$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d2338775-ff9c-351a-854f-28a365de185e.roa File: d2338775-ff9c-351a-854f-28a365de185e.roa (raw, json) Hash identifier: +OUZfLzUGCRWrDRD8eCM8NtIiqFywPzBGwLku3wto3w= Subject key identifier: D3:46:71:D7:EC:E1:14:85:60:6E:A2:25:57:BC:DC:6B:E2:5E:AB:AF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F6293125EBBC14099F6D59F00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d2338775-ff9c-351a-854f-28a365de185e.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 20431 IP address blocks: 2001:500:126::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:12:5e:bb:c1:40:99:f6:d5:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=eaaf6df7-dee9-4699-90d4-1cd2b64b992d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cf:15:dc:f7:bf:46:e4:e6:c1:e3:61:b0:28: 75:09:82:72:30:55:9a:37:1a:8b:d9:45:1d:67:1d: 8d:12:2a:db:e9:bd:7e:1f:25:e4:3b:68:83:eb:fc: 67:fc:75:f4:3d:a0:81:e3:2d:db:50:77:13:72:9d: 55:2b:c6:6e:10:41:28:17:24:5d:b5:5c:e1:0f:63: 84:e1:5d:cd:86:59:90:af:c4:f3:d1:67:04:1f:bf: df:40:f9:c0:42:52:91:f7:38:2b:48:ae:53:a9:81: 76:58:44:2c:56:b4:3c:5c:33:96:13:b7:20:f6:51: 63:c5:67:cb:dc:74:7b:dc:19:51:1e:da:1c:dc:5e: a4:07:f3:62:b3:51:8c:11:77:7b:34:0b:8f:dd:ef: 85:d5:49:45:3d:c7:3e:e2:d3:f7:ff:88:67:31:e3: 00:80:4f:26:2c:d3:b1:71:37:27:ac:f9:a3:28:e3: 6d:72:42:3e:99:d6:8c:25:ab:22:cf:23:82:63:5a: e6:7e:38:5d:6a:78:15:6a:8e:2c:e9:b8:10:ae:94: a6:07:7b:bd:34:e7:ad:f0:e9:f4:08:37:9d:43:f6: 27:06:e9:68:b2:3e:f8:85:f7:a6:20:1b:32:48:f6: 82:af:f6:b7:8d:ad:6e:96:f1:7c:b4:55:fe:73:b2: 29:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:46:71:D7:EC:E1:14:85:60:6E:A2:25:57:BC:DC:6B:E2:5E:AB:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d2338775-ff9c-351a-854f-28a365de185e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:86:e4:6c:a1:c4:d7:60:7b:a8:bb:70:63:ea:b1:4d:89:cd: 1f:a5:5d:c1:1c:cf:19:5c:38:62:22:06:73:da:25:6f:cd:9a: ef:8b:46:56:8a:44:34:93:c8:11:5e:46:ab:71:5e:ce:83:02: bb:0f:bd:ed:14:63:f0:11:7b:2a:7d:e7:c6:19:49:fe:48:6f: 84:99:f5:2e:0e:82:c5:d7:f2:fe:ae:1d:e1:06:e6:48:fc:f3: a0:82:45:51:f9:f3:08:22:62:27:b8:7b:33:f2:7d:45:cb:65: 14:c2:59:c8:60:40:1c:b2:a0:14:fc:d9:0e:41:71:8a:43:a3: 79:f7:f4:39:77:14:00:e6:2b:28:e6:b3:5e:ab:a0:eb:69:53: 51:fd:e3:7f:90:35:01:2e:a7:ea:22:30:28:21:5f:3d:85:1b: d6:91:17:5c:d1:82:50:41:01:8b:e1:0b:3d:4d:56:6d:dd:b3: 0e:35:76:cc:a6:4e:77:7c:44:61:23:f2:5b:5f:79:16:2b:27: bd:56:70:c4:2c:22:08:1d:ad:47:82:8a:b4:7b:3f:09:38:b1: 6c:16:73:f6:7c:41:3b:5d:99:90:07:c5:40:3f:bd:f3:0c:c8: 01:73:b3:f8:9b:f8:06:b7:af:46:32:2a:fc:db:a3:2d:8e:ee: aa:0b:f7:18 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9ikxJeu8FAmfbVnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZWFhZjZkZjctZGVlOS00Njk5LTkwZDQtMWNkMmI2NGI5OTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo88V3Pe/RuTmweNhsCh1CYJyMFWaNxqL2UUd Zx2NEirb6b1+HyXkO2iD6/xn/HX0PaCB4y3bUHcTcp1VK8ZuEEEoFyRdtVzhD2OE 4V3NhlmQr8Tz0WcEH7/fQPnAQlKR9zgrSK5TqYF2WEQsVrQ8XDOWE7cg9lFjxWfL 3HR73BlRHtoc3F6kB/Nis1GMEXd7NAuP3e+F1UlFPcc+4tP3/4hnMeMAgE8mLNOx cTcnrPmjKONtckI+mdaMJasizyOCY1rmfjhdangVao4s6bgQrpSmB3u9NOet8On0 CDedQ/YnBulosj74hfemIBsySPaCr/a3ja1ulvF8tFX+c7IpTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNNGcdfs4RSFYG6iJVe83GviXquvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDIzMzg3NzUtZmY5Yy0z NTFhLTg1NGYtMjhhMzY1ZGUxODVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKGG5GyhxNdge6i7cGPqsU2JzR+lXcEczxlcOGIiBnPaJW/Nmu+L RlaKRDSTyBFeRqtxXs6DArsPve0UY/AReyp958YZSf5Ib4SZ9S4OgsXX8v6uHeEG 5kj886CCRVH58wgiYie4ezPyfUXLZRTCWchgQByyoBT82Q5BcYpDo3n39Dl3FADm Kyjms16roOtpU1H943+QNQEup+oiMCghXz2FG9aRF1zRglBBAYvhCz1NVm3dsw41 dsymTnd8RGEj8ltfeRYrJ71WcMQsIggdrUeCirR7Pwk4sWwWc/Z8QTtdmZAHxUA/ vfMMyAFzs/ib+Aa3r0YyKvzboy2O7qoL9xg= -----END CERTIFICATE-----Generated at Tue Oct 6 22:10:51 2026 by rpki-client