$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11b7b223-1d4d-36c7-ab72-7768205ec2ab.roa File: 11b7b223-1d4d-36c7-ab72-7768205ec2ab.roa (raw, json) Hash identifier: rtKSv8U5S0ZOdprqEsYJYoHAuBY9C8+aLLt8qFrCTLQ= Subject key identifier: 81:BC:28:65:AA:B8:29:B9:2C:CC:62:5B:E1:5A:99:11:68:CD:FE:4E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F06728BF199D11358EA303340 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11b7b223-1d4d-36c7-ab72-7768205ec2ab.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 36621 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:8b:f1:99:d1:13:58:ea:30:33:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=fa597eb3-cd1d-4188-8a55-275864daeec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:04:ea:f4:7f:28:ef:2a:ec:07:f7:ca:c5:12: 79:94:e3:c2:e9:f0:d9:88:17:8c:eb:96:85:d7:78: 85:b0:18:bc:33:0a:98:e4:5a:48:44:69:61:22:7e: ae:12:05:d8:f6:fb:01:ce:6c:1b:01:da:e9:02:6c: 24:f0:2b:94:83:b6:16:db:33:86:c2:1b:16:55:37: 58:eb:e8:37:44:bd:d9:4f:2c:a2:8d:a9:fd:e7:c4: 05:56:f8:71:7f:be:e0:1a:0e:f3:77:5f:56:46:ae: 9f:b6:9d:91:16:9c:dd:1f:dd:51:30:4b:88:82:61: 13:42:09:04:46:4b:c3:c7:5a:56:7f:d8:1c:5d:bc: 61:c7:d6:fc:43:4f:b7:b3:29:cb:ea:96:a8:14:34: 4c:08:60:95:50:44:54:60:e5:4e:fc:8d:74:06:96: a3:f1:26:a3:b6:96:16:17:c7:66:8c:35:2a:40:bd: 80:98:b5:28:08:cb:11:83:2b:fd:fb:48:c1:be:16: 70:0f:02:aa:e5:5d:ec:10:2b:d5:8f:72:e7:52:f8: 14:3c:e5:13:cc:ef:a8:68:32:79:4c:a0:b9:8a:a6: f2:58:6f:2f:0b:1a:58:09:95:64:c0:95:25:b4:72: 46:8d:25:af:05:fd:15:db:e2:de:6c:41:c1:ed:aa: d6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:BC:28:65:AA:B8:29:B9:2C:CC:62:5B:E1:5A:99:11:68:CD:FE:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11b7b223-1d4d-36c7-ab72-7768205ec2ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:9b:a9:8c:55:0b:5b:20:3b:ea:66:f1:2b:48:44:6a:61:87: 2a:cb:fb:12:83:5b:32:9a:d1:0f:97:4e:6c:86:53:3c:77:93: 30:b3:e9:70:4b:eb:38:3a:7c:6c:c6:84:c4:e1:69:d0:bf:1e: e7:fb:3b:b0:32:e5:5e:66:bb:a6:57:52:06:60:7b:a9:82:ad: 48:57:79:64:64:97:2d:2d:60:e3:8a:b5:db:f9:39:ae:66:32: cc:7a:73:b6:dc:37:2c:52:ee:1a:d9:23:7e:7c:d6:9f:e9:8a: 7d:e4:71:34:cd:74:a0:ca:2c:98:8d:e8:01:31:7e:bb:88:b6: 54:47:31:31:78:f0:59:ae:d4:a2:a3:ee:ed:b4:f2:88:41:1a: 8d:a8:18:5f:5c:fd:ca:96:da:b7:56:29:fe:9a:9d:24:c0:11: 75:6d:5e:df:e0:93:39:eb:27:0b:8d:57:d4:cd:4b:84:5c:cd: 4a:78:2c:2d:dc:26:5e:89:ee:af:e5:c8:36:6c:3b:2d:63:b2: a7:50:a3:a7:4a:8f:ed:93:70:f6:7d:b1:3c:70:a4:14:b8:66: 51:fd:aa:be:dd:5e:67:58:47:09:97:49:c6:45:d4:16:4f:a7: 7a:b2:63:15:fd:1c:9f:5a:42:ca:39:45:27:85:6f:7b:90:ae: 0c:b0:ac:34 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8GcovxmdETWOowM0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk ZmE1OTdlYjMtY2QxZC00MTg4LThhNTUtMjc1ODY0ZGFlZWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQTq9H8o7yrsB/fKxRJ5lOPC6fDZiBeM65aF 13iFsBi8MwqY5FpIRGlhIn6uEgXY9vsBzmwbAdrpAmwk8CuUg7YW2zOGwhsWVTdY 6+g3RL3ZTyyijan958QFVvhxf77gGg7zd19WRq6ftp2RFpzdH91RMEuIgmETQgkE RkvDx1pWf9gcXbxhx9b8Q0+3synL6paoFDRMCGCVUERUYOVO/I10Bpaj8SajtpYW F8dmjDUqQL2AmLUoCMsRgyv9+0jBvhZwDwKq5V3sECvVj3LnUvgUPOUTzO+oaDJ5 TKC5iqbyWG8vCxpYCZVkwJUltHJGjSWvBf0V2+LebEHB7arWgQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIG8KGWquCm5LMxiW+FamRFozf5OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTFiN2IyMjMtMWQ0ZC0z NmM3LWFiNzItNzc2ODIwNWVjMmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCXm6mMVQtbIDvqZvErSERqYYcqy/sSg1symtEP l05shlM8d5Mws+lwS+s4OnxsxoTE4WnQvx7n+zuwMuVeZrumV1IGYHupgq1IV3lk ZJctLWDjirXb+TmuZjLMenO23DcsUu4a2SN+fNaf6Yp95HE0zXSgyiyYjegBMX67 iLZURzExePBZrtSio+7ttPKIQRqNqBhfXP3Kltq3Vin+mp0kwBF1bV7f4JM56ycL jVfUzUuEXM1KeCwt3CZeie6v5cg2bDstY7KnUKOnSo/tk3D2fbE8cKQUuGZR/aq+ 3V5nWEcJl0nGRdQWT6d6smMV/RyfWkLKOUUnhW97kK4MsKw0 -----END CERTIFICATE-----Generated at Sun Sep 27 02:33:05 2026 by rpki-client