$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb008f9e-89a9-32af-aa5a-0569d9e1cf9f.roa File: cb008f9e-89a9-32af-aa5a-0569d9e1cf9f.roa (raw, json) Hash identifier: zIPfrVCBQ0+Q8smPQ5OltsvPdec9WWSjLvxtFmzqFzE= Subject key identifier: 72:75:74:E1:E2:93:89:06:EC:BB:49:26:63:D9:97:23:DC:3C:0F:FD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4986EE6B3E0F1B8009C5C000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb008f9e-89a9-32af-aa5a-0569d9e1cf9f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40647 IP address blocks: 2001:500:d937::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:ee:6b:3e:0f:1b:80:09:c5:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0c81ad2f-81b0-43a9-a509-4be0c5ac28da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b4:be:98:4e:c1:75:bd:4e:fa:6b:6e:d9:dc: 71:15:3b:ac:1a:79:dd:48:d9:cb:92:86:08:81:91: 83:4b:69:32:95:4b:d6:92:0f:99:81:c7:61:69:5f: e3:20:2b:d3:c4:7f:13:07:91:24:6d:ee:64:7b:6e: 72:20:e0:35:dd:7a:de:a5:f9:fd:ec:35:ad:20:e6: b5:a6:6a:3b:3e:17:88:65:56:f0:49:09:1e:76:35: 2f:0a:07:92:47:e0:7b:10:19:f4:f0:75:4a:86:fd: c1:26:42:20:ae:b8:e9:7f:0e:9b:68:f2:72:64:10: 25:40:45:a6:31:8d:0a:46:10:4f:6a:b3:e3:f6:13: 85:59:4a:df:21:7c:18:68:d4:1a:cc:8f:3c:ea:86: 18:90:4e:ea:9f:4f:98:f6:1b:75:ab:a6:d8:0f:6e: 43:c5:b8:5a:60:01:ff:fa:00:83:94:d0:b8:96:93: ef:13:33:6e:d7:5a:d2:9a:9f:6a:08:c0:28:73:03: d6:7e:54:d0:74:cc:54:22:07:8f:67:1d:8f:ca:97: 6b:9b:d3:f0:65:05:a2:a6:5d:02:39:d2:d2:e8:43: fd:51:95:f9:c1:2d:95:c5:1c:92:fd:bc:ab:a7:a7: 34:00:3a:8c:76:f0:1a:6a:94:8f:a5:d5:2d:f9:c8: fb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:75:74:E1:E2:93:89:06:EC:BB:49:26:63:D9:97:23:DC:3C:0F:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb008f9e-89a9-32af-aa5a-0569d9e1cf9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:d937:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:ed:85:57:b4:98:e0:59:cd:7e:bc:d3:7a:6c:96:d6:64:7e: 53:18:8c:a6:42:d7:f6:94:b3:7e:37:b6:ee:10:af:c6:43:e0: 0f:85:2e:44:29:da:f8:7b:e0:8c:35:d7:7d:c6:b0:d0:85:09: 9a:5e:62:8b:64:21:7f:ed:0a:44:17:df:ba:6e:24:8c:f5:3d: bf:b1:7f:e5:b2:9e:7f:f0:a9:80:8c:ea:5b:01:4b:c3:c1:81: 1d:d2:45:7f:d9:3a:a9:a9:aa:54:38:cb:f7:de:96:60:bd:06: c0:46:1e:f2:5c:a5:74:4b:89:1d:1d:c3:a1:c2:1b:41:93:e7: 97:e1:5b:fd:7d:be:6b:bf:ba:ce:42:72:af:49:b8:63:51:da: e4:a6:0e:64:a3:5c:ac:9b:f8:fd:79:0c:1c:0a:f3:ec:76:dc: b7:df:64:1b:5f:b0:dd:97:df:9a:13:46:b9:91:a4:67:6b:cc: 43:81:1d:b7:71:df:af:68:e3:9e:ac:3a:8a:07:4d:fb:72:38: 22:a8:2b:93:ac:80:b9:90:28:a5:69:23:f1:82:61:a3:b4:f0: 39:45:68:e6:81:40:fe:df:5d:6f:2a:14:f4:b3:00:3c:c7:b2: 16:c8:de:77:cb:4b:6f:69:06:46:26:57:12:8d:e3:e5:d6:0b: 4a:18:f9:7b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9Jhu5rPg8bgAnFwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGM4MWFkMmYtODFiMC00M2E5LWE1MDktNGJlMGM1YWMyOGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrS+mE7Bdb1O+mtu2dxxFTusGnndSNnLkoYI gZGDS2kylUvWkg+ZgcdhaV/jICvTxH8TB5Ekbe5ke25yIOA13Xrepfn97DWtIOa1 pmo7PheIZVbwSQkedjUvCgeSR+B7EBn08HVKhv3BJkIgrrjpfw6baPJyZBAlQEWm MY0KRhBParPj9hOFWUrfIXwYaNQazI886oYYkE7qn0+Y9ht1q6bYD25DxbhaYAH/ +gCDlNC4lpPvEzNu11rSmp9qCMAocwPWflTQdMxUIgePZx2Pypdrm9PwZQWipl0C OdLS6EP9UZX5wS2VxRyS/byrp6c0ADqMdvAaapSPpdUt+cj7fwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHJ1dOHik4kG7LtJJmPZlyPcPA/9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2IwMDhmOWUtODlhOS0z MmFmLWFhNWEtMDU2OWQ5ZTFjZjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFANk3 AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAr7YVXtJjgWc1+vNN6bJbWZH5TGIymQtf2lLN+ N7buEK/GQ+APhS5EKdr4e+CMNdd9xrDQhQmaXmKLZCF/7QpEF9+6biSM9T2/sX/l sp5/8KmAjOpbAUvDwYEd0kV/2TqpqapUOMv33pZgvQbARh7yXKV0S4kdHcOhwhtB k+eX4Vv9fb5rv7rOQnKvSbhjUdrkpg5ko1ysm/j9eQwcCvPsdty332QbX7Ddl9+a E0a5kaRna8xDgR23cd+vaOOerDqKB037cjgiqCuTrIC5kCilaSPxgmGjtPA5RWjm gUD+311vKhT0swA8x7IWyN53y0tvaQZGJlcSjePl1gtKGPl7 -----END CERTIFICATE-----Generated at Thu Oct 8 14:16:43 2026 by rpki-client