$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c04720c0-f9bc-38c7-a8a5-f167556f2dfd.roa File: c04720c0-f9bc-38c7-a8a5-f167556f2dfd.roa (raw, json) Hash identifier: PHCueLsrwrvN+IIwMc5QwU62uNAAj+vPSxj51Yc1564= Subject key identifier: 4D:88:DF:A0:1F:CA:34:99:B4:35:8F:03:17:02:34:A3:CD:A9:BD:D4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F067285B1DC4BEA656ACE4300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c04720c0-f9bc-38c7-a8a5-f167556f2dfd.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 36618 IP address blocks: 2001:500:127::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:85:b1:dc:4b:ea:65:6a:ce:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=f8064a73-e6c2-4afd-b5f0-eefad8818cb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1e:13:8d:9f:40:6f:f3:d1:74:f5:b8:b7:70: b1:4e:e1:ef:6a:ef:60:a2:f5:d2:b1:fa:5f:0a:e4: 21:26:16:d5:28:23:0b:08:32:04:db:01:9b:87:63: 65:91:d6:4b:56:88:5a:66:35:30:8d:23:6a:a6:f4: a2:09:28:db:ae:c1:07:7a:fa:19:76:66:03:1a:72: df:74:ab:f2:fd:b7:cf:a6:ee:45:63:06:de:13:5a: 3e:68:68:01:4b:86:0e:a0:fc:45:c7:f2:62:7d:a6: c1:02:07:cd:64:46:e1:56:fd:61:31:6a:9c:5f:5d: 22:56:d3:fc:13:19:03:e5:d1:9e:6e:68:ac:25:63: 4c:84:74:1c:f2:e5:07:b4:e9:95:a4:c6:54:5b:e3: c8:5e:58:b9:f2:4d:e5:41:bf:e0:03:cd:54:de:9e: 9d:61:44:0a:f8:fc:bd:f1:5b:79:68:a2:91:55:61: 18:a3:51:72:95:a7:9b:f8:00:3a:73:0b:b9:1c:a0: 17:83:d4:d2:95:28:ce:46:2c:f3:23:a8:3d:3c:be: 92:63:63:1a:44:d5:5b:4f:26:a6:75:ff:22:dd:a9: 2f:40:24:89:0c:5d:43:84:a7:f2:59:1b:6e:70:ea: c9:ba:41:6c:8d:5b:48:08:9a:e7:e7:7c:bf:cc:6d: 6d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:88:DF:A0:1F:CA:34:99:B4:35:8F:03:17:02:34:A3:CD:A9:BD:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c04720c0-f9bc-38c7-a8a5-f167556f2dfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:02:da:52:bd:b2:06:f6:94:57:2d:02:39:90:34:2e:a5:83: b1:55:5a:41:03:f1:db:5c:32:76:15:03:3a:37:24:3f:64:ef: f1:79:9f:8b:63:9f:8d:7f:9b:b9:36:d7:dd:d7:a4:a5:31:49: 5e:a7:5d:b7:c1:d9:a9:be:33:b3:9f:ff:29:f7:af:58:7d:f6: cf:05:c7:3b:c1:ea:cd:bf:5f:5a:78:c3:01:fa:ad:ba:2f:a3: ee:39:fc:fa:5d:57:59:e9:5c:e2:ee:2d:ec:e3:ea:a4:98:c8: 43:52:97:8a:78:f1:31:59:da:46:36:4e:ef:09:96:f4:c9:1c: 10:78:be:33:29:4d:f4:53:09:4d:f5:b8:4e:24:27:43:7e:07: 17:57:60:f2:f8:00:bf:86:e2:8d:4d:7b:85:70:df:97:4e:a4: 57:b1:83:cc:6a:d8:d7:b9:34:8d:58:30:de:7b:77:52:98:dd: 31:a6:02:02:34:83:bd:07:30:01:78:0a:c9:67:2f:b5:38:4a: 7e:d7:ba:91:2b:40:e9:27:a5:17:3e:78:a6:a5:fa:e4:22:98: 04:4a:8d:ca:fb:c8:0d:bb:b4:6a:81:cb:c9:18:72:db:4d:b4: 61:e5:24:73:8d:9c:16:b6:b9:38:07:74:81:18:43:d3:14:9d: 46:3d:78:9f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8GcoWx3EvqZWrOQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk ZjgwNjRhNzMtZTZjMi00YWZkLWI1ZjAtZWVmYWQ4ODE4Y2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyR4TjZ9Ab/PRdPW4t3CxTuHvau9govXSsfpf CuQhJhbVKCMLCDIE2wGbh2NlkdZLVohaZjUwjSNqpvSiCSjbrsEHevoZdmYDGnLf dKvy/bfPpu5FYwbeE1o+aGgBS4YOoPxFx/JifabBAgfNZEbhVv1hMWqcX10iVtP8 ExkD5dGebmisJWNMhHQc8uUHtOmVpMZUW+PIXli58k3lQb/gA81U3p6dYUQK+Py9 8Vt5aKKRVWEYo1Fylaeb+AA6cwu5HKAXg9TSlSjORizzI6g9PL6SY2MaRNVbTyam df8i3akvQCSJDF1DhKfyWRtucOrJukFsjVtICJrn53y/zG1tbQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFE2I36AfyjSZtDWPAxcCNKPNqb3UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzA0NzIwYzAtZjliYy0z OGM3LWE4YTUtZjE2NzU1NmYyZGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEn AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCPAtpSvbIG9pRXLQI5kDQupYOxVVpBA/HbXDJ2 FQM6NyQ/ZO/xeZ+LY5+Nf5u5Ntfd16SlMUlep123wdmpvjOzn/8p969YffbPBcc7 werNv19aeMMB+q26L6PuOfz6XVdZ6Vzi7i3s4+qkmMhDUpeKePExWdpGNk7vCZb0 yRwQeL4zKU30UwlN9bhOJCdDfgcXV2Dy+AC/huKNTXuFcN+XTqRXsYPMatjXuTSN WDDee3dSmN0xpgICNIO9BzABeArJZy+1OEp+17qRK0DpJ6UXPnimpfrkIpgESo3K +8gNu7RqgcvJGHLbTbRh5SRzjZwWtrk4B3SBGEPTFJ1GPXif -----END CERTIFICATE-----Generated at Mon Sep 28 21:59:40 2026 by rpki-client