVK8ywSv2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmJkMWY2ZjEtOGUxYy00ZDNkLTliNzUtZjAyOTJmNGY0YWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYyaB5iCu6sradSE3W+NSA3C3xU+shxz7SEI Jbrr8rf97UfuJjmF6Vafvm/z41x3+OlPnT6JGxxd0YUsUUdQI92friTHmksf5eGr OrwVb/sm6AfNK+8MXLdHX66SO84SCIZixclH5cG5jC1TY+ienYjH96mOwYJi5rxb 3b6nxPwRfMLpoReQCZS0ctrwHvJzTJ9Hl4wJr3aCfXIhRrrYr3/Wbx532jwfBl+W fYCrqE+B4iQypYsETPOYU7v81dFsn7sL67ASvwUjwkmlWBGW6V6Zs4HMI1SST4pk dJ9TIk+jMPMVScP5UQhR1nOgwAEyc6ykUHucTC5Z9VhsJabJXwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLTldZpdgxqbLjb65ypNtHymY7ZgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTJjN2VjNDAtMjVjMS0z ZWU1LWFjOGUtNWQyOTczYWM0OGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBjz35/6X9ipqV+Ks0VPxLDCdHXXUAme7gEMEdZ WYZLGXYJLP+YSFSWdW2Cj2GfzVEM0lSJ+gM1b/hKPjr65NfrbZhqy1Yv7C773khr 2n2v63ezTEu922ze3MVU4AA7Zj7fkwe5427LPhzZD7vYx87L9THD7B31prhlh95Y Gwt0TElg1yLSiSCGxu3MjHt3P+JMGKP5nlK7wAmW6xocugdnyGV/S0qBP+2YEd7j U6osVsjen2ELu2DUnYzqYD+FRgSOYkTkVewbYILUSgF+p511MNYLZ4Tm0Ukl1KLc 9xS7w9iUzDfK7UYovOx+vZ9k7PJf2/fsNpJFDZgK29XueD8c -----END CERTIFICATE-----Generated at Fri Sep 25 06:09:41 2026 by rpki-client