$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3ef2bee-c190-3a1b-bb95-0676e2164591.roa File: c3ef2bee-c190-3a1b-bb95-0676e2164591.roa (raw, json) Hash identifier: kocGxh/3tHWc/nsKDKutSvtH9hoapdV3gnrZjz2FDPg= Subject key identifier: 7E:BD:E8:96:E1:8B:64:32:1E:9A:2F:F8:61:12:BF:D8:21:5C:63:60 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F0ED23C6BB5D88BD348E77900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3ef2bee-c190-3a1b-bb95-0676e2164591.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 396617 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:3c:6b:b5:d8:8b:d3:48:e7:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=f1f4c69c-0b9c-4dde-9f86-65a7a608add6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:98:f6:06:40:8a:a2:18:95:05:cb:2d:1c:9f: 5d:f7:76:c9:5a:f9:8d:3a:fd:a4:9c:de:4d:a6:e7: ef:64:e0:71:49:fa:05:26:82:39:ba:b0:a6:59:9b: 7e:3d:fc:02:7f:66:f8:aa:dc:7b:2b:fb:e1:74:a2: e7:8b:e8:99:97:66:a4:7d:de:29:6a:19:1b:2f:e4: 6f:f3:87:3a:73:b8:79:8e:65:1b:db:4e:2d:21:4b: fd:15:77:b0:8f:56:35:48:87:7f:c3:63:c0:4b:31: 8c:dc:e6:e6:9e:a1:59:68:41:9b:a8:1e:18:b6:58: 88:84:28:b8:aa:19:6a:a3:44:15:3e:cd:b9:01:0f: 9e:80:24:62:6a:cc:4e:c6:7b:92:c2:25:64:da:e7: 19:0c:11:7e:04:75:52:9b:92:0b:fd:3e:e7:c7:b9: 6b:20:1f:8b:ec:fb:5b:27:3b:81:22:f3:36:12:c8: 28:c5:20:8f:2e:37:2b:18:6b:8f:8c:3a:9c:cf:11: 52:36:dc:c3:4b:8e:7b:18:f1:bd:a8:43:e1:6f:97: 57:77:54:fd:df:da:0d:d2:d8:cf:6d:fd:77:07:cb: 5d:be:81:b9:c9:aa:1b:c6:be:0e:0a:41:bd:c5:c9: da:f3:ab:5f:45:40:b8:95:a9:eb:54:5b:95:fe:57: 37:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:BD:E8:96:E1:8B:64:32:1E:9A:2F:F8:61:12:BF:D8:21:5C:63:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3ef2bee-c190-3a1b-bb95-0676e2164591.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:3d:f6:79:ab:b1:20:61:21:56:89:e9:7e:ff:3f:07:47:b0: 99:49:d0:dd:18:be:78:9a:14:57:e7:34:02:81:63:e9:f4:70: cc:33:46:94:b2:f0:10:57:1e:f3:4c:cf:93:43:c0:5c:f6:f2: e8:18:bd:06:0d:fd:6e:88:3d:98:1e:82:5d:ea:08:f6:99:a6: df:d4:fe:16:10:b1:b6:cd:36:32:76:0c:11:63:3e:6b:e6:cf: 06:4f:1f:fd:7b:2e:0d:e9:dd:08:a7:3d:c1:cd:bd:b1:21:94: 55:6d:6e:60:49:7c:4d:8e:47:77:dd:83:ea:a7:d6:92:de:34: 38:9a:7d:f3:43:39:fd:05:40:30:1b:ef:ba:3b:ed:0f:38:81: 8c:09:33:13:65:34:1c:5a:66:d7:59:54:b3:10:e6:0e:60:28: 57:2a:4e:3b:5e:4c:df:c3:86:50:00:0c:c4:4d:82:de:e3:af: 05:af:dc:2a:d4:c8:07:59:32:ad:bf:40:f1:6b:bc:1a:59:00: ea:19:4a:f0:a9:e3:2f:a0:ee:c4:fd:f7:2e:71:1e:7e:b2:c1: 1c:ad:79:db:2d:4b:2f:cb:f1:5f:0a:7b:43:5c:35:26:d8:2c: 56:cc:88:6a:f4:c7:09:69:1e:59:65:e0:d5:f4:46:ad:18:60: 2d:a6:e1:b8 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8O0jxrtdiL00jneQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk ZjFmNGM2OWMtMGI5Yy00ZGRlLTlmODYtNjVhN2E2MDhhZGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5j2BkCKohiVBcstHJ9d93bJWvmNOv2knN5N pufvZOBxSfoFJoI5urCmWZt+PfwCf2b4qtx7K/vhdKLni+iZl2akfd4pahkbL+Rv 84c6c7h5jmUb204tIUv9FXewj1Y1SId/w2PASzGM3ObmnqFZaEGbqB4YtliIhCi4 qhlqo0QVPs25AQ+egCRiasxOxnuSwiVk2ucZDBF+BHVSm5IL/T7nx7lrIB+L7Ptb JzuBIvM2EsgoxSCPLjcrGGuPjDqczxFSNtzDS457GPG9qEPhb5dXd1T939oN0tjP bf13B8tdvoG5yaobxr4OCkG9xcna86tfRUC4lanrVFuV/lc3tQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFH696Jbhi2QyHpov+GESv9ghXGNgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzNlZjJiZWUtYzE5MC0z YTFiLWJiOTUtMDY3NmUyMTY0NTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQASPfZ5q7EgYSFWiel+/z8HR7CZSdDdGL54mhRX 5zQCgWPp9HDMM0aUsvAQVx7zTM+TQ8Bc9vLoGL0GDf1uiD2YHoJd6gj2mabf1P4W ELG2zTYydgwRYz5r5s8GTx/9ey4N6d0Ipz3Bzb2xIZRVbW5gSXxNjkd33YPqp9aS 3jQ4mn3zQzn9BUAwG++6O+0POIGMCTMTZTQcWmbXWVSzEOYOYChXKk47Xkzfw4ZQ AAzETYLe468Fr9wq1MgHWTKtv0Dxa7waWQDqGUrwqeMvoO7E/fcucR5+ssEcrXnb LUsvy/FfCntDXDUm2CxWzIhq9McJaR5ZZeDV9EatGGAtpuG4 -----END CERTIFICATE-----Generated at Tue Sep 22 18:15:42 2026 by rpki-client