$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42935a61-3c34-37c7-a4a5-3a41bf2169b8.roa File: 42935a61-3c34-37c7-a4a5-3a41bf2169b8.roa (raw, json) Hash identifier: vxMrnF/AKXzOXVyZ67e0MocmaJ4ogzu424cr4DYiDPE= Subject key identifier: C5:96:36:99:23:13:CC:1E:FD:67:E9:67:5F:A0:36:CD:28:8E:19:DF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F06727D9C210B854B9425AE40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42935a61-3c34-37c7-a4a5-3a41bf2169b8.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 397210 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:7d:9c:21:0b:85:4b:94:25:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=64f37643-c878-41b2-b8a8-f3183c1e95ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6a:32:3b:25:69:aa:64:40:ff:f1:50:9a:a5: f7:cc:ee:0f:17:75:d3:18:20:61:88:0a:c6:d6:94: 4d:2c:c2:e0:34:b7:b4:2b:ff:1b:60:b0:b2:1b:5e: 47:7d:ee:17:73:cf:c4:0c:26:d9:a3:f7:7a:6d:b9: 5a:c9:85:1e:92:3e:36:c8:16:34:57:97:41:91:0a: b4:97:04:97:2e:58:0c:a5:29:7d:0c:9b:8c:88:ac: ef:45:e1:05:d2:41:a7:03:c1:37:63:a7:69:0f:b8: 01:97:db:54:cf:c1:96:35:c1:d8:0f:66:4d:b0:58: 08:41:76:d1:25:16:38:57:7b:8c:a5:48:21:e1:a2: 2f:15:1f:55:0a:8d:46:27:85:33:d6:f8:7f:f4:b4: c9:2b:72:04:51:66:50:cc:08:16:d4:a4:33:9e:1a: 81:66:6c:63:76:6e:8b:f3:40:34:bd:42:52:7a:b3: b6:40:e6:b0:95:25:e8:c7:03:25:f3:0d:ba:70:48: a1:cc:a2:6e:06:31:ff:82:7e:59:31:e4:72:3b:6d: 28:a6:73:02:d0:cd:b3:de:06:6a:2f:f2:4f:92:d0: 7d:34:b0:fc:8a:5c:d1:d8:5f:bd:c7:db:69:1d:fd: 0b:78:a1:38:d9:06:5c:12:b1:5d:24:20:e8:48:a0: cd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:96:36:99:23:13:CC:1E:FD:67:E9:67:5F:A0:36:CD:28:8E:19:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42935a61-3c34-37c7-a4a5-3a41bf2169b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:89:2e:16:d9:22:1a:34:2a:ed:05:01:8d:4d:ba:14:ee:2d: 39:6e:c1:63:ba:ef:56:36:ba:33:fa:1f:5f:94:f4:ca:de:a8: 28:42:06:15:8d:9e:33:6b:f9:31:1b:c6:e0:ef:e5:fb:db:c4: 59:cb:c7:22:cf:25:1d:f2:af:93:0c:81:1c:40:80:e1:98:c5: d4:9c:ac:99:9f:34:6d:9b:75:f4:4c:ed:94:12:53:b1:1d:b0: 13:cb:0a:0e:ac:5d:01:6c:12:02:d2:32:5b:be:8e:da:20:7e: 23:7a:bc:5a:62:c8:89:e5:c8:20:ee:1b:d9:eb:a3:d9:79:31: 99:79:b9:df:8f:b6:6a:d0:8e:c5:a7:70:26:79:12:8a:1f:9e: 47:a4:27:1c:50:64:0f:b1:a7:cc:c2:13:e4:46:43:76:b9:e6: 62:e8:fe:80:87:ca:19:41:52:6a:52:89:7e:e7:fa:ec:38:d5: 6b:93:bb:c2:1e:25:cc:fc:d8:47:e1:38:6a:7b:da:ac:dd:7d: ba:ea:bb:d7:16:fc:f0:82:c2:5c:26:b8:6e:e2:63:04:90:95: a3:f0:e1:5c:a3:7a:b6:e8:50:f6:6d:92:49:82:f7:36:5c:a4: d9:3f:60:90:12:b1:d8:5f:b1:fc:1c:3d:a4:9a:7e:93:17:20: 19:08:40:13 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8Gcn2cIQuFS5QlrkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk NjRmMzc2NDMtYzg3OC00MWIyLWI4YTgtZjMxODNjMWU5NWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmoyOyVpqmRA//FQmqX3zO4PF3XTGCBhiArG 1pRNLMLgNLe0K/8bYLCyG15Hfe4Xc8/EDCbZo/d6bblayYUekj42yBY0V5dBkQq0 lwSXLlgMpSl9DJuMiKzvReEF0kGnA8E3Y6dpD7gBl9tUz8GWNcHYD2ZNsFgIQXbR JRY4V3uMpUgh4aIvFR9VCo1GJ4Uz1vh/9LTJK3IEUWZQzAgW1KQznhqBZmxjdm6L 80A0vUJSerO2QOawlSXoxwMl8w26cEihzKJuBjH/gn5ZMeRyO20opnMC0M2z3gZq L/JPktB9NLD8ilzR2F+9x9tpHf0LeKE42QZcErFdJCDoSKDNyQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMWWNpkjE8we/WfpZ1+gNs0ojhnfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDI5MzVhNjEtM2MzNC0z N2M3LWE0YTUtM2E0MWJmMjE2OWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBXiS4W2SIaNCrtBQGNTboU7i05bsFjuu9WNroz +h9flPTK3qgoQgYVjZ4za/kxG8bg7+X728RZy8cizyUd8q+TDIEcQIDhmMXUnKyZ nzRtm3X0TO2UElOxHbATywoOrF0BbBIC0jJbvo7aIH4jerxaYsiJ5cgg7hvZ66PZ eTGZebnfj7Zq0I7Fp3AmeRKKH55HpCccUGQPsafMwhPkRkN2ueZi6P6Ah8oZQVJq Uol+5/rsONVrk7vCHiXM/NhH4Thqe9qs3X266rvXFvzwgsJcJrhu4mMEkJWj8OFc o3q26FD2bZJJgvc2XKTZP2CQErHYX7H8HD2kmn6TFyAZCEAT -----END CERTIFICATE-----Generated at Mon Sep 28 10:58:55 2026 by rpki-client