$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbbc0375-980e-3cf9-9445-89474c2d2a22.roa File: fbbc0375-980e-3cf9-9445-89474c2d2a22.roa (raw, json) Hash identifier: 86EMgBPRUlbT1mK5gc6UrSWIGMEcrkx/8g2ajhRCVZQ= Subject key identifier: 60:A8:BC:56:2C:DC:3D:A6:B6:B6:14:92:62:E7:9E:E0:D4:4D:B6:58 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F03A84B8951AE55DEBF83ED64 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbbc0375-980e-3cf9-9445-89474c2d2a22.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 397208 IP address blocks: 2001:500:124::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a8:4b:89:51:ae:55:de:bf:83:ed:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=3240858f-519d-4306-beaf-e33740b5fea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8b:06:c1:8f:60:0b:b6:77:f9:92:f1:96:d6: 3a:41:73:18:62:0f:a0:cf:cf:0d:95:48:50:de:19: 13:9b:8d:24:4b:a4:eb:01:2e:20:68:ee:58:53:fd: 2b:27:11:e7:7f:1c:0b:b0:01:39:58:25:9f:86:0b: b5:00:f1:2f:50:87:83:a1:09:10:9d:70:0f:6b:25: 05:32:48:6b:8e:7d:2c:cb:da:c8:fb:9c:41:8d:0a: 9a:76:cb:cc:33:85:26:9a:9d:33:bf:40:c1:b1:be: a3:6d:44:36:5d:e5:94:db:82:ee:00:03:05:bb:81: b1:de:b9:1c:86:76:42:ac:ef:b9:f6:5c:46:1d:33: 0f:3b:6a:fa:07:b3:89:08:08:8c:81:47:ff:65:75: fe:2d:b7:7e:ef:65:92:42:f7:5a:36:da:0c:15:03: af:0c:00:03:ba:d0:db:7d:01:7d:87:0b:63:34:33: 21:02:63:10:f3:9c:57:9f:61:43:39:b0:52:51:26: 6d:8c:b1:86:f4:a9:fd:ff:be:16:a8:11:6c:57:7f: b6:58:bb:60:67:56:93:07:82:fb:01:27:81:88:5c: ed:72:bd:02:1e:35:ed:7b:51:4d:0b:3d:3d:ff:2b: 5b:57:60:28:b7:2a:69:73:f4:8b:a6:8a:67:ef:14: 13:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A8:BC:56:2C:DC:3D:A6:B6:B6:14:92:62:E7:9E:E0:D4:4D:B6:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbbc0375-980e-3cf9-9445-89474c2d2a22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:124::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:15:a2:db:34:4b:70:3a:ec:2a:b1:a9:97:69:c1:02:20:ac: 49:56:40:58:5f:c7:29:31:2a:d7:c5:17:7e:c3:5b:c7:2b:0e: 77:6c:30:1b:aa:f7:78:6e:0c:a3:10:d0:91:1c:ee:64:9a:b1: 7d:5a:f4:d6:a4:89:6a:49:7d:ad:64:6a:9c:f8:3b:e1:3d:e6: e9:49:83:01:8f:43:bd:64:b0:15:e4:d4:c9:93:13:87:1e:8f: 6c:e5:c2:1d:d2:3e:92:5c:ea:48:1d:54:e6:ab:12:6e:f1:80: 35:06:d4:0f:09:ed:5e:a4:82:bd:1f:91:1f:cd:af:b7:9e:e5: 4d:b4:0e:c2:26:da:3b:17:6f:78:bc:dc:4e:de:4d:a7:c1:54: 53:bd:5a:a9:d9:52:7f:84:dc:f3:19:f3:a6:5d:51:61:92:3e: 74:2f:5f:bf:a2:e3:8b:74:6e:09:7d:22:7f:d1:c0:f9:ed:e6: ee:9d:07:48:ab:c3:99:e4:62:db:86:93:fd:d7:76:5e:3a:1a: 5b:31:3c:86:f7:0d:0e:5c:48:51:30:64:18:25:b1:2f:5f:ff: 2c:d6:14:17:9d:4c:93:9c:e6:9c:5f:f3:52:6b:d7:a7:e7:3b: 51:9c:64:49:8b:20:62:63:9e:86:5a:63:68:bf:5f:e1:01:ba: 85:1e:de:2a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8DqEuJUa5V3r+D7WQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk MzI0MDg1OGYtNTE5ZC00MzA2LWJlYWYtZTMzNzQwYjVmZWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArosGwY9gC7Z3+ZLxltY6QXMYYg+gz88NlUhQ 3hkTm40kS6TrAS4gaO5YU/0rJxHnfxwLsAE5WCWfhgu1APEvUIeDoQkQnXAPayUF Mkhrjn0sy9rI+5xBjQqadsvMM4Ummp0zv0DBsb6jbUQ2XeWU24LuAAMFu4Gx3rkc hnZCrO+59lxGHTMPO2r6B7OJCAiMgUf/ZXX+Lbd+72WSQvdaNtoMFQOvDAADutDb fQF9hwtjNDMhAmMQ85xXn2FDObBSUSZtjLGG9Kn9/74WqBFsV3+2WLtgZ1aTB4L7 ASeBiFztcr0CHjXte1FNCz09/ytbV2Aotyppc/SLpopn7xQThQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGCovFYs3D2mtrYUkmLnnuDUTbZYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmJiYzAzNzUtOTgwZS0z Y2Y5LTk0NDUtODk0NzRjMmQyYTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADgVots0S3A67CqxqZdpwQIgrElWQFhfxykxKtfFF37DW8crDnds MBuq93huDKMQ0JEc7mSasX1a9NakiWpJfa1kapz4O+E95ulJgwGPQ71ksBXk1MmT E4cej2zlwh3SPpJc6kgdVOarEm7xgDUG1A8J7V6kgr0fkR/Nr7ee5U20DsIm2jsX b3i83E7eTafBVFO9WqnZUn+E3PMZ86ZdUWGSPnQvX7+i44t0bgl9In/RwPnt5u6d B0irw5nkYtuGk/3Xdl46GlsxPIb3DQ5cSFEwZBglsS9f/yzWFBedTJOc5pxf81Jr 16fnO1GcZEmLIGJjnoZaY2i/X+EBuoUe3io= -----END CERTIFICATE-----Generated at Mon Sep 21 17:21:16 2026 by rpki-client