$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2bea7e3-7cdd-36f6-8499-064796ff6f49.roa File: c2bea7e3-7cdd-36f6-8499-064796ff6f49.roa (raw, json) Hash identifier: QF+AbXGh+YzTrrT9CtOLutTtazZU+xLKVn2Lv/hD+/w= Subject key identifier: E2:77:B7:A3:7C:8E:B3:72:B4:EA:42:9D:E0:FA:A7:BC:31:44:2F:23 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EFCACE234ABA6F78432D06680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2bea7e3-7cdd-36f6-8499-064796ff6f49.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 396565 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:e2:34:ab:a6:f7:84:32:d0:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=f99b668e-0253-4d0e-b1c5-dced288c6844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:85:d0:f2:de:ea:2f:49:f9:ad:28:12:48:b1: eb:79:00:a3:7a:dc:ab:49:cf:79:99:19:37:00:9c: d5:5f:9e:f7:90:aa:48:b5:14:ee:57:d9:60:2b:92: 50:cc:e9:a0:56:92:d6:ee:c7:38:4a:80:85:52:53: aa:b7:d2:88:c8:36:92:1f:96:45:56:42:80:ee:42: 31:f6:4e:28:c9:67:2b:5e:bd:48:d4:1d:0e:d5:38: 24:03:1a:7a:30:bc:d4:c0:ec:09:07:1a:1a:b1:2f: 9d:85:e9:4b:fb:b9:f2:72:cc:7e:f9:d9:8a:9b:12: 97:89:a8:c7:cf:ff:78:ae:b6:2e:9c:48:4f:09:43: aa:18:f0:29:6a:4e:ce:6f:1e:62:d9:9d:27:cb:47: 82:aa:80:77:33:dc:cc:fe:90:da:f1:05:0d:a3:54: c0:9b:46:79:aa:4c:c1:3d:a4:7f:4d:07:4b:24:12: 35:90:c8:3b:b3:3b:17:ed:a1:a6:81:f7:f3:3e:de: 0f:32:5b:9b:35:80:56:a3:fa:2c:a7:4c:3b:2f:ad: 61:e7:63:52:7f:28:68:f8:d8:94:42:29:64:d9:bd: f6:36:39:15:45:3c:2b:57:ef:b3:74:c3:18:48:75: de:b5:69:97:38:5e:bf:80:2b:f6:5f:4c:86:ff:97: 6f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:77:B7:A3:7C:8E:B3:72:B4:EA:42:9D:E0:FA:A7:BC:31:44:2F:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2bea7e3-7cdd-36f6-8499-064796ff6f49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:e6:c0:c8:7a:99:09:c5:bb:cd:a5:28:6f:23:22:16:07:98: 87:29:11:8c:d9:e6:40:70:b0:01:00:59:36:9c:1d:ac:a0:d1: 94:56:69:df:b2:36:6f:ae:67:7c:7b:77:a1:b8:ed:79:b8:ae: 92:65:a4:0d:51:4e:7f:c1:10:27:c9:95:c1:50:12:a7:66:95: cb:49:da:32:b9:ef:49:dd:c8:a7:05:1b:74:ac:b5:04:6e:e2: ce:00:93:ac:22:d9:1e:e7:ab:f2:82:e7:7d:c9:94:f3:02:d1: 2f:6c:5a:0f:2d:23:d9:89:ba:cc:07:ca:4d:16:01:51:2c:06: d1:83:8c:b0:ba:78:b7:a2:b3:f8:7a:6b:42:1c:f0:11:cd:4a: a7:0e:e0:df:db:f2:8c:41:52:49:16:4d:56:55:0b:21:f0:68: ee:20:35:b9:34:a1:4a:71:a6:33:3b:01:2c:fd:38:a1:38:d9: 0a:7a:91:00:64:e2:9f:fa:68:d5:8e:5e:95:ca:ac:21:be:3f: 8a:fb:f1:3b:04:d3:7e:63:dd:8f:5e:84:57:45:1b:22:8a:08: 8c:19:4d:18:33:c0:b5:e1:72:82:68:a5:5e:ce:cf:a4:0f:fb: c8:e6:9c:74:70:8a:35:50:53:3d:af:2f:09:e4:5a:84:d5:bc: e0:06:ff:38 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE78rOI0q6b3hDLQZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk Zjk5YjY2OGUtMDI1My00ZDBlLWIxYzUtZGNlZDI4OGM2ODQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoXQ8t7qL0n5rSgSSLHreQCjetyrSc95mRk3 AJzVX573kKpItRTuV9lgK5JQzOmgVpLW7sc4SoCFUlOqt9KIyDaSH5ZFVkKA7kIx 9k4oyWcrXr1I1B0O1TgkAxp6MLzUwOwJBxoasS+dhelL+7nycsx++dmKmxKXiajH z/94rrYunEhPCUOqGPApak7Obx5i2Z0ny0eCqoB3M9zM/pDa8QUNo1TAm0Z5qkzB PaR/TQdLJBI1kMg7szsX7aGmgffzPt4PMlubNYBWo/osp0w7L61h52NSfyho+NiU Qilk2b32NjkVRTwrV++zdMMYSHXetWmXOF6/gCv2X0yG/5dvbwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOJ3t6N8jrNytOpCneD6p7wxRC8jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzJiZWE3ZTMtN2NkZC0z NmY2LTg0OTktMDY0Nzk2ZmY2ZjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAT5sDIepkJxbvNpShvIyIWB5iHKRGM2eZAcLAB AFk2nB2soNGUVmnfsjZvrmd8e3ehuO15uK6SZaQNUU5/wRAnyZXBUBKnZpXLSdoy ue9J3cinBRt0rLUEbuLOAJOsItke56vygud9yZTzAtEvbFoPLSPZibrMB8pNFgFR LAbRg4ywuni3orP4emtCHPARzUqnDuDf2/KMQVJJFk1WVQsh8GjuIDW5NKFKcaYz OwEs/TihONkKepEAZOKf+mjVjl6Vyqwhvj+K+/E7BNN+Y92PXoRXRRsiigiMGU0Y M8C14XKCaKVezs+kD/vI5px0cIo1UFM9ry8J5FqE1bzgBv84 -----END CERTIFICATE-----Generated at Sun Sep 27 21:12:45 2026 by rpki-client