$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2171deda-bb9c-37d7-be5d-c42cb844e524.roa File: 2171deda-bb9c-37d7-be5d-c42cb844e524.roa (raw, json) Hash identifier: 2qkLos4qBtm3OH70uzyAha4HaETFEuhIS0X8XkcGJkY= Subject key identifier: 6F:8E:C9:0B:4B:03:41:3C:D4:8F:06:F7:2E:4E:92:F7:6B:10:D2:8F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EF01CD251157298902A94B080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2171deda-bb9c-37d7-be5d-c42cb844e524.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 396606 IP address blocks: 2001:500:13f::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:d2:51:15:72:98:90:2a:94:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=281f2e50-f56b-4a20-8292-82dad04cf34f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4d:6e:dc:81:7e:cb:5e:fc:d1:ad:8e:63:6b: 28:9f:62:b6:24:cf:e7:d3:5c:ae:ae:cc:94:26:d2: 05:fa:f0:bf:e1:f8:3a:ff:22:9d:d4:c1:1e:66:fe: 44:b0:78:db:ca:c9:19:31:01:a1:89:36:58:14:d9: 20:93:1e:8d:76:57:fd:10:09:68:cc:2a:96:62:b7: d8:6d:ae:f9:03:d4:12:64:6c:45:04:88:b4:1f:71: df:9a:43:15:2a:6f:0f:98:dc:b4:fc:00:c2:75:7d: a5:c4:80:1a:dc:c2:5b:86:ea:c8:1a:89:cb:88:6a: c1:cd:6d:95:16:1e:ef:76:03:54:41:ef:eb:4d:12: 37:61:fb:d9:ea:f9:a2:65:84:c2:63:b5:25:ef:16: 45:9e:46:38:90:bb:5d:1e:5a:79:99:2c:39:5c:03: ae:87:f8:81:60:be:db:98:3b:b1:32:39:85:50:f0: 50:c3:ad:3b:eb:68:01:eb:a7:75:b3:d5:ab:92:18: 06:24:f9:9e:d2:a3:4b:4c:e7:34:c6:56:b6:a0:73: 52:a5:00:04:78:ed:1f:a3:0c:e5:8d:04:5c:78:66: 9c:45:3e:28:2f:cc:13:8c:d6:36:c3:bf:f0:81:ee: 6a:68:32:f4:48:af:f1:b2:85:03:ca:d7:41:31:c3: 1f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:8E:C9:0B:4B:03:41:3C:D4:8F:06:F7:2E:4E:92:F7:6B:10:D2:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2171deda-bb9c-37d7-be5d-c42cb844e524.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:13f:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:00:de:74:2d:38:79:14:9d:99:2a:ac:17:2a:b6:1e:a3:28: 8e:fd:86:14:c8:61:08:f8:d9:6b:bc:60:15:1b:28:e2:7b:58: fc:13:3b:e2:87:9d:8c:73:ef:a4:00:78:bb:82:19:9f:3f:4d: 6a:b6:59:ce:15:38:7e:26:bb:32:dd:1a:19:aa:ef:9e:71:2b: 93:dc:b6:0f:4c:2c:58:7b:09:c5:f9:bf:f9:34:e6:b0:f1:1a: 6f:4e:3a:32:7c:3d:db:50:38:48:b6:0b:4c:2d:62:3c:43:27: a7:7d:cd:cf:ba:ce:d7:93:0d:41:c7:84:09:f3:8b:8e:9a:4c: 23:cc:b4:81:ef:55:08:1e:08:b1:b3:cf:1e:8e:46:90:e1:ae: b8:db:b2:d2:de:09:bf:05:2b:f8:6c:36:f5:30:9e:e9:01:dd: 73:52:3e:d6:5c:74:33:7e:aa:77:8f:2c:1f:62:86:d7:1b:ce: 56:94:e7:32:21:aa:a1:98:ea:45:02:e6:b4:c5:7b:48:67:97: b1:db:a9:c2:74:03:c3:2d:36:53:df:36:dd:85:da:9c:54:96: b7:52:27:1e:8b:83:60:86:13:b1:58:89:7b:dd:ab:d9:69:69: 39:d9:cb:11:95:da:7b:31:68:44:80:23:76:cf:af:3a:12:b1: 3b:da:9f:05 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE7wHNJRFXKYkCqUsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk MjgxZjJlNTAtZjU2Yi00YTIwLTgyOTItODJkYWQwNGNmMzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn01u3IF+y1780a2OY2son2K2JM/n01yursyU JtIF+vC/4fg6/yKd1MEeZv5EsHjbyskZMQGhiTZYFNkgkx6Ndlf9EAlozCqWYrfY ba75A9QSZGxFBIi0H3HfmkMVKm8PmNy0/ADCdX2lxIAa3MJbhurIGonLiGrBzW2V Fh7vdgNUQe/rTRI3YfvZ6vmiZYTCY7Ul7xZFnkY4kLtdHlp5mSw5XAOuh/iBYL7b mDuxMjmFUPBQw60762gB66d1s9WrkhgGJPme0qNLTOc0xla2oHNSpQAEeO0fowzl jQRceGacRT4oL8wTjNY2w7/wge5qaDL0SK/xsoUDytdBMcMfLwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFG+OyQtLA0E81I8G9y5OkvdrENKPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjE3MWRlZGEtYmI5Yy0z N2Q3LWJlNWQtYzQyY2I4NDRlNTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE/ AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAdAN50LTh5FJ2ZKqwXKrYeoyiO/YYUyGEI+Nlr vGAVGyjie1j8Ezvih52Mc++kAHi7ghmfP01qtlnOFTh+Jrsy3RoZqu+ecSuT3LYP TCxYewnF+b/5NOaw8RpvTjoyfD3bUDhItgtMLWI8Qyenfc3Pus7Xkw1Bx4QJ84uO mkwjzLSB71UIHgixs88ejkaQ4a6427LS3gm/BSv4bDb1MJ7pAd1zUj7WXHQzfqp3 jywfYobXG85WlOcyIaqhmOpFAua0xXtIZ5ex26nCdAPDLTZT3zbdhdqcVJa3Uice i4NghhOxWIl73avZaWk52csRldp7MWhEgCN2z686ErE72p8F -----END CERTIFICATE-----Generated at Tue Sep 22 08:07:33 2026 by rpki-client