$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/097e1c1c-4acd-3c1f-a21a-e305280afdaa.roa File: 097e1c1c-4acd-3c1f-a21a-e305280afdaa.roa (raw, json) Hash identifier: iTAo4/8OQc09sW+CAUTCjAEGcqTN8wZCGjVfVqDm/FI= Subject key identifier: 61:2E:75:E2:03:3A:B8:68:9F:11:1E:06:A9:AF:F0:FF:F6:B1:A3:7C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4986A59971CDF16D92E64760 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/097e1c1c-4acd-3c1f-a21a-e305280afdaa.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397212 IP address blocks: 2001:500:135::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:a5:99:71:cd:f1:6d:92:e6:47:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3a91c7f2-ebd8-4bc1-9c7f-bb53423593ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:6b:39:43:a9:b7:1f:d4:58:a7:0e:b6:65:be: b8:d7:cd:26:33:4d:cf:7f:97:aa:46:0c:3b:2a:c7: 49:c6:38:e8:08:2e:a0:77:a4:76:49:ae:13:57:1e: 4e:48:42:6b:4e:a8:21:ad:e4:50:56:d4:a8:fb:94: 36:50:32:b4:44:98:9b:80:79:95:98:28:eb:1c:38: dd:be:07:79:46:07:b7:07:ec:8e:ab:80:5e:f3:5c: 26:99:34:96:8d:21:e4:3f:dc:2f:4b:12:83:1e:59: 76:a9:00:18:bb:7d:62:98:ed:1c:04:76:77:43:e7: 33:b2:b3:7e:e5:16:8f:37:56:c5:fd:3f:2d:18:a0: 6e:58:d6:79:95:0f:de:b5:7e:e6:6e:e0:70:aa:b7: 31:b7:40:42:34:2c:9c:22:bf:9d:40:8a:ff:41:7f: 67:9c:0a:6c:33:e9:6c:84:ac:df:25:00:1d:47:89: 51:e0:4e:9d:e9:b6:ac:e2:df:4d:f7:cb:42:bd:ff: f8:4c:e6:30:eb:01:c1:e7:06:23:ac:d9:0d:81:32: 64:cb:af:84:41:94:b1:c1:7a:2a:c5:03:e9:ec:32: d4:6d:cf:90:1c:35:19:f6:06:51:d1:c2:d7:d5:c5: 1b:08:b3:86:b9:df:25:4e:4c:b4:e0:12:76:c1:58: 69:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:2E:75:E2:03:3A:B8:68:9F:11:1E:06:A9:AF:F0:FF:F6:B1:A3:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/097e1c1c-4acd-3c1f-a21a-e305280afdaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:34:88:53:6c:9c:f7:64:d7:19:15:6b:24:1b:d1:3d:3b:9f: 8a:6e:93:f4:71:78:44:53:55:15:92:bc:ba:41:ea:d5:bc:c5: 81:94:cb:e8:33:d8:a7:8e:3b:7f:b1:06:38:b2:db:a1:0c:96: dd:8e:0b:a2:ba:e9:19:52:69:3f:26:53:b8:a3:a9:aa:59:e8: 46:6e:69:cd:20:6c:57:09:25:7d:1d:45:67:d5:44:6b:d9:42: e5:57:8c:a7:5c:30:3c:47:b6:69:8f:53:c3:94:27:5c:bb:5b: 35:37:21:89:47:2d:03:4f:22:ef:61:a2:38:c1:95:cb:df:45: db:eb:0f:3a:c4:e4:8e:3a:f0:fe:7d:32:4d:73:7a:4f:da:d9: d7:34:e0:4f:2a:32:ea:aa:80:a6:9b:82:a3:79:50:09:31:5a: 2b:f9:c3:94:bd:f0:45:11:2d:1c:4a:54:aa:4e:a5:8a:4f:c0: 8d:e7:8d:88:6e:ed:86:f1:08:4c:a8:11:94:70:63:a6:8d:b8: ab:ff:90:5d:8d:dc:8c:50:95:c0:6a:69:51:95:23:90:cd:ed: 59:f6:dd:b3:cc:ac:08:ce:7a:52:9d:92:cb:4d:a4:b7:8d:9b: 90:07:02:9b:f0:3c:9d:22:2f:dd:8e:50:65:32:95:82:36:25: 8d:cf:7c:9c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9JhqWZcc3xbZLmR2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2E5MWM3ZjItZWJkOC00YmMxLTljN2YtYmI1MzQyMzU5M2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgms5Q6m3H9RYpw62Zb64180mM03Pf5eqRgw7 KsdJxjjoCC6gd6R2Sa4TVx5OSEJrTqghreRQVtSo+5Q2UDK0RJibgHmVmCjrHDjd vgd5Rge3B+yOq4Be81wmmTSWjSHkP9wvSxKDHll2qQAYu31imO0cBHZ3Q+czsrN+ 5RaPN1bF/T8tGKBuWNZ5lQ/etX7mbuBwqrcxt0BCNCycIr+dQIr/QX9nnApsM+ls hKzfJQAdR4lR4E6d6bas4t9N98tCvf/4TOYw6wHB5wYjrNkNgTJky6+EQZSxwXoq xQPp7DLUbc+QHDUZ9gZR0cLX1cUbCLOGud8lTky04BJ2wVhphQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGEudeIDOrhonxEeBqmv8P/2saN8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDk3ZTFjMWMtNGFjZC0z YzFmLWEyMWEtZTMwNTI4MGFmZGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAbNIhTbJz3ZNcZFWskG9E9O5+KbpP0cXhEU1UV kry6QerVvMWBlMvoM9injjt/sQY4stuhDJbdjguiuukZUmk/JlO4o6mqWehGbmnN IGxXCSV9HUVn1URr2ULlV4ynXDA8R7Zpj1PDlCdcu1s1NyGJRy0DTyLvYaI4wZXL 30Xb6w86xOSOOvD+fTJNc3pP2tnXNOBPKjLqqoCmm4KjeVAJMVor+cOUvfBFES0c SlSqTqWKT8CN542Ibu2G8QhMqBGUcGOmjbir/5BdjdyMUJXAamlRlSOQze1Z9t2z zKwIznpSnZLLTaS3jZuQBwKb8DydIi/djlBlMpWCNiWNz3yc -----END CERTIFICATE-----Generated at Tue Oct 6 19:59:28 2026 by rpki-client