$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d30a3c0-ee87-3ba7-b316-38df62a5c409.roa File: 2d30a3c0-ee87-3ba7-b316-38df62a5c409.roa (raw, json) Hash identifier: oF87CZzFq5TP2u9iy1qS8kn9OTyVvhyueuM2QZKENdE= Subject key identifier: 2C:EC:16:AE:C4:85:FF:77:60:80:42:34:51:AC:7A:25:AF:C2:D9:A4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EF01CD378809001518047B0E0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d30a3c0-ee87-3ba7-b316-38df62a5c409.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 10515 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:d3:78:80:90:01:51:80:47:b0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=f9ae3109-c2fc-457b-ad9f-40e4ca7f3c12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:6b:eb:c3:71:f5:19:67:24:f1:85:83:61:3a: f8:b0:df:ce:c3:e8:1e:71:27:6a:fe:54:85:56:4b: 82:2a:da:87:4f:a6:0f:fc:ca:60:4f:f3:74:01:5a: e5:d2:ba:c0:31:11:24:db:0b:26:96:48:7e:c5:c8: 11:b5:d1:c3:1a:38:cc:82:8f:6b:f4:62:0e:ea:ad: 70:f3:fb:d8:a0:dd:57:fb:2a:bc:a5:9e:4a:5f:d1: 68:87:bb:f8:79:39:4a:be:7d:ed:01:70:ef:d4:d5: 11:83:84:32:5f:6e:22:3e:a3:a7:9e:69:ab:18:8c: 15:b6:53:2c:94:78:5c:c8:b4:e5:41:f3:e8:48:a0: 6f:11:df:5a:67:9f:bf:54:76:35:d3:02:8b:26:b6: bc:28:df:1f:55:95:2e:ce:f1:52:69:57:99:d9:88: 03:f1:ae:70:c8:c5:8d:f5:54:11:b5:7f:4f:58:c3: 92:50:de:1f:3a:4b:42:ec:d6:87:bf:14:55:cb:ff: 0e:66:13:7f:ab:46:d7:eb:78:a5:6d:99:09:1d:89: cd:62:84:d5:2f:9c:a2:f8:a3:6d:4a:c1:8e:e2:63: 0d:19:5b:96:a1:1e:70:f9:17:ae:da:60:9d:e8:1a: d5:27:97:62:3e:98:af:1a:0a:ef:dd:77:24:65:b7: 71:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:EC:16:AE:C4:85:FF:77:60:80:42:34:51:AC:7A:25:AF:C2:D9:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d30a3c0-ee87-3ba7-b316-38df62a5c409.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:b7:93:c9:cf:ea:a9:00:d8:39:ec:ad:fc:b8:85:3d:c8:55: 76:9c:3a:61:8f:7a:34:a5:e4:fe:e3:37:8f:64:19:56:81:1c: 10:23:40:d9:97:c1:cf:15:84:93:55:21:c8:9a:81:96:b1:40: 75:f1:19:2d:f2:bf:51:e2:78:78:44:ae:4a:df:3a:d9:55:5f: 49:5f:11:b9:09:35:1c:09:13:2f:2b:ee:0f:9d:f4:9c:1e:fd: 2b:d7:8a:52:eb:66:dd:92:eb:19:ca:eb:f0:94:c3:d1:c6:a1: cb:b2:a1:5c:f8:76:f7:4a:ce:4a:2c:f9:76:08:fa:1d:bf:35: 88:85:f9:2a:c5:4f:9e:4a:dc:7c:73:0b:db:08:2c:f6:c6:1b: f7:23:1c:e5:20:16:c1:de:e0:9b:75:dc:3c:a4:bc:e2:b7:77: d0:be:c1:39:3a:dc:f8:aa:2f:c6:88:44:10:27:64:f1:1d:e0: 64:ff:d1:fe:e1:62:78:6e:42:7a:cf:7c:57:9d:80:13:2c:8c: 64:bb:e3:30:73:39:d1:81:61:a4:75:43:3b:6a:9b:51:56:09: 38:30:6c:86:6c:fb:9d:ef:af:30:4f:c6:bc:42:58:20:0f:1b: f3:7c:df:1f:ce:1f:4b:53:d8:97:34:35:bf:13:29:dd:0b:63: e4:e5:3e:40 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7wHNN4gJABUYBHsOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk ZjlhZTMxMDktYzJmYy00NTdiLWFkOWYtNDBlNGNhN2YzYzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA92vrw3H1GWck8YWDYTr4sN/Ow+gecSdq/lSF VkuCKtqHT6YP/MpgT/N0AVrl0rrAMREk2wsmlkh+xcgRtdHDGjjMgo9r9GIO6q1w 8/vYoN1X+yq8pZ5KX9Foh7v4eTlKvn3tAXDv1NURg4QyX24iPqOnnmmrGIwVtlMs lHhcyLTlQfPoSKBvEd9aZ5+/VHY10wKLJra8KN8fVZUuzvFSaVeZ2YgD8a5wyMWN 9VQRtX9PWMOSUN4fOktC7NaHvxRVy/8OZhN/q0bX63ilbZkJHYnNYoTVL5yi+KNt SsGO4mMNGVuWoR5w+Reu2mCd6BrVJ5diPpivGgrv3XckZbdx8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCzsFq7Ehf93YIBCNFGseiWvwtmkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmQzMGEzYzAtZWU4Ny0z YmE3LWIzMTYtMzhkZjYyYTVjNDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAu3k8nP6qkA2Dnsrfy4hT3IVXacOmGPejSl5P7jN49kGVaBHBAj QNmXwc8VhJNVIciagZaxQHXxGS3yv1HieHhErkrfOtlVX0lfEbkJNRwJEy8r7g+d 9Jwe/SvXilLrZt2S6xnK6/CUw9HGocuyoVz4dvdKzkos+XYI+h2/NYiF+SrFT55K 3HxzC9sILPbGG/cjHOUgFsHe4Jt13DykvOK3d9C+wTk63PiqL8aIRBAnZPEd4GT/ 0f7hYnhuQnrPfFedgBMsjGS74zBzOdGBYaR1Qztqm1FWCTgwbIZs+53vrzBPxrxC WCAPG/N83x/OH0tT2Jc0Nb8TKd0LY+TlPkA= -----END CERTIFICATE-----Generated at Tue Sep 22 16:54:53 2026 by rpki-client