$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/209ae32f-e634-38d0-ae30-cca37a438043.roa File: 209ae32f-e634-38d0-ae30-cca37a438043.roa (raw, json) Hash identifier: q2yygFbc1nxQ+sysq2dv6WXR9rk+OK8b87KbWR3/H1o= Subject key identifier: 71:C9:91:BC:14:49:05:EA:FC:FD:20:9E:E1:11:52:4E:D7:E7:CC:5F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F23C28120831B5127C094DA60 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/209ae32f-e634-38d0-ae30-cca37a438043.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 396567 IP address blocks: 2001:501:8a29::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:81:20:83:1b:51:27:c0:94:da:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=9ad87956-6889-4e73-83d0-c1b06c659aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f6:bc:a1:59:cc:9d:56:71:69:39:9b:06:90: 25:e7:3b:e3:4e:b7:c8:38:73:35:90:91:c4:45:7d: 3e:c7:70:b4:ea:4a:b9:62:b2:52:c0:19:86:c8:8d: a5:fe:67:70:73:bf:49:b0:1f:5c:d4:f3:67:a0:26: 21:ad:f1:44:fa:1d:de:19:a8:93:d3:11:38:18:fa: 16:11:c8:23:75:a7:f2:74:58:0a:97:6b:27:16:3a: 89:2f:7f:d7:97:ed:d6:3a:4b:37:8c:27:a6:08:ae: 0d:05:a9:1b:9a:4b:03:ef:c1:d9:0c:e5:93:c3:a4: 21:bb:84:1b:f5:3a:2a:35:f1:8d:f4:f5:8a:91:5b: b7:c8:ad:3a:60:08:64:72:21:54:14:99:18:4e:39: 72:9b:cb:23:39:5f:3d:86:05:a0:35:08:1e:9c:00: 23:37:86:47:5e:2e:5e:59:f0:7e:f8:e3:e2:28:5e: 5f:63:df:4f:06:7f:0d:e2:b6:0f:8c:c1:87:d3:93: dc:f4:76:5d:54:88:99:97:88:cd:b6:c7:5a:58:84: e2:af:75:17:0c:ae:4b:2a:00:32:22:b1:56:3d:99: 3b:53:4a:6f:2a:f4:58:4a:1e:ba:64:7b:c3:dc:a1: 41:48:ea:a2:39:12:82:12:65:a8:08:fc:53:79:a3: db:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C9:91:BC:14:49:05:EA:FC:FD:20:9E:E1:11:52:4E:D7:E7:CC:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/209ae32f-e634-38d0-ae30-cca37a438043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:bc:9e:1d:78:a1:d0:b4:ba:20:9c:3d:6d:01:43:63:f0:8d: 71:21:a4:67:ef:49:47:69:39:61:79:dc:90:fb:44:d4:ab:da: b3:93:85:d9:88:5b:bc:6b:d9:9b:90:c8:52:29:65:5f:d0:3d: 67:b7:0f:38:16:6b:b3:d0:a8:1f:c1:6b:46:93:02:97:82:14: 64:07:ae:da:ab:b0:da:9d:c6:bf:99:aa:b4:34:95:d9:cc:bc: b4:12:76:a6:86:f9:be:90:ab:a0:36:21:b8:de:74:a6:29:a1: 5d:b2:3f:38:3a:0f:cc:14:4a:7d:15:7f:ce:ef:99:bd:36:51: 1a:90:36:f8:72:8d:3f:10:31:29:7a:cc:b3:7f:7f:bf:a6:54: d0:3b:24:a7:73:03:88:99:bd:c5:3f:f4:ee:a4:6a:4f:88:a6: 46:bf:d2:97:fb:72:eb:0f:46:60:cf:1d:a0:42:85:05:74:f3: 00:45:c0:c2:57:a6:9e:51:ea:c5:94:c0:37:54:49:bc:03:99: f4:ad:2c:fd:0c:37:c7:c9:fb:3e:4e:a4:04:84:94:19:5c:fa: b8:c0:99:e4:5b:5d:cf:94:aa:be:70:a5:09:cb:7c:d3:b4:95: a6:40:70:56:ad:b9:53:86:f4:ad:89:77:04:88:9d:a2:d1:2f: ba:73:ee:9d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8jwoEggxtRJ8CU2mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk OWFkODc5NTYtNjg4OS00ZTczLTgzZDAtYzFiMDZjNjU5YWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/a8oVnMnVZxaTmbBpAl5zvjTrfIOHM1kJHE RX0+x3C06kq5YrJSwBmGyI2l/mdwc79JsB9c1PNnoCYhrfFE+h3eGaiT0xE4GPoW EcgjdafydFgKl2snFjqJL3/Xl+3WOks3jCemCK4NBakbmksD78HZDOWTw6Qhu4Qb 9ToqNfGN9PWKkVu3yK06YAhkciFUFJkYTjlym8sjOV89hgWgNQgenAAjN4ZHXi5e WfB++OPiKF5fY99PBn8N4rYPjMGH05Pc9HZdVIiZl4jNtsdaWITir3UXDK5LKgAy IrFWPZk7U0pvKvRYSh66ZHvD3KFBSOqiORKCEmWoCPxTeaPbowIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHHJkbwUSQXq/P0gnuERUk7X58xfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjA5YWUzMmYtZTYzNC0z OGQwLWFlMzAtY2NhMzdhNDM4MDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAwvJ4deKHQtLognD1tAUNj8I1xIaRn70lHaTlh edyQ+0TUq9qzk4XZiFu8a9mbkMhSKWVf0D1ntw84Fmuz0KgfwWtGkwKXghRkB67a q7Danca/maq0NJXZzLy0Enamhvm+kKugNiG43nSmKaFdsj84Og/MFEp9FX/O75m9 NlEakDb4co0/EDEpesyzf3+/plTQOySncwOImb3FP/TupGpPiKZGv9KX+3LrD0Zg zx2gQoUFdPMARcDCV6aeUerFlMA3VEm8A5n0rSz9DDfHyfs+TqQEhJQZXPq4wJnk W13PlKq+cKUJy3zTtJWmQHBWrblThvStiXcEiJ2i0S+6c+6d -----END CERTIFICATE-----Generated at Tue Sep 22 19:33:10 2026 by rpki-client