$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43b5e404-da95-3f85-b39f-2ae8c85ebeb6.roa File: 43b5e404-da95-3f85-b39f-2ae8c85ebeb6.roa (raw, json) Hash identifier: K7OLOrOGoQTZrYXMpC6bmwoWT3Pud8RsOU383lObM3Q= Subject key identifier: 43:89:90:2B:42:BD:A4:DF:E1:E6:62:92:FC:F6:5B:6F:11:3D:31:BA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4C3D41A470A3ED6A257C2380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43b5e404-da95-3f85-b39f-2ae8c85ebeb6.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 397203 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:41:a4:70:a3:ed:6a:25:7c:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=82b9bda2-11b6-4bea-bdeb-1eabb2f9dd97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0f:e0:6c:e2:57:66:fa:0d:5f:8d:aa:3e:df: d7:d0:75:a3:29:15:48:b9:3e:60:e7:a6:e6:e9:b9: f6:c8:20:ed:c1:14:00:64:20:4b:15:1d:90:5b:0f: 8a:00:89:c3:77:1c:bc:bc:33:87:2f:46:3e:53:03: 7e:ba:70:9e:bb:a3:b1:b9:83:a2:b6:70:46:6b:5b: cd:82:56:54:09:fa:c8:ca:ef:fd:ce:4f:f4:38:12: 56:f1:97:c1:72:dc:1b:47:15:d7:f6:7f:a4:f6:5c: cb:5d:1c:c6:1a:06:09:bf:b1:6e:6e:12:09:17:5f: 9b:c9:cf:63:bd:33:da:df:3a:48:6b:ac:01:6d:83: 4b:44:7c:99:33:dd:15:a6:1b:70:ae:a4:ba:d6:d0: 75:7d:0c:21:c6:39:dd:35:8d:0e:d9:8a:52:f4:8e: de:72:de:44:d1:f4:b9:a8:db:20:92:27:fd:c0:14: 23:9b:0a:5c:5d:b4:20:50:7e:c3:c4:60:d6:d6:02: 47:fd:6d:3c:dc:21:c4:f0:e7:b3:47:90:9b:7e:53: 79:78:41:38:7e:2f:01:49:22:17:68:8b:33:c1:9b: f9:36:6b:68:48:19:e0:a0:a3:c7:ed:55:09:4e:d9: c0:46:b7:f9:ac:f0:c6:e2:47:d4:1e:01:cd:90:2f: c9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:89:90:2B:42:BD:A4:DF:E1:E6:62:92:FC:F6:5B:6F:11:3D:31:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43b5e404-da95-3f85-b39f-2ae8c85ebeb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:64:1b:8d:01:60:95:40:e5:d3:96:71:31:d0:96:4b:21:a7: 21:d6:b1:0d:a3:ad:8d:e3:c7:a6:74:30:79:80:8f:18:1d:4c: c9:e4:61:cd:23:81:d0:08:e0:ab:1e:ca:69:f3:fa:05:55:a7: c4:e8:53:5d:26:f1:1f:0c:ea:58:59:21:bb:bb:08:ea:19:a3: e4:75:9b:79:42:da:14:28:41:5d:d2:37:25:aa:f0:56:e3:ef: 1e:f8:9f:a8:fb:8f:ba:f9:41:a2:fc:90:54:15:27:3e:d6:be: 8f:ed:4c:dd:70:96:1a:fe:de:fa:be:54:12:33:00:77:e2:77: 52:84:05:ef:87:9e:8b:4d:9a:65:02:74:1b:da:bd:f3:da:50: 77:c8:50:f1:59:59:dd:82:e9:16:12:92:f8:8b:06:d5:b4:64: 35:35:eb:d1:71:4e:67:57:8e:a4:46:b8:a3:e2:e4:e9:c5:80: 7f:b4:49:cf:5f:ff:c4:1a:6b:5b:62:96:bc:52:58:8c:de:39: 4b:77:8d:32:2b:96:0f:8b:fc:4f:d5:79:34:87:68:bd:fc:33: ed:ff:84:72:bf:fa:45:e2:fe:67:67:df:6a:d3:6b:ae:7d:ef: 58:f1:bf:c5:55:5b:22:73:95:27:1f:b0:a9:1a:2e:8c:38:2d: 06:a4:cb:fd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9MPUGkcKPtaiV8I4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ODJiOWJkYTItMTFiNi00YmVhLWJkZWItMWVhYmIyZjlkZDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2A/gbOJXZvoNX42qPt/X0HWjKRVIuT5g56bm 6bn2yCDtwRQAZCBLFR2QWw+KAInDdxy8vDOHL0Y+UwN+unCeu6OxuYOitnBGa1vN glZUCfrIyu/9zk/0OBJW8ZfBctwbRxXX9n+k9lzLXRzGGgYJv7FubhIJF1+byc9j vTPa3zpIa6wBbYNLRHyZM90VphtwrqS61tB1fQwhxjndNY0O2YpS9I7ect5E0fS5 qNsgkif9wBQjmwpcXbQgUH7DxGDW1gJH/W083CHE8OezR5CbflN5eEE4fi8BSSIX aIszwZv5NmtoSBngoKPH7VUJTtnARrf5rPDG4kfUHgHNkC/JUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEOJkCtCvaTf4eZikvz2W28RPTG6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDNiNWU0MDQtZGE5NS0z Zjg1LWIzOWYtMmFlOGM4NWViZWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL9kG40BYJVA5dOWcTHQlkshpyHWsQ2jrY3jx6Z0MHmAjxgdTMnk Yc0jgdAI4Kseymnz+gVVp8ToU10m8R8M6lhZIbu7COoZo+R1m3lC2hQoQV3SNyWq 8Fbj7x74n6j7j7r5QaL8kFQVJz7Wvo/tTN1wlhr+3vq+VBIzAHfid1KEBe+HnotN mmUCdBvavfPaUHfIUPFZWd2C6RYSkviLBtW0ZDU169FxTmdXjqRGuKPi5OnFgH+0 Sc9f/8Qaa1tilrxSWIzeOUt3jTIrlg+L/E/VeTSHaL38M+3/hHK/+kXi/mdn32rT a65971jxv8VVWyJzlScfsKkaLow4LQaky/0= -----END CERTIFICATE-----Generated at Sat Oct 10 10:57:17 2026 by rpki-client