$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d13daf58-78a7-37b3-8c65-2e98fba1c338.roa File: d13daf58-78a7-37b3-8c65-2e98fba1c338.roa (raw, json) Hash identifier: HIXQX9+L6WmBrSZG1lKZBF86fgfYKexW+kpFQCLaiV4= Subject key identifier: C3:0F:81:CE:02:40:29:9E:FC:B9:F0:DF:40:C0:29:51:EC:7A:40:26 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EFCACE3FD194716663E2BBC62 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d13daf58-78a7-37b3-8c65-2e98fba1c338.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 396605 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:e3:fd:19:47:16:66:3e:2b:bc:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=47a1a9cb-7663-45f7-adda-1ea878d1976c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3e:50:9a:cc:5d:bf:3c:4f:76:57:ad:e5:b9: 8b:10:80:77:9a:c6:1d:60:c4:1b:20:c3:1c:c1:36: a2:bb:41:aa:48:01:2b:b3:7a:b7:a3:15:a8:0f:8e: 37:ec:d5:4c:ea:c0:0f:d2:d4:e3:0c:bb:9d:fe:82: d1:db:4f:05:a1:9c:c9:03:1e:28:53:86:32:f6:7b: 5f:cb:e8:51:ac:0e:0c:84:7f:4c:a0:70:31:20:04: ea:58:f9:90:80:4a:6f:2b:30:1e:8e:08:77:c6:97: 92:97:ea:b3:d3:33:b0:cd:02:ef:c6:15:fb:c1:70: af:09:8d:27:a5:af:21:b3:33:06:b7:ac:93:3a:32: b7:e3:fe:88:78:30:ca:a2:36:91:df:4d:92:16:0f: 4e:3a:0d:6c:27:74:4d:3f:78:2a:e5:d6:d8:15:a4: 97:8d:ce:ec:66:12:7c:2b:63:86:f3:6e:41:da:55: b9:cb:91:55:3e:4c:24:ff:7c:15:ea:a8:f7:5e:0a: ec:1b:4c:3e:13:59:90:46:c4:47:b1:61:40:52:c5: 22:68:e0:11:b4:e2:f1:7f:8d:08:7e:f4:ae:9f:6f: 40:16:eb:45:13:41:e5:25:05:d2:88:2f:07:ee:20: 62:48:76:e6:20:95:1d:b9:e7:e5:43:1a:b1:2c:30: 82:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:0F:81:CE:02:40:29:9E:FC:B9:F0:DF:40:C0:29:51:EC:7A:40:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d13daf58-78a7-37b3-8c65-2e98fba1c338.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:fd:08:0e:b5:08:ec:fc:44:61:05:a5:90:25:0c:33:e7:b6: 74:6a:bc:0e:a5:c2:41:fc:69:a6:9a:3f:8d:73:ee:72:4e:79: 8f:64:5f:83:05:9c:3d:ef:8d:f0:f7:74:1d:03:15:7e:96:7c: ec:91:98:5b:50:32:59:62:77:07:dc:be:c0:06:79:aa:a5:c4: 20:eb:27:55:64:09:e0:c8:44:0c:82:61:8a:e7:b4:47:bd:d9: f0:57:7c:ff:99:82:1e:96:42:94:2d:d5:e7:eb:0e:3e:32:ce: ad:7e:5d:6b:cb:d9:69:94:cf:89:45:9b:16:bd:1e:55:2b:a7: 74:b9:a6:4f:9b:bf:60:50:0c:8c:3c:09:c0:b2:7c:a4:9c:c2: 91:dd:59:07:92:89:23:85:fe:3e:40:f7:95:9b:f1:e0:c5:47: ab:3c:17:0d:46:8f:f7:a1:3a:f2:87:4a:bd:76:62:68:15:ee: ef:6e:24:09:4d:87:89:48:aa:37:76:02:4e:d0:bc:15:f3:75: 05:a7:30:a7:cb:d7:52:3f:5b:83:e0:3a:ac:5b:eb:23:61:e9: 1d:bd:7c:d5:90:95:c3:09:d7:ce:d6:e1:32:83:8b:30:cd:78: f4:c4:05:26:63:38:6e:90:50:3e:e7:78:84:de:78:2a:f8:a8: 6a:6a:62:d5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE78rOP9GUcWZj4rvGIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk NDdhMWE5Y2ItNzY2My00NWY3LWFkZGEtMWVhODc4ZDE5NzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApT5QmsxdvzxPdlet5bmLEIB3msYdYMQbIMMc wTaiu0GqSAErs3q3oxWoD4437NVM6sAP0tTjDLud/oLR208FoZzJAx4oU4Yy9ntf y+hRrA4MhH9MoHAxIATqWPmQgEpvKzAejgh3xpeSl+qz0zOwzQLvxhX7wXCvCY0n pa8hszMGt6yTOjK34/6IeDDKojaR302SFg9OOg1sJ3RNP3gq5dbYFaSXjc7sZhJ8 K2OG825B2lW5y5FVPkwk/3wV6qj3XgrsG0w+E1mQRsRHsWFAUsUiaOARtOLxf40I fvSun29AFutFE0HlJQXSiC8H7iBiSHbmIJUdueflQxqxLDCCuQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMMPgc4CQCme/Lnw30DAKVHsekAmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDEzZGFmNTgtNzhhNy0z N2IzLThjNjUtMmU5OGZiYTFjMzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBS/QgOtQjs/ERhBaWQJQwz57Z0arwOpcJB/Gmm mj+Nc+5yTnmPZF+DBZw9743w93QdAxV+lnzskZhbUDJZYncH3L7ABnmqpcQg6ydV ZAngyEQMgmGK57RHvdnwV3z/mYIelkKULdXn6w4+Ms6tfl1ry9lplM+JRZsWvR5V K6d0uaZPm79gUAyMPAnAsnyknMKR3VkHkokjhf4+QPeVm/HgxUerPBcNRo/3oTry h0q9dmJoFe7vbiQJTYeJSKo3dgJO0LwV83UFpzCny9dSP1uD4DqsW+sjYekdvXzV kJXDCdfO1uEyg4swzXj0xAUmYzhukFA+53iE3ngq+KhqamLV -----END CERTIFICATE-----Generated at Sun Sep 27 15:05:28 2026 by rpki-client