$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cbb9c893-d4d3-3c81-9192-419c25800373.roa File: cbb9c893-d4d3-3c81-9192-419c25800373.roa (raw, json) Hash identifier: KBdek6DQkeUR9b4u2uxCHg+bOMylxAnIWf9yJ3oqlm4= Subject key identifier: 25:13:F9:E6:1F:C5:2D:0D:B1:43:9D:03:CB:3E:CF:3F:2C:6E:D6:4C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EF01CDFCDB22406D5CD0E5C20 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cbb9c893-d4d3-3c81-9192-419c25800373.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 396604 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:df:cd:b2:24:06:d5:cd:0e:5c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=eab97ea4-b8e2-482e-a9cf-327cb46bb7f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:47:3e:0c:b1:e5:b3:bf:e5:28:7b:b8:81:16: a5:9f:e3:36:4d:78:71:94:84:a5:24:c2:9f:a5:a1: 73:d2:82:e4:9a:d4:4c:71:8e:13:0a:00:bb:15:d5: e1:97:d7:2f:1f:17:f3:b2:e8:a5:31:c5:fb:5f:f9: 80:ca:93:1d:8f:21:e2:1d:d1:d5:cb:59:a4:85:7c: ed:c4:8b:b6:c6:45:11:4d:ed:a0:6e:2e:0d:8a:f6: 03:bd:33:3c:c3:82:7f:10:0f:81:ce:bc:7f:71:e6: 07:54:2e:c5:de:12:7e:bf:eb:bd:b6:64:af:79:e8: a4:34:65:bc:d2:e4:ec:3f:6c:04:14:16:c1:93:0e: 54:ed:26:bc:c3:72:b5:99:ff:33:e6:43:09:54:e7: bf:56:90:51:9d:c2:b5:b8:f5:b0:e5:34:5a:45:98: 90:bf:dd:c9:69:65:ea:2a:76:e8:37:91:6a:2e:9c: d7:45:6a:39:f0:34:fd:6a:65:c6:9e:f4:49:fd:43: 0d:c1:95:74:ec:07:b3:1c:13:5d:82:45:a4:ba:58: 0f:ff:67:bd:4a:eb:47:ee:f9:64:e4:a5:ba:56:6b: c6:61:32:f3:0e:e2:18:27:d6:dd:6c:4b:bf:51:7f: 5f:37:c6:cc:23:fd:1c:c9:5e:7e:72:0b:3b:89:87: 17:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:13:F9:E6:1F:C5:2D:0D:B1:43:9D:03:CB:3E:CF:3F:2C:6E:D6:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cbb9c893-d4d3-3c81-9192-419c25800373.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:0f:87:37:4a:b0:d5:aa:3c:2c:80:42:f1:e1:e2:83:a5:7c: 57:37:d8:e6:4d:76:d7:7a:e5:0a:39:2f:05:9d:5d:9b:6b:89: 15:f9:09:1a:c7:63:b0:7c:19:84:8b:32:b3:86:27:5b:90:ad: 46:3a:37:d9:69:e1:b4:02:09:70:4c:0e:ca:8d:cd:d3:76:1c: 93:c7:e0:ab:55:da:07:7c:db:67:1d:73:b2:21:3c:53:cf:11: a7:44:74:c1:fc:f8:80:87:fe:fd:b4:c0:72:ff:26:b1:52:c3: 61:e7:fc:82:5f:27:46:c5:08:f1:d8:10:51:54:55:a6:98:64: 29:6e:70:f1:4f:81:b2:c1:95:75:de:fb:bc:b4:3a:15:5e:f2: 5c:4d:27:ba:36:0b:5d:b1:5b:08:2b:d4:c7:d2:3e:d7:eb:41: 1c:ea:16:85:b7:82:78:72:2c:61:2e:3b:37:e5:a6:63:13:9e: d5:fd:d9:05:73:b9:3f:ce:c7:3c:2c:d1:3f:f3:8a:75:61:ba: 2d:da:e2:f6:4b:a8:26:50:fc:8d:41:ea:36:3f:14:7a:78:ae: 9e:0f:a6:a4:5f:90:5e:dd:e9:db:f7:83:b9:02:8a:c5:ac:36: 38:df:f4:b5:f9:89:68:aa:d2:19:7e:7f:46:d7:7d:8f:d3:3b: c7:d3:dd:b3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7wHN/NsiQG1c0OXCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk ZWFiOTdlYTQtYjhlMi00ODJlLWE5Y2YtMzI3Y2I0NmJiN2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kc+DLHls7/lKHu4gRaln+M2TXhxlISlJMKf paFz0oLkmtRMcY4TCgC7FdXhl9cvHxfzsuilMcX7X/mAypMdjyHiHdHVy1mkhXzt xIu2xkURTe2gbi4NivYDvTM8w4J/EA+Bzrx/ceYHVC7F3hJ+v+u9tmSveeikNGW8 0uTsP2wEFBbBkw5U7Sa8w3K1mf8z5kMJVOe/VpBRncK1uPWw5TRaRZiQv93JaWXq KnboN5FqLpzXRWo58DT9amXGnvRJ/UMNwZV07AezHBNdgkWkulgP/2e9SutH7vlk 5KW6VmvGYTLzDuIYJ9bdbEu/UX9fN8bMI/0cyV5+cgs7iYcXbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCUT+eYfxS0NsUOdA8s+zz8sbtZMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2JiOWM4OTMtZDRkMy0z YzgxLTkxOTItNDE5YzI1ODAwMzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIUPhzdKsNWqPCyAQvHh4oOlfFc32OZNdtd65Qo5LwWdXZtriRX5 CRrHY7B8GYSLMrOGJ1uQrUY6N9lp4bQCCXBMDsqNzdN2HJPH4KtV2gd822cdc7Ih PFPPEadEdMH8+ICH/v20wHL/JrFSw2Hn/IJfJ0bFCPHYEFFUVaaYZClucPFPgbLB lXXe+7y0OhVe8lxNJ7o2C12xWwgr1MfSPtfrQRzqFoW3gnhyLGEuOzflpmMTntX9 2QVzuT/Oxzws0T/zinVhui3a4vZLqCZQ/I1B6jY/FHp4rp4PpqRfkF7d6dv3g7kC isWsNjjf9LX5iWiq0hl+f0bXfY/TO8fT3bM= -----END CERTIFICATE-----Generated at Sun Sep 27 01:27:23 2026 by rpki-client