$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71725cb4-8e2a-3585-8def-3d8ea84dfcf7.roa File: 71725cb4-8e2a-3585-8def-3d8ea84dfcf7.roa (raw, json) Hash identifier: jbJ0uF/iEgxAJShB6Jx1KfGVYT9A+hkTXnCv/sV3D50= Subject key identifier: 50:E8:F5:32:03:FE:EC:93:8C:22:0F:02:FF:0F:FB:BA:83:45:BF:8B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584FB0BDEFFC5011A5B6BEF3D380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71725cb4-8e2a-3585-8def-3d8ea84dfcf7.roa Signing time: Sun 01 Nov 2026 01:00:13 +0000 ROA not before: Sun 01 Nov 2026 01:00:13 +0000 ROA not after: Sat 30 Jan 2027 02:00:13 +0000 asID: 396550 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b0:bd:ef:fc:50:11:a5:b6:be:f3:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 1 01:00:13 2026 GMT Not After : Jan 30 02:00:13 2027 GMT Subject: CN=cdc95ae8-74f1-4228-baee-fd075f12d484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a8:52:6e:88:90:70:a4:c6:06:d0:94:75:29: 37:01:d7:4b:db:c7:3f:97:25:ec:8e:8a:d2:14:e8: d4:93:ae:7b:14:b0:b9:49:9a:06:99:9c:a4:3e:6e: ff:10:3e:d6:be:a8:05:3c:f7:1a:25:af:f5:6e:44: 1d:ff:9e:09:e8:88:db:19:4f:5d:87:76:08:b2:c8: d5:24:05:7f:28:f4:22:a0:39:ba:59:80:f6:c5:8e: 6b:dc:09:13:5a:23:93:74:26:3e:cb:5c:9f:2f:35: 86:9d:af:75:fd:88:81:75:63:b4:96:1d:3b:70:e6: d5:ec:f0:16:0a:99:24:4e:2d:38:56:9a:0f:fe:e3: f8:5b:ac:0c:d3:ee:44:d0:d8:3f:ca:ca:e7:38:d0: e1:50:33:dc:02:0d:a8:0e:88:9e:6c:4f:b7:9e:39: 20:11:9a:e7:ea:56:ce:0b:9e:3d:42:f2:4a:56:68: a7:b3:32:13:58:6e:12:78:ca:45:0b:81:8f:37:a7: 33:24:a5:25:39:ac:36:54:33:58:88:a4:96:2e:dd: fc:c5:05:6e:2c:7b:4f:d2:22:5a:f6:ef:38:06:6e: 51:df:52:3f:23:be:30:0a:0b:23:57:90:1f:c6:ca: 52:66:e8:d2:5f:5f:48:0f:92:a7:7c:b7:99:ed:56: cf:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E8:F5:32:03:FE:EC:93:8C:22:0F:02:FF:0F:FB:BA:83:45:BF:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71725cb4-8e2a-3585-8def-3d8ea84dfcf7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:6f:19:a2:3d:8c:76:75:cf:4e:67:b8:b8:76:d6:e2:f6:a8: 8f:8e:a4:b0:3b:0e:a1:8a:9a:5c:87:88:a9:cf:a1:7c:2d:21: 1c:7f:e4:f4:6c:3d:77:d7:6a:ba:54:2a:f3:01:81:33:08:9c: 52:73:a3:e8:7a:a0:a1:c8:ad:5a:41:71:6c:6d:93:f5:6c:14: 32:73:0e:6b:3b:bb:f2:58:8f:0b:dd:fc:7e:8e:a7:64:62:9d: ce:f2:15:a2:9b:b3:3c:c3:46:6b:1d:6a:f3:1e:39:ad:98:ae: bf:b7:e6:33:bf:16:0a:f4:77:54:36:48:8e:d0:be:00:5a:d9: db:05:ff:f4:af:1e:ed:9a:a2:22:bd:71:0d:e9:e3:d9:08:ce: 43:12:e3:be:e8:a6:be:03:09:d4:bd:d7:58:42:ae:e2:bb:e6: 84:39:07:4f:51:66:99:5f:d5:5b:76:70:b1:cd:dd:5c:a6:d6: 2a:12:23:34:48:67:de:2b:e4:0b:15:af:be:22:da:06:30:a2: ab:e3:17:c0:91:db:97:15:49:00:75:f6:a6:60:e0:f0:e0:38: 1e:3a:78:20:a2:5f:43:80:d4:35:db:72:6c:b9:53:77:f5:10: b7:4f:a0:8b:07:9d:43:ae:83:d0:2f:c5:f3:1d:ea:73:a2:74: ff:78:84:bd -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE+wve/8UBGltr7z04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTEwMTAxMDAxM1oXDTI3MDEzMDAyMDAxM1owLzEtMCsGA1UEAxMk Y2RjOTVhZTgtNzRmMS00MjI4LWJhZWUtZmQwNzVmMTJkNDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46hSboiQcKTGBtCUdSk3AddL28c/lyXsjorS FOjUk657FLC5SZoGmZykPm7/ED7WvqgFPPcaJa/1bkQd/54J6IjbGU9dh3YIssjV JAV/KPQioDm6WYD2xY5r3AkTWiOTdCY+y1yfLzWGna91/YiBdWO0lh07cObV7PAW CpkkTi04VpoP/uP4W6wM0+5E0Ng/ysrnONDhUDPcAg2oDoiebE+3njkgEZrn6lbO C549QvJKVminszITWG4SeMpFC4GPN6czJKUlOaw2VDNYiKSWLt38xQVuLHtP0iJa 9u84Bm5R31I/I74wCgsjV5AfxspSZujSX19ID5KnfLeZ7VbPywIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFDo9TID/uyTjCIPAv8P+7qDRb+LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzE3MjVjYjQtOGUyYS0z NTg1LThkZWYtM2Q4ZWE4NGRmY2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBLbxmiPYx2dc9OZ7i4dtbi9qiPjqSwOw6hippc h4ipz6F8LSEcf+T0bD1312q6VCrzAYEzCJxSc6PoeqChyK1aQXFsbZP1bBQycw5r O7vyWI8L3fx+jqdkYp3O8hWim7M8w0ZrHWrzHjmtmK6/t+YzvxYK9HdUNkiO0L4A WtnbBf/0rx7tmqIivXEN6ePZCM5DEuO+6Ka+AwnUvddYQq7iu+aEOQdPUWaZX9Vb dnCxzd1cptYqEiM0SGfeK+QLFa++ItoGMKKr4xfAkduXFUkAdfamYODw4DgeOngg ol9DgNQ123JsuVN39RC3T6CLB51DroPQL8XzHepzonT/eIS9 -----END CERTIFICATE-----Generated at Sun Nov 15 17:55:16 2026 by rpki-client