$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d40e327a-13f1-30d9-a8fd-d516cb10985a.roa File: d40e327a-13f1-30d9-a8fd-d516cb10985a.roa (raw, json) Hash identifier: hcFbCidXYu1ru/jNgENun1BTgFRjFHT0tJJQHAZODdA= Subject key identifier: 4D:C4:E5:E9:F7:E7:17:BE:97:E6:7C:87:C7:DF:66:CB:50:E8:04:81 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4972EA0F6C8E77966F13F780 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d40e327a-13f1-30d9-a8fd-d516cb10985a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396544 IP address blocks: 2001:500:125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:ea:0f:6c:8e:77:96:6f:13:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=52a0b1a1-5094-4aaf-8d7a-54f72e106ea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:6f:64:95:25:5b:0a:d8:e2:2f:b2:84:07:df: 45:1d:4b:8a:24:6f:29:b7:07:80:0e:7a:fb:7c:4a: 33:d0:e9:a4:7e:84:58:41:fd:4c:a2:fa:ce:c0:d9: 48:c8:e5:2b:6a:35:bc:cc:66:c6:2b:2e:49:6a:2e: 6d:12:34:aa:b1:ed:e9:f2:c4:e7:e4:51:73:cb:d1: 78:63:19:ac:80:cb:30:41:44:fb:36:9b:6a:9c:02: 7d:6d:dd:77:2a:9d:73:58:e0:95:ea:17:cd:cd:0f: bb:ae:7a:e4:be:d0:b7:9a:a7:32:fe:33:be:50:af: 5b:58:17:e7:07:cd:e3:b8:6c:a4:92:8b:bd:bc:f6: 3d:3f:83:71:42:89:b5:d1:f9:69:fb:2c:d9:77:38: 77:27:20:83:ba:10:d8:dc:a6:38:36:8e:1f:8d:e2: f4:8f:0b:2c:33:e0:25:58:8c:40:df:47:89:3c:fc: e2:17:d7:3c:b7:90:6d:a0:28:e6:25:ab:7c:56:36: c5:e1:9d:34:0e:2f:32:69:ce:0b:1d:70:b7:5b:46: 3a:31:16:6e:e4:f2:1c:b2:44:f5:1f:1b:db:af:21: 38:66:75:a3:04:9d:f0:c3:cc:d3:64:0e:f9:9a:f9: ef:d0:46:86:44:e4:83:ef:77:c5:5d:22:93:cd:61: 84:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:C4:E5:E9:F7:E7:17:BE:97:E6:7C:87:C7:DF:66:CB:50:E8:04:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d40e327a-13f1-30d9-a8fd-d516cb10985a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:6f:af:9d:dd:a8:06:73:9e:56:5a:bd:b1:11:85:8a:7b:a8: f4:56:4e:8d:6e:bd:81:29:bd:12:08:0f:82:3c:c8:3f:cf:2c: 3c:1b:89:3d:97:a5:f4:2f:fa:ba:50:78:48:2b:f0:95:8a:8e: 63:ad:15:61:39:99:12:e7:f0:5c:63:91:03:49:67:f8:61:d6: 2b:bf:86:31:3f:fa:a6:de:45:c2:ca:87:22:4e:ab:1c:cd:03: 1a:2a:00:d1:8b:aa:e1:f8:ed:e4:6c:e7:2f:4a:73:2d:1d:5c: 60:65:2b:ba:5e:c0:be:35:1d:a4:85:ae:b5:39:34:36:5e:19: 82:58:8a:3a:5d:88:ff:56:f8:91:45:02:b7:64:1d:c5:9f:7d: 89:4f:1b:70:93:d2:f3:4a:f8:1d:df:f5:e9:4b:49:26:12:7f: 96:9e:9f:5d:1e:68:cb:2d:6d:39:32:9f:0d:3a:f6:ab:1e:4a: a4:6e:7f:bc:51:fb:a4:76:0a:a4:b5:31:74:b0:9b:53:b6:37: b5:23:ca:55:05:0b:2f:88:d8:d9:06:df:a5:8e:af:e8:ef:f9: 05:cd:ab:dd:58:8a:47:3b:59:a1:a4:70:15:06:72:97:e2:c6: 46:ac:70:cb:fa:4b:b6:03:c4:7a:4c:ec:cd:c2:18:c5:57:28: f7:da:a1:54 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JcuoPbI53lm8T94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTJhMGIxYTEtNTA5NC00YWFmLThkN2EtNTRmNzJlMTA2ZWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhG9klSVbCtjiL7KEB99FHUuKJG8ptweADnr7 fEoz0OmkfoRYQf1MovrOwNlIyOUrajW8zGbGKy5Jai5tEjSqse3p8sTn5FFzy9F4 YxmsgMswQUT7NptqnAJ9bd13Kp1zWOCV6hfNzQ+7rnrkvtC3mqcy/jO+UK9bWBfn B83juGykkou9vPY9P4NxQom10flp+yzZdzh3JyCDuhDY3KY4No4fjeL0jwssM+Al WIxA30eJPPziF9c8t5BtoCjmJat8VjbF4Z00Di8yac4LHXC3W0Y6MRZu5PIcskT1 HxvbryE4ZnWjBJ3ww8zTZA75mvnv0EaGROSD73fFXSKTzWGEvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE3E5en35xe+l+Z8h8ffZstQ6ASBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDQwZTMyN2EtMTNmMS0z MGQ5LWE4ZmQtZDUxNmNiMTA5ODVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFpvr53dqAZznlZavbERhYp7qPRWTo1uvYEpvRIID4I8yD/PLDwb iT2XpfQv+rpQeEgr8JWKjmOtFWE5mRLn8FxjkQNJZ/hh1iu/hjE/+qbeRcLKhyJO qxzNAxoqANGLquH47eRs5y9Kcy0dXGBlK7pewL41HaSFrrU5NDZeGYJYijpdiP9W +JFFArdkHcWffYlPG3CT0vNK+B3f9elLSSYSf5aen10eaMstbTkynw069qseSqRu f7xR+6R2CqS1MXSwm1O2N7UjylUFCy+I2NkG36WOr+jv+QXNq91Yikc7WaGkcBUG cpfixkascMv6S7YDxHpM7M3CGMVXKPfaoVQ= -----END CERTIFICATE-----Generated at Sat Sep 26 06:28:11 2026 by rpki-client