$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ba34bcf-5357-3076-9123-9ef84349756a.roa File: 5ba34bcf-5357-3076-9123-9ef84349756a.roa (raw, json) Hash identifier: XzkiWW6bGcpt7LKYGCbsSM2c1tCst+qSFgriONCERmA= Subject key identifier: 15:C3:27:44:32:83:51:08:78:18:73:41:19:8B:76:35:9F:D6:A3:49 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F49862B4333BA21D714057A00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ba34bcf-5357-3076-9123-9ef84349756a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396591 IP address blocks: 2001:500:7967::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:2b:43:33:ba:21:d7:14:05:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3e001b44-4840-4e50-b14f-707c0ef2997f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8e:33:ef:d9:fb:74:f0:9e:e4:a2:f8:cf:c5: 10:b6:76:7f:ab:72:63:19:bf:94:26:0c:0f:f3:2a: d2:74:e0:35:0f:a5:f8:80:ae:37:bd:1f:4b:56:db: 8e:d6:3c:8c:c9:8c:26:05:fc:5f:1e:d6:2f:aa:9b: e5:62:71:b9:4f:4f:f4:69:d4:ee:5b:d7:29:16:fc: 64:10:41:9b:c0:69:cb:6d:5f:03:c9:1e:07:af:2e: 52:04:8c:e2:e9:f1:53:a1:5f:9b:f0:31:29:56:ae: bb:d0:7f:07:94:38:df:44:f5:21:49:60:79:42:92: 7b:0a:3d:7b:c4:59:b5:8c:cf:cf:66:84:83:cd:fc: 21:e7:3c:ae:b2:cc:07:12:37:01:ac:10:84:0c:aa: 96:31:a7:09:4b:fd:d2:72:3c:35:8f:47:bb:15:6b: d0:df:1b:e8:2d:fb:eb:c6:89:52:5b:43:89:77:ac: 3a:38:bc:82:04:50:ee:e5:0d:87:2d:51:d0:8b:21: 5b:77:92:f3:d2:50:6c:24:76:b5:93:84:29:f2:c2: 81:9d:0e:78:14:29:06:bc:77:16:1f:84:67:a8:bb: a0:95:47:a3:7d:9f:cb:fa:fc:3b:ee:4a:87:37:87: 88:41:1f:66:0e:68:a0:66:50:43:7c:9e:d4:99:19: bb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C3:27:44:32:83:51:08:78:18:73:41:19:8B:76:35:9F:D6:A3:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ba34bcf-5357-3076-9123-9ef84349756a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:0f:4a:fa:f0:75:47:7a:0b:b0:96:d2:f5:b9:d0:4a:21:bf: b6:bc:56:c5:04:08:fb:e8:a4:b1:b1:83:a4:9f:c1:c4:e0:0b: c0:c6:26:5f:c2:8d:0b:f5:dd:76:db:e4:ee:08:41:8d:56:30: 88:e7:9c:c6:6c:7c:59:88:0b:91:c1:0b:e2:0d:9b:66:dd:85: c8:fc:2b:6a:e1:4d:7d:9f:a8:c8:df:39:e4:93:38:f3:73:f8: 10:d0:12:ff:ed:be:bc:cf:ba:d8:28:19:15:09:fd:a6:bd:08: aa:d4:54:d5:7d:be:46:29:22:45:ff:40:8a:65:6a:c9:3a:98: 63:4a:2d:36:1f:03:cd:f9:26:e3:5f:09:2a:4e:22:73:34:68: 8b:06:b8:83:c5:08:bf:96:9d:10:93:65:2c:ab:fa:a7:23:c6: 17:a8:32:a2:fd:02:69:58:7f:19:91:47:a2:fe:84:83:a2:12: 57:23:05:79:44:69:0f:96:65:01:0e:c6:3b:28:b3:84:42:ac: 5b:6c:a6:17:d8:f5:02:56:60:ad:27:6f:7d:f1:81:1e:96:77: 63:79:02:97:29:e1:1d:5d:9e:a6:e5:1e:90:1b:e6:d8:0b:23: db:6c:b2:17:2f:25:36:73:ab:fc:51:1e:63:50:e8:3b:67:a0: c4:e1:36:e5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9JhitDM7oh1xQFegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2UwMDFiNDQtNDg0MC00ZTUwLWIxNGYtNzA3YzBlZjI5OTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2I4z79n7dPCe5KL4z8UQtnZ/q3JjGb+UJgwP 8yrSdOA1D6X4gK43vR9LVtuO1jyMyYwmBfxfHtYvqpvlYnG5T0/0adTuW9cpFvxk EEGbwGnLbV8DyR4Hry5SBIzi6fFToV+b8DEpVq670H8HlDjfRPUhSWB5QpJ7Cj17 xFm1jM/PZoSDzfwh5zyusswHEjcBrBCEDKqWMacJS/3Scjw1j0e7FWvQ3xvoLfvr xolSW0OJd6w6OLyCBFDu5Q2HLVHQiyFbd5Lz0lBsJHa1k4Qp8sKBnQ54FCkGvHcW H4RnqLuglUejfZ/L+vw77kqHN4eIQR9mDmigZlBDfJ7UmRm7pQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBXDJ0Qyg1EIeBhzQRmLdjWf1qNJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWJhMzRiY2YtNTM1Ny0z MDc2LTkxMjMtOWVmODQzNDk3NTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAHln AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAfD0r68HVHeguwltL1udBKIb+2vFbFBAj76KSx sYOkn8HE4AvAxiZfwo0L9d122+TuCEGNVjCI55zGbHxZiAuRwQviDZtm3YXI/Ctq 4U19n6jI3znkkzjzc/gQ0BL/7b68z7rYKBkVCf2mvQiq1FTVfb5GKSJF/0CKZWrJ OphjSi02HwPN+SbjXwkqTiJzNGiLBriDxQi/lp0Qk2Usq/qnI8YXqDKi/QJpWH8Z kUei/oSDohJXIwV5RGkPlmUBDsY7KLOEQqxbbKYX2PUCVmCtJ2998YEelndjeQKX KeEdXZ6m5R6QG+bYCyPbbLIXLyU2c6v8UR5jUOg7Z6DE4Tbl -----END CERTIFICATE-----Generated at Sat Sep 26 17:26:54 2026 by rpki-client