$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c5b2a53-7aa7-30a5-95d4-2881470b27bd.roa File: 0c5b2a53-7aa7-30a5-95d4-2881470b27bd.roa (raw, json) Hash identifier: RIsmHt9+RvAg7RbWcr5b0G+THTY1DwZPTkiUpTO0sZc= Subject key identifier: 00:1B:6B:68:0E:A2:1D:AD:D3:7A:02:3A:D1:EC:AC:66:56:F5:40:16 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F0672709B1BA5B172B72E3400 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c5b2a53-7aa7-30a5-95d4-2881470b27bd.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 396582 IP address blocks: 2001:500:127::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:70:9b:1b:a5:b1:72:b7:2e:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=5a4ccd2d-f02c-4ba4-a77d-d6790e60b967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:11:ac:0e:2a:eb:9a:d9:29:a7:85:68:3b:50: ca:f7:a8:86:de:3b:59:19:cd:49:15:b5:fc:01:9c: fe:c7:1a:a0:c2:34:10:e2:58:12:79:82:44:ff:f2: 32:82:67:16:6d:51:ab:a4:19:61:dd:58:c8:6e:06: a4:dc:63:13:15:fe:5b:3a:43:ae:51:0c:70:02:6e: fc:f1:e3:ed:50:61:30:05:ad:57:4c:07:0e:aa:4f: ea:4e:89:19:90:5d:ac:23:1d:09:dc:13:4f:dd:72: 1b:fe:a4:e6:b4:d6:00:5f:d3:18:3e:a0:fd:f0:fa: 58:9f:17:70:b9:d3:06:86:ec:a9:bf:1b:df:60:71: 4a:07:31:84:26:06:6a:29:3d:58:fb:5a:17:91:12: 73:93:8f:45:5d:a8:70:d8:43:71:83:01:05:87:ff: 0a:28:7f:44:9f:ac:5c:38:c0:7a:61:c7:18:c0:6c: 03:37:f4:26:eb:bd:4c:58:44:e2:44:f6:54:5a:7b: a6:89:5e:2f:d8:13:5f:14:45:6f:5a:22:7c:8b:0d: 92:7c:3c:74:6a:8f:8f:f6:ec:fa:eb:aa:bd:3b:02: 4b:fe:a7:cb:9c:c1:9a:4d:06:47:e1:fa:df:a3:dd: 4f:9d:dd:5f:54:e9:f1:07:85:f1:c9:dc:a0:c7:a7: f1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:1B:6B:68:0E:A2:1D:AD:D3:7A:02:3A:D1:EC:AC:66:56:F5:40:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c5b2a53-7aa7-30a5-95d4-2881470b27bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:a3:f0:19:1b:c6:09:86:72:e3:62:0a:36:e4:28:22:0d:29: 5b:96:9f:d0:77:59:13:29:58:75:c6:e2:5c:66:49:47:4d:33: 95:2a:dc:fa:69:69:43:e1:42:9c:30:19:a2:e4:82:fc:3f:0c: 73:2e:16:75:3a:bc:68:f2:57:4b:36:10:a9:b1:5a:46:fa:e2: 0a:d5:2a:8c:6e:f5:21:15:66:3a:52:05:d9:7f:a9:a4:5a:39: 6f:1e:0d:6a:17:d5:30:d3:8c:8e:6f:15:69:f9:ed:0b:d7:87: 92:8a:67:9b:1f:11:cc:d1:da:50:52:03:83:e7:4d:92:84:c5: 5b:b7:2e:80:ba:23:34:06:23:d2:8e:1e:3d:55:e0:1e:11:e0: 78:ed:4f:7e:33:c2:ea:6d:d0:cd:d0:df:a1:40:41:23:3f:c0: 4d:36:ae:7e:4a:14:db:e5:72:5f:51:e3:f0:81:07:67:02:be: 04:65:8a:4e:79:5c:e4:03:da:c6:4f:c1:ef:c5:da:27:93:95: 8c:8f:c4:dc:e5:63:9b:ee:8f:63:e9:8d:04:5b:52:8b:e3:4c: e6:90:b7:88:b2:db:4d:d9:89:30:17:bb:4e:69:87:91:26:77: 56:26:22:e2:16:08:21:86:37:66:65:ee:7e:ce:11:64:c7:20: 23:f8:18:49 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8GcnCbG6WxcrcuNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk NWE0Y2NkMmQtZjAyYy00YmE0LWE3N2QtZDY3OTBlNjBiOTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6RGsDirrmtkpp4VoO1DK96iG3jtZGc1JFbX8 AZz+xxqgwjQQ4lgSeYJE//IygmcWbVGrpBlh3VjIbgak3GMTFf5bOkOuUQxwAm78 8ePtUGEwBa1XTAcOqk/qTokZkF2sIx0J3BNP3XIb/qTmtNYAX9MYPqD98PpYnxdw udMGhuypvxvfYHFKBzGEJgZqKT1Y+1oXkRJzk49FXahw2ENxgwEFh/8KKH9En6xc OMB6YccYwGwDN/Qm671MWETiRPZUWnumiV4v2BNfFEVvWiJ8iw2SfDx0ao+P9uz6 66q9OwJL/qfLnMGaTQZH4frfo91Pnd1fVOnxB4Xxydygx6fx1QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAAba2gOoh2t03oCOtHsrGZW9UAWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGM1YjJhNTMtN2FhNy0z MGE1LTk1ZDQtMjg4MTQ3MGIyN2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEn AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBso/AZG8YJhnLjYgo25CgiDSlblp/Qd1kTKVh1 xuJcZklHTTOVKtz6aWlD4UKcMBmi5IL8PwxzLhZ1Orxo8ldLNhCpsVpG+uIK1SqM bvUhFWY6UgXZf6mkWjlvHg1qF9Uw04yObxVp+e0L14eSimebHxHM0dpQUgOD502S hMVbty6AuiM0BiPSjh49VeAeEeB47U9+M8LqbdDN0N+hQEEjP8BNNq5+ShTb5XJf UePwgQdnAr4EZYpOeVzkA9rGT8Hvxdonk5WMj8Tc5WOb7o9j6Y0EW1KL40zmkLeI sttN2YkwF7tOaYeRJndWJiLiFgghhjdmZe5+zhFkxyAj+BhJ -----END CERTIFICATE-----Generated at Sun Sep 27 00:21:21 2026 by rpki-client