$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89d13b8d-db81-31a1-8d2d-78a80928c40a.roa File: 89d13b8d-db81-31a1-8d2d-78a80928c40a.roa (raw, json) Hash identifier: RpdUbUROVprWMQrF/eFvOVC7vY2pzF+55nEAPqviACM= Subject key identifier: C7:60:18:F5:84:4F:A1:A8:33:F2:A9:04:4D:7C:2B:9C:E0:F3:91:92 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F06727699CBE39F89E4335200 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89d13b8d-db81-31a1-8d2d-78a80928c40a.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 396602 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:76:99:cb:e3:9f:89:e4:33:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=50e40f88-b9c2-4ca6-9186-43344196fcea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:50:bd:a5:a7:9a:f3:43:38:78:00:0d:53:52: 86:09:b6:bb:ff:c2:ae:c2:84:1e:ed:7e:26:1c:de: 65:fc:12:bb:f0:68:d0:fb:8e:30:8e:07:ff:f0:a8: d4:2f:72:d6:ca:db:58:82:e4:1b:6e:b0:17:2a:b7: 87:c0:68:cd:ab:a8:06:b7:a3:d5:2c:53:65:ae:e2: 07:9a:c4:70:97:eb:64:5c:52:91:64:15:94:62:ac: ae:a8:b3:61:28:04:56:d8:28:60:85:af:2c:d6:1a: 50:46:e6:fc:dc:d2:5c:bc:f5:c5:f1:3e:28:51:f6: 53:f7:3d:fb:54:09:a7:1f:6a:bf:3b:3f:47:13:21: 21:29:62:30:23:e2:f6:68:76:b4:bf:84:30:b8:4c: 44:a4:7a:01:fc:8f:18:52:c0:c2:9f:79:52:f2:1a: dd:3d:c1:43:6c:ad:34:1b:2a:19:21:38:13:94:2c: 9d:58:2c:ec:4e:3c:c1:cb:c1:70:50:e6:51:b7:b4: c7:a0:2d:14:0e:ea:57:70:e7:62:83:a6:90:2a:68: 04:8f:73:50:f6:60:de:8e:51:75:77:3c:53:05:71: 5c:cb:f3:42:82:eb:bf:e0:88:bd:2a:3a:1f:68:b9: 53:c5:2f:c3:0b:a5:83:b9:3c:fb:cc:b2:40:28:e8: 61:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:60:18:F5:84:4F:A1:A8:33:F2:A9:04:4D:7C:2B:9C:E0:F3:91:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89d13b8d-db81-31a1-8d2d-78a80928c40a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:32:96:d0:a9:e3:c4:1b:3c:df:8b:2e:fb:10:cd:46:2f:16: bf:59:51:dd:a9:de:e5:71:fb:19:cf:bb:ff:84:d4:ab:66:18: a7:c5:88:86:aa:ff:c5:00:da:ff:26:b8:d8:db:dc:de:cf:14: c6:ef:e6:cd:ca:cb:f1:cc:cf:22:8f:53:65:99:89:14:93:b7: 38:44:5d:24:66:8c:0e:43:31:95:17:e8:60:34:09:41:b6:96: 66:2b:89:cc:c7:1f:e0:27:1a:34:d9:63:00:58:09:6c:fc:79: 75:a3:c9:cc:6b:01:62:b0:6f:5f:5b:68:d5:77:69:83:c1:cd: dc:ca:8a:8e:29:9e:a3:7f:51:f6:f0:b3:fd:f0:5b:7e:19:81: a6:d7:71:6c:c3:62:57:50:26:e0:32:bb:71:64:7f:d1:89:e3: c9:9e:4a:43:f9:53:73:b0:28:a9:10:96:80:95:91:8f:7e:5d: a9:82:d3:7b:a0:12:d9:4a:c1:17:6d:af:c5:b0:cb:80:ee:25: c4:5c:49:37:74:33:4e:41:26:ed:b2:34:64:ab:30:90:a8:d1: 40:f9:9c:52:0f:c6:5a:43:1c:5c:6f:b6:c0:08:27:80:34:ad: 91:ec:fe:2a:c4:60:6e:cc:90:fd:ff:f3:5c:c8:44:0b:8f:10: d4:78:d2:1e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8GcnaZy+OfieQzUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk NTBlNDBmODgtYjljMi00Y2E2LTkxODYtNDMzNDQxOTZmY2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVC9paea80M4eAANU1KGCba7/8KuwoQe7X4m HN5l/BK78GjQ+44wjgf/8KjUL3LWyttYguQbbrAXKreHwGjNq6gGt6PVLFNlruIH msRwl+tkXFKRZBWUYqyuqLNhKARW2Chgha8s1hpQRub83NJcvPXF8T4oUfZT9z37 VAmnH2q/Oz9HEyEhKWIwI+L2aHa0v4QwuExEpHoB/I8YUsDCn3lS8hrdPcFDbK00 GyoZITgTlCydWCzsTjzBy8FwUOZRt7THoC0UDupXcOdig6aQKmgEj3NQ9mDejlF1 dzxTBXFcy/NCguu/4Ii9KjofaLlTxS/DC6WDuTz7zLJAKOhhzQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMdgGPWET6GoM/KpBE18K5zg85GSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODlkMTNiOGQtZGI4MS0z MWExLThkMmQtNzhhODA5MjhjNDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAxMpbQqePEGzzfiy77EM1GLxa/WVHdqd7lcfsZ z7v/hNSrZhinxYiGqv/FANr/JrjY29zezxTG7+bNysvxzM8ij1NlmYkUk7c4RF0k ZowOQzGVF+hgNAlBtpZmK4nMxx/gJxo02WMAWAls/Hl1o8nMawFisG9fW2jVd2mD wc3cyoqOKZ6jf1H28LP98Ft+GYGm13Fsw2JXUCbgMrtxZH/RiePJnkpD+VNzsCip EJaAlZGPfl2pgtN7oBLZSsEXba/FsMuA7iXEXEk3dDNOQSbtsjRkqzCQqNFA+ZxS D8ZaQxxcb7bACCeANK2R7P4qxGBuzJD9//NcyEQLjxDUeNIe -----END CERTIFICATE-----Generated at Thu Sep 24 11:18:16 2026 by rpki-client