$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a85b4313-c024-373f-95a0-524b5b2e756e.roa File: a85b4313-c024-373f-95a0-524b5b2e756e.roa (raw, json) Hash identifier: FFmZ5eK/rH4HBxzJKaNYcKfJKYIC1zVCtmnDPDCojeA= Subject key identifier: E9:1D:04:79:40:9B:0C:16:B1:98:85:03:48:F2:5D:37:41:D6:90:8B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EFCACE6435DB982DE8B500380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a85b4313-c024-373f-95a0-524b5b2e756e.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 397211 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:e6:43:5d:b9:82:de:8b:50:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=174dd1a8-153d-4bea-93a3-79f9e38630f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:74:ed:de:14:f7:ee:35:1b:e5:81:b7:82:5d: 43:82:fb:eb:b3:04:5e:2e:0b:51:fd:4c:d9:93:23: c6:1f:11:de:e5:3f:b0:b1:40:9a:36:12:f4:9e:a9: f9:ec:27:df:1d:53:96:11:6a:77:8a:c8:94:88:d8: 96:18:ba:96:3a:cc:f8:a8:60:66:d0:fe:f0:cd:50: e3:dc:da:58:b4:fd:80:aa:78:8d:69:e1:b1:26:62: 1e:ff:23:fa:1d:2d:cf:88:24:36:f6:ec:bd:89:91: 7e:67:cc:03:b8:39:46:a6:77:65:d9:f4:6a:97:97: 8e:f6:98:a0:ef:f4:0c:5b:a2:47:7c:7e:84:bd:35: a1:95:de:71:2a:b5:f5:cf:00:50:77:fd:91:c8:1d: 71:f8:49:f6:24:84:4d:be:5f:34:80:84:30:51:43: 30:40:f3:34:10:11:65:04:08:5f:01:37:26:07:24: f1:3e:72:d2:2f:ad:da:77:a4:a4:44:c8:c2:3c:9f: 82:b5:c7:ed:af:f2:0a:67:86:2b:4b:3d:f2:83:6d: f0:a1:6f:78:89:72:4c:c6:ec:cd:c5:d4:7a:ad:76: 46:62:13:7d:f2:74:6d:b8:32:ff:47:21:1b:58:6c: 2b:2f:1a:2a:c7:6d:05:43:ed:6c:85:44:0a:da:ce: 7b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:1D:04:79:40:9B:0C:16:B1:98:85:03:48:F2:5D:37:41:D6:90:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a85b4313-c024-373f-95a0-524b5b2e756e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:62:8f:47:da:0a:38:91:ca:19:66:9d:57:3e:99:b6:0d:64: a6:04:c8:9c:28:a5:26:a2:07:1f:0f:2a:8c:79:e1:2a:a8:6e: 5c:2f:eb:09:93:61:5b:39:73:39:99:0e:04:68:83:94:f4:78: 5d:3e:48:da:03:0d:38:1a:43:e5:da:13:76:93:57:05:a5:71: ef:7f:a2:99:4c:1a:75:c9:03:fe:47:68:31:8a:79:98:8c:70: 61:c0:1c:38:b9:f9:f6:fa:12:40:ae:29:40:db:96:54:50:89: ad:a7:ed:0b:89:cf:69:38:83:32:dc:6f:96:ce:fb:94:19:88: b3:e7:2f:b0:6f:aa:ad:13:33:d6:4a:83:9f:e5:27:3c:08:77: d0:d2:b2:a9:22:36:90:5d:48:70:ce:0a:87:db:54:2a:c8:d5: c8:58:79:42:c0:60:3b:86:9b:a9:82:80:b6:2e:73:31:c4:d1: 4a:1b:5d:03:8e:e2:57:5d:89:e1:c5:d5:ca:fc:92:5a:c9:71: 24:67:be:33:2a:b1:80:0f:26:16:55:9b:60:f1:f4:49:f6:33: 6e:92:58:cf:8b:d5:0f:6c:4f:19:81:e7:c6:38:ef:ff:2b:a7: 27:47:bb:df:92:ac:84:ca:2e:67:71:6d:63:3c:00:37:9f:0a: 2a:10:b7:8b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE78rOZDXbmC3otQA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk MTc0ZGQxYTgtMTUzZC00YmVhLTkzYTMtNzlmOWUzODYzMGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3Tt3hT37jUb5YG3gl1DgvvrswReLgtR/UzZ kyPGHxHe5T+wsUCaNhL0nqn57CffHVOWEWp3isiUiNiWGLqWOsz4qGBm0P7wzVDj 3NpYtP2AqniNaeGxJmIe/yP6HS3PiCQ29uy9iZF+Z8wDuDlGpndl2fRql5eO9pig 7/QMW6JHfH6EvTWhld5xKrX1zwBQd/2RyB1x+En2JIRNvl80gIQwUUMwQPM0EBFl BAhfATcmByTxPnLSL63ad6SkRMjCPJ+Ctcftr/IKZ4YrSz3yg23woW94iXJMxuzN xdR6rXZGYhN98nRtuDL/RyEbWGwrLxoqx20FQ+1shUQK2s57YQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOkdBHlAmwwWsZiFA0jyXTdB1pCLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTg1YjQzMTMtYzAyNC0z NzNmLTk1YTAtNTI0YjViMmU3NTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCbYo9H2go4kcoZZp1XPpm2DWSmBMicKKUmogcf DyqMeeEqqG5cL+sJk2FbOXM5mQ4EaIOU9HhdPkjaAw04GkPl2hN2k1cFpXHvf6KZ TBp1yQP+R2gxinmYjHBhwBw4ufn2+hJArilA25ZUUImtp+0Lic9pOIMy3G+WzvuU GYiz5y+wb6qtEzPWSoOf5Sc8CHfQ0rKpIjaQXUhwzgqH21QqyNXIWHlCwGA7hpup goC2LnMxxNFKG10DjuJXXYnhxdXK/JJayXEkZ74zKrGADyYWVZtg8fRJ9jNukljP i9UPbE8ZgefGOO//K6cnR7vfkqyEyi5ncW1jPAA3nwoqELeL -----END CERTIFICATE-----Generated at Fri Sep 25 07:19:07 2026 by rpki-client