$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0cef66cb-fe01-304e-a930-737a32c51560.roa File: 0cef66cb-fe01-304e-a930-737a32c51560.roa (raw, json) Hash identifier: QlP43ufFN22sqAP1ZHtLvotZKSVHz70ASsD3N1UGcXM= Subject key identifier: A4:6B:D9:28:7B:D7:2A:88:3B:BD:06:4D:54:A1:7D:0F:C1:C2:09:23 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EFCACE1EE36CA96F536EF3A00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0cef66cb-fe01-304e-a930-737a32c51560.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 397205 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:e1:ee:36:ca:96:f5:36:ef:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=49af295b-c3be-403b-b793-496a193308a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d0:23:df:14:bf:da:e3:d3:e5:88:5d:50:ec: 23:9d:b7:2d:68:2a:4b:f0:c9:3e:5d:1b:68:43:a7: fc:17:fe:d3:80:02:e5:34:0b:eb:36:42:13:32:2b: e3:a6:19:32:b9:cc:6a:86:cd:b2:ee:5d:c7:f7:d7: d1:19:58:07:93:88:17:23:c2:1c:b0:ff:0a:9f:69: 6c:1e:35:11:3c:37:a0:ba:89:7c:98:08:8f:60:0b: 95:05:4c:8c:51:07:eb:eb:2a:69:52:6c:12:9f:0a: 19:73:ec:4e:35:c2:9c:e8:ee:6f:6c:de:8c:5c:e4: cb:cf:14:29:a3:33:fb:54:49:83:9a:b3:fe:e6:b8: 18:26:00:b1:83:db:c7:04:5f:ed:40:7f:ae:db:0c: 61:f4:30:31:80:5f:f1:13:62:f3:e1:75:30:fd:ef: 6a:39:77:cb:e1:52:6e:25:01:f6:ff:ab:14:67:e4: 28:72:79:12:ae:79:84:d8:70:86:ae:2e:be:1b:26: 10:98:08:73:2d:d2:8a:89:aa:09:77:c8:bf:da:bb: 61:a5:35:e1:91:bd:b3:8d:64:b7:a2:a1:b7:4a:62: 41:53:38:19:5e:0a:ed:b9:20:0b:54:b9:fa:c9:ce: 7d:5f:a6:77:02:de:ee:8c:4f:fd:ca:2f:4b:d3:85: d4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:6B:D9:28:7B:D7:2A:88:3B:BD:06:4D:54:A1:7D:0F:C1:C2:09:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0cef66cb-fe01-304e-a930-737a32c51560.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:32:01:20:9f:a3:71:f6:54:dd:09:a3:f3:2a:9c:c5:65:16: c1:bd:67:75:fb:89:29:c1:98:43:76:86:a3:a1:ba:37:1e:00: 59:2b:b7:24:39:ae:86:13:00:5e:fc:71:0f:d8:90:65:8c:d3: f3:d0:2a:46:08:10:93:e0:24:2f:ba:1d:b8:64:22:74:62:94: c7:d5:9f:61:29:e4:2a:b3:d4:27:8a:ff:b0:16:ab:dd:23:48: db:2b:2f:05:7d:09:4b:c1:44:0b:d9:2b:cb:e1:7e:99:db:d0: f2:88:48:e4:d3:9f:bd:ee:79:03:4f:49:8d:3b:18:b8:43:a0: af:69:cd:49:93:19:74:9b:66:6f:7c:ba:79:46:45:e1:85:df: 1a:cf:85:f8:39:86:6a:f8:12:58:44:f2:44:7a:de:cd:76:13: e5:5b:fe:e8:1f:32:b2:60:91:ae:37:83:ab:5f:11:b8:d4:f3: f6:f9:85:a5:6d:95:53:10:e6:36:9a:a1:83:8e:e7:03:3a:57: 08:23:a8:b3:f1:f3:b3:41:57:1f:1e:63:60:d1:20:cf:0c:89: 71:a0:af:0a:f3:51:09:45:57:66:dd:e0:40:b9:cb:10:b1:5c: 73:8e:cb:2d:66:70:98:e5:74:db:6d:ba:21:31:06:11:25:2a: df:71:ac:8c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE78rOHuNsqW9TbvOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk NDlhZjI5NWItYzNiZS00MDNiLWI3OTMtNDk2YTE5MzMwOGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdAj3xS/2uPT5YhdUOwjnbctaCpL8Mk+XRto Q6f8F/7TgALlNAvrNkITMivjphkyucxqhs2y7l3H99fRGVgHk4gXI8IcsP8Kn2ls HjURPDeguol8mAiPYAuVBUyMUQfr6yppUmwSnwoZc+xONcKc6O5vbN6MXOTLzxQp ozP7VEmDmrP+5rgYJgCxg9vHBF/tQH+u2wxh9DAxgF/xE2Lz4XUw/e9qOXfL4VJu JQH2/6sUZ+QocnkSrnmE2HCGri6+GyYQmAhzLdKKiaoJd8i/2rthpTXhkb2zjWS3 oqG3SmJBUzgZXgrtuSALVLn6yc59X6Z3At7ujE/9yi9L04XUYwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKRr2Sh71yqIO70GTVShfQ/BwgkjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGNlZjY2Y2ItZmUwMS0z MDRlLWE5MzAtNzM3YTMyYzUxNTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCtMgEgn6Nx9lTdCaPzKpzFZRbBvWd1+4kpwZhD doajobo3HgBZK7ckOa6GEwBe/HEP2JBljNPz0CpGCBCT4CQvuh24ZCJ0YpTH1Z9h KeQqs9Qniv+wFqvdI0jbKy8FfQlLwUQL2SvL4X6Z29DyiEjk05+97nkDT0mNOxi4 Q6Cvac1Jkxl0m2ZvfLp5RkXhhd8az4X4OYZq+BJYRPJEet7NdhPlW/7oHzKyYJGu N4OrXxG41PP2+YWlbZVTEOY2mqGDjucDOlcII6iz8fOzQVcfHmNg0SDPDIlxoK8K 81EJRVdm3eBAucsQsVxzjsstZnCY5XTbbbohMQYRJSrfcayM -----END CERTIFICATE-----Generated at Fri Sep 25 17:08:59 2026 by rpki-client