$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db9ed870-0b17-3c8f-8276-213a7c9a9050.roa File: db9ed870-0b17-3c8f-8276-213a7c9a9050.roa (raw, json) Hash identifier: Lh8Ey/5RcF+z1QrSJ3bhPkwk9MbQgY6LYcG0ijYwuo4= Subject key identifier: C9:D0:38:C7:4C:AB:F3:13:81:E5:44:B5:94:35:27:11:A4:6D:A8:10 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F0ED23CA52DB6F0061FD20700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db9ed870-0b17-3c8f-8276-213a7c9a9050.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 36629 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:3c:a5:2d:b6:f0:06:1f:d2:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=35476ae4-d66a-4b97-87e4-e10200311d5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6a:8f:be:11:24:41:9a:0b:d5:51:cb:23:94: 8e:07:64:c7:95:22:af:81:b9:1d:3c:f3:71:24:0c: 4a:9a:4e:02:e0:fd:6e:05:d7:91:0f:e8:43:96:73: 66:e1:a1:63:b1:31:39:6d:29:7a:ea:78:46:0f:bd: 54:f4:d1:a1:b4:86:56:cb:90:9e:cb:35:7d:92:28: 9b:b0:23:c6:8d:34:47:81:75:1a:71:cb:0d:98:44: e9:1c:0e:ff:4d:32:97:6f:f9:e1:3e:18:77:67:60: f3:40:15:75:3d:93:53:6f:7f:5a:3f:62:9a:e9:9c: 38:a3:bd:90:dc:51:4f:72:1b:38:d6:ad:4f:c9:bb: f1:9a:b3:25:04:44:a1:a3:a6:8a:2f:cc:c4:4d:63: 32:a1:11:3f:bd:a6:07:62:31:2d:a0:f0:e7:7d:a0: 23:ff:eb:7e:99:a0:85:72:26:71:82:4c:af:7a:da: c1:e1:58:ec:8d:27:4e:c8:53:45:e8:a6:94:e5:32: 4e:2d:55:8b:53:94:70:95:75:54:ae:c9:25:bd:07: 18:b2:3f:cb:19:c4:af:e6:0c:74:a3:70:dc:43:ab: 29:62:92:f3:27:bf:21:d9:31:f4:03:7c:9d:a4:e4: 6a:68:b6:ce:5f:b1:af:e8:67:f5:5c:aa:bd:cf:d9: 90:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D0:38:C7:4C:AB:F3:13:81:E5:44:B5:94:35:27:11:A4:6D:A8:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db9ed870-0b17-3c8f-8276-213a7c9a9050.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:fb:e6:c3:bd:57:dd:fd:a8:c3:c0:cb:2c:05:aa:d6:3b:27: c0:7e:15:d4:d5:b3:0e:3e:c2:81:a3:4d:db:c4:f5:fa:f7:a8: d4:23:d2:cf:6c:aa:3e:92:8c:94:54:ee:5e:06:99:18:39:16: e0:31:51:3d:94:94:aa:0f:12:04:77:bd:2e:97:89:d0:03:72: 49:dd:9c:61:fd:80:c0:17:7d:b2:a9:9e:b8:d8:cc:49:fa:9d: 97:17:a1:ad:4c:e3:3b:66:22:6d:dd:46:28:eb:fd:e9:5b:8d: 9d:1a:65:9a:8e:58:ab:1d:bb:85:c4:cd:22:fc:a5:53:bf:b0: ca:a1:00:8a:e1:d4:24:31:f1:05:0a:16:b3:d7:3b:5a:62:db: 85:4c:b6:3e:84:4d:6d:7b:52:7d:50:5b:1e:51:5a:96:90:2e: 21:f5:24:41:49:da:5c:52:f8:df:2f:7c:f6:a7:d3:73:8d:d7: 80:58:5b:8d:c8:65:f2:8a:cc:6d:fb:54:ba:bb:15:a2:d4:c8: b8:84:99:99:2d:bc:c3:ef:38:eb:b5:94:61:69:29:02:39:4c: 64:24:5b:68:18:eb:46:fa:61:3d:f2:e6:7f:4f:77:aa:5f:87: a1:1b:a3:32:03:59:f5:2c:cd:21:0e:7c:01:47:45:b2:a7:53: ca:3d:ca:79 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8O0jylLbbwBh/SBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk MzU0NzZhZTQtZDY2YS00Yjk3LTg3ZTQtZTEwMjAwMzExZDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGqPvhEkQZoL1VHLI5SOB2THlSKvgbkdPPNx JAxKmk4C4P1uBdeRD+hDlnNm4aFjsTE5bSl66nhGD71U9NGhtIZWy5CeyzV9kiib sCPGjTRHgXUaccsNmETpHA7/TTKXb/nhPhh3Z2DzQBV1PZNTb39aP2Ka6Zw4o72Q 3FFPchs41q1PybvxmrMlBESho6aKL8zETWMyoRE/vaYHYjEtoPDnfaAj/+t+maCF ciZxgkyvetrB4VjsjSdOyFNF6KaU5TJOLVWLU5RwlXVUrsklvQcYsj/LGcSv5gx0 o3DcQ6spYpLzJ78h2TH0A3ydpORqaLbOX7Gv6Gf1XKq9z9mQmwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMnQOMdMq/MTgeVEtZQ1JxGkbagQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGI5ZWQ4NzAtMGIxNy0z YzhmLTgyNzYtMjEzYTdjOWE5MDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBj++bDvVfd/ajDwMssBarWOyfAfhXU1bMOPsKB o03bxPX696jUI9LPbKo+koyUVO5eBpkYORbgMVE9lJSqDxIEd70ul4nQA3JJ3Zxh /YDAF32yqZ642MxJ+p2XF6GtTOM7ZiJt3UYo6/3pW42dGmWajlirHbuFxM0i/KVT v7DKoQCK4dQkMfEFChaz1ztaYtuFTLY+hE1te1J9UFseUVqWkC4h9SRBSdpcUvjf L3z2p9NzjdeAWFuNyGXyisxt+1S6uxWi1Mi4hJmZLbzD7zjrtZRhaSkCOUxkJFto GOtG+mE98uZ/T3eqX4ehG6MyA1n1LM0hDnwBR0Wyp1PKPcp5 -----END CERTIFICATE-----Generated at Tue Sep 29 13:31:56 2026 by rpki-client