$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b21c78f-861a-38aa-8572-77e50eeedd19.roa File: 8b21c78f-861a-38aa-8572-77e50eeedd19.roa (raw, json) Hash identifier: R2bBItlPQAL5+jc5+McYC6jNDbYFsZh2xjb9oUe1Wo4= Subject key identifier: E2:03:03:75:68:06:98:93:D1:92:3C:A4:6D:FE:95:06:50:67:57:1F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F5768184098C8CFBACDE93100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b21c78f-861a-38aa-8572-77e50eeedd19.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 396553 IP address blocks: 2001:500:856e::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:18:40:98:c8:cf:ba:cd:e9:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=660c702e-1956-4315-9a2d-bc5d77c38b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:28:2c:f0:82:06:ca:42:5e:c5:6c:e0:cb:26: 56:7c:6b:62:56:fe:5c:1d:1d:c0:1d:0c:19:55:4e: 7d:1d:df:e9:0c:94:3b:81:fd:a4:58:8f:8e:6a:f4: 6c:25:63:ef:0b:f5:86:1c:72:38:50:9a:7e:74:59: 4f:f7:eb:d5:07:2e:48:50:f2:a1:6f:94:3e:8f:aa: 32:72:3c:43:54:8e:60:fb:72:4e:4b:e3:87:a2:5f: 9f:4a:85:8d:d0:aa:e2:ef:07:0d:a6:80:2a:67:81: 15:53:c8:3a:57:76:88:c5:52:7e:3a:05:c1:b0:89: 24:eb:70:b7:c1:1f:c2:10:92:1b:99:cb:b1:d6:5b: 83:8b:b1:30:71:52:4a:f5:7c:e0:e6:56:07:d5:e0: 98:5c:df:d9:24:c8:cf:7e:70:ac:16:75:71:02:eb: ed:4e:db:7a:2e:3d:90:f5:bb:c2:aa:1c:67:dc:69: 2b:c0:91:ea:25:ae:bd:a6:9c:f9:84:fb:8f:22:77: 37:d9:31:db:c7:e9:d0:50:a8:9c:b5:ac:74:3b:fe: 61:d4:4c:37:84:e2:51:b1:81:12:4f:12:7e:ad:99: cf:b3:b4:fd:da:1e:7b:49:a7:3a:55:70:ff:ae:61: 20:14:6d:4f:67:fe:bc:b8:ce:a5:23:d5:0e:af:dc: 5e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:03:03:75:68:06:98:93:D1:92:3C:A4:6D:FE:95:06:50:67:57:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b21c78f-861a-38aa-8572-77e50eeedd19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:856e:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:75:50:ab:37:3f:30:3a:2f:08:a4:e8:5a:d3:b6:2f:0e:76: 7d:b5:b6:ee:54:f5:7a:91:fd:73:1d:d0:91:21:b7:65:86:ea: 63:be:09:fd:1e:14:c4:58:cd:c8:79:22:18:db:54:47:5a:92: 4e:06:c7:9e:a8:bd:6e:04:4a:c2:37:67:41:b1:9b:02:1b:dc: d3:a3:f5:12:86:ae:2c:68:50:a7:47:8f:eb:da:21:45:1b:8f: c3:01:8d:b2:93:5b:a7:e3:fc:7c:02:9b:a7:14:2a:1a:07:16: 02:c8:8e:77:2b:e6:d1:49:de:ee:21:6e:c8:76:59:df:fe:90: e1:39:d0:95:31:99:d3:ca:79:41:48:9d:72:4d:ea:58:c4:d4: 83:ad:18:1a:15:80:f2:51:d0:7c:c8:2e:29:cc:f9:1a:e0:fe: 63:ee:bc:b0:8d:a6:9c:00:c1:ef:56:0e:2e:a0:1d:b6:41:71: 77:ce:5d:d6:90:58:9e:d6:05:d7:0f:82:6e:fb:7b:22:4f:0b: 83:4f:72:79:21:3b:38:8e:a5:f4:9f:7b:9a:a6:d5:dd:36:c8: a6:ed:b2:b7:9a:49:04:54:f4:e2:b7:e6:04:1b:99:32:d8:7a: e1:a5:ea:d1:60:a6:12:ed:b4:3c:b7:df:7e:b4:1d:ac:d8:1a: 05:48:4d:8e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9XaBhAmMjPus3pMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk NjYwYzcwMmUtMTk1Ni00MzE1LTlhMmQtYmM1ZDc3YzM4YjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSgs8IIGykJexWzgyyZWfGtiVv5cHR3AHQwZ VU59Hd/pDJQ7gf2kWI+OavRsJWPvC/WGHHI4UJp+dFlP9+vVBy5IUPKhb5Q+j6oy cjxDVI5g+3JOS+OHol+fSoWN0Kri7wcNpoAqZ4EVU8g6V3aIxVJ+OgXBsIkk63C3 wR/CEJIbmcux1luDi7EwcVJK9Xzg5lYH1eCYXN/ZJMjPfnCsFnVxAuvtTtt6Lj2Q 9bvCqhxn3GkrwJHqJa69ppz5hPuPInc32THbx+nQUKictax0O/5h1Ew3hOJRsYES TxJ+rZnPs7T92h57Sac6VXD/rmEgFG1PZ/68uM6lI9UOr9xeGQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOIDA3VoBpiT0ZI8pG3+lQZQZ1cfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGIyMWM3OGYtODYxYS0z OGFhLTg1NzItNzdlNTBlZWVkZDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAIVu AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBpdVCrNz8wOi8IpOha07YvDnZ9tbbuVPV6kf1z HdCRIbdlhupjvgn9HhTEWM3IeSIY21RHWpJOBseeqL1uBErCN2dBsZsCG9zTo/US hq4saFCnR4/r2iFFG4/DAY2yk1un4/x8ApunFCoaBxYCyI53K+bRSd7uIW7Idlnf /pDhOdCVMZnTynlBSJ1yTepYxNSDrRgaFYDyUdB8yC4pzPka4P5j7rywjaacAMHv Vg4uoB22QXF3zl3WkFie1gXXD4Ju+3siTwuDT3J5ITs4jqX0n3uaptXdNsim7bK3 mkkEVPTit+YEG5ky2HrhperRYKYS7bQ8t99+tB2s2BoFSE2O -----END CERTIFICATE-----Generated at Thu Oct 8 13:40:05 2026 by rpki-client