$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a29700f4-363e-3c19-ac92-5427f49e35ed.roa File: a29700f4-363e-3c19-ac92-5427f49e35ed.roa (raw, json) Hash identifier: SE12AcsQGnoly+HQ7EWi1Z3Ke1HBZUKY6OkBSVGKOuM= Subject key identifier: 13:16:EF:1A:A1:0B:37:80:76:38:E5:F7:65:A1:8C:2A:93:E5:41:DD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EFCACE240094E65F2E4E89900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a29700f4-363e-3c19-ac92-5427f49e35ed.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 396562 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:e2:40:09:4e:65:f2:e4:e8:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=16919455-b603-46b6-934f-8143caff9bf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c7:93:83:35:17:70:9b:b7:9a:52:fe:f2:32: b4:76:c5:77:5b:40:88:1c:30:17:25:c4:bd:97:5f: 0f:96:58:47:bf:9f:69:72:5d:b3:98:d7:64:c3:bd: 3a:01:c5:3d:60:46:19:e4:0f:7d:f3:2c:aa:fb:5f: 4d:18:f1:a5:4b:c5:12:9c:e4:c7:a9:b5:4f:bf:c2: 51:b5:4f:bf:29:f9:c4:1e:af:cb:7b:e6:94:3e:30: dd:f9:2f:5e:e7:62:62:cc:88:55:85:15:b8:4c:6f: 3b:9e:0e:4c:3c:2d:29:d3:ae:e3:8c:c3:54:2c:b1: 9c:c5:7a:7c:b4:07:37:83:22:99:58:a4:c7:b4:26: 0c:96:0b:7e:5a:8e:4e:29:a4:94:3e:78:f3:3b:af: 05:9e:32:96:f3:fc:8e:c3:d0:b4:40:57:6c:36:d3: 05:aa:f3:ff:ce:c0:e0:14:e2:d9:3d:77:00:68:cc: 04:71:b8:d9:26:4a:3f:82:bf:ea:02:0e:72:d2:35: 8e:7c:24:74:62:58:51:ed:ac:68:69:30:a6:34:ec: 68:3a:28:92:21:2e:af:e1:d7:71:e2:62:43:46:a9: 0d:74:54:d4:85:72:11:eb:ad:c4:c7:ad:68:4a:8c: 88:12:71:04:21:a6:ff:25:a9:76:8f:a3:df:b1:21: 7d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:16:EF:1A:A1:0B:37:80:76:38:E5:F7:65:A1:8C:2A:93:E5:41:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a29700f4-363e-3c19-ac92-5427f49e35ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:be:d8:c5:49:cf:c7:76:dd:33:b5:22:15:6b:74:cf:b8:29: ff:3d:c4:a0:14:96:52:50:f6:08:e1:36:13:ad:d7:cc:2b:f0: c1:8e:46:69:b5:a8:11:43:c1:bf:66:ba:37:ad:dc:41:61:c5: 50:87:69:b9:3e:cd:e1:af:3d:f8:22:41:d8:fd:cf:35:b4:ed: 1f:0c:16:52:1d:73:78:26:0e:87:94:89:28:05:6d:af:92:f0: 4d:99:de:be:18:4e:9c:a2:c7:2c:a8:3f:7f:63:24:12:36:ec: e9:bf:f0:a1:e2:8f:8e:64:b0:b7:a9:44:be:b1:0c:fd:5b:9c: 01:04:89:0a:fc:66:d1:48:bb:e5:62:d5:54:34:97:ec:63:43: 77:81:99:fd:d7:a7:1a:65:22:09:d7:f8:9b:a8:f8:42:94:30: 20:7e:84:a4:bb:f6:e4:d7:9f:64:ee:d2:09:47:fe:80:03:c5: b5:e8:78:71:92:b9:56:65:ea:ad:a5:f7:60:f1:17:bd:b9:c8: 7f:f0:01:2c:f3:c3:0c:e1:9f:a0:0e:13:ba:ab:3e:e4:3f:1e: 6f:b3:dc:dc:c1:06:5e:e3:4b:17:a7:97:58:05:75:ac:f6:51: a8:e8:91:da:af:86:3b:f8:7a:3d:f7:36:2c:b1:fa:21:f9:3a: 1e:a6:55:87 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE78rOJACU5l8uTomQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk MTY5MTk0NTUtYjYwMy00NmI2LTkzNGYtODE0M2NhZmY5YmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMeTgzUXcJu3mlL+8jK0dsV3W0CIHDAXJcS9 l18PllhHv59pcl2zmNdkw706AcU9YEYZ5A998yyq+19NGPGlS8USnOTHqbVPv8JR tU+/KfnEHq/Le+aUPjDd+S9e52JizIhVhRW4TG87ng5MPC0p067jjMNULLGcxXp8 tAc3gyKZWKTHtCYMlgt+Wo5OKaSUPnjzO68FnjKW8/yOw9C0QFdsNtMFqvP/zsDg FOLZPXcAaMwEcbjZJko/gr/qAg5y0jWOfCR0YlhR7axoaTCmNOxoOiiSIS6v4ddx 4mJDRqkNdFTUhXIR663Ex61oSoyIEnEEIab/Jal2j6PfsSF9PwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBMW7xqhCzeAdjjl92WhjCqT5UHdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTI5NzAwZjQtMzYzZS0z YzE5LWFjOTItNTQyN2Y0OWUzNWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCqvtjFSc/Hdt0ztSIVa3TPuCn/PcSgFJZSUPYI 4TYTrdfMK/DBjkZptagRQ8G/Zro3rdxBYcVQh2m5Ps3hrz34IkHY/c81tO0fDBZS HXN4Jg6HlIkoBW2vkvBNmd6+GE6coscsqD9/YyQSNuzpv/Ch4o+OZLC3qUS+sQz9 W5wBBIkK/GbRSLvlYtVUNJfsY0N3gZn916caZSIJ1/ibqPhClDAgfoSku/bk159k 7tIJR/6AA8W16HhxkrlWZeqtpfdg8Re9uch/8AEs88MM4Z+gDhO6qz7kPx5vs9zc wQZe40sXp5dYBXWs9lGo6JHar4Y7+Ho99zYssfoh+ToeplWH -----END CERTIFICATE-----Generated at Mon Sep 21 14:21:42 2026 by rpki-client