$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/604b4210-28ba-3d16-9a32-9ea39efe2e37.roa File: 604b4210-28ba-3d16-9a32-9ea39efe2e37.roa (raw, json) Hash identifier: OqvSmoLNVdsU5MJqpGoNsE3JSX8v8RF8vZACLItxqo8= Subject key identifier: 16:35:E0:EB:1E:D8:90:E9:34:24:C2:EB:4A:73:2A:A5:B6:26:BE:0E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F067281903421CA8529D7C024 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/604b4210-28ba-3d16-9a32-9ea39efe2e37.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 40647 IP address blocks: 2001:500:127::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:81:90:34:21:ca:85:29:d7:c0:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=b18341bf-8cc2-485d-a5d9-bff91de20bb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a4:f3:b0:d8:5e:09:fb:ac:85:62:72:65:bc: 01:62:e7:32:cb:71:8d:71:80:61:a1:e0:a5:93:df: 78:b4:82:9e:d3:1d:e8:e6:f1:4a:c3:c0:ec:2b:02: 15:83:6e:d4:84:7d:de:54:79:82:dd:b5:62:0c:9d: 2e:f1:9b:b1:2c:f6:f1:d7:0a:a0:73:f5:3c:cf:0b: bc:2e:d2:6b:f2:55:11:f6:4f:7e:8a:7f:12:66:fd: 3a:93:b7:7b:65:a6:70:11:1f:3a:7d:2f:f1:2f:be: ba:a3:1f:bd:e8:39:50:b2:d0:c0:d9:83:7c:7c:48: 93:be:d4:e3:db:3b:77:70:f8:58:af:d3:1a:42:84: 34:1f:2c:f6:51:1a:19:24:cc:f0:3f:57:c6:0d:51: 78:27:2f:54:2a:ca:86:24:f3:6e:a3:52:56:9c:2e: c7:53:bb:45:19:f5:08:15:7f:8d:67:c3:2b:74:9d: 94:f8:aa:37:ba:73:48:af:58:c3:8c:25:e6:0d:69: 78:65:1a:0f:7d:b6:b6:e1:bf:e0:99:1f:fc:74:89: 02:5a:12:2f:02:c4:ee:18:3c:9d:ea:8c:0d:93:10: e5:61:62:24:22:3a:8d:f8:ed:0a:39:fe:39:fe:98: f1:d0:8e:94:94:38:a4:fa:c6:50:a0:db:3e:0e:23: 5c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:35:E0:EB:1E:D8:90:E9:34:24:C2:EB:4A:73:2A:A5:B6:26:BE:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/604b4210-28ba-3d16-9a32-9ea39efe2e37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:1b:99:2e:25:9f:9c:09:47:eb:a8:b0:6a:58:e2:b7:70:00: 2e:8e:cc:5d:2b:c2:c6:ae:ec:1c:db:1b:68:5e:ab:c8:c3:37: 1c:dc:1a:f9:e6:74:c4:73:5b:af:fd:17:1d:c0:51:f1:7b:83: ad:40:a5:b2:ea:72:8c:68:ea:dc:f7:e0:6b:db:2f:f6:a5:93: 44:ac:05:ae:6c:8e:e5:8c:75:73:38:17:55:e4:1a:0b:4a:98: 49:5e:02:32:c3:fc:75:1c:4a:eb:24:f1:c7:5c:4b:e7:a8:4b: 3f:04:f6:78:2c:02:5a:c2:60:04:3c:9f:c8:a8:92:01:16:1b: 39:e3:f1:9e:45:73:b9:49:21:6b:65:69:e1:41:0b:c0:37:23: 5f:0f:7d:a4:e2:43:d7:86:41:2b:f2:3e:12:a4:09:5d:27:8e: 19:f2:15:f5:c7:15:d6:4c:b6:db:8d:a9:68:32:5d:07:1f:95: 37:50:75:cb:47:97:28:6e:a4:ee:bc:95:83:e0:55:78:dd:94: 5f:69:53:b0:3c:f7:d7:ce:22:3a:72:78:19:4f:21:b8:71:23: e6:25:28:a8:8d:05:ab:77:95:ad:d4:a8:cf:8b:e9:b8:fb:04: 19:ee:22:63:af:8b:cf:1c:9c:e3:0f:a7:9e:7a:4c:81:59:5a: 37:34:d6:28 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8GcoGQNCHKhSnXwCQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk YjE4MzQxYmYtOGNjMi00ODVkLWE1ZDktYmZmOTFkZTIwYmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqTzsNheCfushWJyZbwBYucyy3GNcYBhoeCl k994tIKe0x3o5vFKw8DsKwIVg27UhH3eVHmC3bViDJ0u8ZuxLPbx1wqgc/U8zwu8 LtJr8lUR9k9+in8SZv06k7d7ZaZwER86fS/xL766ox+96DlQstDA2YN8fEiTvtTj 2zt3cPhYr9MaQoQ0Hyz2URoZJMzwP1fGDVF4Jy9UKsqGJPNuo1JWnC7HU7tFGfUI FX+NZ8MrdJ2U+Ko3unNIr1jDjCXmDWl4ZRoPfba24b/gmR/8dIkCWhIvAsTuGDyd 6owNkxDlYWIkIjqN+O0KOf45/pjx0I6UlDik+sZQoNs+DiNc+wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBY14Ose2JDpNCTC60pzKqW2Jr4OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjA0YjQyMTAtMjhiYS0z ZDE2LTlhMzItOWVhMzllZmUyZTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEn AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAqG5kuJZ+cCUfrqLBqWOK3cAAujsxdK8LGruwc 2xtoXqvIwzcc3Br55nTEc1uv/RcdwFHxe4OtQKWy6nKMaOrc9+Br2y/2pZNErAWu bI7ljHVzOBdV5BoLSphJXgIyw/x1HErrJPHHXEvnqEs/BPZ4LAJawmAEPJ/IqJIB Fhs54/GeRXO5SSFrZWnhQQvANyNfD32k4kPXhkEr8j4SpAldJ44Z8hX1xxXWTLbb jaloMl0HH5U3UHXLR5cobqTuvJWD4FV43ZRfaVOwPPfXziI6cngZTyG4cSPmJSio jQWrd5Wt1KjPi+m4+wQZ7iJjr4vPHJzjD6eeekyBWVo3NNYo -----END CERTIFICATE-----Generated at Sat Sep 26 18:17:50 2026 by rpki-client