$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43e81f08-18fa-32d3-90e2-7115a8a6c472.roa File: 43e81f08-18fa-32d3-90e2-7115a8a6c472.roa (raw, json) Hash identifier: 16oJIL6e21pflNQ3GfmfrESEhFCiccxfGh8gIM2j8gQ= Subject key identifier: 71:D7:42:42:48:2F:21:9D:B8:F5:4A:E0:F6:85:33:B3:E5:1E:34:9E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F06726D9AF220A676FF777480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43e81f08-18fa-32d3-90e2-7115a8a6c472.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 36631 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:6d:9a:f2:20:a6:76:ff:77:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=007fc3cc-d06d-4dd8-8199-64c9772314a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b2:95:a2:64:5d:71:21:77:08:82:ee:be:89: d4:8b:af:4d:19:62:7e:40:5f:60:46:25:16:1b:ca: 5c:5e:01:0f:d1:ad:b4:c5:62:1a:a7:90:59:76:5e: cf:42:02:f9:4e:fe:0f:f8:a6:78:81:11:54:b3:b8: ed:3d:f7:54:53:ee:22:36:8e:36:fb:64:d9:99:c5: fc:ea:11:26:37:3e:00:f0:23:f0:2b:a6:d6:c0:72: 62:41:65:dd:de:de:ea:c8:aa:7e:f1:ed:c5:22:74: 72:1c:d1:03:ae:ee:58:ba:6e:c5:58:79:1e:f8:28: 25:ad:64:dd:8c:64:be:e0:7c:33:10:cc:7c:c2:7c: 0d:ba:5b:65:90:7d:c6:a7:12:a2:b9:2c:71:13:ed: 89:03:ba:f1:1f:44:e7:cc:0d:18:8b:8d:d7:b8:d0: 5b:ee:00:09:bb:d8:3c:25:00:10:04:dd:6e:24:7d: a3:89:e6:6a:58:6a:c4:f4:c9:27:97:8f:09:59:1f: a0:57:fc:45:9c:8f:56:47:c5:39:85:10:22:62:bc: 9d:c4:56:4c:f4:43:cd:cd:49:de:dd:2f:12:cc:cf: 8e:b6:07:95:8d:47:04:06:b9:c4:e2:4e:70:8a:aa: ca:75:ee:83:f8:70:27:a5:8f:60:1a:cf:29:11:d2: 49:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D7:42:42:48:2F:21:9D:B8:F5:4A:E0:F6:85:33:B3:E5:1E:34:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43e81f08-18fa-32d3-90e2-7115a8a6c472.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:10:2c:11:2d:20:41:ee:63:88:cf:29:37:0c:ce:67:50:3f: ff:92:a1:06:c6:79:02:87:28:7a:13:c3:1e:da:b6:9a:6a:9d: 18:31:ef:9f:30:17:d9:4b:31:be:88:dd:a8:b3:3d:8d:7d:62: ff:23:64:f9:bd:70:fe:43:d0:07:9f:c5:4d:11:a8:e3:95:99: 86:af:3e:72:df:08:03:73:11:f8:4a:ff:64:d9:f8:af:55:60: e3:22:7d:50:a5:85:fb:6d:36:86:1a:e6:ee:6d:7f:e0:9d:26: ae:cd:b5:cf:4e:24:b6:b8:3c:ac:23:7e:1c:2f:a1:eb:24:a2: 97:6a:94:61:a2:7e:cd:10:f1:fc:80:92:5f:f9:e8:a4:c2:e1: 9e:b8:e6:1c:54:51:8c:64:40:bb:92:33:d5:a7:78:ba:c0:47: 97:99:66:8c:84:8d:0f:c4:93:d1:4b:26:5e:d9:80:63:38:9a: 80:9c:45:6d:e8:c0:05:3c:fe:7e:37:08:a4:5a:af:60:f3:4e: bf:1f:7e:3d:2e:f4:dd:a3:e9:2f:1d:e4:56:d2:44:6d:d2:5e: 62:fd:a8:1f:d5:88:99:db:31:f4:b5:5c:0c:d9:de:9a:ab:5e: 3c:48:39:23:d3:ad:8b:f5:fc:dc:dc:58:47:bd:39:58:7a:df: ec:df:9c:79 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8Gcm2a8iCmdv93dIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk MDA3ZmMzY2MtZDA2ZC00ZGQ4LTgxOTktNjRjOTc3MjMxNGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7KVomRdcSF3CILuvonUi69NGWJ+QF9gRiUW G8pcXgEP0a20xWIap5BZdl7PQgL5Tv4P+KZ4gRFUs7jtPfdUU+4iNo42+2TZmcX8 6hEmNz4A8CPwK6bWwHJiQWXd3t7qyKp+8e3FInRyHNEDru5Yum7FWHke+CglrWTd jGS+4HwzEMx8wnwNultlkH3GpxKiuSxxE+2JA7rxH0TnzA0Yi43XuNBb7gAJu9g8 JQAQBN1uJH2jieZqWGrE9Mknl48JWR+gV/xFnI9WR8U5hRAiYrydxFZM9EPNzUne 3S8SzM+OtgeVjUcEBrnE4k5wiqrKde6D+HAnpY9gGs8pEdJJOQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHHXQkJILyGduPVK4PaFM7PlHjSeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDNlODFmMDgtMThmYS0z MmQzLTkwZTItNzExNWE4YTZjNDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCfECwRLSBB7mOIzyk3DM5nUD//kqEGxnkChyh6 E8Me2raaap0YMe+fMBfZSzG+iN2osz2NfWL/I2T5vXD+Q9AHn8VNEajjlZmGrz5y 3wgDcxH4Sv9k2fivVWDjIn1QpYX7bTaGGububX/gnSauzbXPTiS2uDysI34cL6Hr JKKXapRhon7NEPH8gJJf+eikwuGeuOYcVFGMZEC7kjPVp3i6wEeXmWaMhI0PxJPR SyZe2YBjOJqAnEVt6MAFPP5+NwikWq9g806/H349LvTdo+kvHeRW0kRt0l5i/agf 1YiZ2zH0tVwM2d6aq148SDkj062L9fzc3FhHvTlYet/s35x5 -----END CERTIFICATE-----Generated at Thu Sep 24 20:26:51 2026 by rpki-client