$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff43cd63-0c04-37a5-9b68-7ecd614eb2e0.roa File: ff43cd63-0c04-37a5-9b68-7ecd614eb2e0.roa (raw, json) Hash identifier: LXG2B+HZSruWtcgZ3Xwbc493CJ5mXGcKAXhaZ3bQYCM= Subject key identifier: 3D:9E:77:F6:D7:CA:93:4A:AE:1C:85:14:96:EA:59:92:01:75:B8:60 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F1CC7B862A6332B0827C4B940 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff43cd63-0c04-37a5-9b68-7ecd614eb2e0.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 396547 IP address blocks: 2001:500:120::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:b8:62:a6:33:2b:08:27:c4:b9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=d99ffb7e-9d32-41dd-ad7b-69dfb4a4ae48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:0b:68:ed:f3:01:4f:66:9d:dc:aa:54:d8:ad: b1:66:ed:b1:99:5c:15:31:58:79:96:7a:e5:a4:1e: 6f:ea:e5:e3:2d:ae:f6:ea:32:e1:a6:a8:ee:34:31: 78:af:bf:a9:1b:5e:67:c6:b9:64:79:a2:48:8b:a3: 67:0a:a5:25:9c:bd:f4:d8:88:bd:9b:64:f0:f5:c0: e4:3f:79:ff:43:b0:ce:76:c6:46:9d:ca:04:aa:8a: ce:9d:d0:03:ed:9b:b2:ac:f9:01:b8:e8:30:15:43: bd:86:b2:65:42:6f:aa:4d:1c:ff:30:5e:f6:50:78: 9a:1b:ca:c0:ac:59:78:e8:8a:5d:ee:21:d8:3b:fb: 11:df:51:ed:ff:92:6e:47:3b:5e:63:ec:63:a8:2b: e9:fe:d5:61:bc:dc:69:a5:e5:f8:aa:d7:d1:69:d3: 54:e8:41:b4:44:ed:f9:32:88:fb:fe:ed:1c:03:3c: 99:b6:96:af:99:0c:f2:7f:34:02:92:5c:a9:48:22: d2:fe:72:32:8f:f7:5c:74:76:3c:08:d5:b0:a6:11: 21:fc:bb:69:03:4e:e2:55:b2:65:2c:71:0f:fa:4a: 14:a5:03:fa:f7:50:d5:56:fc:b8:5f:d3:f1:f6:7e: 51:2c:41:ae:7f:c9:0d:34:6f:06:8c:f2:f7:85:40: 9d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9E:77:F6:D7:CA:93:4A:AE:1C:85:14:96:EA:59:92:01:75:B8:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff43cd63-0c04-37a5-9b68-7ecd614eb2e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:3c:3c:89:ea:29:f8:b8:90:72:8b:c2:73:04:5b:4d:6f:e5: d5:c9:29:3d:37:d4:40:fa:7f:85:20:cf:b6:a6:e2:ed:1a:cd: f2:db:a3:02:26:ea:31:d5:b4:88:be:6b:ba:9c:b4:86:01:81: 25:8d:c5:72:66:4a:a4:c3:cf:24:b7:2c:d6:0f:86:4f:e6:78: 16:b8:08:94:cb:16:3e:62:72:ab:a5:c3:93:29:86:15:4c:fa: c7:a3:8e:91:a4:05:b5:46:8c:d3:45:db:24:8e:27:7d:e0:62: 4b:0a:3d:83:83:d9:49:24:b8:d0:07:d3:45:e8:03:d3:17:90: d4:c6:36:60:4d:b8:fd:31:a8:e4:e4:1a:80:e5:ed:0f:30:4f: 0a:e9:bb:0a:82:f0:00:7c:93:91:a0:82:b6:05:87:40:1b:07: 7f:e5:c1:ae:1d:10:bd:b6:d6:a9:ad:22:91:01:11:b3:24:b9: 97:76:96:1d:dd:0d:55:5d:1d:86:db:be:47:86:44:ef:62:21: 64:1a:95:eb:ae:4e:bf:a7:0b:90:c2:76:9f:fd:e5:05:f4:56: c5:c8:f1:29:c4:c0:06:17:2c:bc:f8:1a:91:7e:e1:d6:dd:c0: 6b:21:cc:1f:8d:e5:6b:eb:e9:2c:86:2a:de:99:02:dd:51:7c: e9:ee:62:60 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8cx7hipjMrCCfEuUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk ZDk5ZmZiN2UtOWQzMi00MWRkLWFkN2ItNjlkZmI0YTRhZTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wto7fMBT2ad3KpU2K2xZu2xmVwVMVh5lnrl pB5v6uXjLa726jLhpqjuNDF4r7+pG15nxrlkeaJIi6NnCqUlnL302Ii9m2Tw9cDk P3n/Q7DOdsZGncoEqorOndAD7ZuyrPkBuOgwFUO9hrJlQm+qTRz/MF72UHiaG8rA rFl46Ipd7iHYO/sR31Ht/5JuRzteY+xjqCvp/tVhvNxppeX4qtfRadNU6EG0RO35 Moj7/u0cAzyZtpavmQzyfzQCklypSCLS/nIyj/dcdHY8CNWwphEh/LtpA07iVbJl LHEP+koUpQP691DVVvy4X9Px9n5RLEGuf8kNNG8GjPL3hUCdKwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFD2ed/bXypNKrhyFFJbqWZIBdbhgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmY0M2NkNjMtMGMwNC0z N2E1LTliNjgtN2VjZDYxNGViMmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQATPDyJ6in4uJByi8JzBFtNb+XVySk9N9RA+n+F IM+2puLtGs3y26MCJuox1bSIvmu6nLSGAYEljcVyZkqkw88ktyzWD4ZP5ngWuAiU yxY+YnKrpcOTKYYVTPrHo46RpAW1RozTRdskjid94GJLCj2Dg9lJJLjQB9NF6APT F5DUxjZgTbj9Majk5BqA5e0PME8K6bsKgvAAfJORoIK2BYdAGwd/5cGuHRC9ttap rSKRARGzJLmXdpYd3Q1VXR2G275HhkTvYiFkGpXrrk6/pwuQwnaf/eUF9FbFyPEp xMAGFyy8+BqRfuHW3cBrIcwfjeVr6+kshiremQLdUXzp7mJg -----END CERTIFICATE-----Generated at Wed Sep 23 06:45:37 2026 by rpki-client