$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/def9a4f6-dfa9-36a2-b0ed-5159e08421c0.roa File: def9a4f6-dfa9-36a2-b0ed-5159e08421c0.roa (raw, json) Hash identifier: 02eCB0MW6GCZgWHJUuAA389KmJc06aWxjKYPghPACkU= Subject key identifier: 8C:FA:EA:AC:C6:F7:F2:08:81:87:06:ED:18:3A:94:CC:A7:01:BC:EE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4974D17C37774960C4C7AA00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/def9a4f6-dfa9-36a2-b0ed-5159e08421c0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396587 IP address blocks: 2001:500:125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:d1:7c:37:77:49:60:c4:c7:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=35b2e0cf-d9f3-419a-92d2-aaebc6e0cb48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a3:7c:90:07:2a:8e:7e:a3:8f:46:a1:47:47: 0a:3d:69:43:4c:d2:6c:12:31:d0:7d:4c:86:a0:2e: 25:b1:42:f3:30:3e:43:96:13:b6:15:6e:a9:c0:42: 7e:3c:1c:5c:74:2b:79:f3:38:00:5e:d5:db:82:e5: 44:3a:21:b5:a8:91:14:88:98:02:49:df:69:f1:3f: 79:03:bc:27:71:f0:c1:8b:df:d9:c0:d2:6e:ec:f3: 23:19:71:f1:53:80:99:cb:20:13:f0:36:8f:e8:35: ee:0e:dd:cb:0c:17:b3:d0:eb:41:c7:7f:b6:0c:d0: 2c:4a:15:c1:ad:4a:eb:5b:db:51:5f:09:6f:e8:62: 32:23:37:e8:b2:11:52:d2:af:3b:80:dd:8b:d5:bb: 24:27:02:3f:88:b6:fd:a8:df:ed:9c:7f:8f:9f:8a: d9:c0:c8:b6:a6:f2:fb:8c:ed:19:29:69:61:88:aa: aa:42:58:ca:ec:23:e8:03:28:87:5f:61:7b:cf:c0: af:9e:7e:c6:a6:78:03:66:b1:bf:4a:42:e4:67:96: 7e:ff:b1:f2:41:35:52:bf:92:02:4f:7d:a8:54:53: 91:e6:39:02:9e:31:93:55:e4:62:a7:d4:3f:39:f4: c8:a0:1c:1f:49:65:63:69:cf:53:0d:df:f7:40:2b: 2b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:FA:EA:AC:C6:F7:F2:08:81:87:06:ED:18:3A:94:CC:A7:01:BC:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/def9a4f6-dfa9-36a2-b0ed-5159e08421c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:2e:1d:f0:8f:11:8a:69:e7:09:ba:b7:fb:2a:33:70:6f:da: a1:3b:ac:94:aa:6d:08:52:87:4f:83:83:c3:cd:5c:1c:1a:0b: 5c:39:e0:6d:c3:2e:ee:7c:bb:a8:df:06:31:10:ee:30:1a:84: e7:2e:bf:10:e6:c4:40:90:64:a0:c1:35:ec:0b:6a:a1:79:30: 5e:c0:49:23:c4:77:aa:41:9c:a8:3c:16:6b:65:71:5f:53:13: 69:18:eb:06:a3:de:9d:c7:20:37:2b:e8:27:17:8f:02:d2:97: b5:e4:43:20:da:21:4a:68:9f:26:ef:68:2b:aa:70:45:54:1f: e1:4d:df:23:76:89:34:50:cb:c7:86:6f:11:4d:62:0a:ae:24: 9e:90:ea:fc:f1:2b:08:76:18:c4:44:35:84:58:4c:a2:b5:99: 67:4f:f5:7e:88:2d:42:52:c7:42:b6:c9:1e:6f:99:c7:f6:a4: 9f:77:a7:65:66:d7:6d:88:41:a4:cd:bd:72:8c:82:01:8b:44: a2:15:54:74:75:62:89:ac:5e:cd:03:a4:67:da:57:dc:bb:00: da:f5:6e:93:5a:0e:9e:a5:c8:27:f8:e3:06:94:3c:f0:71:f8: fd:59:14:27:7f:de:b5:eb:91:30:1e:42:89:35:bd:c3:7f:46: 15:dc:b8:6f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdNF8N3dJYMTHqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzViMmUwY2YtZDlmMy00MTlhLTkyZDItYWFlYmM2ZTBjYjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6N8kAcqjn6jj0ahR0cKPWlDTNJsEjHQfUyG oC4lsULzMD5DlhO2FW6pwEJ+PBxcdCt58zgAXtXbguVEOiG1qJEUiJgCSd9p8T95 A7wncfDBi9/ZwNJu7PMjGXHxU4CZyyAT8DaP6DXuDt3LDBez0OtBx3+2DNAsShXB rUrrW9tRXwlv6GIyIzfoshFS0q87gN2L1bskJwI/iLb9qN/tnH+Pn4rZwMi2pvL7 jO0ZKWlhiKqqQljK7CPoAyiHX2F7z8Cvnn7GpngDZrG/SkLkZ5Z+/7HyQTVSv5IC T32oVFOR5jkCnjGTVeRip9Q/OfTIoBwfSWVjac9TDd/3QCsrAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIz66qzG9/IIgYcG7Rg6lMynAbzuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGVmOWE0ZjYtZGZhOS0z NmEyLWIwZWQtNTE1OWUwODQyMWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE4uHfCPEYpp5wm6t/sqM3Bv2qE7rJSqbQhSh0+Dg8PNXBwaC1w5 4G3DLu58u6jfBjEQ7jAahOcuvxDmxECQZKDBNewLaqF5MF7ASSPEd6pBnKg8Fmtl cV9TE2kY6waj3p3HIDcr6CcXjwLSl7XkQyDaIUponybvaCuqcEVUH+FN3yN2iTRQ y8eGbxFNYgquJJ6Q6vzxKwh2GMRENYRYTKK1mWdP9X6ILUJSx0K2yR5vmcf2pJ93 p2Vm122IQaTNvXKMggGLRKIVVHR1YomsXs0DpGfaV9y7ANr1bpNaDp6lyCf44waU PPBx+P1ZFCd/3rXrkTAeQok1vcN/RhXcuG8= -----END CERTIFICATE-----Generated at Fri Sep 25 08:00:23 2026 by rpki-client