$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0fdf6b79-25ef-34db-ad05-7216d6c3874f.roa File: 0fdf6b79-25ef-34db-ad05-7216d6c3874f.roa (raw, json) Hash identifier: 9VpbMHJ5wKdw7/dWxsc9s8SSblW+Zfz9MdBVe9yx0Nk= Subject key identifier: 38:FA:91:67:D2:D3:21:E0:79:54:B9:2B:CF:2B:D9:12:15:1B:37:81 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F576810A5E94A3F1334171900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0fdf6b79-25ef-34db-ad05-7216d6c3874f.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 36628 IP address blocks: 2001:500:856e::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:10:a5:e9:4a:3f:13:34:17:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=72693337-f97d-40d6-b4fb-d4048f46d404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fd:f5:7b:5b:75:b1:46:42:35:16:a1:0d:25: 7d:c3:95:b1:37:8b:43:49:c5:2d:d4:07:9f:95:93: aa:af:7b:72:46:df:de:69:91:7a:ef:46:85:ec:e7: 25:32:ce:a0:88:4a:a0:25:c7:6d:18:55:ec:cb:60: 07:ae:41:f6:eb:51:f5:17:e7:1e:c0:fa:37:b5:fa: f4:7e:92:10:1c:20:d3:7d:fc:91:d6:4e:91:80:d6: 47:5f:a4:82:bf:bd:04:05:d9:4e:f9:14:6b:d4:a1: 9f:f8:26:26:a8:48:de:ee:be:e8:e1:b9:21:b7:09: ee:33:43:9d:0e:39:8e:e7:eb:df:ee:35:c3:25:e7: bb:0f:a2:43:7f:6e:d6:84:a3:4f:08:98:5b:8b:6f: 6e:e6:33:a4:e4:53:6e:f0:df:b4:af:d9:27:0d:a3: b5:72:06:a7:13:a9:a9:cc:45:ab:65:09:18:6a:6a: b0:b1:6e:63:bd:ac:d4:0c:d9:ef:d6:0f:4f:bf:ef: db:a5:6c:be:fd:68:00:8a:44:66:f9:40:cb:1c:f9: ad:24:03:3e:91:57:51:f1:28:5f:86:8c:4d:11:9a: 96:ef:ab:70:35:5a:26:ca:e5:25:44:7e:c9:02:d0: b2:12:15:a2:f9:4a:e5:13:69:a2:aa:e8:69:58:1c: e2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:FA:91:67:D2:D3:21:E0:79:54:B9:2B:CF:2B:D9:12:15:1B:37:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0fdf6b79-25ef-34db-ad05-7216d6c3874f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:856e:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:f8:74:82:84:3d:59:4a:65:80:ce:fd:28:f4:8f:b3:a6:03: 01:20:90:ba:b3:38:95:55:f6:ef:e8:c2:02:bf:dc:14:d8:ab: b6:c7:93:dc:3a:a7:1b:27:1c:18:f9:92:02:8a:6c:9f:72:ed: ce:05:4a:50:18:49:80:c8:53:b7:89:69:02:ad:9f:ef:30:00: e0:0d:45:e6:c5:7a:a4:b7:bb:fc:79:ae:96:e5:3e:af:e6:22: 80:47:5f:33:3f:52:8b:8c:62:e0:37:ba:36:8a:39:32:df:62: 63:24:dc:a7:d7:6e:41:79:22:e9:8c:c3:3c:d3:9a:2e:2f:e7: 53:e9:68:9c:24:93:c0:cd:24:ca:53:7c:ac:27:6a:33:e1:19: 9c:6c:bb:30:9a:d0:76:c1:a7:9f:46:a3:0a:61:84:b1:20:e3: 04:95:7f:1b:26:82:ba:8a:9d:33:30:88:df:ae:ca:a1:c8:48: 77:27:b2:f4:ee:5d:01:72:9a:c3:02:2a:31:da:2b:d9:e7:8a: d9:15:e9:16:da:6a:e7:ff:97:3d:7c:3d:9e:de:bf:f1:71:69: 53:9b:54:06:9c:c5:9f:c3:4b:2f:80:52:87:fb:99:c3:dd:12: 9c:85:d8:b8:d2:58:b0:78:aa:66:73:35:ac:27:29:41:c5:fc: d6:60:f3:6e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9XaBCl6Uo/EzQXGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk NzI2OTMzMzctZjk3ZC00MGQ2LWI0ZmItZDQwNDhmNDZkNDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf31e1t1sUZCNRahDSV9w5WxN4tDScUt1Aef lZOqr3tyRt/eaZF670aF7OclMs6giEqgJcdtGFXsy2AHrkH261H1F+cewPo3tfr0 fpIQHCDTffyR1k6RgNZHX6SCv70EBdlO+RRr1KGf+CYmqEje7r7o4bkhtwnuM0Od DjmO5+vf7jXDJee7D6JDf27WhKNPCJhbi29u5jOk5FNu8N+0r9knDaO1cganE6mp zEWrZQkYamqwsW5jvazUDNnv1g9Pv+/bpWy+/WgAikRm+UDLHPmtJAM+kVdR8Shf hoxNEZqW76twNVomyuUlRH7JAtCyEhWi+UrlE2miquhpWBziHQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDj6kWfS0yHgeVS5K88r2RIVGzeBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGZkZjZiNzktMjVlZi0z NGRiLWFkMDUtNzIxNmQ2YzM4NzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAIVu AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA6+HSChD1ZSmWAzv0o9I+zpgMBIJC6sziVVfbv 6MICv9wU2Ku2x5PcOqcbJxwY+ZICimyfcu3OBUpQGEmAyFO3iWkCrZ/vMADgDUXm xXqkt7v8ea6W5T6v5iKAR18zP1KLjGLgN7o2ijky32JjJNyn125BeSLpjMM805ou L+dT6WicJJPAzSTKU3ysJ2oz4RmcbLswmtB2waefRqMKYYSxIOMElX8bJoK6ip0z MIjfrsqhyEh3J7L07l0BcprDAiox2ivZ54rZFekW2mrn/5c9fD2e3r/xcWlTm1QG nMWfw0svgFKH+5nD3RKchdi40liweKpmczWsJylBxfzWYPNu -----END CERTIFICATE-----Generated at Thu Oct 8 08:56:46 2026 by rpki-client