$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c36a5699-94a7-34ab-a7ee-423f56176074.roa File: c36a5699-94a7-34ab-a7ee-423f56176074.roa (raw, json) Hash identifier: ea6HnnfKXXLd0MhHJImuBhpLUzhupHtXfglWSIvXxZ4= Subject key identifier: 3A:39:94:E7:F7:F6:A4:9C:E2:EA:38:7E:2B:AB:57:A2:5A:81:2E:48 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4989DB8384FD8486BEB55280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c36a5699-94a7-34ab-a7ee-423f56176074.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396588 IP address blocks: 2001:500:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:db:83:84:fd:84:86:be:b5:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d8559376-18da-47d3-8086-2949cae33dd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cb:26:f3:89:9d:2d:37:93:ae:d8:be:bb:46: 4a:57:82:2d:20:f8:ec:71:44:37:eb:f5:99:cb:01: f8:73:ac:86:49:71:4b:5b:8c:26:44:59:2a:6d:0b: 3a:2c:6f:5d:16:cc:00:3b:ce:ec:ec:dd:c9:a5:be: ae:68:80:b7:91:3a:c8:a0:ce:75:3f:c0:90:f7:b8: 99:2a:e4:48:b1:5e:43:73:99:32:80:0e:26:09:c6: d2:89:71:d9:ff:96:d4:42:4b:d8:fe:cf:7f:c0:41: 8a:40:e6:a3:22:e0:03:04:3b:87:c6:6b:87:55:94: d5:c2:60:b6:10:45:8d:39:f0:09:a8:4e:d4:5c:66: 25:a8:0b:f4:80:db:b3:d2:33:4a:94:7f:cc:63:19: c5:97:80:8c:e1:ec:23:2b:7b:66:66:51:f9:9f:3f: f8:ff:20:d3:81:13:07:ce:32:24:d9:6c:ae:23:e3: 9c:45:52:f3:56:c8:05:f6:c4:fe:75:aa:93:20:bf: 9a:20:f9:70:a7:fd:e9:72:80:a3:6a:d3:3d:4b:8b: e0:15:db:2a:ea:f7:27:6d:9a:30:45:e3:c5:fe:68: 15:f3:21:c1:90:cb:f4:ae:86:81:5f:c6:46:00:d7: c3:fe:b9:0e:bc:4a:38:cd:11:09:eb:d0:df:16:38: 12:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:39:94:E7:F7:F6:A4:9C:E2:EA:38:7E:2B:AB:57:A2:5A:81:2E:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c36a5699-94a7-34ab-a7ee-423f56176074.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:e1:1a:32:9a:d5:fb:c1:bb:b4:1b:f3:1b:66:7d:2f:08:eb: 91:8f:42:44:da:8d:df:57:47:22:00:64:d0:bf:b5:15:1d:89: 32:93:40:cd:5a:b3:59:9d:e2:c7:2a:4e:5c:bd:6c:35:fb:8b: 43:db:b8:ef:22:b1:42:e6:6a:e5:dc:db:1c:39:68:0c:73:58: 53:f4:ab:e7:26:61:04:fb:63:99:47:22:ef:70:c7:b6:8c:78: b9:17:77:18:90:ee:b3:cb:0a:f9:0f:df:ae:5f:22:39:cd:88: e2:31:e1:e2:ff:7b:ac:74:04:ea:26:0a:94:56:6e:d7:46:79: 37:3a:97:10:48:00:a8:e7:f0:4b:40:07:79:07:82:35:f0:14: 27:65:b4:cf:1d:75:89:c0:c7:e0:3d:68:20:61:4c:03:d2:81: 8a:79:cf:d3:2f:b2:6c:b4:e0:2f:b2:a5:99:a0:dc:58:4b:96: ca:57:94:f1:c6:40:14:bf:be:36:55:d6:93:61:e6:e9:d1:c8: 51:c6:aa:5c:51:cc:d5:f3:25:b5:a3:fe:db:1a:d7:fa:fa:a4: 42:ad:9e:87:3d:29:3e:15:bc:04:25:c0:de:28:e0:30:10:09: 99:77:b0:b0:84:28:d8:6b:d7:63:b0:55:ea:48:e3:20:f6:3e: 7e:8f:d3:13 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JiduDhP2Ehr61UoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDg1NTkzNzYtMThkYS00N2QzLTgwODYtMjk0OWNhZTMzZGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMsm84mdLTeTrti+u0ZKV4ItIPjscUQ36/WZ ywH4c6yGSXFLW4wmRFkqbQs6LG9dFswAO87s7N3Jpb6uaIC3kTrIoM51P8CQ97iZ KuRIsV5Dc5kygA4mCcbSiXHZ/5bUQkvY/s9/wEGKQOajIuADBDuHxmuHVZTVwmC2 EEWNOfAJqE7UXGYlqAv0gNuz0jNKlH/MYxnFl4CM4ewjK3tmZlH5nz/4/yDTgRMH zjIk2WyuI+OcRVLzVsgF9sT+daqTIL+aIPlwp/3pcoCjatM9S4vgFdsq6vcnbZow RePF/mgV8yHBkMv0roaBX8ZGANfD/rkOvEo4zREJ69DfFjgS8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDo5lOf39qSc4uo4fiurV6JagS5IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzM2YTU2OTktOTRhNy0z NGFiLWE3ZWUtNDIzZjU2MTc2MDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHPhGjKa1fvBu7Qb8xtmfS8I65GPQkTajd9XRyIAZNC/tRUdiTKT QM1as1md4scqTly9bDX7i0PbuO8isULmauXc2xw5aAxzWFP0q+cmYQT7Y5lHIu9w x7aMeLkXdxiQ7rPLCvkP365fIjnNiOIx4eL/e6x0BOomCpRWbtdGeTc6lxBIAKjn 8EtAB3kHgjXwFCdltM8ddYnAx+A9aCBhTAPSgYp5z9Mvsmy04C+ypZmg3FhLlspX lPHGQBS/vjZV1pNh5unRyFHGqlxRzNXzJbWj/tsa1/r6pEKtnoc9KT4VvAQlwN4o 4DAQCZl3sLCEKNhr12OwVepI4yD2Pn6P0xM= -----END CERTIFICATE-----Generated at Sun Sep 27 01:27:33 2026 by rpki-client