$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33369ccd-2dee-3d73-9832-2ba7ee50f4dc.roa File: 33369ccd-2dee-3d73-9832-2ba7ee50f4dc.roa (raw, json) Hash identifier: +BKlcn70aF+BedZ8vp4xowO3MJUntey/EFzx28xp+II= Subject key identifier: 89:EA:51:72:1C:B2:52:F6:A6:35:D4:E0:65:53:39:98:4E:C4:96:21 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F06728243A55F88462D713820 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33369ccd-2dee-3d73-9832-2ba7ee50f4dc.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 397198 IP address blocks: 2001:500:124::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:82:43:a5:5f:88:46:2d:71:38:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=a0826aff-1836-4a74-afc9-4f49ad139f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c3:fb:0e:2d:c1:22:f3:05:4b:04:e9:b2:a1: 11:6b:bf:cc:4d:8b:e2:7b:42:65:70:fd:57:04:85: 4a:e6:c3:56:40:4d:3b:84:b9:52:43:56:64:79:aa: 3c:a3:c1:f3:32:e4:c6:41:b4:30:23:1a:1b:00:2b: 73:83:f8:f2:be:9d:cb:c2:7e:1f:b5:9c:0d:b4:20: d5:b6:a5:23:5b:9c:97:36:44:21:cf:2d:55:26:dd: 82:b2:9f:e7:7c:50:19:96:b3:c9:07:8b:21:14:05: f9:27:df:e4:5d:b2:6f:6b:5e:c6:7b:17:05:3e:1a: 7f:e8:5e:2a:bf:23:53:5d:8e:56:0a:83:fd:5c:2e: 7c:e6:a8:fd:e1:5b:07:4d:16:2f:c1:2f:a8:2e:98: 45:05:ca:a8:f3:aa:0f:9a:64:7a:84:b8:72:8b:e6: 62:7f:29:1e:82:e6:9c:e1:b9:cd:bc:05:a5:a3:9d: 4c:58:04:70:a2:45:65:09:8f:d3:fa:1e:17:a4:40: 84:53:40:ff:b1:0e:5d:24:60:5c:7f:87:5e:db:86: 5f:64:80:17:b8:f1:25:78:97:d5:ab:5c:bd:8f:3e: d8:4a:82:06:ac:03:b7:72:f0:8b:50:54:95:51:c3: 82:76:af:49:5f:ad:b8:c2:2d:e1:47:ea:cb:62:91: 6a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:EA:51:72:1C:B2:52:F6:A6:35:D4:E0:65:53:39:98:4E:C4:96:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33369ccd-2dee-3d73-9832-2ba7ee50f4dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:124:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:31:9e:02:73:1c:37:b8:35:49:27:31:36:8e:c1:ad:3c:af: 3c:79:82:a6:15:4b:b9:9b:33:78:8f:7b:c5:61:a1:bd:e0:62: 27:4b:e8:6c:fc:33:05:42:80:92:7e:52:df:cd:e5:e9:fb:da: 0b:74:2b:b9:90:db:bc:59:0e:fd:5f:5e:23:14:42:87:ac:16: 61:0e:54:7f:44:4c:a1:1a:41:5d:1f:51:c1:66:bf:7a:5a:f2: 15:ad:eb:52:6c:4c:ce:9a:3e:27:25:b1:ec:6d:ac:8b:37:48: ba:09:ed:5c:68:82:54:37:17:13:91:d7:14:28:6b:71:b2:ea: 94:ee:b2:92:e6:7b:67:f9:cf:1b:22:5b:f0:88:03:43:0f:2a: 9f:06:96:ca:31:01:b3:ea:ee:f3:30:28:bb:ed:49:6d:5b:6f: 10:a3:2e:15:92:fc:7b:ea:e8:8b:b5:db:5f:c7:3a:a6:84:ca: fd:be:6d:77:a1:4c:91:b2:29:cb:1e:e7:ce:0d:b9:2b:0f:ac: 6e:e2:04:3c:a6:15:fb:ab:69:ff:83:1f:45:a0:4c:48:8f:28: d9:8b:dd:49:1f:54:f2:4f:e4:ee:5a:d2:66:a1:50:03:bb:6e: 20:1f:cc:50:af:66:ab:0c:d7:46:2c:e1:f6:04:ff:2c:52:2c: 7c:31:28:e6 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8GcoJDpV+IRi1xOCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk YTA4MjZhZmYtMTgzNi00YTc0LWFmYzktNGY0OWFkMTM5ZjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8P7Di3BIvMFSwTpsqERa7/MTYvie0JlcP1X BIVK5sNWQE07hLlSQ1Zkeao8o8HzMuTGQbQwIxobACtzg/jyvp3Lwn4ftZwNtCDV tqUjW5yXNkQhzy1VJt2Csp/nfFAZlrPJB4shFAX5J9/kXbJva17GexcFPhp/6F4q vyNTXY5WCoP9XC585qj94VsHTRYvwS+oLphFBcqo86oPmmR6hLhyi+Zifykeguac 4bnNvAWlo51MWARwokVlCY/T+h4XpECEU0D/sQ5dJGBcf4de24ZfZIAXuPEleJfV q1y9jz7YSoIGrAO3cvCLUFSVUcOCdq9JX624wi3hR+rLYpFqBQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFInqUXIcslL2pjXU4GVTOZhOxJYhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzMzNjljY2QtMmRlZS0z ZDczLTk4MzItMmJhN2VlNTBmNGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEk AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC3MZ4Ccxw3uDVJJzE2jsGtPK88eYKmFUu5mzN4 j3vFYaG94GInS+hs/DMFQoCSflLfzeXp+9oLdCu5kNu8WQ79X14jFEKHrBZhDlR/ REyhGkFdH1HBZr96WvIVretSbEzOmj4nJbHsbayLN0i6Ce1caIJUNxcTkdcUKGtx suqU7rKS5ntn+c8bIlvwiANDDyqfBpbKMQGz6u7zMCi77UltW28Qoy4Vkvx76uiL tdtfxzqmhMr9vm13oUyRsinLHufODbkrD6xu4gQ8phX7q2n/gx9FoExIjyjZi91J H1TyT+TuWtJmoVADu24gH8xQr2arDNdGLOH2BP8sUix8MSjm -----END CERTIFICATE-----Generated at Tue Sep 22 18:17:13 2026 by rpki-client