$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a54081aa-b4a8-3ea2-9a3a-c066d9a17514.roa File: a54081aa-b4a8-3ea2-9a3a-c066d9a17514.roa (raw, json) Hash identifier: V4BNWXn17q19Qic8G4DADEINKHFOSKCZwIC3AuCYsCU= Subject key identifier: 87:47:05:54:28:8D:6D:CA:8B:B8:E6:D5:97:08:E5:59:E5:D3:FD:C0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F0672720A1800B716F95AA580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a54081aa-b4a8-3ea2-9a3a-c066d9a17514.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 396586 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:72:0a:18:00:b7:16:f9:5a:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=ba3d6820-00e4-42f1-9e64-c40875cecd23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2a:62:d5:ee:2c:26:9b:e2:a1:1a:cb:1a:bf: 3f:ee:30:01:4e:58:85:24:d7:a1:36:e1:f3:c6:f8: 49:d7:fd:7d:7d:38:3e:bb:37:f5:4b:6d:7f:00:99: 8c:01:ec:bf:7b:a4:c0:99:a6:e9:de:ce:81:ee:c9: 29:e6:7c:d6:85:1e:bc:63:1a:12:a9:d6:10:75:df: 40:b8:9a:91:cd:fa:87:9d:b3:56:1f:45:c2:36:56: 79:c8:f6:cd:26:bf:b5:9c:72:6b:78:27:31:3d:b5: cc:c8:ba:c8:f0:6a:38:6b:f6:58:0d:fe:15:cc:00: 6c:2f:7c:ca:a3:a3:f2:3f:a1:9c:32:2f:f9:9a:58: 7c:8b:49:08:5a:ef:da:35:15:93:31:3a:2d:d4:69: 20:45:a2:a8:8a:4c:ee:8b:50:1a:0f:dc:c5:ad:4b: 26:42:44:0e:29:a7:38:5b:e4:c6:4e:5d:98:47:01: 61:86:af:41:be:ea:e8:c8:88:f9:b2:71:1d:7e:e8: 04:bd:ba:18:76:0a:89:a7:da:8b:b2:45:f4:7e:1b: 11:a0:97:c8:c7:4a:ca:6f:dd:a0:41:fa:4d:01:86: 8c:73:ca:89:18:5a:8d:61:19:e4:29:cc:05:1f:5c: 90:57:e5:41:2d:b9:e5:dc:56:d1:bf:9e:3c:1c:01: d6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:47:05:54:28:8D:6D:CA:8B:B8:E6:D5:97:08:E5:59:E5:D3:FD:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a54081aa-b4a8-3ea2-9a3a-c066d9a17514.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:19:7e:28:f7:ee:cf:83:57:30:71:06:00:b5:4c:b2:a5:df: e3:34:1d:ab:af:8a:4a:df:44:02:fa:14:5f:ba:20:cc:f4:87: b5:1d:22:51:af:c4:14:56:bb:05:19:9b:4f:7a:d3:b6:ce:dc: 43:21:c1:98:4a:fb:71:46:bf:e8:06:83:a8:27:ae:d7:60:59: 46:57:c5:dd:50:d9:5b:ed:76:e9:56:93:77:7a:03:2b:5e:0f: e9:14:60:2a:ad:b3:5f:74:e7:58:e7:3d:f8:47:79:77:32:56: 20:4f:c7:c1:26:77:8d:f4:db:4e:5e:f5:aa:8c:2a:71:ef:95: 8f:a4:e4:d2:0b:dc:60:14:ad:81:8c:10:8c:45:e9:4b:16:83: 94:73:1c:ae:3e:c3:56:7c:50:56:4d:c0:54:dd:a7:a6:0e:34: f2:ba:9d:35:4d:a6:f0:86:45:c3:1d:3b:5a:5e:f4:84:b4:b8: 97:0d:d7:a5:f1:4d:05:e0:95:5e:90:6a:bc:0b:48:c8:de:69: ff:42:24:8e:ba:d3:40:6a:6a:96:2c:44:ac:46:1d:dc:6c:55: 25:d3:22:66:0d:2b:02:21:a5:84:95:02:fa:32:06:a8:8c:7a: bd:6b:d8:c8:8a:56:ed:96:bf:c5:d8:8a:79:5a:11:8e:0a:89: 43:07:e5:9a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8GcnIKGAC3FvlapYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk YmEzZDY4MjAtMDBlNC00MmYxLTllNjQtYzQwODc1Y2VjZDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSpi1e4sJpvioRrLGr8/7jABTliFJNehNuHz xvhJ1/19fTg+uzf1S21/AJmMAey/e6TAmabp3s6B7skp5nzWhR68YxoSqdYQdd9A uJqRzfqHnbNWH0XCNlZ5yPbNJr+1nHJreCcxPbXMyLrI8Go4a/ZYDf4VzABsL3zK o6PyP6GcMi/5mlh8i0kIWu/aNRWTMTot1GkgRaKoikzui1AaD9zFrUsmQkQOKac4 W+TGTl2YRwFhhq9BvuroyIj5snEdfugEvboYdgqJp9qLskX0fhsRoJfIx0rKb92g QfpNAYaMc8qJGFqNYRnkKcwFH1yQV+VBLbnl3FbRv548HAHWeQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIdHBVQojW3Ki7jm1ZcI5Vnl0/3AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTU0MDgxYWEtYjRhOC0z ZWEyLTlhM2EtYzA2NmQ5YTE3NTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA5GX4o9+7Pg1cwcQYAtUyypd/jNB2rr4pK30QC +hRfuiDM9Ie1HSJRr8QUVrsFGZtPetO2ztxDIcGYSvtxRr/oBoOoJ67XYFlGV8Xd UNlb7XbpVpN3egMrXg/pFGAqrbNfdOdY5z34R3l3MlYgT8fBJneN9NtOXvWqjCpx 75WPpOTSC9xgFK2BjBCMRelLFoOUcxyuPsNWfFBWTcBU3aemDjTyup01TabwhkXD HTtaXvSEtLiXDdel8U0F4JVekGq8C0jI3mn/QiSOutNAamqWLESsRh3cbFUl0yJm DSsCIaWElQL6MgaojHq9a9jIilbtlr/F2Ip5WhGOColDB+Wa -----END CERTIFICATE-----Generated at Tue Sep 22 07:18:34 2026 by rpki-client