$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1991d3f0-6f8b-3a6d-a89d-92a35bd80751.roa File: 1991d3f0-6f8b-3a6d-a89d-92a35bd80751.roa (raw, json) Hash identifier: BXMJW44aJsoEk3N96kz4ymFBAhEwSgaDQsts/Oe7r6Y= Subject key identifier: 0E:7A:6E:91:5E:52:AC:AD:0A:46:AA:64:4E:C3:09:94:C9:F9:86:7F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F0ED23BE5CF642B1FD562C480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1991d3f0-6f8b-3a6d-a89d-92a35bd80751.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 36620 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:3b:e5:cf:64:2b:1f:d5:62:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=a299306c-eab4-4174-b9d6-49b8763bd9b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:66:30:3a:13:ba:e5:a1:07:ba:33:eb:af:64: 51:95:0e:73:07:a5:6a:47:83:8e:c5:f3:ea:85:bd: 3c:c6:f2:46:d2:08:19:12:94:9a:95:86:80:26:7e: d4:23:66:a7:13:cd:22:0c:6c:99:e7:d8:8a:cb:96: 71:bd:1f:cf:48:a8:bf:97:fb:36:37:2e:f4:0a:69: 6a:c2:65:74:2d:55:61:17:14:c8:6d:8c:4d:a2:fc: c1:2e:fd:57:e4:bd:65:dd:9a:ab:02:88:3a:48:4e: b1:5d:25:44:65:ae:cf:13:4b:b8:55:c1:49:d7:10: 98:af:d8:89:f4:39:78:97:31:91:e6:d7:98:03:30: ec:af:a3:f7:51:f0:88:1e:38:95:37:a3:b2:4f:87: 3a:58:de:85:ea:6c:aa:06:16:c2:f9:50:a8:02:48: f0:a8:6a:e2:2b:14:80:b3:0c:69:44:1e:e7:00:b1: 24:9c:0f:fd:fb:44:06:e2:9e:a8:03:2c:f4:c4:7b: 27:99:27:12:ac:c0:7c:8e:f7:31:a5:d9:88:79:4f: ae:43:9a:ca:d0:5f:2f:76:07:7d:77:2c:70:73:17: 6a:e8:bd:14:2a:93:82:23:38:c9:93:be:5e:2a:1b: ef:57:21:a8:f5:23:83:d0:0e:0b:dc:9b:42:18:86: a3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:7A:6E:91:5E:52:AC:AD:0A:46:AA:64:4E:C3:09:94:C9:F9:86:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1991d3f0-6f8b-3a6d-a89d-92a35bd80751.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:fd:0e:f9:c1:9b:c6:08:ea:22:4e:1b:1b:a1:a1:4d:18:61: d0:ac:e2:46:37:74:86:f5:cb:f2:e9:69:92:85:1d:6c:04:58: c1:f2:83:57:55:4b:44:59:4b:b3:3b:5f:10:00:7d:55:6f:ca: 5f:4e:09:34:17:06:7a:b9:72:36:f2:9e:58:e1:ad:f4:f3:0a: 51:f7:f1:08:1a:8e:33:15:2b:91:58:c9:dc:74:7a:2e:3c:85: 21:66:3b:e4:01:9c:2b:d7:b2:94:00:9f:ea:54:20:04:fc:8c: 56:e0:98:32:73:41:28:80:43:26:8f:6d:de:83:f1:df:6b:22: 8b:5b:6d:64:14:d0:0e:0b:74:5f:eb:c3:cc:51:bd:47:b9:86: 50:c6:eb:9b:27:75:57:db:5a:9e:65:2b:0c:7e:69:3f:af:95: 53:0d:2f:93:e0:bd:1f:07:eb:02:4a:b0:30:2e:7a:68:67:1c: 20:95:83:b1:d8:ad:16:76:d7:b3:c4:6f:ed:19:9a:02:3e:d7: 57:95:65:a2:a7:97:ff:7f:1d:21:6e:1a:a4:c0:4f:59:e4:92: 08:3f:d4:c2:26:19:7e:bd:4f:59:2f:58:4f:85:a7:b9:9c:c5: 9e:50:0b:5c:cd:11:1c:bf:46:77:43:8c:b5:bc:72:b5:4f:28: a4:c6:b1:db -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8O0jvlz2QrH9VixIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk YTI5OTMwNmMtZWFiNC00MTc0LWI5ZDYtNDliODc2M2JkOWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2YwOhO65aEHujPrr2RRlQ5zB6VqR4OOxfPq hb08xvJG0ggZEpSalYaAJn7UI2anE80iDGyZ59iKy5ZxvR/PSKi/l/s2Ny70Cmlq wmV0LVVhFxTIbYxNovzBLv1X5L1l3ZqrAog6SE6xXSVEZa7PE0u4VcFJ1xCYr9iJ 9Dl4lzGR5teYAzDsr6P3UfCIHjiVN6OyT4c6WN6F6myqBhbC+VCoAkjwqGriKxSA swxpRB7nALEknA/9+0QG4p6oAyz0xHsnmScSrMB8jvcxpdmIeU+uQ5rK0F8vdgd9 dyxwcxdq6L0UKpOCIzjJk75eKhvvVyGo9SOD0A4L3JtCGIajZQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFA56bpFeUqytCkaqZE7DCZTJ+YZ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTk5MWQzZjAtNmY4Yi0z YTZkLWE4OWQtOTJhMzViZDgwNzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCF/Q75wZvGCOoiThsboaFNGGHQrOJGN3SG9cvy 6WmShR1sBFjB8oNXVUtEWUuzO18QAH1Vb8pfTgk0FwZ6uXI28p5Y4a308wpR9/EI Go4zFSuRWMncdHouPIUhZjvkAZwr17KUAJ/qVCAE/IxW4Jgyc0EogEMmj23eg/Hf ayKLW21kFNAOC3Rf68PMUb1HuYZQxuubJ3VX21qeZSsMfmk/r5VTDS+T4L0fB+sC SrAwLnpoZxwglYOx2K0WdtezxG/tGZoCPtdXlWWip5f/fx0hbhqkwE9Z5JIIP9TC Jhl+vU9ZL1hPhae5nMWeUAtczREcv0Z3Q4y1vHK1TyikxrHb -----END CERTIFICATE-----Generated at Thu Sep 24 18:13:49 2026 by rpki-client