$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df0fd3b3-c5b9-360a-af1d-2e86893a3e12.roa File: df0fd3b3-c5b9-360a-af1d-2e86893a3e12.roa (raw, json) Hash identifier: B9cCk7qbX061ZWd88ypzQd9HzIWQpyItPll25j2EEfg= Subject key identifier: 9E:1B:49:39:51:BA:C8:9B:53:DB:AC:4A:E1:6F:D4:C8:F7:53:60:E2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F0672748007A64AC80B7B0080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df0fd3b3-c5b9-360a-af1d-2e86893a3e12.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 396587 IP address blocks: 2001:500:124::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:74:80:07:a6:4a:c8:0b:7b:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=8f9d3171-a53f-4d21-9af0-a7a63786a444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f2:d0:3f:24:dc:cd:d6:45:9d:4a:ca:68:89: 66:b2:63:c6:fb:98:5c:81:80:aa:fa:9f:b0:d0:27: b8:39:54:57:53:2e:05:60:a4:a5:ad:ad:28:5e:4d: 2b:04:12:42:1c:0d:07:d5:62:b4:b6:da:ed:a9:e1: b4:9d:91:42:11:d2:ab:34:53:35:20:5b:9e:35:82: 82:99:dd:3e:59:d0:d2:c6:32:02:d9:ed:f5:60:4c: 91:77:36:39:cc:5f:1e:eb:55:f0:35:86:22:25:9b: bf:98:63:a4:33:d8:ac:ef:fa:a4:93:54:6a:2c:8e: b3:e2:d2:2f:d8:46:35:6b:b2:0b:2c:d4:2e:15:e4: 4b:31:eb:fb:e9:0a:e5:73:d6:d8:4a:d0:c5:0d:60: 3f:ad:b4:53:4a:22:de:04:3d:3f:cb:a9:3a:ad:c1: 85:eb:a0:4d:ce:be:8e:6e:a7:6c:1d:17:e4:9c:d4: bb:44:98:5e:e1:42:ba:51:dd:21:cf:ba:79:71:5d: 43:e8:3f:80:21:4a:d1:55:29:ea:e9:92:38:8a:0c: 20:aa:b0:cf:cb:67:ad:07:4b:91:9f:f5:ef:fe:b9: af:e7:81:2d:c4:5a:51:7b:d6:af:d1:c6:f8:ca:39: 59:60:1f:79:79:a5:e7:51:5e:b0:17:da:1e:48:c6: 72:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:1B:49:39:51:BA:C8:9B:53:DB:AC:4A:E1:6F:D4:C8:F7:53:60:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df0fd3b3-c5b9-360a-af1d-2e86893a3e12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:124:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:49:6e:10:06:ba:05:1b:04:7b:56:21:e4:7d:de:72:aa:49: 6f:5a:af:01:69:60:2a:e3:96:0a:0f:42:d1:cd:ca:1e:b2:11: f9:3f:34:a8:e6:d9:7f:d2:4a:17:cd:3a:76:1b:57:01:49:4d: 90:b5:05:56:62:24:f3:da:a1:3e:ab:d4:0b:94:a5:c6:5f:f8: 0a:a1:0d:e9:08:93:08:02:d2:95:e9:61:a4:2d:5b:31:8d:b2: d7:57:4c:c3:2c:d1:8d:dd:54:60:04:91:ac:ef:ea:37:aa:8a: eb:f1:58:87:91:50:4c:c2:80:97:9f:ea:7c:0f:ab:83:2f:cd: b6:5c:54:77:22:07:c3:64:a5:26:45:4a:4f:ee:6b:d2:8b:42: 50:ca:33:6e:2d:30:53:95:d4:45:d1:74:28:e7:a4:e3:9a:a3: c3:dc:82:9d:b1:11:47:02:e0:d0:42:8f:ad:0d:56:09:f5:84: 82:3d:b4:c4:08:b3:ad:43:55:94:14:e4:02:08:06:ca:7e:5f: 63:13:d2:3e:1e:40:1e:6c:cf:e7:e8:9d:3d:1b:31:3b:89:c9: b4:69:01:d7:45:85:66:02:ef:9b:59:16:58:7b:df:a6:e2:ee: ea:60:a0:6d:b1:c8:12:dd:2b:d8:f4:ab:fa:e5:ba:9a:fa:6f: d7:4d:58:8b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8GcnSAB6ZKyAt7AIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk OGY5ZDMxNzEtYTUzZi00ZDIxLTlhZjAtYTdhNjM3ODZhNDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovLQPyTczdZFnUrKaIlmsmPG+5hcgYCq+p+w 0Ce4OVRXUy4FYKSlra0oXk0rBBJCHA0H1WK0ttrtqeG0nZFCEdKrNFM1IFueNYKC md0+WdDSxjIC2e31YEyRdzY5zF8e61XwNYYiJZu/mGOkM9is7/qkk1RqLI6z4tIv 2EY1a7ILLNQuFeRLMev76Qrlc9bYStDFDWA/rbRTSiLeBD0/y6k6rcGF66BNzr6O bqdsHRfknNS7RJhe4UK6Ud0hz7p5cV1D6D+AIUrRVSnq6ZI4igwgqrDPy2etB0uR n/Xv/rmv54EtxFpRe9av0cb4yjlZYB95eaXnUV6wF9oeSMZyMwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJ4bSTlRusibU9usSuFv1Mj3U2DiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGYwZmQzYjMtYzViOS0z NjBhLWFmMWQtMmU4Njg5M2EzZTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEk AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAeSW4QBroFGwR7ViHkfd5yqklvWq8BaWAq45YK D0LRzcoeshH5PzSo5tl/0koXzTp2G1cBSU2QtQVWYiTz2qE+q9QLlKXGX/gKoQ3p CJMIAtKV6WGkLVsxjbLXV0zDLNGN3VRgBJGs7+o3qorr8ViHkVBMwoCXn+p8D6uD L822XFR3IgfDZKUmRUpP7mvSi0JQyjNuLTBTldRF0XQo56TjmqPD3IKdsRFHAuDQ Qo+tDVYJ9YSCPbTECLOtQ1WUFOQCCAbKfl9jE9I+HkAebM/n6J09GzE7icm0aQHX RYVmAu+bWRZYe9+m4u7qYKBtscgS3SvY9Kv65bqa+m/XTViL -----END CERTIFICATE-----Generated at Wed Sep 23 01:46:31 2026 by rpki-client