$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b632d874-0e43-3fdf-9e23-01ded648f2db.roa File: b632d874-0e43-3fdf-9e23-01ded648f2db.roa (raw, json) Hash identifier: LkIINwdxTJo6xELfVU2bXPQfsJfU6YMbIxJ1+mc8crA= Subject key identifier: 4F:1B:9B:40:0A:91:1D:5A:39:67:2A:D3:97:83:B7:08:CA:3D:6D:87 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EF5B20C0E334A78829AD58100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b632d874-0e43-3fdf-9e23-01ded648f2db.roa Signing time: Wed 26 Aug 2026 01:00:12 +0000 ROA not before: Wed 26 Aug 2026 01:00:12 +0000 ROA not after: Tue 24 Nov 2026 02:00:12 +0000 asID: 36626 IP address blocks: 2001:500:133::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f5:b2:0c:0e:33:4a:78:82:9a:d5:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 26 01:00:12 2026 GMT Not After : Nov 24 02:00:12 2026 GMT Subject: CN=040c7e1e-b3f5-43f7-9566-70a4d3f9a383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a6:11:43:4d:3f:0a:1c:7b:55:c8:1e:6f:64: 4e:9a:d5:85:58:44:3f:28:89:8a:7b:14:88:30:59: 1f:23:1e:e9:b8:d0:b3:fb:93:54:66:4b:e7:21:69: 0b:49:c1:bc:78:48:bf:53:52:17:5b:47:0e:fd:ab: 3c:5a:c4:ec:f7:72:f7:ab:94:ba:87:a4:97:00:45: 96:51:36:0f:b2:63:73:97:c1:1d:78:a5:83:5d:ce: e7:1a:32:74:7d:6a:7e:c3:0f:06:80:94:b4:78:83: cd:22:f9:15:03:fa:b2:3e:c4:b2:75:e3:7d:4f:f3: 40:d4:99:73:26:b7:b3:1b:5f:94:1c:6d:36:04:19: 0e:ac:40:06:f0:73:1b:02:63:7a:dc:19:98:2a:94: dc:6d:c7:07:77:0d:14:4e:30:af:72:7e:54:f6:4b: 9e:5b:a1:e1:e1:e6:fb:1c:b8:94:d9:46:f5:37:29: 59:58:e7:58:33:91:2e:78:59:74:b2:56:06:74:79: 9f:20:f8:84:d6:3d:04:b3:ac:a2:d8:58:c4:f8:0a: 53:4b:b1:ac:01:c9:66:89:6a:21:f1:87:e2:3b:3d: 02:5d:b5:9f:54:23:45:09:08:55:95:7b:87:c0:89: 13:a6:77:3c:e7:8e:9a:dc:0c:42:61:f2:9e:dd:69: 79:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:1B:9B:40:0A:91:1D:5A:39:67:2A:D3:97:83:B7:08:CA:3D:6D:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b632d874-0e43-3fdf-9e23-01ded648f2db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:a7:b9:67:15:2c:14:3b:26:fb:56:7f:db:d5:b8:19:90:61: a2:83:94:0a:d9:7a:a7:48:3a:db:00:29:0f:2a:ca:c8:50:27: 79:a7:b0:b6:00:22:79:fe:e7:c6:e2:94:aa:df:c3:c5:c1:28: e6:18:10:0e:d8:d7:22:f6:99:37:a1:2c:21:0a:db:e4:26:d2: 97:44:69:e2:4f:36:fe:c7:11:24:d0:55:b4:e1:f2:f7:ee:78: 7f:f5:c7:d4:02:02:3d:d7:f4:69:7b:d4:e1:3c:ed:d4:ca:6c: 8a:51:a2:a5:14:a6:1f:13:07:d7:aa:6e:fb:af:21:6d:68:18: ca:dd:d9:90:25:99:ce:d1:c3:8d:be:aa:63:c3:d7:a6:74:78: 62:c0:b0:8c:bd:3c:5b:7b:97:8f:e7:eb:96:8a:ea:c2:04:5e: 56:44:c6:a8:82:32:f5:76:95:5d:ab:d8:25:e2:9c:b2:95:f5: cc:6c:74:2a:0d:7a:32:0b:da:db:43:a5:86:b6:42:d3:ef:93: c3:a4:08:8a:ff:28:ec:bd:c0:f7:29:a7:46:07:97:d5:fe:3f: 43:25:e8:98:f7:00:79:19:b4:60:12:33:c3:cf:82:59:17:24: 5a:e2:bb:49:8f:2d:c3:84:e0:4a:88:56:f4:e7:c9:f1:b7:f5: f3:ff:da:5a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE71sgwOM0p4gprVgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgyNjAxMDAxMloXDTI2MTEyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDQwYzdlMWUtYjNmNS00M2Y3LTk1NjYtNzBhNGQzZjlhMzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aYRQ00/Chx7Vcgeb2ROmtWFWEQ/KImKexSI MFkfIx7puNCz+5NUZkvnIWkLScG8eEi/U1IXW0cO/as8WsTs93L3q5S6h6SXAEWW UTYPsmNzl8EdeKWDXc7nGjJ0fWp+ww8GgJS0eIPNIvkVA/qyPsSydeN9T/NA1Jlz JrezG1+UHG02BBkOrEAG8HMbAmN63BmYKpTcbccHdw0UTjCvcn5U9kueW6Hh4eb7 HLiU2Ub1NylZWOdYM5EueFl0slYGdHmfIPiE1j0Es6yi2FjE+ApTS7GsAclmiWoh 8YfiOz0CXbWfVCNFCQhVlXuHwIkTpnc8546a3AxCYfKe3Wl5SQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE8bm0AKkR1aOWcq05eDtwjKPW2HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjYzMmQ4NzQtMGU0My0z ZmRmLTllMjMtMDFkZWQ2NDhmMmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAOnuWcVLBQ7JvtWf9vVuBmQYaKDlArZeqdIOtsAKQ8qyshQJ3mn sLYAInn+58bilKrfw8XBKOYYEA7Y1yL2mTehLCEK2+Qm0pdEaeJPNv7HESTQVbTh 8vfueH/1x9QCAj3X9Gl71OE87dTKbIpRoqUUph8TB9eqbvuvIW1oGMrd2ZAlmc7R w42+qmPD16Z0eGLAsIy9PFt7l4/n65aK6sIEXlZExqiCMvV2lV2r2CXinLKV9cxs dCoNejIL2ttDpYa2QtPvk8OkCIr/KOy9wPcpp0YHl9X+P0Ml6Jj3AHkZtGASM8PP glkXJFriu0mPLcOE4EqIVvTnyfG39fP/2lo= -----END CERTIFICATE-----Generated at Wed Sep 23 16:14:52 2026 by rpki-client