$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a024df37-caf2-316a-905a-bdeae9fc90f3.roa File: a024df37-caf2-316a-905a-bdeae9fc90f3.roa (raw, json) Hash identifier: +OLg1k+qlwQFxhK4RhJ4cuFZL3ZPkrVRoYmqPB695mE= Subject key identifier: A3:D4:8F:7D:07:94:B3:AD:CF:B0:FC:35:1E:1D:18:6F:35:E5:C5:EC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F62930E769361905BB2EDD180 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a024df37-caf2-316a-905a-bdeae9fc90f3.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396596 IP address blocks: 2001:500:126::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:0e:76:93:61:90:5b:b2:ed:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=b1169cc6-f868-4722-ab87-50d935b9145b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:75:3d:9e:e6:b6:2c:43:7b:3d:cd:7c:bd:8f: b9:82:83:a8:1c:a4:47:1c:46:21:b9:e2:40:f2:00: 2c:56:60:60:2d:1e:21:38:3c:e1:28:8f:05:2a:85: bb:f0:9b:cf:5d:f9:07:55:91:6d:0a:02:90:b5:5f: 38:4f:bb:ae:f0:37:96:1d:40:f3:c6:23:6e:c2:17: 4f:5c:fb:75:9d:4c:d7:1e:0a:96:61:b8:66:e2:0a: 68:b2:b8:d1:a3:04:a8:bd:12:f5:8d:91:a2:0b:f3: a6:9c:c7:11:12:93:80:0f:05:09:92:59:03:b4:38: 21:a1:d6:44:a8:a6:79:44:7d:df:1b:8c:e2:d3:45: 4b:f6:4d:f8:a0:56:e0:d4:a5:64:c9:76:af:de:0d: b0:69:af:ca:59:f0:84:6a:67:9e:26:ec:9b:c1:2d: 47:6c:45:ca:f8:02:9b:40:56:43:5f:9b:62:73:d5: 19:64:28:25:f2:5c:ea:04:23:91:53:18:3b:96:a9: 8b:08:1b:91:a4:39:5e:f9:da:4d:7a:1a:80:4e:e5: 51:de:74:c5:38:2e:f9:5d:42:fa:e1:d3:29:d4:b9: 79:c9:63:85:a0:51:a7:b8:65:b1:62:9c:2f:14:b8: 37:ef:ae:96:f9:fa:d0:9e:6a:98:d9:e2:0f:09:41: d2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D4:8F:7D:07:94:B3:AD:CF:B0:FC:35:1E:1D:18:6F:35:E5:C5:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a024df37-caf2-316a-905a-bdeae9fc90f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:1b:32:f5:80:e2:fa:49:29:25:bb:d4:48:7d:df:5a:2e:6c: 3c:90:17:82:2a:89:58:da:8e:62:48:5d:27:99:6e:bd:4f:9a: cd:31:f8:53:69:74:5b:cd:8a:4a:f8:ae:35:5f:4a:c7:08:0b: 82:ea:fc:7c:38:85:41:a3:76:c6:84:67:c0:3b:99:1c:63:81: d6:81:1d:c6:b1:34:dc:41:33:d7:16:f0:52:00:c5:89:08:dd: 01:a2:73:b7:78:17:0f:7b:12:9e:73:6e:d7:f6:70:af:18:cd: 13:3b:68:d1:06:d4:d8:63:c3:31:79:2a:24:94:aa:e6:cc:7f: d8:df:4d:6e:fc:9b:72:5b:db:16:27:7d:87:66:93:a8:e7:70: 04:5b:be:66:0d:8f:14:95:67:63:be:fc:ce:e3:1d:69:da:d2: c7:f5:16:a8:e6:85:a7:3a:83:f3:7d:03:73:32:2e:95:ad:fe: 1d:98:60:aa:fb:0c:38:16:6b:af:ba:62:e5:2f:b6:c3:bc:be: 8f:d6:fb:bc:49:86:d6:ae:50:37:36:16:c9:68:25:26:34:10: c0:bb:15:43:2b:da:4a:00:28:34:46:ac:16:b1:ad:63:30:14: 16:33:b3:3b:4f:93:90:bf:91:b3:04:f0:49:ad:82:00:c4:e4: fc:b9:b8:ed -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9ikw52k2GQW7Lt0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk YjExNjljYzYtZjg2OC00NzIyLWFiODctNTBkOTM1YjkxNDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3U9nua2LEN7Pc18vY+5goOoHKRHHEYhueJA 8gAsVmBgLR4hODzhKI8FKoW78JvPXfkHVZFtCgKQtV84T7uu8DeWHUDzxiNuwhdP XPt1nUzXHgqWYbhm4gposrjRowSovRL1jZGiC/OmnMcREpOADwUJklkDtDghodZE qKZ5RH3fG4zi00VL9k34oFbg1KVkyXav3g2waa/KWfCEameeJuybwS1HbEXK+AKb QFZDX5tic9UZZCgl8lzqBCORUxg7lqmLCBuRpDle+dpNehqATuVR3nTFOC75XUL6 4dMp1Ll5yWOFoFGnuGWxYpwvFLg3766W+frQnmqY2eIPCUHSGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKPUj30HlLOtz7D8NR4dGG815cXsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTAyNGRmMzctY2FmMi0z MTZhLTkwNWEtYmRlYWU5ZmM5MGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI8bMvWA4vpJKSW71Eh931oubDyQF4IqiVjajmJIXSeZbr1Pms0x +FNpdFvNikr4rjVfSscIC4Lq/Hw4hUGjdsaEZ8A7mRxjgdaBHcaxNNxBM9cW8FIA xYkI3QGic7d4Fw97Ep5zbtf2cK8YzRM7aNEG1NhjwzF5KiSUqubMf9jfTW78m3Jb 2xYnfYdmk6jncARbvmYNjxSVZ2O+/M7jHWna0sf1Fqjmhac6g/N9A3MyLpWt/h2Y YKr7DDgWa6+6YuUvtsO8vo/W+7xJhtauUDc2FsloJSY0EMC7FUMr2koAKDRGrBax rWMwFBYzsztPk5C/kbME8EmtggDE5Py5uO0= -----END CERTIFICATE-----Generated at Thu Oct 8 05:17:56 2026 by rpki-client