$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40ccf301-70e5-3fa9-9c76-a0f9bc0264b6.roa File: 40ccf301-70e5-3fa9-9c76-a0f9bc0264b6.roa (raw, json) Hash identifier: zzDWr+/023ZgPnnhfHio4Qb5QQihycUI0qXjWi07arA= Subject key identifier: 03:72:97:8B:72:BA:98:08:C7:0F:A3:B3:4C:95:F1:32:32:9E:EC:0F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4C3D60FD22C10739675C6340 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40ccf301-70e5-3fa9-9c76-a0f9bc0264b6.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 396586 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:60:fd:22:c1:07:39:67:5c:63:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=e31ec72a-e7ec-474e-ac80-5540f9f591e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:67:e7:7b:db:11:c9:21:8b:66:29:fa:aa:d8: 29:b7:41:0d:57:ad:6b:25:be:1a:46:5b:08:b4:b8: d2:80:9c:db:c0:e4:1f:e3:7a:16:84:0f:ca:a1:43: df:cc:77:76:aa:ee:93:bf:2c:e2:f0:9c:01:e7:94: da:d7:7b:fb:7a:3a:52:63:c4:b4:be:bd:c6:2a:07: 54:db:3b:3d:4e:8f:3b:6a:d3:7a:be:65:15:da:5d: c4:a7:ce:31:3b:6e:bd:57:2a:ad:f3:7f:55:b2:68: fd:47:e7:f1:ec:10:0a:70:16:f2:e3:7e:13:28:b5: 88:56:b2:d8:2d:46:06:70:d3:c2:e3:9f:f8:90:15: c6:24:8e:4f:11:b3:c8:7c:36:3e:37:bd:d7:50:dd: ab:eb:ae:67:67:92:6e:1f:e5:32:c8:2e:5a:b8:68: d9:b8:bc:7c:0f:54:04:84:67:9a:b1:32:42:eb:dc: aa:20:bc:ce:16:bd:53:0b:83:9c:a0:65:07:10:2d: 40:9f:74:7e:66:23:d0:73:d5:aa:52:3e:2c:7c:0a: 4a:1b:f1:dd:0c:81:d9:57:66:bf:d8:36:bf:84:49: fb:ea:75:f8:f8:8c:12:26:34:fa:be:e9:c1:1b:18: 0e:43:d4:37:00:a7:32:6e:2a:00:b0:d2:7d:6f:aa: 69:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:72:97:8B:72:BA:98:08:C7:0F:A3:B3:4C:95:F1:32:32:9E:EC:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40ccf301-70e5-3fa9-9c76-a0f9bc0264b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:76:b6:4f:13:5d:60:a1:46:0d:43:f5:12:79:57:e6:13:c5: 13:07:74:e1:c6:48:dd:3b:d5:7e:f5:44:d1:6e:83:98:62:d0: b4:94:d1:58:cb:e1:26:66:0d:50:6c:0a:68:5f:38:51:dc:fb: 90:99:8a:67:38:4d:87:db:bb:fd:e8:a4:29:30:a7:c5:50:10: 1d:f2:32:3c:b9:71:a2:36:8d:bb:2d:3f:6a:a4:ad:55:d8:c7: e7:5e:28:7c:81:4c:da:c4:49:76:9f:76:de:e3:d1:4c:8a:38: f3:27:a0:1c:34:20:7d:51:aa:33:57:24:df:32:9d:14:12:51: 90:f4:33:ca:05:5f:51:a5:74:5b:2b:37:a6:ad:1b:35:29:df: bb:6b:e4:c4:01:36:ed:8d:4f:01:16:3f:95:3f:cd:88:6b:b4: 8b:46:c7:da:d4:40:7f:ee:8b:77:fb:5b:d4:36:db:08:29:04: 98:17:d4:50:34:fc:c5:15:83:32:a5:dd:fc:4c:a0:57:8a:e8: e5:64:a6:70:27:65:df:b4:2a:b4:aa:bf:db:46:95:a2:c7:9e: fe:0d:b0:96:c4:43:85:02:81:b9:27:ea:9e:cb:8d:75:ac:f6: 76:85:83:b8:54:18:1e:26:cd:81:db:70:23:3c:7c:50:ae:ae: 8a:be:d2:9f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9MPWD9IsEHOWdcY0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZTMxZWM3MmEtZTdlYy00NzRlLWFjODAtNTU0MGY5ZjU5MWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmfne9sRySGLZin6qtgpt0ENV61rJb4aRlsI tLjSgJzbwOQf43oWhA/KoUPfzHd2qu6Tvyzi8JwB55Ta13v7ejpSY8S0vr3GKgdU 2zs9To87atN6vmUV2l3Ep84xO269Vyqt839Vsmj9R+fx7BAKcBby434TKLWIVrLY LUYGcNPC45/4kBXGJI5PEbPIfDY+N73XUN2r665nZ5JuH+UyyC5auGjZuLx8D1QE hGeasTJC69yqILzOFr1TC4OcoGUHEC1An3R+ZiPQc9WqUj4sfApKG/HdDIHZV2a/ 2Da/hEn76nX4+IwSJjT6vunBGxgOQ9Q3AKcybioAsNJ9b6ppHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFANyl4tyupgIxw+js0yV8TIynuwPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDBjY2YzMDEtNzBlNS0z ZmE5LTljNzYtYTBmOWJjMDI2NGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACN2tk8TXWChRg1D9RJ5V+YTxRMHdOHGSN071X71RNFug5hi0LSU 0VjL4SZmDVBsCmhfOFHc+5CZimc4TYfbu/3opCkwp8VQEB3yMjy5caI2jbstP2qk rVXYx+deKHyBTNrESXafdt7j0UyKOPMnoBw0IH1RqjNXJN8ynRQSUZD0M8oFX1Gl dFsrN6atGzUp37tr5MQBNu2NTwEWP5U/zYhrtItGx9rUQH/ui3f7W9Q22wgpBJgX 1FA0/MUVgzKl3fxMoFeK6OVkpnAnZd+0KrSqv9tGlaLHnv4NsJbEQ4UCgbkn6p7L jXWs9naFg7hUGB4mzYHbcCM8fFCuroq+0p8= -----END CERTIFICATE-----Generated at Tue Oct 6 20:04:28 2026 by rpki-client