$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd33f23c-78a1-3964-a43e-36e99d01962e.roa File: dd33f23c-78a1-3964-a43e-36e99d01962e.roa (raw, json) Hash identifier: /o89c04tlWQIdPPYpWvjxNVg49yzdzbWJ+Ks1t2QHb4= Subject key identifier: 42:62:2A:77:78:67:C1:DD:43:78:1B:33:6D:4D:92:27:06:42:66:42 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4974999320EDE299EA4AC0C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd33f23c-78a1-3964-a43e-36e99d01962e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396595 IP address blocks: 2001:500:134::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:99:93:20:ed:e2:99:ea:4a:c0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6e5411cb-822b-4732-adc1-8a9ac7dbd549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:48:77:27:10:34:38:43:e3:d1:c9:63:95:3a: 51:c5:70:e9:c5:b3:ce:ff:20:62:80:a3:05:08:2b: d2:fc:75:0b:54:d1:05:dc:f3:01:cb:7e:76:70:51: 0f:3a:02:6e:7b:9e:34:3a:d2:6f:99:90:b7:df:5a: 78:06:74:15:88:5d:1e:c0:9e:4a:14:35:02:ee:61: e0:41:a6:10:9d:1b:c6:0a:e8:6f:b5:0d:6e:84:16: af:a0:ac:f0:ef:d8:0e:79:fc:54:5b:6c:19:50:6e: a6:f7:9f:a6:10:5c:4a:0c:e7:19:10:df:3f:b4:c2: f0:9e:8c:25:7a:6e:1d:86:e4:40:f5:ad:42:a1:b9: 01:ba:9d:38:4f:35:33:a6:74:05:9a:d9:df:59:c0: 4e:d4:4c:4f:da:06:99:53:ea:1e:13:57:f7:af:3c: 0e:51:1b:21:af:09:af:2d:0e:a2:c5:a2:84:0b:8f: 02:49:9f:bd:4e:fe:c1:86:17:18:e0:a1:cb:01:26: c2:38:2b:d3:63:75:9e:71:42:42:e7:d2:87:f9:1e: 09:19:c7:19:27:5a:9c:c0:4e:b1:c7:04:f1:dd:37: 74:62:ad:9a:ee:a9:7a:ea:3f:27:33:7d:aa:f6:c4: 02:56:b5:ca:0b:b3:75:2f:b4:3f:4a:33:24:2e:9a: c3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:62:2A:77:78:67:C1:DD:43:78:1B:33:6D:4D:92:27:06:42:66:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd33f23c-78a1-3964-a43e-36e99d01962e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:134::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:70:0c:23:9f:49:47:59:bc:7d:d3:01:81:3d:cb:66:61:9b: ae:60:d4:ab:7b:23:98:fa:a6:04:44:e4:5a:b7:be:0d:12:08: 0c:a5:56:ea:34:1c:df:29:91:a4:d0:e3:43:3a:8e:7b:fc:1c: 0b:3e:f7:9b:01:f1:9c:eb:24:d2:34:63:2e:34:f8:c4:3a:6e: 77:d2:07:3c:c8:b7:80:4d:ea:41:a5:d4:c9:c0:c0:aa:c4:da: 5d:89:cb:ff:e2:e4:d8:94:df:e3:91:92:bf:a6:a9:22:d7:d1: 27:20:34:06:71:20:12:8b:e4:d5:7d:78:c2:80:4e:42:12:10: 74:b8:65:95:08:e7:01:cc:50:b2:86:25:0e:bf:1e:9b:6f:20: ad:35:71:e8:3d:2d:50:e2:f6:76:cb:ff:63:a3:0d:d2:75:52: 08:1b:40:6c:59:cb:f7:40:48:e0:5c:69:9f:f4:62:92:8e:8f: fd:31:bf:d3:f3:be:5e:7e:d1:2e:66:7b:a7:90:e9:08:62:20: b4:13:51:9a:9d:3c:2c:a9:32:10:9f:10:26:c2:89:7d:95:6c: f5:b7:c7:04:d2:82:c7:0b:36:82:cc:71:a2:7f:c3:52:02:a5: 8b:3e:70:bd:ff:4f:63:c7:be:33:c7:64:e8:06:06:d7:12:ff: 9e:f3:3b:5a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdJmTIO3imepKwMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmU1NDExY2ItODIyYi00NzMyLWFkYzEtOGE5YWM3ZGJkNTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kh3JxA0OEPj0cljlTpRxXDpxbPO/yBigKMF CCvS/HULVNEF3PMBy352cFEPOgJue540OtJvmZC331p4BnQViF0ewJ5KFDUC7mHg QaYQnRvGCuhvtQ1uhBavoKzw79gOefxUW2wZUG6m95+mEFxKDOcZEN8/tMLwnowl em4dhuRA9a1CobkBup04TzUzpnQFmtnfWcBO1ExP2gaZU+oeE1f3rzwOURshrwmv LQ6ixaKEC48CSZ+9Tv7BhhcY4KHLASbCOCvTY3WecUJC59KH+R4JGccZJ1qcwE6x xwTx3Td0Yq2a7ql66j8nM32q9sQCVrXKC7N1L7Q/SjMkLprDuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEJiKnd4Z8HdQ3gbM21NkicGQmZCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGQzM2YyM2MtNzhhMS0z OTY0LWE0M2UtMzZlOTlkMDE5NjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKRwDCOfSUdZvH3TAYE9y2Zhm65g1Kt7I5j6pgRE5Fq3vg0SCAyl Vuo0HN8pkaTQ40M6jnv8HAs+95sB8ZzrJNI0Yy40+MQ6bnfSBzzIt4BN6kGl1MnA wKrE2l2Jy//i5NiU3+ORkr+mqSLX0ScgNAZxIBKL5NV9eMKATkISEHS4ZZUI5wHM ULKGJQ6/HptvIK01ceg9LVDi9nbL/2OjDdJ1UggbQGxZy/dASOBcaZ/0YpKOj/0x v9Pzvl5+0S5me6eQ6QhiILQTUZqdPCypMhCfECbCiX2VbPW3xwTSgscLNoLMcaJ/ w1ICpYs+cL3/T2PHvjPHZOgGBtcS/57zO1o= -----END CERTIFICATE-----Generated at Sat Sep 26 07:25:18 2026 by rpki-client