$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59d9336a-ad50-33a5-8d76-10db3db5f8af.roa File: 59d9336a-ad50-33a5-8d76-10db3db5f8af.roa (raw, json) Hash identifier: wNmXvLYaBsqwowo3DGLjiNY5sQhQTVZqdTh+jbULQN4= Subject key identifier: 64:F0:A7:83:F7:66:D9:7F:01:95:C4:FA:A3:B3:BA:E5:02:4E:1E:47 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F62931D6B65C980E367D3D8D8 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59d9336a-ad50-33a5-8d76-10db3db5f8af.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 36631 IP address blocks: 2001:500:126::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:1d:6b:65:c9:80:e3:67:d3:d8:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=05841b25-c621-4e1f-95c4-d7aa06238188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:76:25:af:0e:22:59:c1:b7:ef:68:d6:99:02: d3:a8:fa:bb:d5:64:ff:f2:25:e6:a1:f3:90:c8:11: e6:bf:09:25:aa:f2:ca:ee:60:77:81:07:6d:a4:9e: 8a:8c:78:27:8c:6f:51:5b:83:ca:8f:8f:79:c1:c9: 42:ac:10:e9:0e:c5:bb:1a:4c:16:a9:f1:8d:83:a7: 88:ea:ba:72:db:4d:29:ef:16:4d:16:67:2a:43:51: ac:ac:eb:c5:55:f9:f0:75:f1:37:d9:e9:85:dd:71: 04:ec:fc:bf:6c:3c:71:ef:eb:c6:8e:a4:10:80:22: 5c:b9:6e:94:a7:26:74:5f:39:9a:75:27:3b:26:ce: a6:4e:5c:b5:0e:73:fb:eb:f2:ad:ef:a0:b1:04:73: 81:48:89:dd:a7:63:1b:e3:f6:87:13:18:ee:b9:35: d6:be:cf:65:20:7d:6d:6d:bc:fc:48:38:32:61:17: 02:a6:30:50:7c:f2:b5:82:47:d7:95:c5:7b:f4:d5: 6d:c1:53:0a:99:50:3d:f2:95:59:8a:d2:ee:a2:c3: d8:64:00:a1:c0:7e:72:31:45:a9:06:01:2f:5e:39: bc:15:91:05:34:23:21:ff:5d:78:fe:e2:a7:32:f0: 04:c9:05:aa:bf:81:dc:25:14:b6:35:73:1e:62:ce: c9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F0:A7:83:F7:66:D9:7F:01:95:C4:FA:A3:B3:BA:E5:02:4E:1E:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59d9336a-ad50-33a5-8d76-10db3db5f8af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:be:14:ac:eb:50:83:b0:d3:d2:c0:25:6a:e2:f6:50:5b:a1: 5c:b5:65:1f:b3:b2:65:ad:64:b5:61:4e:c2:00:9f:0f:9e:12: b0:fc:44:24:f2:9a:11:84:5e:be:07:60:9a:50:f5:97:38:0b: 8f:01:fe:2e:de:e3:de:9e:17:ce:ff:d5:79:00:5f:ab:4a:1d: d8:ac:fa:c4:18:f8:51:e7:0b:8d:48:af:9b:02:27:d6:d0:d9: 99:87:2d:3e:fd:29:59:d6:03:45:fd:17:86:cc:e6:b0:37:46: 83:13:3a:f8:37:fd:0c:17:12:57:45:09:8c:45:1e:13:a8:69: f9:57:6c:9e:7b:d9:47:99:c8:8b:14:02:58:69:8c:61:26:38: a8:ca:52:99:90:3c:54:32:8a:17:71:f3:de:78:b6:30:52:e1: 90:2a:c9:3f:4e:45:74:b2:a4:fc:2a:34:ed:d5:29:c4:d5:76: 1d:b4:7e:b0:42:ef:fb:29:7b:18:56:77:9a:d9:fd:65:a9:93: 41:71:01:38:6c:4d:16:2a:e2:4e:f9:fe:1d:49:5f:e5:93:8b: 67:e0:65:05:65:d2:26:a3:58:fd:77:ca:03:6b:b9:f9:11:b1: e0:a4:50:6b:2b:9e:af:87:33:d9:21:5f:96:f7:65:de:d2:33: 99:8b:8b:f7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9ikx1rZcmA42fT2NgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MDU4NDFiMjUtYzYyMS00ZTFmLTk1YzQtZDdhYTA2MjM4MTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3Ylrw4iWcG372jWmQLTqPq71WT/8iXmofOQ yBHmvwklqvLK7mB3gQdtpJ6KjHgnjG9RW4PKj495wclCrBDpDsW7GkwWqfGNg6eI 6rpy200p7xZNFmcqQ1GsrOvFVfnwdfE32emF3XEE7Py/bDxx7+vGjqQQgCJcuW6U pyZ0XzmadSc7Js6mTly1DnP76/Kt76CxBHOBSIndp2Mb4/aHExjuuTXWvs9lIH1t bbz8SDgyYRcCpjBQfPK1gkfXlcV79NVtwVMKmVA98pVZitLuosPYZAChwH5yMUWp BgEvXjm8FZEFNCMh/114/uKnMvAEyQWqv4HcJRS2NXMeYs7J2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGTwp4P3Ztl/AZXE+qOzuuUCTh5HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTlkOTMzNmEtYWQ1MC0z M2E1LThkNzYtMTBkYjNkYjVmOGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG++FKzrUIOw09LAJWri9lBboVy1ZR+zsmWtZLVhTsIAnw+eErD8 RCTymhGEXr4HYJpQ9Zc4C48B/i7e496eF87/1XkAX6tKHdis+sQY+FHnC41Ir5sC J9bQ2ZmHLT79KVnWA0X9F4bM5rA3RoMTOvg3/QwXEldFCYxFHhOoaflXbJ572UeZ yIsUAlhpjGEmOKjKUpmQPFQyihdx8954tjBS4ZAqyT9ORXSypPwqNO3VKcTVdh20 frBC7/spexhWd5rZ/WWpk0FxAThsTRYq4k75/h1JX+WTi2fgZQVl0iajWP13ygNr ufkRseCkUGsrnq+HM9khX5b3Zd7SM5mLi/c= -----END CERTIFICATE-----Generated at Thu Oct 8 17:31:52 2026 by rpki-client