$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c57f598d-8091-31ab-a066-1d7ebf6a6806.roa File: c57f598d-8091-31ab-a066-1d7ebf6a6806.roa (raw, json) Hash identifier: 3nVeKq5lv5U0oalElWeT/qjSHEFtShBISfr6F3IRvl0= Subject key identifier: BD:42:19:5C:8D:E0:3D:05:EA:EC:FA:A7:AF:20:8B:60:7C:B0:CC:95 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EF01CAFE16E0879A784FEA080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c57f598d-8091-31ab-a066-1d7ebf6a6806.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 22547 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:af:e1:6e:08:79:a7:84:fe:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=8f8cb31f-9796-4d4a-b462-158598ed64d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c8:f0:a5:19:48:5a:37:f9:dd:29:3c:c4:32: b0:1c:23:9a:e3:05:53:7d:26:3c:95:36:1c:45:5c: 2d:8e:ba:f5:6d:35:ba:63:e2:20:d0:27:83:a1:40: 54:95:e2:17:2b:f9:3a:be:f0:8d:cb:c0:3a:68:30: 17:36:1d:c5:70:1c:07:8f:0e:8f:91:8d:d1:3d:9c: 42:74:3a:91:b4:67:04:ab:a3:e7:81:e2:94:ec:8b: c4:e2:be:bc:85:9a:19:ec:2e:82:83:3b:f5:ef:85: f2:44:83:75:1b:2f:0e:32:66:5d:1d:24:e8:cd:73: 1f:3f:00:6a:98:c8:55:fe:98:dc:f4:36:0c:ca:fa: 8f:18:d8:5a:92:03:46:30:8c:31:b7:6c:39:23:75: 41:17:43:0b:e8:7f:ed:47:27:c4:7c:43:2e:bd:39: 79:2b:29:e9:cb:a6:4f:06:5f:e6:4c:16:be:19:87: 25:cd:ea:5c:70:ae:af:b4:75:bf:f6:7f:ed:7e:b6: 46:84:f4:85:b1:42:39:09:d3:2e:81:a5:ad:e1:ce: a1:0f:9b:b1:a1:ce:0a:7c:37:9f:45:fc:6e:81:95: 96:0d:53:18:ab:a1:c0:bf:8c:a3:2c:c7:45:32:ee: 15:c6:d9:3d:36:d4:c3:39:88:e1:4e:2d:8c:37:99: ee:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:42:19:5C:8D:E0:3D:05:EA:EC:FA:A7:AF:20:8B:60:7C:B0:CC:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c57f598d-8091-31ab-a066-1d7ebf6a6806.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:0d:6f:8f:dd:d9:76:9e:e4:ba:46:fe:76:af:b6:1e:c7:09: 22:6b:36:7d:37:e0:9a:52:ec:13:b0:92:12:aa:a5:df:ba:6d: 26:d3:49:b7:92:ff:52:6c:c1:5b:b9:65:be:f6:28:ee:9d:9c: a6:16:d2:1d:f3:8c:79:35:52:6f:57:4d:bf:39:1d:c6:c2:11: 07:2f:24:68:cb:a6:7b:e9:ef:41:fe:b8:3c:9f:b7:f4:20:2e: d5:72:b6:fd:32:50:5c:0d:b8:56:5d:ae:32:ed:17:f7:53:99: 80:33:45:12:7c:a8:08:23:15:5e:b7:7e:15:24:d2:38:ac:a4: 53:d8:83:af:e3:e4:fd:f3:c1:5f:6a:18:3d:58:ad:30:10:21: 90:9a:4f:9e:16:c1:fb:0e:f0:28:d8:8d:3d:f8:db:28:9d:e7: 34:27:3a:df:ab:22:13:0c:d0:ea:b3:ba:04:24:52:86:5a:29: ae:81:1c:19:5a:c8:db:d2:cf:12:d0:83:db:b1:02:ea:96:8e: 79:a6:5b:57:21:10:da:04:a2:8b:c5:23:69:1c:d0:b5:ee:19: 14:22:6b:fe:9e:70:0a:01:31:e5:66:9b:5f:57:dd:03:e4:82: 86:4d:de:05:5c:3f:33:f7:fa:e6:15:ed:d3:a0:d5:38:a0:04: 06:88:65:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7wHK/hbgh5p4T+oIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk OGY4Y2IzMWYtOTc5Ni00ZDRhLWI0NjItMTU4NTk4ZWQ2NGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcjwpRlIWjf53Sk8xDKwHCOa4wVTfSY8lTYc RVwtjrr1bTW6Y+Ig0CeDoUBUleIXK/k6vvCNy8A6aDAXNh3FcBwHjw6PkY3RPZxC dDqRtGcEq6PngeKU7IvE4r68hZoZ7C6Cgzv174XyRIN1Gy8OMmZdHSTozXMfPwBq mMhV/pjc9DYMyvqPGNhakgNGMIwxt2w5I3VBF0ML6H/tRyfEfEMuvTl5Kynpy6ZP Bl/mTBa+GYclzepccK6vtHW/9n/tfrZGhPSFsUI5CdMugaWt4c6hD5uxoc4KfDef RfxugZWWDVMYq6HAv4yjLMdFMu4Vxtk9NtTDOYjhTi2MN5nuQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL1CGVyN4D0F6uz6p68gi2B8sMyVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzU3ZjU5OGQtODA5MS0z MWFiLWEwNjYtMWQ3ZWJmNmE2ODA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKgNb4/d2Xae5LpG/navth7HCSJrNn034JpS7BOwkhKqpd+6bSbT SbeS/1JswVu5Zb72KO6dnKYW0h3zjHk1Um9XTb85HcbCEQcvJGjLpnvp70H+uDyf t/QgLtVytv0yUFwNuFZdrjLtF/dTmYAzRRJ8qAgjFV63fhUk0jispFPYg6/j5P3z wV9qGD1YrTAQIZCaT54WwfsO8CjYjT342yid5zQnOt+rIhMM0OqzugQkUoZaKa6B HBlayNvSzxLQg9uxAuqWjnmmW1chENoEoovFI2kc0LXuGRQia/6ecAoBMeVmm19X 3QPkgoZN3gVcPzP3+uYV7dOg1TigBAaIZQ8= -----END CERTIFICATE-----Generated at Sat Oct 3 14:08:56 2026 by rpki-client