$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a65a893-6bc5-3c8e-a0b4-ce2ec7d14b86.roa File: 3a65a893-6bc5-3c8e-a0b4-ce2ec7d14b86.roa (raw, json) Hash identifier: jHnWmmVtG4XBOXLsuvZgAxhWIXylikVJ4AMUDOLbVKE= Subject key identifier: 8B:F5:3D:59:E0:26:C3:A1:8D:80:DA:47:36:2E:79:81:87:30:4B:F3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4C3D5C83B2BE2BFB9EA00C80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a65a893-6bc5-3c8e-a0b4-ce2ec7d14b86.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 22547 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:5c:83:b2:be:2b:fb:9e:a0:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=8ceaf5b4-835c-46ac-b2cc-28f4c2499595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1c:ed:6a:bb:62:88:18:93:44:92:a0:a5:1a: 91:41:9c:23:1d:e7:82:a9:d2:9a:92:69:0b:f4:eb: b6:c7:25:31:28:f3:4c:fa:0c:4e:df:a2:b1:91:3a: 18:59:06:de:51:05:94:b7:6e:83:a4:39:d2:0c:ef: d5:4c:ab:b6:a0:b7:38:19:9b:dd:9f:d1:c2:ee:ce: 7b:af:dc:68:4a:45:6e:2e:25:fa:d7:6b:93:1e:f4: 41:82:05:55:2a:4a:90:18:9b:65:26:ff:93:8a:60: 32:e9:f5:0b:1f:91:18:c2:c3:6e:8a:f1:3b:0a:54: 2c:b0:39:09:c0:07:80:3c:ae:54:af:69:af:c4:a8: 06:ae:8c:e9:d9:70:c0:c5:b1:29:0b:5b:29:a2:0d: 0a:b4:df:03:b3:5c:f1:f8:66:c7:35:41:91:cc:d2: d0:1f:96:6d:0f:1a:b6:5c:41:aa:3f:8c:10:3c:f1: ce:cc:a2:ff:5d:c8:6a:0d:8e:25:76:a9:f6:47:8a: 4f:00:2a:ac:47:ce:f2:39:cf:d3:23:9d:67:6b:ef: e4:72:5a:0c:30:cd:60:08:28:20:4d:4a:92:fa:0b: 1b:23:fd:5a:8b:f7:9f:c8:54:70:76:24:6a:1c:0f: a2:d5:28:68:6b:89:38:ee:8f:f9:56:8c:7e:d6:d0: 96:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F5:3D:59:E0:26:C3:A1:8D:80:DA:47:36:2E:79:81:87:30:4B:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a65a893-6bc5-3c8e-a0b4-ce2ec7d14b86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:c5:c1:1a:00:ac:b0:d6:16:2d:1e:57:f1:64:5b:5a:5a:c2: 5b:85:59:da:35:a6:80:94:dd:79:45:4f:c5:48:25:d8:d0:4a: 69:16:b3:0b:26:96:69:14:25:8c:6f:e8:c8:f4:a4:59:de:9e: cd:31:a6:6d:58:c3:a3:d3:b2:f1:ad:23:71:a3:eb:85:ff:bb: 74:ea:8e:e1:8f:4c:7b:21:fe:a7:3a:dd:51:83:5c:9a:5a:10: 5c:88:1f:35:55:f4:8d:a9:46:fd:93:c3:cb:0c:b7:d6:33:dc: f9:cb:87:ba:23:90:0c:3a:00:e2:c9:6f:ed:e1:0d:13:f6:ed: f0:67:8f:7f:07:88:8b:0c:96:e6:28:3c:21:1e:65:32:22:c5: e8:da:aa:55:af:01:b0:a0:60:0d:fb:4e:e0:7d:c2:78:47:1d: 34:e0:a7:d1:eb:7c:fa:b0:bc:a5:9a:7c:85:c2:2c:50:61:1d: 79:b7:56:13:62:7d:bd:a0:86:7c:2e:c4:13:8f:50:c2:dc:17: 99:53:70:a8:f8:d1:86:69:8d:8b:25:76:cd:f9:ca:ae:2a:93: 1d:78:2f:86:ae:e7:02:9e:36:3c:78:52:6b:3c:67:b7:38:4e: 38:e5:ec:a5:be:2c:20:cc:8c:ce:73:25:74:de:6c:06:3d:a6: a8:e7:42:b3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9MPVyDsr4r+56gDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk OGNlYWY1YjQtODM1Yy00NmFjLWIyY2MtMjhmNGMyNDk5NTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hztartiiBiTRJKgpRqRQZwjHeeCqdKakmkL 9Ou2xyUxKPNM+gxO36KxkToYWQbeUQWUt26DpDnSDO/VTKu2oLc4GZvdn9HC7s57 r9xoSkVuLiX612uTHvRBggVVKkqQGJtlJv+TimAy6fULH5EYwsNuivE7ClQssDkJ wAeAPK5Ur2mvxKgGrozp2XDAxbEpC1spog0KtN8Ds1zx+GbHNUGRzNLQH5ZtDxq2 XEGqP4wQPPHOzKL/XchqDY4ldqn2R4pPACqsR87yOc/TI51na+/kcloMMM1gCCgg TUqS+gsbI/1ai/efyFRwdiRqHA+i1Shoa4k47o/5Vox+1tCW6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIv1PVngJsOhjYDaRzYueYGHMEvzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2E2NWE4OTMtNmJjNS0z YzhlLWEwYjQtY2UyZWM3ZDE0Yjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG7FwRoArLDWFi0eV/FkW1pawluFWdo1poCU3XlFT8VIJdjQSmkW swsmlmkUJYxv6Mj0pFnens0xpm1Yw6PTsvGtI3Gj64X/u3TqjuGPTHsh/qc63VGD XJpaEFyIHzVV9I2pRv2Tw8sMt9Yz3PnLh7ojkAw6AOLJb+3hDRP27fBnj38HiIsM luYoPCEeZTIixejaqlWvAbCgYA37TuB9wnhHHTTgp9HrfPqwvKWafIXCLFBhHXm3 VhNifb2ghnwuxBOPUMLcF5lTcKj40YZpjYslds35yq4qkx14L4au5wKeNjx4Ums8 Z7c4Tjjl7KW+LCDMjM5zJXTebAY9pqjnQrM= -----END CERTIFICATE-----Generated at Tue Oct 6 19:58:37 2026 by rpki-client