$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca38c6f6-2161-3c4a-9496-49daa29636ca.roa File: ca38c6f6-2161-3c4a-9496-49daa29636ca.roa (raw, json) Hash identifier: 4JNz+Y+HS75/U9V3ZO8v0HgXGicMZmWDm6B/kg5LnXQ= Subject key identifier: ED:64:59:B6:0D:E8:8E:F9:22:EC:C3:65:E1:4B:13:7A:16:8C:0D:99 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F23C280AEB6424110EB458880 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca38c6f6-2161-3c4a-9496-49daa29636ca.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 36628 IP address blocks: 2001:501:8a29::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:80:ae:b6:42:41:10:eb:45:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=c055254b-935d-4f61-8ad3-b88bed3e9598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f6:e2:0d:ba:9a:d5:91:77:9e:e5:9a:bd:67: d9:34:40:3e:a0:27:42:ca:81:c3:7c:68:cb:20:0e: 4c:b8:51:b3:c3:df:36:24:b2:37:68:a4:28:4e:f7: f1:cb:1a:13:00:d4:21:21:ce:e0:b4:22:49:90:35: 2f:45:c3:04:e9:fe:3d:0e:36:60:dc:aa:4b:a3:b5: a3:eb:a6:96:50:92:6d:39:c0:9d:d3:7c:8c:79:ad: 90:bd:b8:63:ec:83:61:fd:4e:04:ac:9f:a3:e4:16: 51:7f:14:d2:b0:d7:b0:17:c2:a7:2d:52:f5:1e:74: d1:13:3e:77:3b:2b:ed:fb:8e:1a:b6:a9:3c:35:b6: bb:11:c0:11:6e:61:af:88:cb:be:38:27:99:df:46: 44:3a:d6:6b:63:b1:a4:57:48:fc:5c:ca:71:30:79: 6e:6d:5c:34:2c:81:1b:a8:6f:04:a2:04:10:a4:9d: dd:db:e1:db:40:98:74:08:3d:9b:15:93:f8:58:38: b0:a9:4e:e5:07:ce:95:d8:3d:0c:ad:21:e7:4f:e0: 1e:58:cb:e0:d7:1c:0a:14:39:2b:c0:cd:5a:03:e2: a4:3b:17:1e:76:63:ae:89:48:e0:c0:8a:88:f0:8a: 05:bc:06:2b:60:8b:f4:20:0c:2f:f9:12:3f:e1:bc: a2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:64:59:B6:0D:E8:8E:F9:22:EC:C3:65:E1:4B:13:7A:16:8C:0D:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca38c6f6-2161-3c4a-9496-49daa29636ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:e0:29:f6:32:ec:db:b5:74:05:58:17:4d:95:2b:7f:68:cd: 0e:0e:3c:f8:fb:4d:0b:89:51:c9:9e:1d:61:01:0c:5a:bf:9e: a4:b2:f8:ff:8d:6e:e3:f8:82:98:6c:26:d3:f7:27:80:94:5e: dc:2d:9b:04:5a:2d:e8:41:ce:5b:40:2f:e0:d6:88:d9:de:0b: e4:ab:6a:94:7f:70:ed:ce:3c:ef:75:47:2e:98:3c:8f:3c:ec: db:72:81:73:d6:ef:21:58:38:cf:d2:76:8b:13:82:cf:5e:38: 2a:85:56:df:1e:49:50:55:06:0b:0c:b0:fe:93:a9:49:b5:ee: 61:1b:3b:de:b5:8e:b2:66:9c:40:b4:3a:23:b3:4d:ea:cd:98: a8:7c:26:b6:8d:43:6f:63:2a:3b:9c:fe:11:07:d8:cd:ba:f1: 53:e4:57:c5:2e:0b:ec:3c:51:2a:d5:d7:3b:f2:a1:9d:c7:37: e9:a1:76:5b:97:28:43:aa:ca:13:f2:c3:34:7d:7e:0c:32:87: 77:74:1c:7d:02:bd:17:e9:d6:55:88:21:ab:b7:85:66:3e:32: 7e:a4:17:fd:b0:a2:19:0e:1c:77:8b:34:91:37:80:25:56:8b: 7e:ab:8d:ee:d0:5f:f2:a4:84:53:88:b5:79:56:bb:96:31:0b: f3:81:85:9c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8jwoCutkJBEOtFiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk YzA1NTI1NGItOTM1ZC00ZjYxLThhZDMtYjg4YmVkM2U5NTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPbiDbqa1ZF3nuWavWfZNEA+oCdCyoHDfGjL IA5MuFGzw982JLI3aKQoTvfxyxoTANQhIc7gtCJJkDUvRcME6f49DjZg3KpLo7Wj 66aWUJJtOcCd03yMea2Qvbhj7INh/U4ErJ+j5BZRfxTSsNewF8KnLVL1HnTREz53 Oyvt+44atqk8Nba7EcARbmGviMu+OCeZ30ZEOtZrY7GkV0j8XMpxMHlubVw0LIEb qG8EogQQpJ3d2+HbQJh0CD2bFZP4WDiwqU7lB86V2D0MrSHnT+AeWMvg1xwKFDkr wM1aA+KkOxcedmOuiUjgwIqI8IoFvAYrYIv0IAwv+RI/4byiCQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFO1kWbYN6I75IuzDZeFLE3oWjA2ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2EzOGM2ZjYtMjE2MS0z YzRhLTk0OTYtNDlkYWEyOTYzNmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB+4Cn2MuzbtXQFWBdNlSt/aM0ODjz4+00LiVHJ nh1hAQxav56ksvj/jW7j+IKYbCbT9yeAlF7cLZsEWi3oQc5bQC/g1ojZ3gvkq2qU f3DtzjzvdUcumDyPPOzbcoFz1u8hWDjP0naLE4LPXjgqhVbfHklQVQYLDLD+k6lJ te5hGzvetY6yZpxAtDojs03qzZiofCa2jUNvYyo7nP4RB9jNuvFT5FfFLgvsPFEq 1dc78qGdxzfpoXZblyhDqsoT8sM0fX4MMod3dBx9Ar0X6dZViCGrt4VmPjJ+pBf9 sKIZDhx3izSRN4AlVot+q43u0F/ypIRTiLV5VruWMQvzgYWc -----END CERTIFICATE-----Generated at Sat Sep 26 13:39:46 2026 by rpki-client