$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f2bc4ae-b92a-3346-b132-abda0be80386.roa File: 9f2bc4ae-b92a-3346-b132-abda0be80386.roa (raw, json) Hash identifier: rwlXT0LhJC1j3Usole8bSXMO0ZFUgYL/CVZES2RE2BI= Subject key identifier: 1E:6C:80:4C:A8:FB:9B:38:76:26:78:42:A1:8E:74:54:25:46:2A:43 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F06728676A465310CA05AE400 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f2bc4ae-b92a-3346-b132-abda0be80386.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 396551 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:86:76:a4:65:31:0c:a0:5a:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=2d021f25-aeb6-432c-a564-26cbf58a01ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:52:90:52:83:16:8d:f7:d8:e4:52:90:9f:99: fb:d8:63:dd:37:c6:eb:90:77:47:2b:2f:1a:e8:46: d0:79:2a:e0:bf:f5:a0:21:2d:1e:9d:1f:e1:c9:6d: 62:bd:66:58:b5:eb:9b:9c:92:aa:e8:a5:bb:57:be: 5e:39:f5:40:e2:e1:de:36:c6:4d:45:ce:a0:48:a2: bd:b2:56:44:51:b0:7a:af:4d:a5:7c:3d:2b:92:fb: 4a:3f:08:c5:e2:01:df:f9:16:25:db:d9:47:70:17: 5d:f3:da:e8:b5:9d:d1:74:2d:bc:88:d0:17:62:0c: 07:b1:55:5b:49:da:20:29:3e:6e:a3:0b:09:17:ca: e0:dc:f5:b4:96:26:92:da:9d:0d:82:f1:4b:5c:b2: 4e:95:76:30:6f:bc:2b:ec:8b:bf:53:54:a6:1f:d5: a9:48:c9:a1:d7:91:ae:6b:b8:a2:96:89:3b:05:a6: a6:3b:e2:9b:16:98:4d:d4:12:0e:e7:d6:b4:15:42: df:d4:03:6b:84:0f:ef:dc:6b:cf:b5:f4:ea:75:e2: fd:98:61:59:d7:06:25:97:e7:1d:3e:b5:e2:19:f9: 31:8d:81:f3:9c:e7:0f:4e:80:d2:aa:08:ea:9f:08: 19:b9:5b:75:4d:54:4b:d4:dc:12:a2:51:4b:9f:d8: cc:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:6C:80:4C:A8:FB:9B:38:76:26:78:42:A1:8E:74:54:25:46:2A:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f2bc4ae-b92a-3346-b132-abda0be80386.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:51:99:b9:66:6e:25:ed:45:4a:62:53:1a:19:3b:f9:3a:4f: 85:37:d3:29:e0:e8:29:dd:fa:3c:34:4c:22:52:8b:b6:4d:1f: 13:2e:d5:9c:42:59:6a:cf:3b:f6:96:6c:84:84:01:d4:40:15: 67:b5:8e:6f:70:13:09:d1:85:ea:d3:cc:10:c4:ad:c3:3d:09: 57:28:24:13:9a:ed:17:d4:50:35:bc:41:94:fc:46:8c:9b:81: 36:e2:08:84:ea:6b:76:e6:af:e9:5c:4d:73:c9:d6:6e:ea:31: 1b:e0:96:5f:9d:fd:ad:92:7d:78:7c:44:04:16:29:89:ad:5e: 0e:1d:5d:56:40:d2:04:60:b2:4a:5d:c9:80:53:ef:6c:63:38: 47:f1:aa:e3:65:00:ed:65:85:e7:2d:6e:f8:23:01:9b:be:81: 3e:9d:ca:5c:1b:31:3e:21:bb:2e:2a:73:fe:66:b3:9c:0b:d6: de:4a:57:8c:7c:51:d9:2e:dd:cf:e5:e1:55:b6:31:0f:61:3c: 55:28:f5:1f:93:f3:7c:d3:9b:08:58:c7:f9:23:15:70:42:33: 43:19:eb:70:9b:43:0c:c7:bc:e2:02:f2:13:35:4e:a9:be:b3: f6:6c:4f:1a:0c:4d:9f:57:c2:e7:fd:28:b0:2c:4c:ce:e8:8a: d1:ac:f0:32 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8GcoZ2pGUxDKBa5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk MmQwMjFmMjUtYWViNi00MzJjLWE1NjQtMjZjYmY1OGEwMWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVKQUoMWjffY5FKQn5n72GPdN8brkHdHKy8a 6EbQeSrgv/WgIS0enR/hyW1ivWZYteubnJKq6KW7V75eOfVA4uHeNsZNRc6gSKK9 slZEUbB6r02lfD0rkvtKPwjF4gHf+RYl29lHcBdd89rotZ3RdC28iNAXYgwHsVVb SdogKT5uowsJF8rg3PW0liaS2p0NgvFLXLJOlXYwb7wr7Iu/U1SmH9WpSMmh15Gu a7iilok7BaamO+KbFphN1BIO59a0FULf1ANrhA/v3GvPtfTqdeL9mGFZ1wYll+cd PrXiGfkxjYHznOcPToDSqgjqnwgZuVt1TVRL1NwSolFLn9jMdwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFB5sgEyo+5s4diZ4QqGOdFQlRipDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWYyYmM0YWUtYjkyYS0z MzQ2LWIxMzItYWJkYTBiZTgwMzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCDUZm5Zm4l7UVKYlMaGTv5Ok+FN9Mp4Ogp3fo8 NEwiUou2TR8TLtWcQllqzzv2lmyEhAHUQBVntY5vcBMJ0YXq08wQxK3DPQlXKCQT mu0X1FA1vEGU/EaMm4E24giE6mt25q/pXE1zydZu6jEb4JZfnf2tkn14fEQEFimJ rV4OHV1WQNIEYLJKXcmAU+9sYzhH8arjZQDtZYXnLW74IwGbvoE+ncpcGzE+Ibsu KnP+ZrOcC9beSleMfFHZLt3P5eFVtjEPYTxVKPUfk/N805sIWMf5IxVwQjNDGetw m0MMx7ziAvITNU6pvrP2bE8aDE2fV8Ln/SiwLEzO6IrRrPAy -----END CERTIFICATE-----Generated at Mon Sep 21 19:16:51 2026 by rpki-client