$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9b3f1d6-2a64-3a24-8609-1c2198435f4f.roa File: d9b3f1d6-2a64-3a24-8609-1c2198435f4f.roa (raw, json) Hash identifier: h34A0FVJIkB3MvrukJTgM3hWtP5kY/7wPF8ZcLrRWzg= Subject key identifier: D7:21:BE:38:ED:A2:C5:52:9B:C2:34:78:E4:3D:3B:9D:2D:48:53:E6 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F1CC7B856B74CADD2FF462F00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9b3f1d6-2a64-3a24-8609-1c2198435f4f.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 36618 IP address blocks: 2001:500:120::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:b8:56:b7:4c:ad:d2:ff:46:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=a11ca7c9-cea0-4975-ada0-6a103bc24c42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:0d:2c:26:23:2a:4f:f7:e5:5f:a5:2e:5d:22: 99:da:77:bd:7a:84:d8:31:01:9f:15:71:16:48:7d: e5:dc:28:65:14:3d:7e:81:b1:fe:4d:12:ad:56:52: 63:44:83:fe:ca:b6:a5:31:1e:fb:f0:4e:52:28:e0: e5:b1:b9:9a:f7:8e:56:73:0e:9f:82:9a:09:90:dc: 88:25:37:79:45:a7:a7:f7:87:b7:b6:b4:e5:52:03: b0:dc:ca:d4:4f:7b:7f:8d:31:32:6e:7b:91:0d:fe: c2:0c:b0:ce:18:d5:f8:b6:78:90:5e:ee:3d:e3:c1: c5:ac:29:b1:4c:59:e6:c7:59:87:ee:66:5d:e0:2b: 44:04:50:d7:5f:66:b3:af:f8:4d:db:fe:31:27:32: 5e:52:8b:6e:10:c5:4d:72:94:64:8b:f8:d4:26:9b: 2e:e1:77:a1:10:e8:de:5a:99:ae:28:4b:a6:09:0c: 8d:1e:a3:4d:10:3e:1e:62:6f:14:c6:a4:83:49:39: cb:fd:13:3d:8c:05:72:85:d0:d7:89:e0:10:1d:a2: 75:30:de:96:d3:b8:4f:40:61:f1:d0:36:82:59:c2: 38:3f:3a:e5:0b:ff:49:b5:32:af:32:3a:94:c9:c6: 97:c5:c5:e4:08:60:76:68:ed:2f:55:08:11:b1:fd: c7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:21:BE:38:ED:A2:C5:52:9B:C2:34:78:E4:3D:3B:9D:2D:48:53:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9b3f1d6-2a64-3a24-8609-1c2198435f4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:dc:b5:95:6b:80:aa:95:24:59:79:fa:ed:0b:de:2d:34:63: a4:60:9c:78:60:ed:16:90:be:35:1f:cb:45:8f:58:1d:66:61: 6d:1d:8d:34:29:6f:33:03:44:36:03:62:19:a3:42:d9:d0:59: 57:19:71:7e:46:1d:5f:d9:d3:02:a8:1c:3c:20:ce:e9:e5:31: c7:af:5f:d4:5d:df:f9:e0:36:1d:40:11:a5:75:5e:2a:91:44: 96:4f:e5:82:1e:28:84:48:89:29:fb:40:23:0c:52:48:57:e1: f4:8d:ac:1f:93:12:98:10:44:a7:09:df:da:78:64:33:55:9a: bd:53:49:4a:d9:0c:b0:68:7b:99:be:af:fa:00:fe:e1:b0:fc: fd:25:90:b6:01:9d:a8:93:2a:48:dc:8b:13:2b:dc:f2:3f:ba: 9d:1b:73:fa:ff:8b:46:37:8d:3c:04:49:ee:20:98:e7:7f:69: 36:41:32:3b:d4:92:9d:5a:0e:ec:2e:8a:ba:c7:dd:a5:96:2b: 2e:ed:4e:f2:64:99:75:58:5c:9e:23:af:f9:83:57:ad:43:20: e7:64:23:0b:9a:a8:a6:68:77:27:d6:cf:fc:97:46:c8:28:fa: c9:60:d4:f9:a1:8f:b2:db:8b:c4:0c:c8:24:52:dc:56:24:d6: 22:f1:40:50 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8cx7hWt0yt0v9GLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk YTExY2E3YzktY2VhMC00OTc1LWFkYTAtNmExMDNiYzI0YzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Q0sJiMqT/flX6UuXSKZ2ne9eoTYMQGfFXEW SH3l3ChlFD1+gbH+TRKtVlJjRIP+yralMR778E5SKODlsbma945Wcw6fgpoJkNyI JTd5Raen94e3trTlUgOw3MrUT3t/jTEybnuRDf7CDLDOGNX4tniQXu4948HFrCmx TFnmx1mH7mZd4CtEBFDXX2azr/hN2/4xJzJeUotuEMVNcpRki/jUJpsu4XehEOje WpmuKEumCQyNHqNNED4eYm8UxqSDSTnL/RM9jAVyhdDXieAQHaJ1MN6W07hPQGHx 0DaCWcI4PzrlC/9JtTKvMjqUycaXxcXkCGB2aO0vVQgRsf3HnQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNchvjjtosVSm8I0eOQ9O50tSFPmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDliM2YxZDYtMmE2NC0z YTI0LTg2MDktMWMyMTk4NDM1ZjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC63LWVa4CqlSRZefrtC94tNGOkYJx4YO0WkL41 H8tFj1gdZmFtHY00KW8zA0Q2A2IZo0LZ0FlXGXF+Rh1f2dMCqBw8IM7p5THHr1/U Xd/54DYdQBGldV4qkUSWT+WCHiiESIkp+0AjDFJIV+H0jawfkxKYEESnCd/aeGQz VZq9U0lK2QywaHuZvq/6AP7hsPz9JZC2AZ2okypI3IsTK9zyP7qdG3P6/4tGN408 BEnuIJjnf2k2QTI71JKdWg7sLoq6x92llisu7U7yZJl1WFyeI6/5g1etQyDnZCML mqimaHcn1s/8l0bIKPrJYNT5oY+y24vEDMgkUtxWJNYi8UBQ -----END CERTIFICATE-----Generated at Mon Sep 21 18:42:26 2026 by rpki-client