$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c67fdbcb-7193-3c85-a7b0-9a752ebada52.roa File: c67fdbcb-7193-3c85-a7b0-9a752ebada52.roa (raw, json) Hash identifier: F/kBwOovOVUbNGMrl28ulSfL8z+MFwRDLzjWDIb2k4M= Subject key identifier: DF:39:E7:2F:21:29:C9:0C:56:90:50:DE:10:2D:1A:7E:A6:A0:B2:1E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4973773C2DF07173A39E5340 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c67fdbcb-7193-3c85-a7b0-9a752ebada52.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396594 IP address blocks: 2001:500:856e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:77:3c:2d:f0:71:73:a3:9e:53:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=37b1d24b-45ec-4dea-9920-715b7afe0fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:79:1d:15:d2:0f:b5:73:e4:a0:a9:dd:21:03: d8:f2:4d:9e:86:f0:28:f2:27:84:e3:7b:80:18:d9: 07:34:37:5f:df:8a:a0:97:da:1c:f8:db:68:83:b1: c8:12:e3:6c:45:cf:69:64:23:33:f9:2f:2a:07:d9: f8:66:ef:d7:d8:78:ac:1e:fa:d7:31:41:2c:48:bb: ea:a1:cf:8c:75:fc:12:c3:c5:45:d5:d9:9f:8b:d9: 32:cc:83:1b:ff:08:39:aa:59:27:cb:70:c4:ce:92: 40:1e:09:4d:2d:91:e8:5a:92:76:ed:81:e3:bd:a7: eb:8a:69:36:2b:3b:73:d8:45:e1:98:22:4d:bf:fe: cb:a4:d6:65:c3:39:43:cb:f8:0e:ad:8f:a2:54:10: 84:9f:24:73:c3:95:1a:cf:b3:87:d2:4c:1b:e6:4c: 06:86:8f:cd:49:2a:9d:79:37:aa:3b:40:3a:fa:22: 72:f2:ed:b6:8e:d9:26:3d:af:82:d6:91:4c:40:61: d0:3f:aa:2e:0e:62:3c:d3:0f:a5:40:19:43:da:cc: 74:6c:a8:a8:66:d7:50:65:ef:8e:6d:07:04:1d:11: 3e:55:04:c7:13:a7:d3:20:c4:1e:85:bb:4f:cc:d8: f9:36:1a:65:9f:cc:c3:c9:76:bb:55:21:74:63:0a: 56:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:39:E7:2F:21:29:C9:0C:56:90:50:DE:10:2D:1A:7E:A6:A0:B2:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c67fdbcb-7193-3c85-a7b0-9a752ebada52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:856e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:43:eb:82:0d:f0:93:77:92:a7:af:3b:55:7d:bd:86:70:53: 5b:81:ba:06:b2:18:ce:7a:e8:63:26:13:d2:0d:31:d9:42:72: 21:ec:4a:8f:2d:0d:01:96:64:83:e7:55:9f:30:d8:72:71:48: 8e:e8:01:25:9d:9c:6c:94:9a:48:ff:f0:9c:ab:a5:85:4a:67: 68:4a:09:cb:1d:a2:58:cc:16:d4:35:8a:52:bd:b9:c2:6e:89: 88:88:1d:3a:7c:42:58:9d:ab:d9:c6:cb:e2:6f:2c:a0:83:3a: a2:3b:03:3f:b4:0e:11:40:3a:18:dc:a8:20:89:55:8f:4d:dd: 86:b7:d7:33:30:73:dc:9d:d5:f9:4d:14:20:f2:96:ce:f4:f1: 19:e0:5e:5d:f5:58:32:d5:6b:f9:59:8e:9b:07:85:7a:3b:9d: 79:56:d0:f4:17:15:ef:cb:4a:63:24:f5:b8:81:79:54:4f:f0: 8e:00:90:b0:92:f3:3c:e3:33:bc:27:d8:54:69:e6:f9:21:36: 50:c6:e5:34:cb:11:36:8c:51:96:e3:9e:4b:6e:a7:45:59:19: 37:bf:31:44:46:97:67:f5:b2:be:b5:63:c4:98:ef:76:aa:4e: f2:c7:4d:1b:67:3e:34:40:82:01:0a:1b:be:e0:a3:30:f7:56: 47:ee:3b:b0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc3c8LfBxc6OeU0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzdiMWQyNGItNDVlYy00ZGVhLTk5MjAtNzE1YjdhZmUwZmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3kdFdIPtXPkoKndIQPY8k2ehvAo8ieE43uA GNkHNDdf34qgl9oc+Ntog7HIEuNsRc9pZCMz+S8qB9n4Zu/X2HisHvrXMUEsSLvq oc+MdfwSw8VF1dmfi9kyzIMb/wg5qlkny3DEzpJAHglNLZHoWpJ27YHjvafrimk2 Kztz2EXhmCJNv/7LpNZlwzlDy/gOrY+iVBCEnyRzw5Uaz7OH0kwb5kwGho/NSSqd eTeqO0A6+iJy8u22jtkmPa+C1pFMQGHQP6ouDmI80w+lQBlD2sx0bKioZtdQZe+O bQcEHRE+VQTHE6fTIMQehbtPzNj5Nhpln8zDyXa7VSF0YwpWOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN855y8hKckMVpBQ3hAtGn6moLIeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzY3ZmRiY2ItNzE5My0z Yzg1LWE3YjAtOWE3NTJlYmFkYTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAIVu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAtD64IN8JN3kqevO1V9vYZwU1uBugayGM566GMmE9INMdlCciHs So8tDQGWZIPnVZ8w2HJxSI7oASWdnGyUmkj/8JyrpYVKZ2hKCcsdoljMFtQ1ilK9 ucJuiYiIHTp8Qlidq9nGy+JvLKCDOqI7Az+0DhFAOhjcqCCJVY9N3Ya31zMwc9yd 1flNFCDyls708RngXl31WDLVa/lZjpsHhXo7nXlW0PQXFe/LSmMk9biBeVRP8I4A kLCS8zzjM7wn2FRp5vkhNlDG5TTLETaMUZbjnktup0VZGTe/MURGl2f1sr61Y8SY 73aqTvLHTRtnPjRAggEKG77gozD3VkfuO7A= -----END CERTIFICATE-----Generated at Mon Sep 28 22:24:45 2026 by rpki-client