$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af2d6988-7f75-3dfe-8840-3008d86b3dcd.roa File: af2d6988-7f75-3dfe-8840-3008d86b3dcd.roa (raw, json) Hash identifier: sSkO7DxCTd5fwsh0kkvpjUqE6TcBTraD4Wi89J4wjCk= Subject key identifier: 9B:9E:8E:2C:D0:1B:08:3A:B9:86:9C:77:CA:D1:9B:3B:96:5E:F7:7E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F0ED23AAD8DC5E5A944BB6C00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af2d6988-7f75-3dfe-8840-3008d86b3dcd.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 396616 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:3a:ad:8d:c5:e5:a9:44:bb:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=be9676c7-847a-431b-a000-c1ed80ebbe42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b7:3e:96:c5:9d:9e:03:35:c1:18:4c:4d:a5: be:32:b7:6e:6d:29:a7:1d:da:28:98:a2:ff:7f:fe: 7f:2a:45:b2:8e:a5:df:38:89:52:1e:98:9a:4b:97: 18:10:1b:ec:1f:f8:ca:b4:d2:1c:c8:c4:62:67:13: 29:79:5f:48:5a:8f:3c:8b:94:c5:c6:e1:47:c7:0c: de:25:9c:32:82:47:3a:65:3b:be:18:52:b7:0a:67: 4f:ff:10:19:11:08:9d:d6:30:ec:f6:07:3e:9a:c1: f8:0d:3b:c9:a3:f5:5b:4a:6a:83:53:ab:2b:27:78: 49:44:91:83:28:cc:17:37:98:8d:b8:58:b8:7c:26: 44:66:d8:47:8d:9a:c9:3b:7c:e3:be:80:33:fd:af: dd:00:70:c0:04:e6:bb:26:f0:a9:8b:2b:88:24:f3: b6:07:87:00:71:2a:0f:02:ff:93:17:08:48:7e:04: c7:55:2a:5d:83:7d:e0:33:1a:c6:b6:86:13:0e:26: e2:e3:60:87:6d:f9:5f:ea:70:6d:56:81:9d:da:96: 12:ba:05:cd:60:27:f8:fe:26:62:21:fe:9a:8d:03: 4b:32:0f:ca:e1:8b:c4:b7:fd:22:77:f3:35:03:b7: 3a:ed:8c:b8:a7:09:32:de:85:6c:f7:4d:42:07:d4: 29:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:9E:8E:2C:D0:1B:08:3A:B9:86:9C:77:CA:D1:9B:3B:96:5E:F7:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af2d6988-7f75-3dfe-8840-3008d86b3dcd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:23:a5:90:e3:21:12:cd:7c:e2:cf:49:af:ec:b4:63:14:90: f1:65:6b:3a:2d:e4:e5:ac:b1:ee:28:8b:d7:9f:fe:ef:2f:c5: f3:4a:a1:93:cf:57:bd:0b:5b:72:fd:b7:3e:76:fc:bd:f7:b9: eb:fe:d1:79:49:f4:f3:b3:db:50:df:9c:40:de:e8:ac:1c:00: 12:6d:0a:6c:65:cb:30:86:a9:7a:3b:85:22:96:7c:52:ce:ee: cd:d0:64:d5:c8:4e:e9:5f:8a:a1:e2:3f:bc:0b:39:19:ac:13: ce:4c:e5:4a:f7:7c:c0:9a:d0:93:7f:a2:fa:b6:cb:f3:ab:a1: 90:64:c5:e6:63:10:26:96:0c:fe:75:c0:07:8c:2a:05:ca:03: 1f:38:23:8e:79:59:79:66:de:fc:fd:ae:24:55:88:40:7f:2f: 26:ee:de:d6:c7:17:ba:9b:d7:d2:18:29:2f:6d:fb:f7:3b:89: 10:83:3b:a4:6d:39:0f:5c:a0:45:0d:76:75:e9:ad:50:5e:27: 16:62:ca:c2:6c:1f:65:9c:b6:11:fe:88:17:94:6f:f7:f0:69: e3:20:b5:2a:4d:1f:53:d7:2f:b6:67:94:74:a6:88:2a:88:71: 50:75:2d:d1:37:b1:a3:ee:3d:57:60:bc:d8:66:ae:08:09:28: 57:8c:46:73 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8O0jqtjcXlqUS7bAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk YmU5Njc2YzctODQ3YS00MzFiLWEwMDAtYzFlZDgwZWJiZTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbc+lsWdngM1wRhMTaW+MrdubSmnHdoomKL/ f/5/KkWyjqXfOIlSHpiaS5cYEBvsH/jKtNIcyMRiZxMpeV9IWo88i5TFxuFHxwze JZwygkc6ZTu+GFK3CmdP/xAZEQid1jDs9gc+msH4DTvJo/VbSmqDU6srJ3hJRJGD KMwXN5iNuFi4fCZEZthHjZrJO3zjvoAz/a/dAHDABOa7JvCpiyuIJPO2B4cAcSoP Av+TFwhIfgTHVSpdg33gMxrGtoYTDibi42CHbflf6nBtVoGd2pYSugXNYCf4/iZi If6ajQNLMg/K4YvEt/0id/M1A7c67Yy4pwky3oVs901CB9Qp4wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJuejizQGwg6uYacd8rRmzuWXvd+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWYyZDY5ODgtN2Y3NS0z ZGZlLTg4NDAtMzAwOGQ4NmIzZGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQApI6WQ4yESzXziz0mv7LRjFJDxZWs6LeTlrLHu KIvXn/7vL8XzSqGTz1e9C1ty/bc+dvy997nr/tF5SfTzs9tQ35xA3uisHAASbQps Zcswhql6O4UilnxSzu7N0GTVyE7pX4qh4j+8CzkZrBPOTOVK93zAmtCTf6L6tsvz q6GQZMXmYxAmlgz+dcAHjCoFygMfOCOOeVl5Zt78/a4kVYhAfy8m7t7Wxxe6m9fS GCkvbfv3O4kQgzukbTkPXKBFDXZ16a1QXicWYsrCbB9lnLYR/ogXlG/38GnjILUq TR9T1y+2Z5R0pogqiHFQdS3RN7Gj7j1XYLzYZq4ICShXjEZz -----END CERTIFICATE-----Generated at Mon Sep 21 18:10:10 2026 by rpki-client