$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7cb7f1f-a3e4-3c1f-bcaf-4ae2be42927c.roa File: d7cb7f1f-a3e4-3c1f-bcaf-4ae2be42927c.roa (raw, json) Hash identifier: H+799FJDKzVzEzwd4ee9FkndVuCACNRuDvKQXlgW4Ag= Subject key identifier: 63:E4:49:8F:15:4E:40:AF:D3:46:E2:57:9A:84:76:01:4D:77:A7:0D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EF01CE6913129AB55521BB380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7cb7f1f-a3e4-3c1f-bcaf-4ae2be42927c.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 397194 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:e6:91:31:29:ab:55:52:1b:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=22c27d1b-c782-4b91-84f5-863774a00111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2a:24:16:52:e1:c1:f3:3c:4c:48:66:2c:f6: a8:49:91:ec:36:a6:2e:45:ed:9f:e9:1a:41:9b:76: fd:54:1b:44:a1:6a:05:d8:a0:71:64:1f:76:f2:6b: 66:69:8d:f7:d6:99:b9:00:3a:29:7d:7d:dd:ba:0e: 1e:22:46:fc:9f:be:3d:8c:ca:0a:3d:9f:c2:07:f4: b6:63:7c:0b:b0:ee:52:08:02:73:40:6d:26:39:1d: 59:1d:6b:f6:0c:28:eb:ab:a0:e9:71:7d:9f:1e:32: d8:19:cc:d9:5d:0f:18:e5:a9:a1:0a:cc:e2:b2:bb: 4b:1c:92:dd:87:b0:56:5d:9b:73:1d:f8:05:7f:0c: c1:53:33:90:7b:b1:7d:40:0d:6b:0f:ef:aa:f8:e7: 61:34:61:c5:88:73:ad:bf:59:7b:6d:a0:bc:f1:b9: 2f:46:04:4b:5e:0c:fb:80:91:22:24:ec:9b:ce:a2: 35:1f:17:0d:82:4f:b9:ef:e8:81:29:6f:3d:e9:62: 94:e4:0f:2e:d1:ec:57:92:5a:f5:03:fe:d6:08:d3: 6a:aa:2e:46:3b:60:64:60:54:b6:88:3a:93:75:35: 8f:c7:60:79:08:0f:a6:ee:81:de:78:ed:1a:4d:65: 6a:b1:4b:cd:d2:68:57:07:ef:7f:79:a2:49:d2:b8: 6f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E4:49:8F:15:4E:40:AF:D3:46:E2:57:9A:84:76:01:4D:77:A7:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7cb7f1f-a3e4-3c1f-bcaf-4ae2be42927c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:40:9e:86:b0:fd:b8:11:12:94:8b:5d:66:f7:d6:49:f4:8c: d5:b5:b6:ac:13:86:75:d0:16:16:f0:d1:44:11:f1:e1:04:bd: d0:68:bb:74:ec:57:a9:f0:69:c8:05:af:98:f5:c2:48:68:e1: ba:d3:d9:bc:5e:34:c4:76:32:83:fa:92:2c:70:14:f5:31:7f: b1:7f:d1:d7:13:5e:9e:9e:41:83:29:da:89:12:11:d3:6a:cf: ba:24:4e:b6:ec:14:7d:c5:65:e8:c7:1f:0b:1e:b8:be:cd:25: a9:3d:59:da:94:a1:57:fe:b1:b8:00:3b:77:56:71:c8:a3:80: c9:ad:cd:d2:08:06:67:bd:b0:37:a3:a8:e9:c7:c5:36:3d:b4: 59:fe:dd:0a:00:66:9d:64:0d:57:03:33:41:f9:fb:fe:b9:26: 08:f9:d6:b7:e0:f0:b2:58:bf:c0:84:9a:2a:4d:6f:13:44:d4: 3b:b9:94:21:c5:01:59:97:8b:da:a7:de:51:8a:5f:98:53:b2: 47:9d:23:35:d4:53:c2:71:56:c1:ad:51:f1:a7:26:f8:e3:f8: ff:d8:01:94:ed:9b:5d:85:60:e1:c5:d2:00:dc:2d:4b:01:12: ea:31:b0:a7:22:8f:a3:3f:c2:b4:e1:1e:9f:9f:6e:e5:c0:2a: f2:7f:a1:52 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7wHOaRMSmrVVIbs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk MjJjMjdkMWItYzc4Mi00YjkxLTg0ZjUtODYzNzc0YTAwMTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCokFlLhwfM8TEhmLPaoSZHsNqYuRe2f6RpB m3b9VBtEoWoF2KBxZB928mtmaY331pm5ADopfX3dug4eIkb8n749jMoKPZ/CB/S2 Y3wLsO5SCAJzQG0mOR1ZHWv2DCjrq6DpcX2fHjLYGczZXQ8Y5amhCszisrtLHJLd h7BWXZtzHfgFfwzBUzOQe7F9QA1rD++q+OdhNGHFiHOtv1l7baC88bkvRgRLXgz7 gJEiJOybzqI1HxcNgk+57+iBKW896WKU5A8u0exXklr1A/7WCNNqqi5GO2BkYFS2 iDqTdTWPx2B5CA+m7oHeeO0aTWVqsUvN0mhXB+9/eaJJ0rhv6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGPkSY8VTkCv00biV5qEdgFNd6cNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDdjYjdmMWYtYTNlNC0z YzFmLWJjYWYtNGFlMmJlNDI5MjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAENAnoaw/bgREpSLXWb31kn0jNW1tqwThnXQFhbw0UQR8eEEvdBo u3TsV6nwacgFr5j1wkho4brT2bxeNMR2MoP6kixwFPUxf7F/0dcTXp6eQYMp2okS EdNqz7okTrbsFH3FZejHHwseuL7NJak9WdqUoVf+sbgAO3dWccijgMmtzdIIBme9 sDejqOnHxTY9tFn+3QoAZp1kDVcDM0H5+/65Jgj51rfg8LJYv8CEmipNbxNE1Du5 lCHFAVmXi9qn3lGKX5hTskedIzXUU8JxVsGtUfGnJvjj+P/YAZTtm12FYOHF0gDc LUsBEuoxsKcij6M/wrThHp+fbuXAKvJ/oVI= -----END CERTIFICATE-----Generated at Tue Sep 22 17:24:42 2026 by rpki-client