$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8c3cb88-2bb9-3ce3-ba8b-904421920258.roa File: a8c3cb88-2bb9-3ce3-ba8b-904421920258.roa (raw, json) Hash identifier: PTmKhgyYpdVJcLOG5evnlOPW72zNwVkxVRkvgqcs5ns= Subject key identifier: 3E:6D:30:F6:55:3D:9E:7F:3A:B5:EB:52:7A:AD:5D:FB:FF:05:66:91 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F1CC7BACB01259F9AF62C2080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8c3cb88-2bb9-3ce3-ba8b-904421920258.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 396599 IP address blocks: 2001:500:120::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:ba:cb:01:25:9f:9a:f6:2c:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=69cff9cb-993d-4ee3-8589-82586c8b2e34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5e:0e:e9:78:e6:3b:a6:dd:47:5c:46:1f:a2: d8:c6:08:40:e2:d2:2e:3a:10:8c:8b:9c:c3:0f:d3: f3:b8:bf:a0:ed:7f:fd:a4:f7:ad:ba:a0:71:2b:1f: e4:a7:c0:15:ae:55:da:e4:53:58:c8:36:4d:eb:6c: fc:6e:8e:64:27:e5:38:9b:df:66:c1:18:51:62:c4: c4:01:90:9b:58:64:e2:b6:2b:dc:7e:78:06:e1:77: 73:23:46:89:2a:f4:e5:c9:bc:8b:e2:ee:11:f6:04: 18:28:03:1f:52:7f:b2:e9:5d:e3:a4:0a:b2:45:fd: 62:24:8d:67:1d:30:8a:4b:d5:26:94:86:bb:22:2a: 60:2b:5d:b0:96:c0:cc:f6:2f:26:15:59:3d:d9:85: 53:80:ba:c5:41:05:5a:bd:94:41:fb:a5:e4:08:ef: c3:25:d9:8b:ab:d3:9a:57:93:12:0c:b6:9d:ef:ec: 18:7b:fc:60:ba:aa:4d:2a:90:fd:32:74:76:4b:a5: 7b:b4:f9:d8:dd:0c:34:dc:46:f9:5f:c2:78:a7:89: 85:94:f9:9d:c9:21:56:84:cc:74:03:b0:98:aa:33: 1e:ae:5d:fe:6b:12:7a:17:d5:78:98:af:18:2f:f5: 95:8a:01:2f:d0:21:37:e1:14:8e:17:00:5c:5d:d0: 13:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6D:30:F6:55:3D:9E:7F:3A:B5:EB:52:7A:AD:5D:FB:FF:05:66:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8c3cb88-2bb9-3ce3-ba8b-904421920258.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:35:0f:7b:7c:cd:33:8b:54:aa:15:c4:15:36:cd:3b:6a:4b: b7:91:69:74:8b:40:60:d8:69:88:79:5a:13:0e:83:d1:0c:54: 9b:9f:a2:1d:b8:1c:c3:1e:3e:ce:3a:3c:82:dc:95:c8:eb:b6: a8:b3:85:f1:2e:44:21:bb:bb:79:8d:f9:75:01:ac:11:21:40: 1d:ef:e4:17:39:10:29:b6:a0:26:04:a6:c6:31:a5:28:30:83: 26:3e:19:72:d4:fe:a8:33:95:ec:6c:e9:67:70:f5:2c:0b:0a: 18:a3:02:eb:d0:37:f2:e2:1c:8d:f2:09:c7:cb:d7:3e:37:64: 03:49:54:f2:c8:95:42:8f:a5:c1:42:2e:7f:c5:03:2a:e2:88: 36:ee:e6:e0:a5:8b:9f:d8:98:88:f0:72:54:ff:7f:1d:d6:70: 46:38:de:0d:c0:4e:68:50:9e:29:e0:a8:11:7b:98:f5:72:7f: 54:0d:dc:13:a6:6e:bc:1a:5e:29:8e:4f:b7:ce:fb:af:f4:8a: bf:d1:73:68:3c:ae:f3:68:dc:c8:98:c4:61:f3:6d:1f:07:45: 7e:4d:23:02:b7:e7:fc:20:02:24:51:4f:3a:9f:86:93:d1:29: 09:14:6c:b9:31:77:34:44:ae:cb:d0:01:74:48:50:8a:c5:9d: 6f:7e:e6:90 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8cx7rLASWfmvYsIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk NjljZmY5Y2ItOTkzZC00ZWUzLTg1ODktODI1ODZjOGIyZTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwl4O6XjmO6bdR1xGH6LYxghA4tIuOhCMi5zD D9PzuL+g7X/9pPetuqBxKx/kp8AVrlXa5FNYyDZN62z8bo5kJ+U4m99mwRhRYsTE AZCbWGTitivcfngG4XdzI0aJKvTlybyL4u4R9gQYKAMfUn+y6V3jpAqyRf1iJI1n HTCKS9UmlIa7IipgK12wlsDM9i8mFVk92YVTgLrFQQVavZRB+6XkCO/DJdmLq9Oa V5MSDLad7+wYe/xguqpNKpD9MnR2S6V7tPnY3Qw03Eb5X8J4p4mFlPmdySFWhMx0 A7CYqjMerl3+axJ6F9V4mK8YL/WVigEv0CE34RSOFwBcXdATlQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFD5tMPZVPZ5/OrXrUnqtXfv/BWaRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYThjM2NiODgtMmJiOS0z Y2UzLWJhOGItOTA0NDIxOTIwMjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAVNQ97fM0zi1SqFcQVNs07aku3kWl0i0Bg2GmI eVoTDoPRDFSbn6IduBzDHj7OOjyC3JXI67aos4XxLkQhu7t5jfl1AawRIUAd7+QX ORAptqAmBKbGMaUoMIMmPhly1P6oM5XsbOlncPUsCwoYowLr0Dfy4hyN8gnHy9c+ N2QDSVTyyJVCj6XBQi5/xQMq4og27ubgpYuf2JiI8HJU/38d1nBGON4NwE5oUJ4p 4KgRe5j1cn9UDdwTpm68Gl4pjk+3zvuv9Iq/0XNoPK7zaNzImMRh820fB0V+TSMC t+f8IAIkUU86n4aT0SkJFGy5MXc0RK7L0AF0SFCKxZ1vfuaQ -----END CERTIFICATE-----Generated at Tue Sep 22 17:42:48 2026 by rpki-client