$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d960559c-36e7-3a1e-aa64-f736c01512f8.roa File: d960559c-36e7-3a1e-aa64-f736c01512f8.roa (raw, json) Hash identifier: NGoNb5+4W3qZ81c2fuxMNhBVEvCm4rETroc0oJVggV8= Subject key identifier: 04:65:B8:6D:1E:AF:4E:CC:06:22:84:A6:A0:ED:C6:47:FF:EF:87:BF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F498A62ADD1928C05C530BF80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d960559c-36e7-3a1e-aa64-f736c01512f8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396594 IP address blocks: 2001:500:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:62:ad:d1:92:8c:05:c5:30:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=78df17b6-c40f-4c9d-8d84-85d36d484c5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8a:24:1b:87:dd:93:0d:19:94:c6:7f:3c:73: b8:f8:8d:79:61:38:73:f9:38:3a:5d:e4:45:02:e0: e2:ee:f5:c9:e8:d6:51:39:63:15:8d:a5:74:57:d4: 9b:ee:a8:3d:01:25:65:55:0f:9d:c5:b0:18:ae:90: bd:4b:4a:ec:8a:2a:6d:ec:60:bf:89:ff:b6:ab:ee: 59:b6:03:6d:d4:85:c3:cf:f7:33:ac:d1:9f:8f:6e: 2c:9e:d4:83:c0:46:7b:dc:71:f4:f8:42:6e:35:ff: 64:a6:b3:8c:f0:c8:c0:fc:85:4c:fc:ff:68:8c:b4: 6a:85:83:1b:d6:4e:f2:73:ac:ce:0a:83:22:34:96: f5:ff:82:2d:62:39:eb:59:d4:cf:fd:c9:6c:45:71: 16:87:fc:b2:21:3a:11:a8:63:74:62:c7:c3:94:01: e2:59:27:55:50:10:ae:a4:3e:04:5b:d4:85:07:27: 3e:4b:17:43:cc:ab:c1:73:9a:ad:11:72:31:f0:1a: e1:0a:e7:95:68:9f:66:e4:c3:dd:e1:d6:43:76:d9: c5:ad:a0:47:80:4e:7d:08:48:da:d1:86:82:65:5d: 03:0d:d4:57:c7:73:c3:0c:c0:0e:98:78:43:4f:e4: 69:59:27:25:fc:7c:56:87:41:85:5f:40:d3:c1:e0: 5f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:65:B8:6D:1E:AF:4E:CC:06:22:84:A6:A0:ED:C6:47:FF:EF:87:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d960559c-36e7-3a1e-aa64-f736c01512f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:29:92:43:7f:0b:e4:78:22:fb:ad:7b:41:71:4f:cd:f4:da: 5b:45:91:29:98:e4:58:6e:a5:9d:f1:ec:8e:26:68:7c:d8:aa: 7a:e6:51:7b:7a:55:db:ea:3e:a3:42:f9:5c:d4:2f:79:06:fb: 0f:f6:02:c1:b3:a4:6a:51:8f:26:dd:5b:bd:7a:95:3a:3b:37: 7a:8a:28:6d:55:15:06:c7:ba:3a:32:35:bb:0c:89:8f:4d:41: d1:b2:94:45:80:da:07:cd:e2:6f:1f:f2:04:a7:08:bf:5a:5f: 62:26:f0:d2:6d:63:7a:0c:fc:cf:69:43:80:fe:dd:df:35:2b: 9d:87:63:66:32:c6:0d:96:8c:ea:36:6d:f1:b6:69:39:fd:23: be:32:73:96:75:28:ca:12:d7:e6:53:51:e1:b9:4b:08:62:58: da:e5:b2:d1:41:cd:6c:e5:dc:33:c6:05:9d:57:0e:32:90:6f: 27:49:98:57:02:cc:0f:04:bd:c4:e1:e3:a0:b7:83:31:b0:7a: 30:0a:f4:9c:06:80:cc:e1:28:e8:a1:f7:b4:7f:91:79:5d:6b: c5:9a:4a:0e:dd:4c:68:07:b7:e0:5e:53:d7:73:bd:67:69:6c: 92:c9:44:51:fc:07:7d:67:b1:36:84:61:70:60:ca:3f:91:8d: cc:87:7d:e8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JimKt0ZKMBcUwv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzhkZjE3YjYtYzQwZi00YzlkLThkODQtODVkMzZkNDg0YzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYokG4fdkw0ZlMZ/PHO4+I15YThz+Tg6XeRF AuDi7vXJ6NZROWMVjaV0V9Sb7qg9ASVlVQ+dxbAYrpC9S0rsiipt7GC/if+2q+5Z tgNt1IXDz/czrNGfj24sntSDwEZ73HH0+EJuNf9kprOM8MjA/IVM/P9ojLRqhYMb 1k7yc6zOCoMiNJb1/4ItYjnrWdTP/clsRXEWh/yyIToRqGN0YsfDlAHiWSdVUBCu pD4EW9SFByc+SxdDzKvBc5qtEXIx8BrhCueVaJ9m5MPd4dZDdtnFraBHgE59CEja 0YaCZV0DDdRXx3PDDMAOmHhDT+RpWScl/HxWh0GFX0DTweBfJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFARluG0er07MBiKEpqDtxkf/74e/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDk2MDU1OWMtMzZlNy0z YTFlLWFhNjQtZjczNmMwMTUxMmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADwpkkN/C+R4Ivute0FxT8302ltFkSmY5FhupZ3x7I4maHzYqnrm UXt6VdvqPqNC+VzUL3kG+w/2AsGzpGpRjybdW716lTo7N3qKKG1VFQbHujoyNbsM iY9NQdGylEWA2gfN4m8f8gSnCL9aX2Im8NJtY3oM/M9pQ4D+3d81K52HY2Yyxg2W jOo2bfG2aTn9I74yc5Z1KMoS1+ZTUeG5SwhiWNrlstFBzWzl3DPGBZ1XDjKQbydJ mFcCzA8EvcTh46C3gzGwejAK9JwGgMzhKOih97R/kXlda8WaSg7dTGgHt+BeU9dz vWdpbJLJRFH8B31nsTaEYXBgyj+RjcyHfeg= -----END CERTIFICATE-----Generated at Sat Oct 10 14:21:09 2026 by rpki-client