$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd7d11a3-79a0-3022-bbbf-0ac6dba9fb28.roa File: bd7d11a3-79a0-3022-bbbf-0ac6dba9fb28.roa (raw, json) Hash identifier: EXOiJ0OGWR0XZKy9b3vpPJWFUL3Gq+bgzQemaWPJgGM= Subject key identifier: E6:DD:B0:B3:5B:96:B1:4B:75:0E:9C:95:B7:14:70:F9:56:2A:A0:96 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F06727A09A094129C3D839E00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd7d11a3-79a0-3022-bbbf-0ac6dba9fb28.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 40717 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:7a:09:a0:94:12:9c:3d:83:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=ee1a335a-4a4d-49f1-92e8-2a04c7ec20bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c1:b3:bf:20:33:7e:7d:b2:5b:70:cd:8d:27: e2:30:cc:29:dc:b0:dd:8e:06:86:be:34:09:0f:6f: da:a6:88:13:10:f2:d4:50:0e:ab:87:3d:8c:a9:34: ea:60:4f:e8:bd:7b:e2:e6:d0:d3:9b:64:22:0e:fc: 88:05:bc:c5:da:64:f0:85:6a:36:11:e9:61:1c:88: 00:e3:43:47:1e:e6:79:98:c8:0d:f5:d6:2a:5c:bc: 97:b2:e0:ad:2b:0c:9f:10:b2:f8:df:45:b9:f0:39: 33:9d:7b:fe:3c:f1:ed:07:12:8e:ca:f9:d7:ce:00: f0:bb:20:f1:32:02:2f:a1:ed:c9:6b:a4:98:b2:c9: c9:84:81:36:7a:c1:49:94:c9:11:3b:71:ac:59:76: fb:78:42:32:ed:45:34:dc:a8:da:13:1d:07:00:dc: d9:28:0c:34:9c:30:1d:b0:83:0f:db:9d:5c:d6:90: d4:69:aa:5a:9f:a7:24:c6:fc:fc:fe:b8:9f:de:3c: d6:f2:d4:e3:57:15:a2:34:1a:47:82:d1:43:60:8f: 2c:46:4c:99:19:34:67:7f:77:24:08:86:d3:0f:fd: 4a:78:e3:3b:e9:8b:f9:d1:d0:41:a8:63:5e:ad:16: e0:d9:c7:5e:07:65:86:48:6d:30:11:72:2c:5f:59: f5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:DD:B0:B3:5B:96:B1:4B:75:0E:9C:95:B7:14:70:F9:56:2A:A0:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd7d11a3-79a0-3022-bbbf-0ac6dba9fb28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:36:49:a7:10:ee:59:97:03:38:48:ef:c4:8c:09:db:15:c3: 2d:cc:98:da:27:e4:d0:a1:79:9d:04:38:48:ee:53:23:ce:be: c1:85:5e:a5:d0:1c:52:82:49:92:b9:16:a1:00:f9:1b:a3:0e: ca:5e:5b:2a:e1:b5:7b:a1:7c:74:12:ea:0a:06:0b:d5:50:03: ae:6a:f1:91:b0:cc:eb:da:94:ee:68:91:d8:df:0c:84:c8:7d: 02:9d:7b:38:d8:20:24:4f:7c:bd:f4:b2:69:59:a9:f1:a0:03: 66:e8:5b:40:bb:bc:f5:f0:4b:a3:b8:e5:b7:c6:44:e6:89:e8: 6b:a2:9e:59:95:74:52:a7:42:6d:94:4a:34:ed:dc:d7:11:79: 3c:04:af:df:6a:5e:2c:70:5a:4b:98:e9:1d:59:59:90:40:a4: eb:f8:32:0c:9a:0c:b9:55:37:a6:5e:c2:b1:02:11:51:45:77: 6b:a9:d0:e7:1e:8c:19:a3:32:ff:c9:52:5c:97:aa:8d:99:ba: 43:e6:75:3f:a1:af:00:92:3f:cc:2e:13:5a:5c:48:76:a1:ef: 0c:dd:d1:26:c2:5a:ea:60:a5:54:b6:27:80:89:cd:45:3b:ed: 64:bd:52:19:fc:8f:6b:4b:d1:8c:5e:51:85:87:d4:0e:46:46: 10:a8:a8:68 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8GcnoJoJQSnD2DngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk ZWUxYTMzNWEtNGE0ZC00OWYxLTkyZTgtMmEwNGM3ZWMyMGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcGzvyAzfn2yW3DNjSfiMMwp3LDdjgaGvjQJ D2/apogTEPLUUA6rhz2MqTTqYE/ovXvi5tDTm2QiDvyIBbzF2mTwhWo2EelhHIgA 40NHHuZ5mMgN9dYqXLyXsuCtKwyfELL430W58DkznXv+PPHtBxKOyvnXzgDwuyDx MgIvoe3Ja6SYssnJhIE2esFJlMkRO3GsWXb7eEIy7UU03KjaEx0HANzZKAw0nDAd sIMP251c1pDUaapan6ckxvz8/rif3jzW8tTjVxWiNBpHgtFDYI8sRkyZGTRnf3ck CIbTD/1KeOM76Yv50dBBqGNerRbg2cdeB2WGSG0wEXIsX1n1fwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFObdsLNblrFLdQ6clbcUcPlWKqCWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmQ3ZDExYTMtNzlhMC0z MDIyLWJiYmYtMGFjNmRiYTlmYjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCDNkmnEO5ZlwM4SO/EjAnbFcMtzJjaJ+TQoXmd BDhI7lMjzr7BhV6l0BxSgkmSuRahAPkbow7KXlsq4bV7oXx0EuoKBgvVUAOuavGR sMzr2pTuaJHY3wyEyH0CnXs42CAkT3y99LJpWanxoANm6FtAu7z18EujuOW3xkTm iehrop5ZlXRSp0JtlEo07dzXEXk8BK/fal4scFpLmOkdWVmQQKTr+DIMmgy5VTem XsKxAhFRRXdrqdDnHowZozL/yVJcl6qNmbpD5nU/oa8Akj/MLhNaXEh2oe8M3dEm wlrqYKVUtieAic1FO+1kvVIZ/I9rS9GMXlGFh9QORkYQqKho -----END CERTIFICATE-----Generated at Thu Sep 24 11:52:00 2026 by rpki-client