$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74b2c461-aa47-3c3b-b787-5b1cd212521c.roa File: 74b2c461-aa47-3c3b-b787-5b1cd212521c.roa (raw, json) Hash identifier: AQG7AwQAEx39bxre68Nm1y8uD8lI7IUCqGdte6KCVks= Subject key identifier: AB:8C:45:E5:9E:98:05:81:1E:40:1B:55:1E:13:5B:E2:22:81:52:8C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F0ED23E930028DA69FF2E5900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74b2c461-aa47-3c3b-b787-5b1cd212521c.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 36632 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:3e:93:00:28:da:69:ff:2e:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=38a8c2fb-853a-4b22-8b8c-18b3c54266fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:40:52:08:c5:fd:7c:24:90:40:c0:97:3c:b6: 2a:e7:e3:f8:b9:1d:7a:4b:90:14:67:f6:1d:49:e1: 7d:8c:93:41:26:2e:fc:0d:78:a2:36:56:e2:11:ba: eb:b6:ad:6b:9b:c5:0b:fd:29:db:66:69:20:e8:fa: c5:63:59:05:c9:cd:af:61:4d:e2:b0:b1:ea:2f:74: ce:4d:1e:c5:cc:18:70:51:22:e1:85:e3:be:e0:a0: 9a:b2:cf:45:9c:14:94:10:d2:ae:b1:91:cf:4a:c9: 4e:2b:72:97:83:a7:40:c4:3e:9f:d4:d2:77:d2:1c: 00:49:e8:78:39:22:b7:c4:56:5b:5b:9e:39:a3:cc: e8:32:60:43:c8:d1:ed:93:17:2b:17:31:37:7d:95: f2:1b:1d:79:c3:0d:1d:be:d9:dd:b8:a9:5d:c0:3a: ac:2f:a4:96:81:cf:70:b2:78:c7:fe:a4:23:7b:da: a5:65:7b:9f:ba:38:28:e7:f0:82:d4:b1:8f:bc:fa: f8:b6:61:5a:b6:3c:83:a5:0b:04:a1:35:90:81:d2: a9:37:da:5e:2b:f5:c7:46:cc:40:d8:ad:bf:d0:95: 38:3b:ca:02:47:08:9c:a1:6b:86:44:44:cb:b2:ee: 51:35:7c:cb:8a:bf:6d:0f:2f:ba:08:b3:d4:ce:b8: 92:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:8C:45:E5:9E:98:05:81:1E:40:1B:55:1E:13:5B:E2:22:81:52:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74b2c461-aa47-3c3b-b787-5b1cd212521c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:eb:f1:31:1b:c9:75:b0:25:73:ed:73:31:be:07:c9:d0:1f: 00:a9:13:db:16:9c:1c:5b:50:4e:68:f7:45:ba:e7:61:73:d9: 31:7a:25:8f:fc:56:f3:bf:22:0d:7d:55:5a:bf:de:23:03:d6: 70:f4:fd:cb:75:fe:ac:7c:eb:68:6b:05:3b:73:1e:fc:b6:1f: b4:a0:7d:4e:18:bb:16:7c:db:b4:8b:cc:e5:10:e2:e5:2e:f9: fb:f6:bc:93:24:fe:a6:85:91:68:78:88:8d:97:96:e0:d2:75: a4:f6:c9:66:3f:f1:ab:e1:d5:48:cf:50:33:f2:98:56:61:bb: 94:b7:7f:f8:58:b6:b1:94:3b:51:d6:ec:a8:2f:f4:52:b1:cb: 7e:3b:31:f5:0a:6f:ad:cb:27:86:b4:87:f1:d8:68:88:a7:ba: 50:30:22:e8:ce:19:7b:39:0d:bc:05:df:6b:f7:c5:a8:4a:0e: 0b:71:d5:5d:89:4f:2c:b3:39:c1:ff:69:3b:c3:0c:b8:89:23: a7:94:92:fc:f1:3f:0e:06:8d:a0:70:59:19:5d:0a:8a:d4:33: 50:e7:e6:75:13:d3:c1:76:5a:d3:c8:0d:27:39:5b:7b:c0:d1: 7e:de:d0:e9:db:90:e3:ef:16:d0:c4:90:2b:32:d5:87:1c:73: 1b:b4:d6:23 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8O0j6TACjaaf8uWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk MzhhOGMyZmItODUzYS00YjIyLThiOGMtMThiM2M1NDI2NmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkBSCMX9fCSQQMCXPLYq5+P4uR16S5AUZ/Yd SeF9jJNBJi78DXiiNlbiEbrrtq1rm8UL/SnbZmkg6PrFY1kFyc2vYU3isLHqL3TO TR7FzBhwUSLhheO+4KCass9FnBSUENKusZHPSslOK3KXg6dAxD6f1NJ30hwASeh4 OSK3xFZbW545o8zoMmBDyNHtkxcrFzE3fZXyGx15ww0dvtnduKldwDqsL6SWgc9w snjH/qQje9qlZXufujgo5/CC1LGPvPr4tmFatjyDpQsEoTWQgdKpN9peK/XHRsxA 2K2/0JU4O8oCRwicoWuGRETLsu5RNXzLir9tDy+6CLPUzriSFwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKuMReWemAWBHkAbVR4TW+IigVKMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzRiMmM0NjEtYWE0Ny0z YzNiLWI3ODctNWIxY2QyMTI1MjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAI6/ExG8l1sCVz7XMxvgfJ0B8AqRPbFpwcW1BO aPdFuudhc9kxeiWP/FbzvyINfVVav94jA9Zw9P3Ldf6sfOtoawU7cx78th+0oH1O GLsWfNu0i8zlEOLlLvn79ryTJP6mhZFoeIiNl5bg0nWk9slmP/Gr4dVIz1Az8phW YbuUt3/4WLaxlDtR1uyoL/RSsct+OzH1Cm+tyyeGtIfx2GiIp7pQMCLozhl7OQ28 Bd9r98WoSg4LcdVdiU8ssznB/2k7wwy4iSOnlJL88T8OBo2gcFkZXQqK1DNQ5+Z1 E9PBdlrTyA0nOVt7wNF+3tDp25Dj7xbQxJArMtWHHHMbtNYj -----END CERTIFICATE-----Generated at Tue Sep 22 16:54:35 2026 by rpki-client