$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f3acb1a-4cde-3114-b917-59f845f90356.roa File: 7f3acb1a-4cde-3114-b917-59f845f90356.roa (raw, json) Hash identifier: Dy2NBtdIUdnyVHC13F55HfoC0M7WKfEH2ExkpwF70Bo= Subject key identifier: 96:64:B5:BF:5A:61:2E:0F:21:03:AA:D3:2C:8D:8A:BB:C2:C0:12:FF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F067288B549F0F2DE41238900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f3acb1a-4cde-3114-b917-59f845f90356.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 396578 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:88:b5:49:f0:f2:de:41:23:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=41d8cc14-942e-4af9-bf8a-e9b37fb982e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:6d:64:23:28:de:34:92:1d:fb:27:90:aa:45: d9:e4:32:77:c0:79:a4:56:3a:8b:ce:a7:ca:27:43: 51:01:36:d8:41:4e:1c:fa:1d:af:e6:2c:89:8c:c1: be:eb:c3:3a:46:d4:da:e7:3d:b7:94:e8:84:2e:18: 6f:6f:62:62:ef:56:a6:46:f8:50:7e:b5:fa:f4:71: 15:ce:50:63:23:a4:34:ac:f9:42:0a:32:8d:61:59: 9c:35:33:2d:9d:7d:10:cc:e1:37:06:19:5e:b3:67: 10:98:7f:3e:9f:26:a7:83:b4:e2:1c:d4:a6:37:30: 5f:b2:e4:9b:40:f8:95:8c:24:17:76:3c:ba:8e:09: 8a:07:4b:2f:db:b6:c2:e7:41:ce:70:53:c6:23:67: db:1e:da:8d:0f:be:38:ba:8f:02:06:0e:28:54:48: ec:06:df:ce:52:a1:c9:2b:5a:f5:26:57:e9:51:f6: e7:8d:25:e7:5d:05:b5:a1:8c:98:9f:35:f5:9d:fa: 9a:3c:db:3b:0b:9e:2b:8f:fd:9d:1a:62:9c:66:77: 3b:cd:0c:19:d5:d0:6f:ca:67:26:ed:5c:0d:88:1d: 76:e4:1a:5a:3c:87:78:18:bb:19:06:5b:f8:60:2d: c5:fe:f5:8c:98:42:22:b0:7b:35:f0:79:c6:b5:c3: aa:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:64:B5:BF:5A:61:2E:0F:21:03:AA:D3:2C:8D:8A:BB:C2:C0:12:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f3acb1a-4cde-3114-b917-59f845f90356.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:ba:d1:b8:ad:d3:33:d4:15:a0:e9:a8:39:30:3f:a4:d9:09: 2f:c0:f1:41:41:40:1d:72:24:52:ad:9e:3a:af:4d:ed:0c:b0: 4b:48:4f:31:e1:94:40:b7:e9:ae:83:13:40:73:30:fb:2f:d2: 2e:ba:d7:4c:bb:7d:9a:e9:f7:5f:f0:80:ba:1d:af:fc:8b:d9: 8c:62:2e:03:1d:a9:55:63:d0:88:4c:a4:82:1f:8e:6f:ee:9c: b6:a1:b8:82:a2:a2:f3:5c:5b:25:98:55:90:96:13:c1:1b:1b: 49:1b:43:a7:74:05:fb:5d:14:3b:89:15:44:1c:e7:59:2a:d2: 4c:77:86:65:21:34:81:62:30:a8:61:d3:bf:44:31:8d:46:0f: 08:52:b1:31:ab:3f:ac:b7:f2:9c:54:8f:c4:ea:26:14:67:9e: e1:cb:7b:7f:2b:56:a7:72:77:33:89:60:87:96:8c:59:84:29: a6:5a:8a:17:98:c4:e4:52:b4:ce:40:9a:fc:8f:ba:22:c0:89: ff:c3:17:16:15:92:3b:a3:4f:20:20:38:f9:f8:d1:2f:4d:64: 3c:da:6f:f3:34:23:4f:de:ed:3c:55:2b:58:73:f0:48:0f:23: 3e:fb:59:74:b1:be:5c:b0:da:ad:20:5e:be:cb:36:de:62:50: b1:42:72:ee -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8Gcoi1SfDy3kEjiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk NDFkOGNjMTQtOTQyZS00YWY5LWJmOGEtZTliMzdmYjk4MmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgW1kIyjeNJId+yeQqkXZ5DJ3wHmkVjqLzqfK J0NRATbYQU4c+h2v5iyJjMG+68M6RtTa5z23lOiELhhvb2Ji71amRvhQfrX69HEV zlBjI6Q0rPlCCjKNYVmcNTMtnX0QzOE3Bhles2cQmH8+nyang7TiHNSmNzBfsuSb QPiVjCQXdjy6jgmKB0sv27bC50HOcFPGI2fbHtqND744uo8CBg4oVEjsBt/OUqHJ K1r1JlfpUfbnjSXnXQW1oYyYnzX1nfqaPNs7C54rj/2dGmKcZnc7zQwZ1dBvymcm 7VwNiB125BpaPId4GLsZBlv4YC3F/vWMmEIisHs18HnGtcOqgQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJZktb9aYS4PIQOq0yyNirvCwBL/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2YzYWNiMWEtNGNkZS0z MTE0LWI5MTctNTlmODQ1ZjkwMzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA7utG4rdMz1BWg6ag5MD+k2QkvwPFBQUAdciRS rZ46r03tDLBLSE8x4ZRAt+mugxNAczD7L9IuutdMu32a6fdf8IC6Ha/8i9mMYi4D HalVY9CITKSCH45v7py2obiCoqLzXFslmFWQlhPBGxtJG0OndAX7XRQ7iRVEHOdZ KtJMd4ZlITSBYjCoYdO/RDGNRg8IUrExqz+st/KcVI/E6iYUZ57hy3t/K1ancncz iWCHloxZhCmmWooXmMTkUrTOQJr8j7oiwIn/wxcWFZI7o08gIDj5+NEvTWQ82m/z NCNP3u08VStYc/BIDyM++1l0sb5csNqtIF6+yzbeYlCxQnLu -----END CERTIFICATE-----Generated at Tue Sep 22 00:44:21 2026 by rpki-client