$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e21f9af6-7137-3b33-9fa2-8fc73ece97e5.roa File: e21f9af6-7137-3b33-9fa2-8fc73ece97e5.roa (raw, json) Hash identifier: BO8PMprtLIBxzZUwPo4a7/Yuun3ZCVU/RmB61VM8lO8= Subject key identifier: 78:A0:21:8E:9E:40:F8:22:F5:F3:34:A4:27:A6:36:F0:A3:75:F0:7A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F49895D920F43CE316D551F00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e21f9af6-7137-3b33-9fa2-8fc73ece97e5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396594 IP address blocks: 2001:500:125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:5d:92:0f:43:ce:31:6d:55:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=08af4a05-42cf-42e7-abed-cc0dc847e7c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:87:7f:48:91:87:03:51:85:67:fb:a4:0c:fb: 40:4c:dd:e0:7b:4d:44:30:3b:89:3d:ea:06:a5:ea: 0d:ac:89:05:cb:d7:06:3f:82:3d:b9:f2:4f:b5:69: fb:c5:ed:f5:c9:bf:27:43:20:aa:e5:98:dc:03:c0: 55:3e:0e:02:2e:2c:01:8e:df:5e:df:e0:43:77:f2: c1:f8:30:7a:47:25:62:ae:06:43:54:67:8c:74:d4: af:20:36:cf:89:06:f4:36:d9:55:86:d1:38:d9:66: 87:cd:7e:f6:b0:c8:ca:6c:e9:0a:91:3e:5b:23:e3: ac:6c:54:7a:41:59:1b:6d:1b:84:d6:aa:be:fe:77: d2:4e:1e:71:82:2b:0d:60:ea:a3:7c:f5:90:8b:81: 49:1f:10:8f:e8:aa:10:2c:25:2c:af:29:3c:de:55: 8b:d0:14:d1:f2:e0:31:45:12:ce:29:88:34:cd:74: d1:11:ea:ef:b3:81:a6:d1:6a:de:01:80:e4:90:06: 74:13:d6:08:6d:0d:20:60:6a:d0:ee:63:75:25:35: da:0c:2e:0d:54:73:5b:17:54:6b:ab:c4:c9:ba:4c: ee:50:8f:4f:ef:bd:3e:b0:da:7b:00:76:0f:8d:7d: 9d:4c:ba:9d:04:9e:9a:f5:70:be:26:b1:70:e8:bb: f3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A0:21:8E:9E:40:F8:22:F5:F3:34:A4:27:A6:36:F0:A3:75:F0:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e21f9af6-7137-3b33-9fa2-8fc73ece97e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:fb:9c:72:0c:89:c1:ce:c5:c5:fd:99:94:d0:9a:c7:83:10: 5e:66:10:ec:c6:f8:75:1f:d1:73:65:5d:56:10:ff:18:57:c0: c0:67:5b:31:97:90:e8:bc:ea:b7:5f:47:1e:52:28:e0:26:56: 53:f0:91:0b:c2:9f:a3:a5:e8:1c:c2:5a:da:d3:d1:18:29:57: a7:b3:1c:a2:c2:54:3d:71:8a:0d:79:39:d9:93:11:88:a4:d8: 52:98:73:88:21:78:ef:1e:71:7d:e6:79:40:fa:78:df:e8:6a: 7c:d4:45:b1:34:ab:4a:4d:d7:b7:13:bc:b9:58:00:d9:2f:4b: 5b:88:7e:fb:39:e9:eb:c3:89:e0:ad:7c:f9:67:20:1e:9f:f4: a4:0e:99:fe:e6:20:84:72:42:7a:d0:0a:be:3c:01:af:1b:2a: 01:d1:d6:0e:51:32:13:73:aa:c3:93:b0:ef:a8:d4:da:43:d8: 19:ee:54:0e:93:d7:17:47:5b:45:87:f0:6a:7c:ca:7f:52:fc: b0:e0:5d:7f:6b:91:98:24:6f:1d:92:d0:9a:65:d5:be:c6:77: 76:39:7a:c0:1f:41:36:36:8e:c6:65:10:52:07:7d:d0:ea:37: 27:28:99:43:ee:97:65:ce:31:c4:2c:c1:6b:02:a1:d4:4e:12: ab:4d:51:d2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JiV2SD0POMW1VHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDhhZjRhMDUtNDJjZi00MmU3LWFiZWQtY2MwZGM4NDdlN2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4d/SJGHA1GFZ/ukDPtATN3ge01EMDuJPeoG peoNrIkFy9cGP4I9ufJPtWn7xe31yb8nQyCq5ZjcA8BVPg4CLiwBjt9e3+BDd/LB +DB6RyVirgZDVGeMdNSvIDbPiQb0NtlVhtE42WaHzX72sMjKbOkKkT5bI+OsbFR6 QVkbbRuE1qq+/nfSTh5xgisNYOqjfPWQi4FJHxCP6KoQLCUsryk83lWL0BTR8uAx RRLOKYg0zXTREervs4Gm0WreAYDkkAZ0E9YIbQ0gYGrQ7mN1JTXaDC4NVHNbF1Rr q8TJukzuUI9P770+sNp7AHYPjX2dTLqdBJ6a9XC+JrFw6LvzawIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHigIY6eQPgi9fM0pCemNvCjdfB6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTIxZjlhZjYtNzEzNy0z YjMzLTlmYTItOGZjNzNlY2U5N2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD37nHIMicHOxcX9mZTQmseDEF5mEOzG+HUf0XNlXVYQ/xhXwMBn WzGXkOi86rdfRx5SKOAmVlPwkQvCn6Ol6BzCWtrT0RgpV6ezHKLCVD1xig15OdmT EYik2FKYc4gheO8ecX3meUD6eN/oanzURbE0q0pN17cTvLlYANkvS1uIfvs56evD ieCtfPlnIB6f9KQOmf7mIIRyQnrQCr48Aa8bKgHR1g5RMhNzqsOTsO+o1NpD2Bnu VA6T1xdHW0WH8Gp8yn9S/LDgXX9rkZgkbx2S0Jpl1b7Gd3Y5esAfQTY2jsZlEFIH fdDqNycomUPul2XOMcQswWsCodROEqtNUdI= -----END CERTIFICATE-----Generated at Wed Oct 7 23:01:10 2026 by rpki-client