$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/438564d8-02e9-343b-83ab-faed18d46a1c.roa File: 438564d8-02e9-343b-83ab-faed18d46a1c.roa (raw, json) Hash identifier: 0/I7o6cNOvBh1uNUdLzSeoTPDWIuVvxlvEjXoDN+OfE= Subject key identifier: 8A:E9:56:22:B1:64:31:1D:CA:9D:8D:83:D7:BC:BF:16:33:14:B1:0B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F0ED23C160D33E2CDF16C9B00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/438564d8-02e9-343b-83ab-faed18d46a1c.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 20172 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:3c:16:0d:33:e2:cd:f1:6c:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=d47224fe-a6d9-4a3f-9c0b-e4a8106915c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ea:6e:60:40:c9:c4:f0:7d:14:49:0f:d0:a4: fb:a4:ec:b9:79:a6:e5:27:95:9a:6c:48:a1:e8:23: a8:64:c9:02:c1:5d:ca:d4:32:7b:9b:0e:68:61:15: 48:dc:59:5c:dc:86:3c:f3:3a:d3:13:b5:14:48:4f: 58:e9:32:8b:a6:dd:8f:f7:45:6b:8e:16:8d:93:9e: 45:df:e8:d9:2e:e3:14:64:28:07:cc:14:34:30:94: fd:57:c2:6e:da:5a:9e:d3:a5:93:d9:9f:02:5d:9c: 77:83:df:0a:60:7a:83:92:74:d5:23:60:b1:cf:0b: b4:da:b5:48:2a:1d:75:9a:ab:4d:b8:00:a9:0b:b2: 13:dd:cc:d6:ed:74:12:02:56:ea:80:75:b3:be:7f: d2:d7:44:df:36:ef:de:e4:fe:12:d2:11:f8:d7:b2: d7:11:f0:98:42:55:ff:26:cf:18:c8:04:1f:a1:af: f9:dc:5c:20:42:77:b6:56:53:b4:71:49:d8:94:d1: e9:7d:e8:10:58:cd:cc:59:91:83:3d:15:7f:80:53: fb:86:10:d4:81:6e:42:4e:56:24:2e:90:fd:1d:a4: e8:4e:7e:11:68:69:62:5e:e6:b4:c1:1c:68:f7:32: e0:3a:79:80:e8:7a:21:78:19:dc:c3:7f:cc:c1:10: f8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E9:56:22:B1:64:31:1D:CA:9D:8D:83:D7:BC:BF:16:33:14:B1:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/438564d8-02e9-343b-83ab-faed18d46a1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:2b:e0:00:b6:85:73:78:37:2d:28:ab:b2:3d:78:49:6b:ba: dd:38:2f:e7:94:12:ae:77:79:cb:33:11:30:84:35:7f:f8:66: 4e:5e:c5:45:7b:f3:53:c6:d0:c6:ef:aa:b3:75:56:86:68:c9: e7:24:2f:47:a5:94:43:fa:6a:c4:1e:c3:fa:1a:6d:c3:1e:d9: c9:27:83:b7:dd:73:be:8e:6f:91:b9:97:b2:47:3a:85:9b:15: c5:fb:c6:a0:7c:0d:fc:bd:b4:c0:9f:18:77:4f:76:fb:a3:ab: 20:81:3c:b3:7c:5c:9a:fe:5b:9f:3f:a0:bb:f9:75:85:43:16: d4:b3:fb:1d:9e:b9:fb:f0:d2:9a:fa:3e:52:f1:ea:55:10:6e: ff:05:a9:c3:60:07:2f:a1:d4:e0:a1:4c:b8:8b:0d:20:aa:01: 29:41:d3:3d:32:e7:27:37:09:93:f6:34:d7:ad:2a:7e:71:52: ce:e4:07:ca:dc:1f:91:a4:93:c6:a1:e2:7c:73:55:9c:ab:c7: 53:b4:d2:3f:fe:e0:28:61:18:5a:79:58:33:9d:a1:20:22:4d: f2:9c:05:c1:16:ac:53:cd:d8:3d:51:4b:aa:4c:a2:81:c8:2e: 85:4b:64:b4:66:9b:9b:e9:c6:ac:04:83:74:26:bc:2b:22:91: 99:57:8a:7e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8O0jwWDTPizfFsmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk ZDQ3MjI0ZmUtYTZkOS00YTNmLTljMGItZTRhODEwNjkxNWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OpuYEDJxPB9FEkP0KT7pOy5eablJ5WabEih 6COoZMkCwV3K1DJ7mw5oYRVI3Flc3IY88zrTE7UUSE9Y6TKLpt2P90VrjhaNk55F 3+jZLuMUZCgHzBQ0MJT9V8Ju2lqe06WT2Z8CXZx3g98KYHqDknTVI2Cxzwu02rVI Kh11mqtNuACpC7IT3czW7XQSAlbqgHWzvn/S10TfNu/e5P4S0hH417LXEfCYQlX/ Js8YyAQfoa/53FwgQne2VlO0cUnYlNHpfegQWM3MWZGDPRV/gFP7hhDUgW5CTlYk LpD9HaToTn4RaGliXua0wRxo9zLgOnmA6HoheBncw3/MwRD4swIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIrpViKxZDEdyp2Ng9e8vxYzFLELMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDM4NTY0ZDgtMDJlOS0z NDNiLTgzYWItZmFlZDE4ZDQ2YTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQARK+AAtoVzeDctKKuyPXhJa7rdOC/nlBKud3nL MxEwhDV/+GZOXsVFe/NTxtDG76qzdVaGaMnnJC9HpZRD+mrEHsP6Gm3DHtnJJ4O3 3XO+jm+RuZeyRzqFmxXF+8agfA38vbTAnxh3T3b7o6sggTyzfFya/lufP6C7+XWF QxbUs/sdnrn78NKa+j5S8epVEG7/BanDYAcvodTgoUy4iw0gqgEpQdM9MucnNwmT 9jTXrSp+cVLO5AfK3B+RpJPGoeJ8c1Wcq8dTtNI//uAoYRhaeVgznaEgIk3ynAXB FqxTzdg9UUuqTKKByC6FS2S0Zpub6casBIN0JrwrIpGZV4p+ -----END CERTIFICATE-----Generated at Mon Sep 28 10:03:18 2026 by rpki-client