$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/84db4c5a-a983-3f25-880d-e7b259a1e26e.roa File: 84db4c5a-a983-3f25-880d-e7b259a1e26e.roa (raw, json) Hash identifier: P78nxxROEeVJ8Xr5LfUS+r9DD3W8lQ4RZD5eOrViKF0= Subject key identifier: 72:07:88:A3:A1:48:C5:FA:C5:9C:A6:0B:F2:13:D7:E7:84:62:0B:80 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F06729169554D73EAEBEB8C80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/84db4c5a-a983-3f25-880d-e7b259a1e26e.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 396573 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:91:69:55:4d:73:ea:eb:eb:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=37103e14-56af-4c99-992c-bceb6dd2f1c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9e:5d:b3:c0:00:50:dd:14:32:4c:94:f2:d8: c0:82:59:50:7f:90:eb:4b:a0:96:23:9c:c4:5f:8f: c5:0e:da:d2:7c:0f:46:09:71:cf:6d:87:c9:02:3f: 69:c9:c4:f1:1b:ae:ac:06:87:52:46:0f:86:cc:5f: ec:93:9a:56:2e:7b:e8:6a:a5:f5:02:de:38:fb:5b: d5:d6:b8:77:51:b9:fe:ae:4e:2f:49:ee:05:9f:17: fa:7b:27:a3:f0:e4:88:8c:58:38:ba:81:cb:17:8e: 70:8c:63:21:da:dc:91:5f:38:0f:6e:79:31:59:ab: c2:68:40:50:6a:81:a6:58:b7:8d:f6:1f:03:15:49: 13:f0:f7:87:e1:21:d0:44:ac:b9:d6:89:72:0a:d0: ed:d3:8d:7c:77:5e:b4:6d:9b:77:56:4b:ce:34:91: f6:cb:48:06:c6:9f:5a:30:51:06:28:d3:6a:a7:78: 62:bd:b3:f1:91:a5:94:56:50:43:de:0e:a5:d8:24: 48:3e:5c:1b:27:c0:50:e0:9e:f5:7e:36:21:ff:de: 8e:09:15:b2:46:9b:a5:aa:a4:f6:52:2c:c2:ff:d0: 30:5f:03:f5:f7:2f:fb:54:7b:70:77:ca:f7:81:6c: 77:ab:0b:67:ac:8c:16:dc:ec:62:85:1d:c6:25:fe: 4d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:07:88:A3:A1:48:C5:FA:C5:9C:A6:0B:F2:13:D7:E7:84:62:0B:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/84db4c5a-a983-3f25-880d-e7b259a1e26e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:c5:d9:6b:35:ae:b0:43:73:4b:8d:3e:02:ea:6a:4c:12:33: 02:d9:e6:d7:be:b1:7f:d3:a4:0b:98:0c:2f:65:86:67:88:45: a1:6a:51:e9:0f:f1:bb:c7:2a:4e:1b:13:d1:b1:82:85:9a:97: a2:cd:23:eb:e1:13:99:4c:27:ec:35:2c:3a:16:4e:bb:73:52: b8:65:0b:27:8d:77:eb:d6:fb:3b:8f:01:7f:76:30:a7:9e:d0: 98:b4:2d:48:41:d0:f2:99:57:36:c3:a7:c9:07:16:cc:ac:f2: ed:a7:84:9c:74:f1:b7:d8:df:b7:c7:f0:e5:1c:da:5a:46:c9: 9f:63:5e:ac:74:1a:f1:69:0d:f3:12:43:b3:ab:8a:dc:09:25: d3:9d:cb:ea:23:da:cd:5f:79:fe:bc:d2:8f:63:28:b1:15:4e: 32:31:9a:db:81:77:d4:60:40:87:0b:fe:b0:9b:3a:db:94:d2: 6e:12:33:df:77:47:91:3f:95:63:4a:5a:ff:73:07:1a:70:5f: 04:71:16:5e:de:bd:28:26:7a:61:83:48:a6:72:87:89:1d:41: d0:d9:d2:9f:3b:46:c6:ea:6e:bd:a2:e1:f6:1a:b0:06:2f:bb: cf:54:0f:35:70:21:5e:d0:10:3a:b5:b8:5e:9c:17:11:3a:b4: b6:7f:4b:7b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8GcpFpVU1z6uvrjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk MzcxMDNlMTQtNTZhZi00Yzk5LTk5MmMtYmNlYjZkZDJmMWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ5ds8AAUN0UMkyU8tjAgllQf5DrS6CWI5zE X4/FDtrSfA9GCXHPbYfJAj9pycTxG66sBodSRg+GzF/sk5pWLnvoaqX1At44+1vV 1rh3Ubn+rk4vSe4Fnxf6eyej8OSIjFg4uoHLF45wjGMh2tyRXzgPbnkxWavCaEBQ aoGmWLeN9h8DFUkT8PeH4SHQRKy51olyCtDt0418d160bZt3VkvONJH2y0gGxp9a MFEGKNNqp3hivbPxkaWUVlBD3g6l2CRIPlwbJ8BQ4J71fjYh/96OCRWyRpulqqT2 UizC/9AwXwP19y/7VHtwd8r3gWx3qwtnrIwW3OxihR3GJf5NdwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHIHiKOhSMX6xZymC/IT1+eEYguAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODRkYjRjNWEtYTk4My0z ZjI1LTg4MGQtZTdiMjU5YTFlMjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC2xdlrNa6wQ3NLjT4C6mpMEjMC2ebXvrF/06QL mAwvZYZniEWhalHpD/G7xypOGxPRsYKFmpeizSPr4ROZTCfsNSw6Fk67c1K4ZQsn jXfr1vs7jwF/djCnntCYtC1IQdDymVc2w6fJBxbMrPLtp4ScdPG32N+3x/DlHNpa RsmfY16sdBrxaQ3zEkOzq4rcCSXTncvqI9rNX3n+vNKPYyixFU4yMZrbgXfUYECH C/6wmzrblNJuEjPfd0eRP5VjSlr/cwcacF8EcRZe3r0oJnphg0imcoeJHUHQ2dKf O0bG6m69ouH2GrAGL7vPVA81cCFe0BA6tbhenBcROrS2f0t7 -----END CERTIFICATE-----Generated at Tue Sep 22 10:30:19 2026 by rpki-client