$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8affc96-6389-3459-8b74-cc42c6f34d56.roa File: b8affc96-6389-3459-8b74-cc42c6f34d56.roa (raw, json) Hash identifier: 0u8bUUoMC2JTKucD2J5j58sU+wLOGe8nh5qfKlKof6w= Subject key identifier: CD:27:64:3A:56:DD:8D:EC:31:DF:0A:FE:66:25:07:5B:F8:35:E7:66 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F498C0EDB2C0547A6A259C0D0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8affc96-6389-3459-8b74-cc42c6f34d56.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396591 IP address blocks: 2001:500:125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8c:0e:db:2c:05:47:a6:a2:59:c0:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4e856462-5850-4ee5-9ee8-b10f3fb8da60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1a:67:e8:09:55:2d:e6:ce:a4:c6:c6:b8:9c: d1:0b:2f:50:08:74:59:6b:3a:92:85:74:bc:3d:fc: 73:05:67:fb:b9:89:b1:08:df:cd:57:5e:b2:70:f8: bb:23:cd:2e:c3:61:39:8a:91:b6:d4:25:3f:33:8d: 0a:07:fa:bb:03:37:89:d2:b6:02:b9:85:9b:ce:a8: a0:1a:a1:8f:30:a9:38:d8:d7:1e:10:6c:b7:d5:a8: 5c:b2:ca:0f:5f:af:af:f9:29:af:4a:9e:52:a3:3f: 1c:77:7b:df:ab:80:22:2e:bf:c9:06:99:b2:c8:23: 9b:c0:97:e5:f1:a8:ef:7c:86:12:24:2a:c0:70:bb: 34:d5:ea:bb:ba:73:35:87:ba:1e:df:d9:18:80:ab: c0:8d:0f:bc:27:8c:06:a8:30:21:19:3f:a8:4b:08: 82:dc:6d:d1:86:3d:2f:1b:e9:9a:b6:14:a2:86:4e: d8:15:4b:e9:74:71:59:24:3b:1c:a3:17:a8:58:4d: 7f:36:07:ab:3d:b8:22:26:79:10:1c:97:5c:48:05: 8e:08:44:f0:03:fb:92:d5:ef:29:3d:41:2b:db:be: 5c:d4:eb:80:86:d3:70:97:63:b1:a3:69:2b:37:a5: 5e:b2:04:9f:fb:af:03:dc:3f:90:8b:89:04:24:fc: 8f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:27:64:3A:56:DD:8D:EC:31:DF:0A:FE:66:25:07:5B:F8:35:E7:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8affc96-6389-3459-8b74-cc42c6f34d56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:b2:4c:c2:5e:69:b5:13:14:86:2a:26:56:07:70:32:d1:c5: 53:d5:67:c5:b4:2a:2d:7e:24:21:cd:2f:61:6c:29:86:5b:e0: 7c:3a:3c:22:72:1f:de:1e:21:82:b5:57:38:81:99:2f:4c:aa: 15:dd:da:ee:79:5b:54:9e:72:d6:3c:93:e6:f3:70:d9:d3:2b: 12:84:c7:47:5c:92:df:66:c7:b0:ab:86:8c:5e:42:a1:2f:4a: 23:72:80:ef:0f:b3:ed:14:01:f7:d8:09:bc:2b:c0:2a:38:7b: 99:97:e2:fb:99:6c:88:d0:5a:62:6f:3c:6c:b3:cc:25:09:69: ba:7c:e1:47:f8:26:dc:e9:1c:95:12:67:21:0d:26:34:3d:9c: 6b:68:03:d5:d9:34:0a:7e:26:3b:90:7d:ca:88:75:59:7b:b4: fe:8f:18:4b:62:a7:1d:8a:aa:6f:0b:04:9b:e3:4b:3a:99:00: b7:95:f2:a1:e2:39:ad:e6:65:66:48:c3:b7:29:4d:47:d4:f3: 07:59:43:2f:2d:66:25:6f:03:96:2c:f7:d4:19:7e:f8:09:2c: 88:e5:0c:8f:72:9a:5f:5d:be:65:0c:71:ba:6a:8e:14:4a:37: 9b:07:ea:73:ce:0d:d6:b0:b9:43:43:d6:b2:0f:26:0a:db:95: 95:0e:56:af -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JjA7bLAVHpqJZwNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGU4NTY0NjItNTg1MC00ZWU1LTllZTgtYjEwZjNmYjhkYTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRpn6AlVLebOpMbGuJzRCy9QCHRZazqShXS8 PfxzBWf7uYmxCN/NV16ycPi7I80uw2E5ipG21CU/M40KB/q7AzeJ0rYCuYWbzqig GqGPMKk42NceEGy31ahcssoPX6+v+SmvSp5Soz8cd3vfq4AiLr/JBpmyyCObwJfl 8ajvfIYSJCrAcLs01eq7unM1h7oe39kYgKvAjQ+8J4wGqDAhGT+oSwiC3G3Rhj0v G+mathSihk7YFUvpdHFZJDscoxeoWE1/NgerPbgiJnkQHJdcSAWOCETwA/uS1e8p PUEr275c1OuAhtNwl2Oxo2krN6VesgSf+68D3D+Qi4kEJPyPXwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM0nZDpW3Y3sMd8K/mYlB1v4NedmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjhhZmZjOTYtNjM4OS0z NDU5LThiNzQtY2M0MmM2ZjM0ZDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFuyTMJeabUTFIYqJlYHcDLRxVPVZ8W0Ki1+JCHNL2FsKYZb4Hw6 PCJyH94eIYK1VziBmS9MqhXd2u55W1SectY8k+bzcNnTKxKEx0dckt9mx7Crhoxe QqEvSiNygO8Ps+0UAffYCbwrwCo4e5mX4vuZbIjQWmJvPGyzzCUJabp84Uf4Jtzp HJUSZyENJjQ9nGtoA9XZNAp+JjuQfcqIdVl7tP6PGEtipx2Kqm8LBJvjSzqZALeV 8qHiOa3mZWZIw7cpTUfU8wdZQy8tZiVvA5Ys99QZfvgJLIjlDI9yml9dvmUMcbpq jhRKN5sH6nPODdawuUND1rIPJgrblZUOVq8= -----END CERTIFICATE-----Generated at Sun Sep 27 05:36:19 2026 by rpki-client