$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/596be8b8-487d-3506-b2af-8c9462996523.roa File: 596be8b8-487d-3506-b2af-8c9462996523.roa (raw, json) Hash identifier: +6F94LPbm/ZJYz+s06MW/zASZ4asmiT6G1KMBy4+lIg= Subject key identifier: 40:17:A3:65:F5:06:93:B4:62:91:96:33:0C:31:44:78:F3:A1:70:35 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F06726EDABDA2E92CCFB7B550 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/596be8b8-487d-3506-b2af-8c9462996523.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 40717 IP address blocks: 2001:500:124::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:6e:da:bd:a2:e9:2c:cf:b7:b5:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=1a743cec-b69f-4779-b4d1-bbdf87e244b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:20:6e:52:93:90:e7:f7:48:ce:35:23:c9:db: 70:35:8f:63:87:47:3e:f7:c6:c8:d9:0e:50:8b:61: d6:4d:cb:f1:68:e5:c0:fd:a9:d0:51:8b:81:64:c2: 92:f3:91:29:c9:e2:3f:49:03:2f:e6:16:cf:05:02: 84:75:4a:86:df:f2:43:ad:89:92:f3:96:10:4c:2d: 73:20:6a:d6:41:5e:19:df:48:c8:5e:b0:d5:72:45: 29:d1:7b:0c:db:36:de:0b:d6:2b:ac:6e:f8:eb:b6: 48:03:d7:c6:44:ba:81:4e:03:ca:3e:75:99:4b:ac: f1:8f:8c:c0:41:5b:90:a8:4c:4d:73:10:30:09:05: 61:3d:84:07:ff:0a:00:fb:a9:f0:46:9a:5b:78:37: 49:17:01:19:a8:27:a4:1c:37:c5:9c:91:f9:8c:fb: 03:bb:15:93:a6:68:1d:96:e9:80:85:10:69:8b:a7: 5a:ca:c9:7b:e0:83:7e:42:60:80:b2:b5:47:4a:55: 2e:ff:11:44:b1:f1:d7:e2:56:6d:87:0f:92:6d:65: 32:60:7d:0e:0e:41:4d:8c:1a:da:23:88:2e:33:82: ea:37:19:56:1c:3d:96:e2:06:a0:6d:74:ea:cc:64: 96:c1:4b:a7:75:db:29:fc:4e:22:0b:24:1e:3f:01: 92:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:17:A3:65:F5:06:93:B4:62:91:96:33:0C:31:44:78:F3:A1:70:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/596be8b8-487d-3506-b2af-8c9462996523.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:124:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:81:1f:06:01:e3:27:ac:4f:87:14:80:1b:13:ba:b7:48:02: b1:10:96:83:69:3f:68:51:8e:54:30:03:86:1f:b9:22:60:00: 19:01:6e:56:b9:5a:a2:27:ea:32:c3:0d:38:12:a7:47:6b:ee: ac:e4:a7:1c:a7:9c:2b:bc:96:11:ea:b2:da:a4:6a:41:ab:40: 37:6c:67:75:8a:02:34:ab:52:37:4f:0f:40:53:9b:3c:2e:72: 56:27:21:1b:7f:2a:71:0c:4d:e5:0c:b8:fa:20:87:f6:84:0b: cc:d1:61:69:d7:33:12:34:e6:61:04:ff:ed:71:f2:c1:38:44: df:01:b2:d9:fa:95:bb:e3:52:d5:9b:64:84:eb:8c:be:14:13: 5b:a5:4a:74:10:73:ad:e3:f6:c5:7f:99:72:85:50:83:01:9c: 7e:7e:74:d7:c8:25:fd:2c:54:0a:24:f5:c7:30:34:0f:7e:2a: c3:9d:a9:53:87:70:eb:bb:0a:da:a0:9b:92:9b:72:2e:64:13: aa:ea:88:24:3b:59:78:e8:e6:b0:e9:bb:74:cf:2f:58:c0:e4: a8:39:0a:8e:c0:2c:6a:d4:84:d5:13:23:5a:cf:28:e9:c6:cf: 5a:6f:d6:40:72:6a:74:2b:fe:bd:74:05:e0:f8:4e:b8:d1:4a: 15:6e:27:22 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8Gcm7avaLpLM+3tVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk MWE3NDNjZWMtYjY5Zi00Nzc5LWI0ZDEtYmJkZjg3ZTI0NGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCBuUpOQ5/dIzjUjydtwNY9jh0c+98bI2Q5Q i2HWTcvxaOXA/anQUYuBZMKS85EpyeI/SQMv5hbPBQKEdUqG3/JDrYmS85YQTC1z IGrWQV4Z30jIXrDVckUp0XsM2zbeC9YrrG7467ZIA9fGRLqBTgPKPnWZS6zxj4zA QVuQqExNcxAwCQVhPYQH/woA+6nwRppbeDdJFwEZqCekHDfFnJH5jPsDuxWTpmgd lumAhRBpi6daysl74IN+QmCAsrVHSlUu/xFEsfHX4lZthw+SbWUyYH0ODkFNjBra I4guM4LqNxlWHD2W4gagbXTqzGSWwUunddsp/E4iCyQePwGSmQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEAXo2X1BpO0YpGWMwwxRHjzoXA1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTk2YmU4YjgtNDg3ZC0z NTA2LWIyYWYtOGM5NDYyOTk2NTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEk AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBLgR8GAeMnrE+HFIAbE7q3SAKxEJaDaT9oUY5U MAOGH7kiYAAZAW5WuVqiJ+oyww04EqdHa+6s5Kccp5wrvJYR6rLapGpBq0A3bGd1 igI0q1I3Tw9AU5s8LnJWJyEbfypxDE3lDLj6IIf2hAvM0WFp1zMSNOZhBP/tcfLB OETfAbLZ+pW741LVm2SE64y+FBNbpUp0EHOt4/bFf5lyhVCDAZx+fnTXyCX9LFQK JPXHMDQPfirDnalTh3DruwraoJuSm3IuZBOq6ogkO1l46Oaw6bt0zy9YwOSoOQqO wCxq1ITVEyNazyjpxs9ab9ZAcmp0K/69dAXg+E640UoVbici -----END CERTIFICATE-----Generated at Sun Oct 4 23:14:30 2026 by rpki-client