$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/80aa2f86-1b5c-3639-a8a2-b3595cdc85f1.roa File: 80aa2f86-1b5c-3639-a8a2-b3595cdc85f1.roa (raw, json) Hash identifier: jLMGRZoPBNHe94ANRWOR+PDhSE8aA09AfVYt8rFA8Fk= Subject key identifier: EA:C8:AB:B7:FD:57:56:AA:26:13:BB:62:0E:C9:08:28:95:C0:5B:77 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F093CFBCBA5DE94C0B4A284C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/80aa2f86-1b5c-3639-a8a2-b3595cdc85f1.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 396547 IP address blocks: 2001:500:122::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:fb:cb:a5:de:94:c0:b4:a2:84:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=c86a08af-f221-4fe1-82b7-8bcb0a82493e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b9:ea:2e:6c:56:16:5f:a8:c1:84:cc:76:35: 0f:be:74:fe:43:89:ec:41:06:52:d6:ce:fc:71:9b: bf:95:06:31:cd:f3:c5:1b:c5:94:cd:d2:25:be:3a: 25:41:18:e1:a0:c2:45:96:e1:51:9b:53:55:90:aa: 02:e6:73:ad:1b:85:e1:a9:a4:88:c1:81:20:8a:87: d8:97:f1:40:ba:32:60:ba:6b:bc:3a:48:12:59:29: 37:fb:4c:c8:ed:dc:8b:13:b3:96:47:d1:3e:2c:4e: 5c:4e:de:73:05:96:f8:33:1e:df:99:46:8d:bb:fa: 3d:da:16:d7:42:49:05:d5:03:c7:f3:d6:44:cd:76: 64:75:9e:5f:4f:64:6e:25:ee:58:55:ea:84:45:e8: 15:2c:1f:ce:f7:d4:ee:a3:d9:3c:a5:a0:d6:9e:8b: 91:2c:4a:fe:4e:fe:57:69:c6:8b:f1:11:05:c5:76: c6:df:de:ec:ea:5a:e6:63:06:44:a1:22:3b:0a:aa: 4a:c3:71:25:6e:42:1d:00:dd:1d:f7:9f:9d:35:6b: 0e:7b:12:60:bf:ec:39:fe:2a:90:40:e3:b4:98:2d: 8e:4a:ec:a5:b9:2f:cc:c2:ea:c7:c4:b7:90:44:c4: 14:ed:c9:02:f0:6f:89:41:eb:05:8a:3d:39:29:c3: 88:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C8:AB:B7:FD:57:56:AA:26:13:BB:62:0E:C9:08:28:95:C0:5B:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/80aa2f86-1b5c-3639-a8a2-b3595cdc85f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:45:e1:c5:cb:98:1e:34:29:d4:55:89:fa:82:61:49:ef:0f: 64:bb:d0:cf:3d:e7:10:ff:fb:22:ba:dd:c7:f0:9c:2f:bc:ff: 43:05:c9:2f:ca:ae:2d:72:84:bb:a2:7e:38:86:d5:31:24:03: c2:80:2e:c9:c0:5d:86:1e:0a:92:80:ae:5c:92:c7:20:6b:55: c4:67:8d:e1:dc:57:13:7d:2e:42:34:fb:2c:66:07:85:1b:db: 67:ad:9c:52:df:0e:31:65:f2:1e:aa:e5:10:e1:77:31:19:94: e1:04:99:92:d3:45:64:55:7a:7f:df:df:3d:8f:39:f8:42:60: 73:9b:74:7d:a6:2c:04:f1:0b:2c:84:b4:73:27:c7:c0:fa:7f: 13:79:82:c8:d6:74:ae:fb:31:2a:a9:d9:70:6d:e2:2e:34:0f: 66:c2:d4:fe:31:ba:4f:27:9e:11:5d:0a:a1:64:fb:ac:ae:c9: da:5d:fd:57:0a:f0:6b:b0:32:c7:f5:45:90:05:21:52:05:81: 4c:1b:1c:69:53:c4:56:91:e0:44:ae:70:4e:98:5c:da:1a:3f: c0:08:c3:b5:51:51:e6:7d:90:cb:ee:c3:32:2b:a3:14:a8:b1: c1:ad:0d:64:79:2b:47:02:5f:a8:e5:94:6d:72:78:ce:27:d5: 0a:7a:4d:28 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8JPPvLpd6UwLSihMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk Yzg2YTA4YWYtZjIyMS00ZmUxLTgyYjctOGJjYjBhODI0OTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7nqLmxWFl+owYTMdjUPvnT+Q4nsQQZS1s78 cZu/lQYxzfPFG8WUzdIlvjolQRjhoMJFluFRm1NVkKoC5nOtG4XhqaSIwYEgiofY l/FAujJgumu8OkgSWSk3+0zI7dyLE7OWR9E+LE5cTt5zBZb4Mx7fmUaNu/o92hbX QkkF1QPH89ZEzXZkdZ5fT2RuJe5YVeqERegVLB/O99Tuo9k8paDWnouRLEr+Tv5X acaL8REFxXbG397s6lrmYwZEoSI7CqpKw3ElbkIdAN0d95+dNWsOexJgv+w5/iqQ QOO0mC2OSuyluS/MwurHxLeQRMQU7ckC8G+JQesFij05KcOIMwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOrIq7f9V1aqJhO7Yg7JCCiVwFt3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODBhYTJmODYtMWI1Yy0z NjM5LWE4YTItYjM1OTVjZGM4NWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBBReHFy5geNCnUVYn6gmFJ7w9ku9DPPecQ//si ut3H8JwvvP9DBckvyq4tcoS7on44htUxJAPCgC7JwF2GHgqSgK5ckscga1XEZ43h 3FcTfS5CNPssZgeFG9tnrZxS3w4xZfIequUQ4XcxGZThBJmS00VkVXp/3989jzn4 QmBzm3R9piwE8QsshLRzJ8fA+n8TeYLI1nSu+zEqqdlwbeIuNA9mwtT+MbpPJ54R XQqhZPusrsnaXf1XCvBrsDLH9UWQBSFSBYFMGxxpU8RWkeBErnBOmFzaGj/ACMO1 UVHmfZDL7sMyK6MUqLHBrQ1keStHAl+o5ZRtcnjOJ9UKek0o -----END CERTIFICATE-----Generated at Mon Sep 21 21:25:28 2026 by rpki-client