$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/10e8f4fa-7a7f-3a4e-b06d-2409095ad0ad.roa File: 10e8f4fa-7a7f-3a4e-b06d-2409095ad0ad.roa (raw, json) Hash identifier: 1aJp0tW/jqkOLr3zspGgDIoUF6GWM+o9xbPIQlbE5VU= Subject key identifier: 43:8B:FD:AF:94:3F:F2:46:3D:AD:21:5E:0C:17:15:45:CB:FF:88:82 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F093CFFB6022A1180942FBA80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/10e8f4fa-7a7f-3a4e-b06d-2409095ad0ad.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 396604 IP address blocks: 2001:500:122::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:ff:b6:02:2a:11:80:94:2f:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=c2d48574-1b9c-4430-ac3d-799e376d9196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3c:be:94:83:89:2a:1b:4f:f5:37:5b:ac:4c: ff:af:9a:cc:8d:11:bc:2b:bc:8e:9b:1c:f2:21:c7: a8:84:a9:25:30:97:a6:38:fa:7b:0f:5f:0a:10:30: 58:37:80:0e:bd:37:40:e7:f8:e1:e5:74:55:3e:81: 2d:67:f3:20:a9:ad:0c:d1:2f:c5:4f:03:aa:34:73: db:af:23:d3:dd:03:0b:3d:b9:7a:c8:36:c0:b0:79: dc:2c:97:37:37:ad:3a:8b:44:fa:7d:33:71:c7:51: 7b:51:1b:26:c8:93:7e:6c:6c:de:78:bf:1a:52:33: be:b0:0d:0a:1b:8f:d4:af:c2:17:7a:f8:34:ae:db: 20:46:ad:87:18:ce:fd:58:0c:17:44:ef:24:92:4f: f3:60:d1:f9:cd:95:51:54:ca:5b:7f:64:f5:d7:6d: 30:4f:88:65:79:52:33:87:15:f1:77:80:30:69:ff: d9:f5:bc:c4:f2:f5:18:fa:4a:3e:a3:9e:9a:23:40: f2:e8:66:cc:d6:4f:4b:85:dc:32:e4:8e:63:3b:ec: 89:0a:fb:1d:24:a9:d7:52:a3:93:ec:c2:5d:ff:91: 2c:25:02:b2:fe:ef:ff:16:60:e0:c9:9d:f4:0a:86: a9:35:be:76:4e:85:0c:71:b1:6b:e0:76:a0:66:b0: 42:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:8B:FD:AF:94:3F:F2:46:3D:AD:21:5E:0C:17:15:45:CB:FF:88:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/10e8f4fa-7a7f-3a4e-b06d-2409095ad0ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:1f:c5:24:1e:35:84:07:79:76:42:e7:e3:cd:8d:19:6c:6a: 3a:b2:72:01:9b:70:93:f9:86:2a:3c:c4:96:61:ba:44:5e:aa: 44:66:f8:9f:75:1f:50:1b:56:f4:2a:cd:fe:91:86:59:63:9c: 7b:21:9d:19:27:3a:4d:ba:f5:e4:d5:0b:9b:54:48:3f:f2:e6: b4:e1:ec:1b:a8:de:c6:51:c4:c0:49:17:82:e7:30:7f:a7:c5: 74:fd:7e:b0:d7:b9:a2:22:b9:c6:45:34:ee:6b:7b:19:b2:e9: a7:de:9d:1d:57:3c:36:b2:85:e6:ca:36:c1:93:70:cf:9f:80: 81:0c:e0:2d:c0:77:3b:8e:fe:97:2d:9f:8d:96:4e:9b:41:36: 44:97:69:af:37:7e:61:7c:62:77:55:04:b7:95:d4:b2:7b:df: c2:35:20:d7:58:38:0c:69:4c:a1:b4:22:3d:bb:fb:26:c4:c8: 4c:1f:41:49:0f:8d:b7:74:3b:37:ee:31:67:34:5b:01:c1:7f: c4:9c:71:a3:fd:a5:44:a1:9c:85:df:3d:0b:a0:5e:1a:1c:03: b5:21:3d:7b:c2:40:b9:c8:b8:c7:fb:63:be:a8:76:9a:b7:79: 8b:df:66:97:37:c5:dc:ff:90:fd:39:e3:c7:ea:d8:a3:ea:83: 12:89:cb:3e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8JPP+2AioRgJQvuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk YzJkNDg1NzQtMWI5Yy00NDMwLWFjM2QtNzk5ZTM3NmQ5MTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijy+lIOJKhtP9TdbrEz/r5rMjRG8K7yOmxzy IceohKklMJemOPp7D18KEDBYN4AOvTdA5/jh5XRVPoEtZ/Mgqa0M0S/FTwOqNHPb ryPT3QMLPbl6yDbAsHncLJc3N606i0T6fTNxx1F7URsmyJN+bGzeeL8aUjO+sA0K G4/Ur8IXevg0rtsgRq2HGM79WAwXRO8kkk/zYNH5zZVRVMpbf2T1120wT4hleVIz hxXxd4Awaf/Z9bzE8vUY+ko+o56aI0Dy6GbM1k9Lhdwy5I5jO+yJCvsdJKnXUqOT 7MJd/5EsJQKy/u//FmDgyZ30CoapNb52ToUMcbFr4HagZrBCWwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEOL/a+UP/JGPa0hXgwXFUXL/4iCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTBlOGY0ZmEtN2E3Zi0z YTRlLWIwNmQtMjQwOTA5NWFkMGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBMH8UkHjWEB3l2QufjzY0ZbGo6snIBm3CT+YYq PMSWYbpEXqpEZvifdR9QG1b0Ks3+kYZZY5x7IZ0ZJzpNuvXk1QubVEg/8ua04ewb qN7GUcTASReC5zB/p8V0/X6w17miIrnGRTTua3sZsumn3p0dVzw2soXmyjbBk3DP n4CBDOAtwHc7jv6XLZ+Nlk6bQTZEl2mvN35hfGJ3VQS3ldSye9/CNSDXWDgMaUyh tCI9u/smxMhMH0FJD423dDs37jFnNFsBwX/EnHGj/aVEoZyF3z0LoF4aHAO1IT17 wkC5yLjH+2O+qHaat3mL32aXN8Xc/5D9OePH6tij6oMSics+ -----END CERTIFICATE-----Generated at Tue Sep 22 12:27:57 2026 by rpki-client