$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b20df32c-7816-3e41-bf02-fd513a7ac378.roa File: b20df32c-7816-3e41-bf02-fd513a7ac378.roa (raw, json) Hash identifier: E1moZksUt1uRkKSTxzS4nKnGqZ5Uc//uAJdCvIBw+Q4= Subject key identifier: E9:FB:88:E6:61:54:02:02:8F:4F:29:0A:84:F9:3C:B5:52:ED:2C:0C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F6292C4C56CEAB68696847FC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b20df32c-7816-3e41-bf02-fd513a7ac378.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 36624 IP address blocks: 2001:500:126::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:c4:c5:6c:ea:b6:86:96:84:7f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=c46a7cb6-74d1-4ea1-8beb-3113abb79ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:be:4e:49:d9:62:fc:46:ba:3e:99:62:25:e8: 41:a1:59:21:6f:60:e6:d6:8f:56:d3:67:b5:56:51: 4e:6c:fd:2f:39:cc:45:3a:03:2a:bc:ad:82:c7:a8: e1:af:b1:4c:fb:fc:87:69:6b:a8:84:35:4a:a8:f5: 2a:d3:d3:97:99:98:1a:0c:d6:01:1a:35:0e:48:e3: f4:67:53:bd:2e:cf:a6:97:2a:c9:0b:ac:c2:95:63: 71:7c:88:56:46:3b:54:59:5b:a1:c7:c8:1b:34:85: 4b:cf:e8:ce:66:c5:cd:1c:d9:90:94:ea:0e:bd:93: 45:8a:fa:c3:c7:06:0b:ef:4f:61:13:6d:5d:42:8d: 3b:e6:81:d4:a7:76:d4:a2:0d:51:26:e4:3c:dc:ce: 98:e1:73:9b:7a:a2:9c:d7:6e:be:30:40:8d:6a:34: 4c:5d:ca:c9:11:44:16:b3:76:91:f4:87:9f:04:da: 23:58:4b:2f:1b:eb:1b:d0:c6:ce:9a:35:e3:77:d9: 20:72:ba:39:3c:4e:06:bb:23:34:ad:c3:c3:92:e1: 81:43:21:22:94:b9:ad:c0:46:7f:a1:86:15:94:0a: 41:57:1c:4e:ea:71:47:dd:9b:38:2d:d9:e6:05:91: 0a:50:70:79:92:86:b9:67:85:ca:02:e6:9a:ce:eb: ba:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:FB:88:E6:61:54:02:02:8F:4F:29:0A:84:F9:3C:B5:52:ED:2C:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b20df32c-7816-3e41-bf02-fd513a7ac378.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:5c:36:9a:4c:dc:db:c9:50:34:e3:b7:ff:d5:31:e9:41:e8: 83:91:3e:6c:93:79:60:2e:d5:d2:47:70:6d:e8:4d:a1:35:ff: e0:17:0b:b3:f6:cc:00:31:93:e8:d7:65:c3:5e:cd:78:b8:7f: 1a:16:62:bb:eb:38:49:51:8f:59:fc:6f:11:ec:08:d8:f4:6d: 01:56:f6:9f:6a:46:3c:78:2f:da:ab:bf:ad:4c:a8:e4:31:19: c2:ce:54:41:c6:e8:13:d0:1f:a6:4c:cf:19:c3:2b:81:a2:ee: 1b:c8:91:41:64:46:21:51:7c:94:4b:22:02:86:a6:70:2a:03: 3f:b7:a6:bf:fd:77:35:29:82:81:0c:33:9b:31:19:ba:0f:a4: 48:77:c4:4f:c9:80:1b:7b:48:ad:e1:80:14:b6:81:0d:1d:3c: 02:b5:4a:47:cc:be:6f:03:d0:ce:5a:7c:f6:d2:43:ab:0c:7f: fb:bf:c8:b8:91:b8:ff:76:46:6d:b3:f9:db:dc:1e:a7:a6:d3: b8:48:56:65:a5:77:eb:21:89:4f:1e:39:f3:d7:95:c6:23:77: e2:5e:59:fb:6d:3b:f5:5c:6a:43:47:f9:f6:d1:39:b0:e5:0d: 14:49:ab:41:3b:42:40:9a:b0:b3:26:e4:4d:6e:a9:1b:57:5f: 80:12:b7:eb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9iksTFbOq2hpaEf8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk YzQ2YTdjYjYtNzRkMS00ZWExLThiZWItMzExM2FiYjc5ZWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhb5OSdli/Ea6PpliJehBoVkhb2Dm1o9W02e1 VlFObP0vOcxFOgMqvK2Cx6jhr7FM+/yHaWuohDVKqPUq09OXmZgaDNYBGjUOSOP0 Z1O9Ls+mlyrJC6zClWNxfIhWRjtUWVuhx8gbNIVLz+jOZsXNHNmQlOoOvZNFivrD xwYL709hE21dQo075oHUp3bUog1RJuQ83M6Y4XObeqKc126+MECNajRMXcrJEUQW s3aR9IefBNojWEsvG+sb0MbOmjXjd9kgcro5PE4GuyM0rcPDkuGBQyEilLmtwEZ/ oYYVlApBVxxO6nFH3Zs4LdnmBZEKUHB5koa5Z4XKAuaazuu6gwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOn7iOZhVAICj08pCoT5PLVS7SwMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjIwZGYzMmMtNzgxNi0z ZTQxLWJmMDItZmQ1MTNhN2FjMzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHlcNppM3NvJUDTjt//VMelB6IORPmyTeWAu1dJHcG3oTaE1/+AX C7P2zAAxk+jXZcNezXi4fxoWYrvrOElRj1n8bxHsCNj0bQFW9p9qRjx4L9qrv61M qOQxGcLOVEHG6BPQH6ZMzxnDK4Gi7hvIkUFkRiFRfJRLIgKGpnAqAz+3pr/9dzUp goEMM5sxGboPpEh3xE/JgBt7SK3hgBS2gQ0dPAK1SkfMvm8D0M5afPbSQ6sMf/u/ yLiRuP92Rm2z+dvcHqem07hIVmWld+shiU8eOfPXlcYjd+JeWfttO/VcakNH+fbR ObDlDRRJq0E7QkCasLMm5E1uqRtXX4ASt+s= -----END CERTIFICATE-----Generated at Wed Oct 7 19:29:56 2026 by rpki-client