$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a8a3ffe-88c7-30ca-9056-1542db51b001.roa File: 1a8a3ffe-88c7-30ca-9056-1542db51b001.roa (raw, json) Hash identifier: qC5x4wvaEgtzG4tDla+6bONo+aZrs7H8QqPSCCK0IZk= Subject key identifier: F7:EE:6D:68:EA:33:F2:E3:2F:B0:5B:E4:50:03:8E:DD:7F:2F:42:39 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F093D001C717A48ABF7D29000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a8a3ffe-88c7-30ca-9056-1542db51b001.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 396584 IP address blocks: 2001:500:122::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3d:00:1c:71:7a:48:ab:f7:d2:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=e4a2ced6-85aa-4d72-8415-303e8b2ca1ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c6:28:f2:d7:8e:9c:07:9d:48:5b:e5:fb:0b: 81:75:62:51:cb:f8:a9:04:3f:f4:48:73:20:95:79: fe:61:41:2e:83:2e:9a:fd:33:75:cf:e9:8d:74:0b: 1b:85:d7:88:1d:b7:af:77:37:26:31:3d:01:2c:ba: 24:85:9c:c7:55:7f:58:3d:ab:6a:60:31:2b:35:f4: a5:82:75:23:34:f0:e0:e1:c7:35:e9:d7:06:09:2a: 86:e0:d6:25:38:fd:71:d7:74:38:7f:9b:eb:86:b8: 27:32:cf:12:57:0d:91:41:f6:fc:3d:fa:12:ef:68: 23:d6:76:d0:52:4f:80:f5:93:12:25:29:e7:97:41: 73:02:88:e6:64:4e:12:40:1f:dd:9e:6c:64:3c:b7: bb:52:e2:45:9a:a4:2e:d6:1d:7e:94:98:0f:11:26: 8d:d7:dd:58:5b:90:e5:d9:2f:87:9b:ae:6a:53:6e: 71:74:8b:3e:ff:bf:86:9e:85:b4:24:93:d2:8c:fd: e9:aa:f1:c2:35:6b:6b:21:e0:58:ac:cc:ee:38:42: 32:ae:56:ac:bd:4a:b6:cb:3f:a7:2b:4b:b1:67:f6: 45:cb:27:0c:85:58:2b:bd:c8:27:18:92:70:d8:bb: e7:35:18:ad:42:52:67:53:2a:dd:78:e7:ca:17:41: f9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:EE:6D:68:EA:33:F2:E3:2F:B0:5B:E4:50:03:8E:DD:7F:2F:42:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a8a3ffe-88c7-30ca-9056-1542db51b001.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:a4:e4:2f:70:2c:ce:09:19:05:75:42:1b:07:ee:b9:c2:bb: c8:da:17:a3:d2:0a:75:c9:52:97:b3:b4:31:f4:5c:00:5a:5b: e0:b9:04:a7:0a:da:3a:c8:5c:8e:ff:bc:e0:65:b5:a2:0d:11: cb:c0:c5:4f:c5:bb:29:80:50:35:44:8d:d0:e4:86:b9:99:cb: a5:28:83:31:41:a3:1d:2b:15:92:8f:b6:92:f5:04:c4:e6:ec: 0f:9b:a9:47:41:e5:58:d2:9e:2b:70:22:c4:e2:3a:83:ff:5a: 4a:cf:53:ad:10:61:ec:cf:2a:36:f9:5c:53:e2:bc:8a:95:e7: c2:6c:34:87:62:fd:29:cf:a4:b3:ba:1f:d4:0a:9c:32:44:f6: 8c:5b:8e:af:84:4c:6a:5f:b5:af:50:30:26:ae:c9:97:63:fb: d6:51:f9:49:05:49:2a:74:a2:a6:b8:e5:78:6f:50:4a:3e:67: 29:35:0e:8b:7f:d6:34:32:c9:c5:f4:f4:35:75:e8:6b:5a:cf: 7d:70:c8:02:61:7a:28:f7:c2:10:31:1e:40:00:99:0b:6c:d3: ba:e9:53:ca:40:28:50:44:1e:56:ca:25:3e:ab:b4:c9:95:8d: 61:de:3a:0d:d5:06:38:e2:10:d2:5b:40:81:42:3d:de:26:f2: 4d:21:67:73 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8JPQAccXpIq/fSkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk ZTRhMmNlZDYtODVhYS00ZDcyLTg0MTUtMzAzZThiMmNhMWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48Yo8teOnAedSFvl+wuBdWJRy/ipBD/0SHMg lXn+YUEugy6a/TN1z+mNdAsbhdeIHbevdzcmMT0BLLokhZzHVX9YPatqYDErNfSl gnUjNPDg4cc16dcGCSqG4NYlOP1x13Q4f5vrhrgnMs8SVw2RQfb8PfoS72gj1nbQ Uk+A9ZMSJSnnl0FzAojmZE4SQB/dnmxkPLe7UuJFmqQu1h1+lJgPESaN191YW5Dl 2S+Hm65qU25xdIs+/7+GnoW0JJPSjP3pqvHCNWtrIeBYrMzuOEIyrlasvUq2yz+n K0uxZ/ZFyycMhVgrvcgnGJJw2LvnNRitQlJnUyrdeOfKF0H5qwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPfubWjqM/LjL7Bb5FADjt1/L0I5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWE4YTNmZmUtODhjNy0z MGNhLTkwNTYtMTU0MmRiNTFiMDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC1pOQvcCzOCRkFdUIbB+65wrvI2hej0gp1yVKX s7Qx9FwAWlvguQSnCto6yFyO/7zgZbWiDRHLwMVPxbspgFA1RI3Q5Ia5mculKIMx QaMdKxWSj7aS9QTE5uwPm6lHQeVY0p4rcCLE4jqD/1pKz1OtEGHszyo2+VxT4ryK lefCbDSHYv0pz6Szuh/UCpwyRPaMW46vhExqX7WvUDAmrsmXY/vWUflJBUkqdKKm uOV4b1BKPmcpNQ6Lf9Y0MsnF9PQ1dehrWs99cMgCYXoo98IQMR5AAJkLbNO66VPK QChQRB5WyiU+q7TJlY1h3joN1QY44hDSW0CBQj3eJvJNIWdz -----END CERTIFICATE-----Generated at Sat Sep 26 14:05:31 2026 by rpki-client