$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/69f2b065-5ab1-308e-bd4f-0af30174f80b.roa File: 69f2b065-5ab1-308e-bd4f-0af30174f80b.roa (raw, json) Hash identifier: WtudVlMwU9IYWQAvGkXFIaz9AosS8LPGR4hw/uw4974= Subject key identifier: DA:40:C7:56:90:E8:6F:66:CC:82:D9:AB:A9:A6:D0:23:E0:51:CD:8B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F067280331FED72F2F40D4C80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/69f2b065-5ab1-308e-bd4f-0af30174f80b.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 36629 IP address blocks: 2001:500:127::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:80:33:1f:ed:72:f2:f4:0d:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=e64ba243-5a13-456f-87f6-de6f9633c32e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ec:22:98:e6:08:e5:7f:c7:ca:30:6b:ed:d2: f5:bf:b9:f8:7e:10:7a:ab:01:e3:89:6f:b3:a2:6b: 7b:5b:cc:9a:a6:b2:66:18:2b:9b:a7:c2:ca:6c:a2: 21:9d:65:65:9e:21:0b:c0:bc:02:42:bc:90:25:d3: 2c:55:ae:8d:d6:44:7a:7e:a7:36:be:20:95:a5:b7: 91:ae:00:c5:bf:15:c8:6e:5c:53:ab:a9:00:9b:e9: 53:c5:2e:7f:00:3d:76:b3:2a:b1:ca:3f:66:ba:7f: 49:2d:63:2a:83:2d:7a:11:f2:52:0e:0b:7e:ad:4f: 4f:1a:13:03:a1:f8:52:86:7a:4e:ad:a2:45:c0:57: 4d:ae:11:31:52:6d:de:21:3f:f9:fa:9d:b5:d7:be: 94:c0:75:4d:83:68:0a:3b:90:24:27:a2:c2:5a:8e: 63:16:02:9c:7f:a2:41:7d:a3:fd:33:55:bf:b6:35: 40:60:17:fd:fa:6e:cb:72:e2:c7:d6:3d:b5:40:bd: 4d:8c:bd:fc:f0:e2:6b:f8:c4:50:44:53:2b:ea:e5: b4:5c:56:10:16:60:7a:e4:9a:48:00:98:da:0b:a3: ca:b0:ad:9e:06:a6:44:75:e4:74:cc:99:91:79:f9: 39:4e:6a:69:5d:d2:a7:b7:0b:65:99:e9:66:e1:5b: 50:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:40:C7:56:90:E8:6F:66:CC:82:D9:AB:A9:A6:D0:23:E0:51:CD:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/69f2b065-5ab1-308e-bd4f-0af30174f80b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:cf:e8:94:85:f4:82:7f:05:9d:93:fb:7b:c9:88:0e:91:5b: 99:02:bc:2c:0f:2c:89:e7:7b:03:a8:e8:49:98:1c:d2:34:82: c6:f8:2e:41:96:d4:0d:00:58:7b:86:c4:3b:4d:ff:e3:27:86: f1:c1:64:b0:99:34:c0:10:87:7a:0e:96:af:92:11:c2:e9:06: d3:81:32:ee:ce:7c:f1:91:90:df:5c:f7:e2:20:24:7e:a4:af: fa:0e:36:88:aa:05:1d:ba:84:9a:e4:db:c1:4a:21:50:d5:ce: 3a:7f:6f:8b:4b:ec:c4:a5:ff:26:1c:6c:f1:49:09:2e:10:df: d3:8a:11:df:1e:fd:bb:07:97:d7:eb:fc:35:9d:09:d6:d3:4f: e5:d6:b4:1d:11:67:59:d1:33:cb:ad:d9:c0:7e:f0:64:7d:9c: 75:07:af:1a:6d:91:63:dd:6a:ce:81:88:08:c8:d4:59:c6:90: 3e:32:48:d2:eb:50:24:06:9a:80:48:02:3c:4e:66:84:a4:18: 89:c0:8b:32:e2:7a:48:d3:05:81:27:35:1e:81:de:08:0e:3a: ff:5e:f6:aa:30:6a:03:2d:c6:a0:1a:5f:56:27:ae:12:86:8d: 53:f3:3e:b5:bc:bc:b2:9f:cd:14:b3:4c:47:cf:ac:aa:86:36: 7d:55:3c:5f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8GcoAzH+1y8vQNTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk ZTY0YmEyNDMtNWExMy00NTZmLTg3ZjYtZGU2Zjk2MzNjMzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuwimOYI5X/HyjBr7dL1v7n4fhB6qwHjiW+z omt7W8yaprJmGCubp8LKbKIhnWVlniELwLwCQryQJdMsVa6N1kR6fqc2viCVpbeR rgDFvxXIblxTq6kAm+lTxS5/AD12syqxyj9mun9JLWMqgy16EfJSDgt+rU9PGhMD ofhShnpOraJFwFdNrhExUm3eIT/5+p21176UwHVNg2gKO5AkJ6LCWo5jFgKcf6JB faP9M1W/tjVAYBf9+m7LcuLH1j21QL1NjL388OJr+MRQRFMr6uW0XFYQFmB65JpI AJjaC6PKsK2eBqZEdeR0zJmRefk5TmppXdKntwtlmelm4VtQ4wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNpAx1aQ6G9mzILZq6mm0CPgUc2LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjlmMmIwNjUtNWFiMS0z MDhlLWJkNGYtMGFmMzAxNzRmODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEn AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCsz+iUhfSCfwWdk/t7yYgOkVuZArwsDyyJ53sD qOhJmBzSNILG+C5BltQNAFh7hsQ7Tf/jJ4bxwWSwmTTAEId6DpavkhHC6QbTgTLu znzxkZDfXPfiICR+pK/6DjaIqgUduoSa5NvBSiFQ1c46f2+LS+zEpf8mHGzxSQku EN/TihHfHv27B5fX6/w1nQnW00/l1rQdEWdZ0TPLrdnAfvBkfZx1B68abZFj3WrO gYgIyNRZxpA+MkjS61AkBpqASAI8TmaEpBiJwIsy4npI0wWBJzUegd4IDjr/Xvaq MGoDLcagGl9WJ64Sho1T8z61vLyyn80Us0xHz6yqhjZ9VTxf -----END CERTIFICATE-----Generated at Tue Sep 22 08:17:34 2026 by rpki-client