$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb606222-6220-3f08-8409-0d26b6a5a171.roa File: fb606222-6220-3f08-8409-0d26b6a5a171.roa (raw, json) Hash identifier: hRB68/iOFrZbqScw/bFn0RRmw0WesAaXNmZ5S1ZBY8U= Subject key identifier: 18:B0:C7:40:E3:9A:03:22:84:FD:07:2A:4D:0A:97:56:73:25:81:EC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F0672860D7E65E64C0109A500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb606222-6220-3f08-8409-0d26b6a5a171.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 396543 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:86:0d:7e:65:e6:4c:01:09:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=46ee9a43-08e1-450c-b7c2-99f849d29bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f3:9e:93:c4:f0:96:1d:97:37:8b:9a:7b:86: 4e:87:b5:df:3a:d5:84:af:51:03:f5:5b:a8:57:e8: 22:d4:50:cd:f4:87:a8:34:a5:44:df:f5:1d:ab:30: 05:25:9b:0d:a1:42:ab:8b:74:ca:2a:2d:d3:98:85: 81:97:b7:90:cd:a7:40:39:3a:be:ae:f3:c2:9b:80: 35:a7:a9:9a:ea:7d:fc:a0:e9:6f:e0:95:31:31:0f: c4:2f:b8:a5:08:23:94:75:7f:e1:46:a6:9f:e7:32: 8a:9b:5f:d1:b8:21:ce:52:8c:4d:b6:22:e5:e7:f0: 6d:d1:67:17:03:57:58:e5:f1:ce:03:a6:ed:b8:d0: 4a:5c:f9:04:ad:af:0a:08:ad:66:4e:f1:e4:4f:57: 6b:1b:29:93:f2:5a:57:01:73:1d:ce:69:a3:d0:61: 37:ad:44:2b:fc:ca:13:6c:5a:a6:2d:93:7a:f2:99: 4c:65:e0:49:f2:8a:9d:63:7b:81:95:93:fd:9d:3b: 54:19:f6:2b:31:a5:b8:63:08:2f:0c:4c:cc:73:ab: 83:c2:e6:70:d2:da:e3:f3:24:bc:d9:8e:45:8a:2c: 25:f8:d0:b3:fd:b4:47:02:2a:e6:25:27:89:c7:0d: 26:86:09:55:0f:e5:0d:77:46:45:8d:9f:68:48:c5: b5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B0:C7:40:E3:9A:03:22:84:FD:07:2A:4D:0A:97:56:73:25:81:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb606222-6220-3f08-8409-0d26b6a5a171.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:83:82:90:d1:ad:39:22:5b:7d:9c:03:85:d4:a1:4b:d9:e5: 3d:c5:26:a5:ca:04:b4:2d:3a:7d:d9:13:1a:c0:f9:9b:31:02: 4c:9d:0e:47:d7:3b:dd:c2:e3:6f:29:73:35:1f:78:28:61:f0: 09:f0:cd:07:ea:98:f0:9b:3b:c5:60:fd:58:7a:b0:2b:57:cd: c6:9c:61:5b:97:de:53:f9:6b:ee:9b:eb:83:4b:78:13:12:00: d0:a0:7e:3e:ba:c8:19:f0:23:2f:e1:f9:ac:22:ea:f3:f6:d4: 3e:9c:82:45:cb:21:7e:47:7f:d0:46:a6:86:8b:2b:7c:e9:2a: 06:f6:0b:a1:24:19:9a:f1:0b:aa:d1:f3:a1:f6:dc:90:bd:c0: 0c:4e:74:d5:61:01:13:fa:6e:fe:98:9e:38:f2:f6:3b:f2:e6: 57:86:ff:01:07:32:32:6b:20:2e:f3:6b:fb:64:27:47:c8:1b: 08:43:e5:f6:71:ae:b0:99:f8:78:32:9e:62:e2:8b:f7:6d:6f: 06:d8:8e:f9:6f:d5:f6:f0:05:d6:7a:b2:f9:ff:4d:06:39:f7: a7:66:0f:c6:c4:7a:eb:4a:93:90:13:71:a7:f6:c9:de:de:6f: e6:a8:66:21:57:59:79:9b:af:04:36:42:05:ae:bd:7e:f5:f3: a3:2e:53:89 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8GcoYNfmXmTAEJpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk NDZlZTlhNDMtMDhlMS00NTBjLWI3YzItOTlmODQ5ZDI5YmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfOek8Twlh2XN4uae4ZOh7XfOtWEr1ED9Vuo V+gi1FDN9IeoNKVE3/UdqzAFJZsNoUKri3TKKi3TmIWBl7eQzadAOTq+rvPCm4A1 p6ma6n38oOlv4JUxMQ/EL7ilCCOUdX/hRqaf5zKKm1/RuCHOUoxNtiLl5/Bt0WcX A1dY5fHOA6btuNBKXPkEra8KCK1mTvHkT1drGymT8lpXAXMdzmmj0GE3rUQr/MoT bFqmLZN68plMZeBJ8oqdY3uBlZP9nTtUGfYrMaW4YwgvDEzMc6uDwuZw0trj8yS8 2Y5Fiiwl+NCz/bRHAirmJSeJxw0mhglVD+UNd0ZFjZ9oSMW1nwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBiwx0DjmgMihP0HKk0Kl1ZzJYHsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmI2MDYyMjItNjIyMC0z ZjA4LTg0MDktMGQyNmI2YTVhMTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCUg4KQ0a05Ilt9nAOF1KFL2eU9xSalygS0LTp9 2RMawPmbMQJMnQ5H1zvdwuNvKXM1H3goYfAJ8M0H6pjwmzvFYP1YerArV83GnGFb l95T+Wvum+uDS3gTEgDQoH4+usgZ8CMv4fmsIurz9tQ+nIJFyyF+R3/QRqaGiyt8 6SoG9guhJBma8Quq0fOh9tyQvcAMTnTVYQET+m7+mJ448vY78uZXhv8BBzIyayAu 82v7ZCdHyBsIQ+X2ca6wmfh4Mp5i4ov3bW8G2I75b9X28AXWerL5/00GOfenZg/G xHrrSpOQE3Gn9sne3m/mqGYhV1l5m68ENkIFrr1+9fOjLlOJ -----END CERTIFICATE-----Generated at Mon Sep 28 05:45:21 2026 by rpki-client