$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9af6ccfe-ace5-3c31-9c17-e5b1c7a2be53.roa File: 9af6ccfe-ace5-3c31-9c17-e5b1c7a2be53.roa (raw, json) Hash identifier: ehjHhKFPXHGC+ghyHi0iQSQMDzHghLMkvA08aWQXWys= Subject key identifier: 96:01:37:B7:20:05:66:05:52:25:C7:81:A9:A4:70:23:8C:40:5E:69 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F49862A27A9C28A61D3371070 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9af6ccfe-ace5-3c31-9c17-e5b1c7a2be53.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396586 IP address blocks: 2001:500:7967::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:2a:27:a9:c2:8a:61:d3:37:10:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=eb41421a-abca-44ae-b3e1-2edfb4c5299e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:66:03:7c:69:d1:b6:1d:19:bd:8b:4a:59:5e: c2:cb:aa:07:93:f7:fc:66:24:5b:77:7c:96:8a:fc: 49:f9:2a:22:80:8b:3e:ca:db:d8:4e:97:fc:37:b3: 5b:f7:a5:1c:39:e5:30:fe:f2:c9:ad:4c:62:af:32: b5:c4:53:b5:4f:8a:63:ae:a0:b5:3a:db:fc:df:48: d6:e6:f3:ee:81:50:8f:ca:d2:df:6b:6a:4e:93:10: 72:1f:b0:e9:b2:4a:5a:de:37:22:12:75:37:96:00: 10:60:37:85:4b:5c:cd:08:ba:dc:74:36:de:29:23: 71:90:36:a5:2d:c5:84:02:2d:a6:f8:22:af:d8:c2: 60:37:70:a0:06:9e:bb:33:37:bb:9b:f4:5c:cf:29: 9b:5b:59:e7:93:55:cb:5f:7a:f8:f7:94:74:69:73: fa:39:8e:e9:e5:75:5e:e4:61:2f:a7:2b:ee:54:6e: b3:b5:45:b4:d2:23:c0:60:32:ed:aa:88:ab:89:5e: e2:9e:06:3d:a5:10:7c:0f:91:7c:23:50:1c:b2:99: 0f:51:cb:21:9f:ef:8f:13:ae:ab:c8:63:7a:67:b3: b4:68:53:6b:f4:2d:75:a0:c9:71:20:bd:71:a9:fd: dc:71:0f:b3:f5:3b:4f:87:fe:33:aa:e0:52:e5:2f: 9c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:01:37:B7:20:05:66:05:52:25:C7:81:A9:A4:70:23:8C:40:5E:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9af6ccfe-ace5-3c31-9c17-e5b1c7a2be53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:61:80:77:ab:92:19:09:0c:10:c1:bf:dd:00:28:8c:62:f9: 09:5f:01:d9:97:2d:d2:e1:b5:12:6b:d5:02:85:c1:30:61:62: 50:5e:df:db:20:91:6d:8c:47:aa:ce:dd:6c:05:c7:89:41:4d: 7d:ae:0a:11:f7:fb:c7:d7:c5:ca:3d:2c:50:f2:78:06:49:59: 35:d6:ab:71:0d:20:1c:c9:3a:b5:fe:e1:78:9c:f5:aa:24:a0: 26:f4:93:8b:d5:b5:85:ef:71:88:d9:cb:dc:cc:63:af:bb:a0: 91:19:00:ec:4a:4c:32:d2:41:d5:19:b3:4e:67:88:d0:d1:4e: 7f:f4:7d:3b:19:c0:d5:a6:5c:10:18:9e:cf:23:b5:93:48:51: c7:01:be:3e:cc:8d:0b:46:20:0a:89:58:13:10:aa:ad:02:0f: 02:6e:0d:c1:73:3b:6b:9e:39:25:3e:34:e6:75:97:78:6a:0d: 13:68:34:4b:db:6a:d8:90:b6:bd:d0:e9:bd:3f:a8:e0:5d:b8: 5f:da:2a:85:6e:bc:50:10:54:27:d4:55:b7:ba:8a:1c:53:79: dc:d9:38:50:22:16:48:a2:9d:79:8d:ee:0f:3d:a6:c9:1c:84: 55:b8:e1:b6:71:35:b2:2f:ca:a7:e5:f6:0e:dd:40:66:40:c1: 51:d9:6f:12 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9JhionqcKKYdM3EHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWI0MTQyMWEtYWJjYS00NGFlLWIzZTEtMmVkZmI0YzUyOTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWYDfGnRth0ZvYtKWV7Cy6oHk/f8ZiRbd3yW ivxJ+SoigIs+ytvYTpf8N7Nb96UcOeUw/vLJrUxirzK1xFO1T4pjrqC1Otv830jW 5vPugVCPytLfa2pOkxByH7Dpskpa3jciEnU3lgAQYDeFS1zNCLrcdDbeKSNxkDal LcWEAi2m+CKv2MJgN3CgBp67Mze7m/RczymbW1nnk1XLX3r495R0aXP6OY7p5XVe 5GEvpyvuVG6ztUW00iPAYDLtqoiriV7ingY9pRB8D5F8I1AcspkPUcshn++PE66r yGN6Z7O0aFNr9C11oMlxIL1xqf3ccQ+z9TtPh/4zquBS5S+c2wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJYBN7cgBWYFUiXHgamkcCOMQF5pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWFmNmNjZmUtYWNlNS0z YzMxLTljMTctZTViMWM3YTJiZTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAHln AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBMYYB3q5IZCQwQwb/dACiMYvkJXwHZly3S4bUS a9UChcEwYWJQXt/bIJFtjEeqzt1sBceJQU19rgoR9/vH18XKPSxQ8ngGSVk11qtx DSAcyTq1/uF4nPWqJKAm9JOL1bWF73GI2cvczGOvu6CRGQDsSkwy0kHVGbNOZ4jQ 0U5/9H07GcDVplwQGJ7PI7WTSFHHAb4+zI0LRiAKiVgTEKqtAg8Cbg3Bcztrnjkl PjTmdZd4ag0TaDRL22rYkLa90Om9P6jgXbhf2iqFbrxQEFQn1FW3uoocU3nc2ThQ IhZIop15je4PPabJHIRVuOG2cTWyL8qn5fYO3UBmQMFR2W8S -----END CERTIFICATE-----Generated at Fri Sep 25 21:33:43 2026 by rpki-client