$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30009a5e-37f4-3ae5-a4f4-beed7af7571c.roa File: 30009a5e-37f4-3ae5-a4f4-beed7af7571c.roa (raw, json) Hash identifier: vfXxDH+LLjoxFdu8Y6JJp6e3Xi9lxeEkEGzFf8kjCt0= Subject key identifier: 6C:ED:BC:10:45:79:EE:A9:0A:44:EE:BE:28:E1:41:D2:F6:64:07:64 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EF01CD4D0B96AB7BE7E076B70 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30009a5e-37f4-3ae5-a4f4-beed7af7571c.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 396608 IP address blocks: 2001:500:13f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:d4:d0:b9:6a:b7:be:7e:07:6b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=16ce9070-12ef-4339-9c5a-3e32bd554a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2f:ff:94:c7:f4:2e:42:43:44:f5:3f:ea:58: e3:d0:77:2d:d2:3b:9f:91:15:a7:0c:80:a7:3d:2e: 3a:95:8c:9b:62:a6:db:83:51:cc:4d:2a:ed:c3:57: 32:6a:87:c1:30:05:01:e2:ea:39:f8:2c:39:59:be: 27:d6:7c:b9:d6:ff:90:73:35:f8:21:86:df:a5:22: 12:b4:75:09:81:ff:3f:81:5f:7c:bd:5f:30:25:d0: 23:7e:2a:90:9e:4d:a5:ca:45:de:27:d2:cf:b2:c9: 7d:2d:df:de:2f:a4:77:3e:44:17:51:44:57:f3:ed: f3:20:02:5e:36:35:5d:b3:7d:ea:90:09:14:4d:ab: a8:f7:43:f7:54:cb:e3:97:8b:50:47:ad:9c:0d:21: 49:28:c4:57:db:ea:3b:3b:56:63:13:52:0f:33:dc: 89:d3:6d:6a:69:64:b2:b6:bb:81:db:38:6c:d7:5f: 12:18:c3:4e:39:7c:37:41:10:4a:a1:1a:d9:85:cd: 29:30:2a:b4:f3:cf:d3:6d:6c:af:a7:28:9e:61:cd: 36:35:09:4b:7b:83:88:53:82:97:66:73:2b:12:3b: 5f:1e:68:3e:ee:7a:97:b3:8b:e5:8b:9e:6b:89:b7: 8e:b3:97:02:a2:98:11:ba:d5:5a:b9:cc:fe:b5:51: ae:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:ED:BC:10:45:79:EE:A9:0A:44:EE:BE:28:E1:41:D2:F6:64:07:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30009a5e-37f4-3ae5-a4f4-beed7af7571c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:13f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:9d:84:52:b0:87:69:9a:54:fe:f8:8f:ab:b0:11:02:ee:5d: f1:cc:b2:01:e9:b8:7d:17:ea:df:30:c3:c0:82:3f:7e:86:5f: ce:41:01:28:2e:e2:14:fb:44:20:a1:b1:43:cb:e3:51:bb:6c: e6:dc:66:2c:d8:a0:fb:7c:25:ce:4b:66:cc:7f:24:ff:74:a9: bf:30:aa:99:43:29:34:aa:34:e3:0c:a0:35:f8:5b:36:31:a2: 2b:1e:ca:a7:b7:a7:df:af:cb:57:44:d7:19:08:63:11:ad:71: 85:cc:84:bf:d3:a4:e4:dd:21:c5:d1:95:dd:81:9d:fd:dc:59: 52:11:5d:0d:97:15:2d:e6:3a:fc:7d:88:93:62:d0:24:3b:40: b9:ee:cb:f1:5d:09:d7:24:10:b1:0f:dd:92:da:d6:c8:7d:5d: 4c:5b:98:45:af:8a:e9:36:27:74:9c:90:6c:76:e7:d8:c6:9a: 5d:c4:22:49:d5:e4:0a:e0:2e:41:6a:d8:b3:0f:c7:9b:51:bd: 91:0b:1c:af:ac:c5:9a:ea:a6:62:2a:30:0a:fd:09:1d:90:56: d9:ce:25:4c:1d:f5:7e:e0:c4:24:b6:5c:46:28:8d:c7:c3:db: b9:f9:3a:cd:d9:4d:77:3c:d0:fd:43:ab:48:b7:20:31:b9:24: c2:99:c0:b5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7wHNTQuWq3vn4Ha3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk MTZjZTkwNzAtMTJlZi00MzM5LTljNWEtM2UzMmJkNTU0YTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAti//lMf0LkJDRPU/6ljj0Hct0jufkRWnDICn PS46lYybYqbbg1HMTSrtw1cyaofBMAUB4uo5+Cw5Wb4n1ny51v+QczX4IYbfpSIS tHUJgf8/gV98vV8wJdAjfiqQnk2lykXeJ9LPssl9Ld/eL6R3PkQXUURX8+3zIAJe NjVds33qkAkUTauo90P3VMvjl4tQR62cDSFJKMRX2+o7O1ZjE1IPM9yJ021qaWSy truB2zhs118SGMNOOXw3QRBKoRrZhc0pMCq088/TbWyvpyieYc02NQlLe4OIU4KX ZnMrEjtfHmg+7nqXs4vli55ribeOs5cCopgRutVaucz+tVGu+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGztvBBFee6pCkTuvijhQdL2ZAdkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzAwMDlhNWUtMzdmNC0z YWU1LWE0ZjQtYmVlZDdhZjc1NzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAECdhFKwh2maVP74j6uwEQLuXfHMsgHpuH0X6t8ww8CCP36GX85B ASgu4hT7RCChsUPL41G7bObcZizYoPt8Jc5LZsx/JP90qb8wqplDKTSqNOMMoDX4 WzYxoiseyqe3p9+vy1dE1xkIYxGtcYXMhL/TpOTdIcXRld2Bnf3cWVIRXQ2XFS3m Ovx9iJNi0CQ7QLnuy/FdCdckELEP3ZLa1sh9XUxbmEWviuk2J3SckGx259jGml3E IknV5ArgLkFq2LMPx5tRvZELHK+sxZrqpmIqMAr9CR2QVtnOJUwd9X7gxCS2XEYo jcfD27n5Os3ZTXc80P1Dq0i3IDG5JMKZwLU= -----END CERTIFICATE-----Generated at Sat Sep 26 05:31:53 2026 by rpki-client