$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08baaa81-1c31-362c-9680-50567e86d446.roa File: 08baaa81-1c31-362c-9680-50567e86d446.roa (raw, json) Hash identifier: 8VSajpyObdwfLmdZ+oQVDfBgCRqGbpvcKEDs5Yxztb4= Subject key identifier: F8:47:B6:71:99:63:8F:41:99:69:9A:82:8A:82:5C:E6:CE:19:68:13 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F093CFCF42CFD7A933CB80040 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08baaa81-1c31-362c-9680-50567e86d446.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 396606 IP address blocks: 2001:500:122::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:fc:f4:2c:fd:7a:93:3c:b8:00:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=d0b9ac49-fb94-4b29-8753-f101f3889659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:61:2e:99:4a:b5:4b:32:5e:e7:4d:e5:99:8d: 8c:0a:06:a8:aa:09:ce:8b:c1:d4:a4:8e:db:e2:4e: 26:23:e7:19:c2:e1:2f:11:f0:cd:ae:eb:5b:37:61: cd:fc:5d:13:ff:68:df:d3:9d:6c:54:98:c2:af:77: 58:ec:b6:66:c7:e4:42:e9:9f:78:32:c2:7a:9b:85: bc:e4:1b:36:28:75:6b:8d:20:ec:75:8b:b5:56:3a: ea:a5:d6:de:8e:5f:66:ac:b8:2c:e9:99:08:f7:a9: fb:3b:0d:08:de:58:00:c5:64:e4:32:d7:e8:a6:a3: 7f:2c:45:64:1d:8c:9a:95:bf:93:d4:d3:ac:20:3f: 4e:82:6a:f8:97:77:70:6d:c9:35:72:a5:01:fa:1b: f6:9c:58:22:a3:5e:a4:1c:86:05:c7:f5:8f:d5:d4: ff:a7:5d:49:29:ca:02:d6:61:da:a4:f0:a4:2d:f3: 19:5b:1b:16:64:c5:1d:a2:79:c3:1a:26:19:64:90: d1:dd:ed:7a:7d:4c:33:99:d1:3e:2f:02:04:dd:db: bf:34:ff:a8:1c:77:8e:f8:10:27:57:1b:a3:f5:72: 54:52:ee:f8:ff:1d:f4:28:07:90:7d:d9:85:2a:39: bd:80:5c:06:ad:6a:af:2d:78:02:53:27:9f:21:5e: 9e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:47:B6:71:99:63:8F:41:99:69:9A:82:8A:82:5C:E6:CE:19:68:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08baaa81-1c31-362c-9680-50567e86d446.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:06:7a:19:6c:09:c4:60:25:97:a9:f1:e9:6c:d6:11:3b:bf: 37:28:9d:60:9e:bc:0c:33:b7:b0:8f:6a:0c:2c:d3:1b:56:98: 87:a6:65:86:89:fb:37:4a:84:09:db:2f:01:f4:5f:ee:92:64: 9a:d3:85:1f:e8:f3:4a:44:85:91:26:36:31:90:d2:7c:76:9c: cc:ed:99:a6:52:54:29:7b:c7:dc:e0:9a:71:74:ac:aa:96:a4: 91:c9:3c:f2:82:7c:96:39:7a:53:e1:56:8f:97:e5:f2:cd:77: 5b:06:57:e1:df:2e:84:37:c1:47:1e:6c:24:b4:45:7d:57:fb: 79:b7:ed:b0:f4:c7:71:20:47:53:c2:08:a0:ec:92:b6:53:eb: d6:44:da:db:8a:68:90:16:e9:d6:fd:8a:0a:04:e5:b5:99:27: f4:ea:f3:eb:d0:13:82:d7:c9:54:fe:b2:fc:80:33:0c:57:2c: 39:5d:80:d0:c3:c6:28:0b:c5:12:e1:ad:2c:9c:a7:33:cd:8b: 59:e9:7a:09:02:a5:40:37:8e:27:7c:87:6b:7c:9a:94:4a:2a: 3f:e7:f8:35:35:b2:97:e3:9b:f4:82:cc:c6:34:14:c5:4b:1a: 4a:06:85:6b:92:83:da:06:03:1b:67:b5:01:21:e7:39:f8:01: 91:45:1b:10 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8JPPz0LP16kzy4AEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk ZDBiOWFjNDktZmI5NC00YjI5LTg3NTMtZjEwMWYzODg5NjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWEumUq1SzJe503lmY2MCgaoqgnOi8HUpI7b 4k4mI+cZwuEvEfDNrutbN2HN/F0T/2jf051sVJjCr3dY7LZmx+RC6Z94MsJ6m4W8 5Bs2KHVrjSDsdYu1Vjrqpdbejl9mrLgs6ZkI96n7Ow0I3lgAxWTkMtfopqN/LEVk HYyalb+T1NOsID9Ogmr4l3dwbck1cqUB+hv2nFgio16kHIYFx/WP1dT/p11JKcoC 1mHapPCkLfMZWxsWZMUdonnDGiYZZJDR3e16fUwzmdE+LwIE3du/NP+oHHeO+BAn Vxuj9XJUUu74/x30KAeQfdmFKjm9gFwGrWqvLXgCUyefIV6eCwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPhHtnGZY49BmWmagoqCXObOGWgTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDhiYWFhODEtMWMzMS0z NjJjLTk2ODAtNTA1NjdlODZkNDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBmBnoZbAnEYCWXqfHpbNYRO783KJ1gnrwMM7ew j2oMLNMbVpiHpmWGifs3SoQJ2y8B9F/ukmSa04Uf6PNKRIWRJjYxkNJ8dpzM7Zmm UlQpe8fc4JpxdKyqlqSRyTzygnyWOXpT4VaPl+XyzXdbBlfh3y6EN8FHHmwktEV9 V/t5t+2w9MdxIEdTwgig7JK2U+vWRNrbimiQFunW/YoKBOW1mSf06vPr0BOC18lU /rL8gDMMVyw5XYDQw8YoC8US4a0snKczzYtZ6XoJAqVAN44nfIdrfJqUSio/5/g1 NbKX45v0gszGNBTFSxpKBoVrkoPaBgMbZ7UBIec5+AGRRRsQ -----END CERTIFICATE-----Generated at Tue Sep 22 18:00:17 2026 by rpki-client