$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5738c54d-9a81-3980-b7e2-902baa33c7b4.roa File: 5738c54d-9a81-3980-b7e2-902baa33c7b4.roa (raw, json) Hash identifier: 8HrsYwK38vIvTnrnVtlXgdDUHRvOC+1myO04zu/vd38= Subject key identifier: A4:52:30:0A:B0:3A:D0:71:89:6F:94:9E:32:CA:0F:1B:FB:C7:24:9B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F62931AE999A52E204C1FF100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5738c54d-9a81-3980-b7e2-902baa33c7b4.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396616 IP address blocks: 2001:500:126::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:1a:e9:99:a5:2e:20:4c:1f:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=0d34a577-14b2-42d6-9f4b-526d7af5c5e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b0:cb:8c:90:14:eb:87:08:36:50:f1:13:23: 88:7d:d0:b4:ae:24:a0:56:50:6f:6c:9f:24:28:b0: 9e:ce:d9:48:94:bb:e1:3e:4d:d4:1b:0b:58:47:3a: 48:96:cd:6e:0a:82:b3:6d:57:48:ab:e2:1d:70:c1: 60:15:7a:de:48:d9:0f:83:ba:0e:cc:2c:ad:8a:82: 0b:98:8c:f8:3c:aa:f0:51:d9:bb:3d:78:81:d7:e7: 00:74:d4:e6:92:87:e3:c3:b6:d8:3f:73:8d:4d:a9: af:17:ee:1a:20:7e:0b:c8:8d:54:a7:50:ee:14:a7: 05:b7:c6:60:b8:a0:aa:c9:ee:06:b2:f3:cc:63:49: 36:a2:58:e4:99:6a:6c:78:20:f2:a6:b9:14:7d:52: 5a:fb:0c:30:41:73:c8:87:77:67:f8:9f:2f:fd:4b: 7f:57:2d:1a:08:2c:a7:85:04:9f:83:41:3d:d2:ad: dc:7e:72:d6:20:27:bb:24:7b:70:be:4c:57:36:f4: 96:8b:8a:dd:55:da:3c:40:04:74:4e:c2:1e:9c:c7: e8:33:11:e1:2f:5d:63:23:34:53:69:43:ec:10:eb: e9:28:e0:b8:d7:7c:41:6f:83:6b:eb:2a:6f:dd:d1: df:1e:89:18:f6:54:c3:2a:53:d8:74:16:9a:5f:7a: 9f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:52:30:0A:B0:3A:D0:71:89:6F:94:9E:32:CA:0F:1B:FB:C7:24:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5738c54d-9a81-3980-b7e2-902baa33c7b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:bd:d6:ab:16:c5:e2:37:fb:31:a4:8f:a0:aa:64:a6:c3:e8: 2c:57:bf:37:6b:37:b2:ee:2a:34:b5:5a:39:09:dc:07:4f:e1: 4d:fb:7e:6f:10:48:6a:cb:13:bc:26:f7:fa:66:b3:5a:b4:e6: 81:c3:f1:92:28:22:d1:b7:1c:23:6b:4e:bb:3a:3b:6a:6d:0d: 09:f1:70:39:ee:37:b7:9d:8f:32:61:37:11:93:8b:ab:3d:d9: 86:d7:f9:16:16:38:bf:ba:0d:ff:ad:bd:58:5a:40:d9:df:e1: fa:7a:0d:47:f0:80:e7:15:13:06:ad:c1:4d:9a:8d:2a:1d:b4: 06:cf:4b:dc:88:2f:9c:93:4c:dc:80:4b:be:d3:0d:94:f9:8a: 2d:a3:e3:24:c2:06:1b:71:64:04:07:38:18:99:2a:7e:cd:f9: 92:af:53:a2:de:81:d0:c6:c8:ad:de:0e:5d:f0:68:71:84:db: 64:1d:60:93:f6:bb:60:8b:49:29:ab:c1:40:e3:8d:cb:f1:4d: 0a:36:35:02:77:b1:02:6f:ae:02:fe:ae:e5:96:2b:ef:16:ca: ed:74:32:6a:a0:84:da:3b:c3:69:e1:91:5e:8b:b7:47:c6:5d: 84:cd:1a:f0:bc:19:2e:c2:9e:41:fe:9d:04:d9:03:f9:09:5f: 99:40:b5:ba -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9ikxrpmaUuIEwf8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MGQzNGE1NzctMTRiMi00MmQ2LTlmNGItNTI2ZDdhZjVjNWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLDLjJAU64cINlDxEyOIfdC0riSgVlBvbJ8k KLCeztlIlLvhPk3UGwtYRzpIls1uCoKzbVdIq+IdcMFgFXreSNkPg7oOzCytioIL mIz4PKrwUdm7PXiB1+cAdNTmkofjw7bYP3ONTamvF+4aIH4LyI1Up1DuFKcFt8Zg uKCqye4GsvPMY0k2oljkmWpseCDyprkUfVJa+wwwQXPIh3dn+J8v/Ut/Vy0aCCyn hQSfg0E90q3cfnLWICe7JHtwvkxXNvSWi4rdVdo8QAR0TsIenMfoMxHhL11jIzRT aUPsEOvpKOC413xBb4Nr6ypv3dHfHokY9lTDKlPYdBaaX3qfywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKRSMAqwOtBxiW+UnjLKDxv7xySbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTczOGM1NGQtOWE4MS0z OTgwLWI3ZTItOTAyYmFhMzNjN2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAK91qsWxeI3+zGkj6CqZKbD6CxXvzdrN7LuKjS1WjkJ3AdP4U37 fm8QSGrLE7wm9/pms1q05oHD8ZIoItG3HCNrTrs6O2ptDQnxcDnuN7edjzJhNxGT i6s92YbX+RYWOL+6Df+tvVhaQNnf4fp6DUfwgOcVEwatwU2ajSodtAbPS9yIL5yT TNyAS77TDZT5ii2j4yTCBhtxZAQHOBiZKn7N+ZKvU6LegdDGyK3eDl3waHGE22Qd YJP2u2CLSSmrwUDjjcvxTQo2NQJ3sQJvrgL+ruWWK+8Wyu10MmqghNo7w2nhkV6L t0fGXYTNGvC8GS7CnkH+nQTZA/kJX5lAtbo= -----END CERTIFICATE-----Generated at Tue Oct 6 15:10:14 2026 by rpki-client