$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20b942eb-4abd-3149-ac4e-652d72bc8414.roa File: 20b942eb-4abd-3149-ac4e-652d72bc8414.roa (raw, json) Hash identifier: pc17Lu+3LConeHy8HeJrxZlOJS5CSC9O7J6hBNsHjKU= Subject key identifier: C9:EA:44:B4:88:38:A5:1C:DD:9A:60:D3:8C:D9:21:67:04:AC:33:50 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F093CFDE92F2F125CC7DC9D38 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20b942eb-4abd-3149-ac4e-652d72bc8414.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 396597 IP address blocks: 2001:500:122::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:fd:e9:2f:2f:12:5c:c7:dc:9d:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=2de14fec-faa9-4ba9-a012-d479dd3a725c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1e:63:d0:2b:ea:6c:b4:64:3b:c7:82:97:21: 06:cc:25:f2:e0:54:d7:18:59:c6:be:f9:62:a3:e4: 0b:aa:68:5f:93:f5:9a:0e:c7:81:c6:17:51:6d:7a: ca:94:1d:9a:ad:66:f9:dd:27:66:86:c9:a1:6d:76: ee:f3:c9:b0:0b:bf:22:ff:55:6f:6f:fb:16:f1:1e: e9:d1:2a:b2:3e:1c:09:69:1a:c9:f6:2a:2d:bf:12: 37:e6:9a:d7:bb:7a:8d:f0:86:4e:3b:84:14:e7:5e: ab:c9:0b:49:bd:28:f9:fe:89:5d:7d:3e:62:05:2e: cf:7d:82:88:1f:a0:36:04:fe:64:1b:23:72:c2:74: 1f:d6:71:3b:d6:7d:ef:2d:13:84:30:30:f9:78:58: 9c:32:1d:2b:33:f5:95:16:18:93:95:0b:a1:19:54: ce:46:51:cf:7f:cc:09:5f:29:29:43:36:b5:d5:2e: 0b:3e:8f:c4:9c:50:0e:8a:4c:a8:c0:12:87:73:84: 75:08:fa:58:44:c6:80:03:a4:8a:71:8f:b0:6e:b9: 77:69:aa:0f:fc:66:8c:f6:14:44:c0:a8:11:8d:83: 09:f0:cf:98:0d:ec:7a:e3:a0:c2:3d:fe:78:45:49: d8:56:2c:b1:f7:1b:0f:2a:9a:40:bc:00:b5:d5:7c: 24:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:EA:44:B4:88:38:A5:1C:DD:9A:60:D3:8C:D9:21:67:04:AC:33:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20b942eb-4abd-3149-ac4e-652d72bc8414.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:b4:29:06:68:00:b4:4a:3a:0a:5b:61:fa:5a:ba:d8:01:af: b0:f6:9f:4b:bc:90:62:d3:6b:53:c2:a5:1c:b1:7c:b7:0a:76: 65:64:36:12:10:67:a4:42:0b:46:17:13:17:1f:2e:84:87:a9: 9c:c8:e3:bb:05:28:9a:db:9a:61:e1:28:e5:21:32:0f:51:bd: 7e:4e:af:22:1c:7d:db:28:53:5c:6e:c2:3c:a7:69:17:40:e8: ff:60:fc:aa:cb:10:47:ba:4c:fd:06:d0:4e:4a:97:dd:10:b3: 60:19:4d:46:78:34:5b:d0:18:3a:04:80:e7:c9:d7:1e:80:a7: f1:f8:b5:13:30:b3:6f:bd:39:5a:67:2c:62:67:ae:b1:9d:00: d4:16:b5:d6:ec:61:d1:c0:38:44:0e:aa:84:4a:0a:b5:e0:fd: d7:ab:a7:56:74:7b:50:ab:07:61:bf:ff:61:25:a6:04:91:05: b7:6c:d1:26:24:68:32:83:e1:03:0f:bc:c6:07:45:72:a3:b1: 58:af:5f:b4:1d:f0:5b:a0:cf:13:c8:02:ff:b4:93:6f:40:3c: b6:aa:d9:a4:e9:fb:e9:12:74:0b:a3:53:4c:d8:56:bd:b6:34: 4b:c3:71:ff:3b:7e:7e:0b:90:2b:e0:ae:67:5f:17:fa:a8:02: 39:5e:83:10 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8JPP3pLy8SXMfcnTgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk MmRlMTRmZWMtZmFhOS00YmE5LWEwMTItZDQ3OWRkM2E3MjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB5j0CvqbLRkO8eClyEGzCXy4FTXGFnGvvli o+QLqmhfk/WaDseBxhdRbXrKlB2arWb53SdmhsmhbXbu88mwC78i/1Vvb/sW8R7p 0SqyPhwJaRrJ9iotvxI35prXu3qN8IZOO4QU516ryQtJvSj5/oldfT5iBS7PfYKI H6A2BP5kGyNywnQf1nE71n3vLROEMDD5eFicMh0rM/WVFhiTlQuhGVTORlHPf8wJ XykpQza11S4LPo/EnFAOikyowBKHc4R1CPpYRMaAA6SKcY+wbrl3aaoP/GaM9hRE wKgRjYMJ8M+YDex646DCPf54RUnYViyx9xsPKppAvAC11XwkHQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMnqRLSIOKUc3Zpg04zZIWcErDNQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjBiOTQyZWItNGFiZC0z MTQ5LWFjNGUtNjUyZDcyYmM4NDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCDtCkGaAC0SjoKW2H6WrrYAa+w9p9LvJBi02tT wqUcsXy3CnZlZDYSEGekQgtGFxMXHy6Eh6mcyOO7BSia25ph4SjlITIPUb1+Tq8i HH3bKFNcbsI8p2kXQOj/YPyqyxBHukz9BtBOSpfdELNgGU1GeDRb0Bg6BIDnydce gKfx+LUTMLNvvTlaZyxiZ66xnQDUFrXW7GHRwDhEDqqESgq14P3Xq6dWdHtQqwdh v/9hJaYEkQW3bNEmJGgyg+EDD7zGB0Vyo7FYr1+0HfBboM8TyAL/tJNvQDy2qtmk 6fvpEnQLo1NM2Fa9tjRLw3H/O35+C5Ar4K5nXxf6qAI5XoMQ -----END CERTIFICATE-----Generated at Thu Sep 24 20:19:17 2026 by rpki-client