$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bd7f4e8-1b7c-3b7a-9d2d-a4a237b63c46.roa File: 0bd7f4e8-1b7c-3b7a-9d2d-a4a237b63c46.roa (raw, json) Hash identifier: e4YMk+xUzGeY6I6XcSOtDeqhjv5v6AmgMydcko1s88M= Subject key identifier: 9E:66:31:9D:8A:2D:03:FF:5B:46:9D:7B:03:B1:81:A3:AE:80:C1:E8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F9E98950813943CC910992920 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bd7f4e8-1b7c-3b7a-9d2d-a4a237b63c46.roa Signing time: Sun 25 Oct 2026 13:00:13 +0000 ROA not before: Sun 25 Oct 2026 13:00:13 +0000 ROA not after: Sat 23 Jan 2027 14:00:13 +0000 asID: 396608 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9e:98:95:08:13:94:3c:c9:10:99:29:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 25 13:00:13 2026 GMT Not After : Jan 23 14:00:13 2027 GMT Subject: CN=295edb8d-cca4-4e23-8259-893e80789e9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:18:c3:4a:94:c4:29:49:60:e0:c9:1c:e9:55: 91:b9:72:b2:48:f3:82:05:2d:7f:fb:a8:a0:01:1d: a2:67:24:ca:6f:78:ae:3b:7e:dd:48:9b:ae:cf:c6: 48:5e:a1:28:c2:b9:f5:d0:6a:ed:af:80:ad:55:e9: 54:a1:b0:26:9c:99:26:7a:90:90:a8:c0:5d:e1:98: 4d:4f:25:61:a0:8a:8d:fb:96:1a:ce:5a:5e:b9:e9: d6:a6:eb:5b:dd:e8:c7:70:c1:94:bc:c7:56:29:05: 12:09:c4:10:3e:60:c5:a6:46:36:83:98:a6:db:e4: 76:3d:50:60:df:42:05:a9:d2:af:9d:d0:cf:31:e3: 43:8a:1e:9b:13:84:cc:8f:2c:32:ef:88:6a:c2:3e: f7:6d:44:4e:bf:31:5c:c1:1f:d1:54:7f:fa:19:ed: 88:cf:f6:92:f5:0f:d9:cb:1d:1b:18:99:4d:39:81: 04:32:6e:80:e1:73:2c:85:bb:a2:0e:fd:67:83:c8: 3d:f7:a7:41:64:81:9e:80:1a:1f:d6:5e:9d:53:bb: 46:75:78:91:b4:52:7f:f3:b5:eb:64:20:86:b6:97: 8b:c6:d6:7b:56:ee:46:ea:7c:92:7e:dd:b2:97:03: 6e:d6:71:c5:30:c1:41:ac:3d:a2:f5:d1:ce:02:6a: 52:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:66:31:9D:8A:2D:03:FF:5B:46:9D:7B:03:B1:81:A3:AE:80:C1:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bd7f4e8-1b7c-3b7a-9d2d-a4a237b63c46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:65:3e:d0:fc:27:08:4b:ac:95:35:dc:04:07:13:e4:36:c3: 1b:57:3e:19:6a:d4:34:5f:17:4a:05:ab:2e:50:ae:50:0b:1d: 98:ab:53:19:9a:38:9b:74:43:de:65:c8:05:d0:e7:b6:e5:69: 0b:87:7f:b7:be:bd:27:9b:99:f2:58:5a:28:f1:ef:a2:6e:bc: f0:e6:d4:71:5a:4a:25:57:d5:07:f3:95:b8:0d:2a:d4:70:8e: a6:0b:ed:55:1b:cd:69:b7:54:18:f8:23:c9:ec:86:d3:63:da: db:19:5a:e2:be:85:44:3f:e8:f1:c7:83:83:7b:12:c5:cd:e6: 65:68:19:80:b2:15:f6:3c:4c:70:26:68:02:a9:21:31:77:87: 9c:c7:ba:16:78:36:64:e0:21:9f:e6:fb:c3:2f:5d:ea:b8:3c: 7a:da:5a:71:42:18:4d:82:7e:bc:fb:e4:bb:eb:c7:0b:b6:09: 14:37:d6:de:21:3b:f7:c7:d2:49:f9:8f:09:9a:66:a2:ad:b9: 34:98:25:20:d1:52:76:26:52:35:12:b0:66:4e:62:49:50:f5: f8:f6:7e:6b:c7:4e:52:da:90:a3:44:ef:7f:6f:4d:f3:4e:c0: ba:1e:cb:10:4d:51:a6:08:e8:46:6b:35:dd:2d:b8:10:bb:42: bb:6d:40:12 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE+emJUIE5Q8yRCZKSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAyNTEzMDAxM1oXDTI3MDEyMzE0MDAxM1owLzEtMCsGA1UEAxMk Mjk1ZWRiOGQtY2NhNC00ZTIzLTgyNTktODkzZTgwNzg5ZTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxjDSpTEKUlg4Mkc6VWRuXKySPOCBS1/+6ig AR2iZyTKb3iuO37dSJuuz8ZIXqEowrn10Grtr4CtVelUobAmnJkmepCQqMBd4ZhN TyVhoIqN+5YazlpeuenWputb3ejHcMGUvMdWKQUSCcQQPmDFpkY2g5im2+R2PVBg 30IFqdKvndDPMeNDih6bE4TMjywy74hqwj73bUROvzFcwR/RVH/6Ge2Iz/aS9Q/Z yx0bGJlNOYEEMm6A4XMshbuiDv1ng8g996dBZIGegBof1l6dU7tGdXiRtFJ/87Xr ZCCGtpeLxtZ7Vu5G6nySft2ylwNu1nHFMMFBrD2i9dHOAmpSgwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJ5mMZ2KLQP/W0adewOxgaOugMHoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGJkN2Y0ZTgtMWI3Yy0z YjdhLTlkMmQtYTRhMjM3YjYzYzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCKZT7Q/CcIS6yVNdwEBxPkNsMbVz4ZatQ0XxdK BasuUK5QCx2Yq1MZmjibdEPeZcgF0Oe25WkLh3+3vr0nm5nyWFoo8e+ibrzw5tRx WkolV9UH85W4DSrUcI6mC+1VG81pt1QY+CPJ7IbTY9rbGVrivoVEP+jxx4ODexLF zeZlaBmAshX2PExwJmgCqSExd4ecx7oWeDZk4CGf5vvDL13quDx62lpxQhhNgn68 ++S768cLtgkUN9beITv3x9JJ+Y8Jmmairbk0mCUg0VJ2JlI1ErBmTmJJUPX49n5r x05S2pCjRO9/b03zTsC6HssQTVGmCOhGazXdLbgQu0K7bUAS -----END CERTIFICATE-----Generated at Sun Nov 15 17:50:53 2026 by rpki-client