$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/abff4389-a8a1-36b0-8f25-2173ebce19de.roa File: abff4389-a8a1-36b0-8f25-2173ebce19de.roa (raw, json) Hash identifier: qfDaEy7wNyQ+VVYyeJF/ZbMpkbooRRdrUlPtDeSAg3c= Subject key identifier: 40:87:B3:F2:66:D5:54:FC:DA:BC:DE:6B:91:1A:C5:37:9B:79:42:36 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F23C281FFDD9672EC5D293300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/abff4389-a8a1-36b0-8f25-2173ebce19de.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 396590 IP address blocks: 2001:501:8a29::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:81:ff:dd:96:72:ec:5d:29:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=2a2f7788-17f1-4be1-8bc4-e6a8b273a5df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:44:6f:9a:49:53:23:fe:46:be:bf:0b:b5:70: 38:5f:66:c1:2c:1d:55:a0:80:e3:ea:0f:4b:59:9b: 1c:85:8c:ec:ed:d0:47:96:a4:78:46:7c:20:48:9d: 3d:62:01:2a:4d:06:b0:0b:d9:29:90:ad:29:7e:71: a0:a0:1a:cb:02:a2:4d:aa:17:42:0d:41:6b:ca:da: 3c:ad:27:48:9d:39:4d:56:c6:39:b2:c0:6e:87:97: f1:fe:00:c3:fa:59:35:86:eb:b9:8c:05:73:0c:4c: 77:0f:60:31:12:29:09:22:a0:59:28:bc:d9:c0:0c: 2c:8c:51:31:21:8a:b2:de:cc:ea:9c:8e:f8:7c:f1: a0:d5:c0:fc:4e:5a:3c:cf:e0:e8:6b:81:85:03:89: 0a:23:13:fb:44:8e:bd:e3:7f:d9:d8:fd:39:1c:0b: 60:1a:31:e6:cd:59:ba:c9:64:ba:e7:1a:bd:58:62: 38:b1:ab:e4:63:6e:e4:3a:60:c4:30:63:5e:22:95: b4:7b:1e:c6:4b:e1:6c:6b:82:40:e7:cd:74:fa:d2: 41:21:b4:80:db:1c:5b:7a:6f:95:7d:70:8e:16:00: 33:a1:00:02:bf:1e:6c:fd:40:13:97:6b:2e:56:06: 66:75:cc:8b:d2:1a:25:76:c1:9c:4f:26:ff:e1:55: 96:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:87:B3:F2:66:D5:54:FC:DA:BC:DE:6B:91:1A:C5:37:9B:79:42:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/abff4389-a8a1-36b0-8f25-2173ebce19de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:5e:10:90:84:00:9c:86:2f:01:03:0b:25:43:a4:aa:23:67: a8:21:d7:ab:6c:8c:bc:d5:0d:c3:15:cc:4b:6a:68:28:ea:d7: 25:a7:06:a9:18:4f:93:fe:05:5e:da:c3:17:3f:57:66:1e:dc: b6:18:c0:e9:48:aa:af:64:37:50:f7:0a:66:ea:98:ff:63:a8: 8e:dd:22:7c:0e:a7:55:37:eb:a0:e0:c5:2e:b6:10:b5:b5:51: 02:37:05:22:64:bb:04:3a:0f:fa:f9:bb:07:58:7f:c3:8a:84: 51:82:e6:57:9d:50:cb:19:f2:0d:d7:90:3e:bb:42:a9:cc:b7: 17:95:8a:1c:da:3b:20:6b:f7:56:90:1b:4f:8d:28:52:0f:32: b4:06:a0:47:53:29:53:78:be:25:32:d2:9b:4c:eb:eb:2e:b0: 09:d4:00:5a:e6:8d:0a:fb:2a:c9:a9:63:47:9b:64:0c:82:d1: 61:f6:3f:9a:47:bf:ef:63:71:48:34:bd:62:8d:49:78:9a:22: 78:7e:fd:88:c9:35:9d:b6:7e:03:38:17:50:69:ec:eb:a0:64: b4:a5:9a:19:d9:e9:38:e3:ea:b6:f7:34:0b:51:9d:ac:c0:64: cc:b7:75:c7:ef:57:ba:c7:b1:6f:a4:57:50:f3:3f:0f:fa:4d: d8:ae:b7:3e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8jwoH/3ZZy7F0pMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk MmEyZjc3ODgtMTdmMS00YmUxLThiYzQtZTZhOGIyNzNhNWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0RvmklTI/5Gvr8LtXA4X2bBLB1VoIDj6g9L WZschYzs7dBHlqR4RnwgSJ09YgEqTQawC9kpkK0pfnGgoBrLAqJNqhdCDUFryto8 rSdInTlNVsY5ssBuh5fx/gDD+lk1huu5jAVzDEx3D2AxEikJIqBZKLzZwAwsjFEx IYqy3szqnI74fPGg1cD8Tlo8z+Doa4GFA4kKIxP7RI6943/Z2P05HAtgGjHmzVm6 yWS65xq9WGI4savkY27kOmDEMGNeIpW0ex7GS+Fsa4JA5810+tJBIbSA2xxbem+V fXCOFgAzoQACvx5s/UATl2suVgZmdcyL0holdsGcTyb/4VWW1QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFECHs/Jm1VT82rzea5EaxTebeUI2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWJmZjQzODktYThhMS0z NmIwLThmMjUtMjE3M2ViY2UxOWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB8XhCQhACchi8BAwslQ6SqI2eoIderbIy81Q3D FcxLamgo6tclpwapGE+T/gVe2sMXP1dmHty2GMDpSKqvZDdQ9wpm6pj/Y6iO3SJ8 DqdVN+ug4MUuthC1tVECNwUiZLsEOg/6+bsHWH/DioRRguZXnVDLGfIN15A+u0Kp zLcXlYoc2jsga/dWkBtPjShSDzK0BqBHUylTeL4lMtKbTOvrLrAJ1ABa5o0K+yrJ qWNHm2QMgtFh9j+aR7/vY3FINL1ijUl4miJ4fv2IyTWdtn4DOBdQaezroGS0pZoZ 2ek44+q29zQLUZ2swGTMt3XH71e6x7FvpFdQ8z8P+k3Yrrc+ -----END CERTIFICATE-----Generated at Fri Sep 25 17:13:52 2026 by rpki-client