$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bac0ef42-0aa5-3148-b1f2-e61565f36ee6.roa File: bac0ef42-0aa5-3148-b1f2-e61565f36ee6.roa (raw, json) Hash identifier: VKt7LZRM+Fzv9B24LbZsLRgGoF6/91M+DBGMcgqQbGY= Subject key identifier: 0C:F7:22:9A:0E:22:16:6E:6E:E6:09:A6:59:D3:C2:0D:D9:4F:32:D1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F49862FFA7A5E730A02684C00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bac0ef42-0aa5-3148-b1f2-e61565f36ee6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396593 IP address blocks: 2001:500:7967::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:2f:fa:7a:5e:73:0a:02:68:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=400972ff-2ec1-4ed0-8228-4e182b4428a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1d:c0:b0:28:9e:97:20:c0:09:cb:ff:4b:05: 36:39:21:6f:a9:f7:d8:01:ac:cf:a4:e4:d5:f4:a3: b0:cb:33:4d:11:aa:1e:c9:bd:c4:f3:3e:e6:92:b3: cc:19:ad:ab:79:7a:02:9e:04:35:af:f4:06:87:8a: 87:45:41:7e:53:25:4a:81:c5:87:91:09:c2:86:4b: 1e:f1:09:bb:2f:0d:d9:d2:33:54:48:1c:cb:aa:cf: c7:55:c4:a5:77:02:35:e5:20:a7:46:c2:a9:ba:1d: 0b:5c:44:16:e6:00:5a:04:43:25:eb:f5:f8:64:40: af:1b:67:fc:28:87:cf:1b:21:3f:4d:f4:70:f5:62: f6:69:36:ad:cf:e7:f2:92:e6:cb:11:f0:b7:bb:a5: 2f:32:ab:30:25:77:de:c0:4a:93:72:70:eb:d4:e4: 32:3e:d1:d1:84:42:d6:93:a5:2d:00:2f:f0:12:bb: 0d:93:d4:8d:ed:c5:88:fc:9a:2c:ef:38:42:b6:47: f9:7d:7b:31:6b:aa:71:58:29:2c:b2:93:7e:80:43: bf:88:35:20:9f:86:12:2b:09:2d:22:15:08:79:f1: 8e:d5:68:4a:da:ff:56:8a:35:ae:08:c8:9b:e1:05: 66:48:a0:96:5a:ab:3e:f5:96:96:df:05:2d:b4:a9: 37:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F7:22:9A:0E:22:16:6E:6E:E6:09:A6:59:D3:C2:0D:D9:4F:32:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bac0ef42-0aa5-3148-b1f2-e61565f36ee6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:78:91:d1:09:a8:76:3b:aa:7f:46:73:8f:f0:28:d3:d8:7c: 5d:b1:2b:ff:74:b2:8e:ac:97:00:3b:c1:dc:87:6a:4f:b4:2c: e4:2b:9c:81:e2:5d:91:c1:0a:c1:70:68:d7:60:3a:e0:58:bc: fe:20:fe:a6:8a:1c:46:bd:24:05:bd:7b:9a:6b:c5:9c:91:b4: d0:cc:21:27:e6:32:37:be:42:fd:30:f9:6a:6a:1f:b5:52:88: d8:3b:e9:4c:9a:3d:c8:61:4c:3a:4d:77:19:aa:8e:45:22:83: 1b:0e:aa:20:9a:29:7b:98:8d:eb:03:a2:13:d3:7c:0e:c7:5a: 5d:77:5d:d8:3c:b3:5f:47:39:58:26:3c:8a:87:e5:b9:10:04: b1:66:c2:3a:a2:5d:40:e9:37:08:63:b2:1b:07:26:cf:ae:e8: 6c:eb:1d:cf:13:31:f6:f2:06:75:b8:ed:8c:56:e6:4f:7d:5a: 02:b8:68:25:2c:75:11:9d:32:12:cb:8c:2b:af:78:c3:ef:de: b8:86:e6:9d:37:d5:ff:7d:32:d4:48:10:42:ea:e0:b5:9e:8e: ec:c9:5b:d4:01:c9:5b:e5:d0:5f:7b:c5:65:09:37:2e:65:8e: c0:0e:0f:04:fb:99:90:26:68:b1:51:ed:53:56:aa:95:47:f3: c5:f7:3a:86 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9Jhi/6el5zCgJoTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDAwOTcyZmYtMmVjMS00ZWQwLTgyMjgtNGUxODJiNDQyOGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB3AsCielyDACcv/SwU2OSFvqffYAazPpOTV 9KOwyzNNEaoeyb3E8z7mkrPMGa2reXoCngQ1r/QGh4qHRUF+UyVKgcWHkQnChkse 8Qm7Lw3Z0jNUSBzLqs/HVcSldwI15SCnRsKpuh0LXEQW5gBaBEMl6/X4ZECvG2f8 KIfPGyE/TfRw9WL2aTatz+fykubLEfC3u6UvMqswJXfewEqTcnDr1OQyPtHRhELW k6UtAC/wErsNk9SN7cWI/Jos7zhCtkf5fXsxa6pxWCksspN+gEO/iDUgn4YSKwkt IhUIefGO1WhK2v9WijWuCMib4QVmSKCWWqs+9ZaW3wUttKk3twIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAz3IpoOIhZubuYJplnTwg3ZTzLRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmFjMGVmNDItMGFhNS0z MTQ4LWIxZjItZTYxNTY1ZjM2ZWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAHln AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCCeJHRCah2O6p/RnOP8CjT2HxdsSv/dLKOrJcA O8Hch2pPtCzkK5yB4l2RwQrBcGjXYDrgWLz+IP6mihxGvSQFvXuaa8WckbTQzCEn 5jI3vkL9MPlqah+1UojYO+lMmj3IYUw6TXcZqo5FIoMbDqogmil7mI3rA6IT03wO x1pdd13YPLNfRzlYJjyKh+W5EASxZsI6ol1A6TcIY7IbBybPruhs6x3PEzH28gZ1 uO2MVuZPfVoCuGglLHURnTISy4wrr3jD7964huadN9X/fTLUSBBC6uC1no7syVvU Aclb5dBfe8VlCTcuZY7ADg8E+5mQJmixUe1TVqqVR/PF9zqG -----END CERTIFICATE-----Generated at Wed Oct 7 09:36:48 2026 by rpki-client