$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3f78693-f67a-3120-aaa4-a19de55075d3.roa File: d3f78693-f67a-3120-aaa4-a19de55075d3.roa (raw, json) Hash identifier: G93ecfaYFOFqPjv49kQGi21nflOq6nZxLa5quvWG8X8= Subject key identifier: 25:52:12:FF:B1:41:03:B7:D1:BC:07:EE:0B:C3:DB:71:2C:47:18:FA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F06726E06C9974E8DEA5F2920 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3f78693-f67a-3120-aaa4-a19de55075d3.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 396614 IP address blocks: 2001:500:124::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:6e:06:c9:97:4e:8d:ea:5f:29:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=1c1d74cb-88f0-4f03-9329-489bd87a51c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:18:e9:3b:09:4e:a4:57:94:93:a3:41:d0:f5: 70:c7:9e:8b:49:00:01:6a:4c:84:1f:33:6b:72:f1: 43:7a:8b:fc:63:2a:53:aa:13:00:1b:b2:4f:65:fe: d7:19:85:80:8d:72:b2:3f:45:dd:1a:a9:c0:21:c5: ce:83:a1:04:47:e4:c3:f4:0a:74:b2:8d:80:32:75: 2e:38:48:b6:78:ea:b7:64:1d:cc:08:59:45:21:fd: d6:93:2b:52:a9:14:c3:b0:03:72:b4:53:81:ca:f4: 16:71:82:e4:61:c2:70:8e:67:c8:1a:e8:b8:75:f2: 56:55:22:16:66:6b:b5:dd:16:83:ca:46:1e:87:a5: 60:1a:c9:f3:f3:8c:39:f6:c9:e3:17:71:cd:32:ef: cf:0b:aa:25:09:e8:93:38:f5:b6:12:92:97:60:a8: 1a:78:76:7d:cc:b5:92:fa:d8:ad:3b:72:29:12:22: 49:c4:11:72:26:7d:54:59:c3:03:97:b0:31:67:4b: 99:8c:a6:cf:1e:1c:a0:9a:7b:c0:bf:44:69:a5:ac: 77:ed:58:b5:b5:fa:e6:0b:e4:79:78:3e:6d:1a:d3: 86:16:cf:82:6b:87:1c:26:97:36:c8:3f:de:8a:fc: c9:72:02:a6:c5:ff:95:5f:18:80:17:eb:d6:d4:e3: 63:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:52:12:FF:B1:41:03:B7:D1:BC:07:EE:0B:C3:DB:71:2C:47:18:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3f78693-f67a-3120-aaa4-a19de55075d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:124:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:f0:3b:bc:a4:f6:ed:11:c1:2b:2b:e4:b7:f3:72:d5:cc:ca: 67:9e:bf:90:eb:ea:c1:f8:85:b2:4a:91:26:9b:67:e2:37:4a: b9:c2:76:2e:f4:2c:00:79:a8:1f:19:72:3a:5c:f7:65:e8:c9: 15:db:30:a6:8b:a3:52:4c:89:0f:58:6e:2a:44:09:6f:19:3b: 9b:a0:3c:1b:e9:72:17:8a:e9:0b:78:6d:d9:4d:7c:d4:29:c1: e6:22:f2:19:26:33:1a:a3:f0:d0:c6:d5:e5:d3:15:62:ba:39: 82:1a:6d:57:4a:02:c0:8e:bd:fd:c6:f0:4d:d6:ed:b6:07:22: 53:97:b5:9d:ad:a7:08:78:e5:95:cf:38:f1:ab:c1:16:cb:16: 34:41:e5:70:a5:62:22:82:89:00:52:ce:07:d2:06:18:ab:8d: 3b:9f:7e:80:31:b8:07:06:a6:84:53:35:bc:70:83:7a:3a:6f: 58:25:b3:f4:08:ef:7f:0e:24:fd:5c:8a:0d:99:d6:2b:fa:ff: a7:d0:ea:60:ae:2d:0d:45:08:22:a1:d2:5c:ce:b5:78:0c:6c: bf:8c:e2:bb:e6:43:01:d9:dc:d1:46:bb:f0:79:5e:92:23:bb: 98:96:4e:c2:ed:8b:8a:ff:d9:15:33:cf:82:5d:a1:36:58:98: 24:64:14:79 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8Gcm4GyZdOjepfKSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk MWMxZDc0Y2ItODhmMC00ZjAzLTkzMjktNDg5YmQ4N2E1MWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BjpOwlOpFeUk6NB0PVwx56LSQABakyEHzNr cvFDeov8YypTqhMAG7JPZf7XGYWAjXKyP0XdGqnAIcXOg6EER+TD9Ap0so2AMnUu OEi2eOq3ZB3MCFlFIf3WkytSqRTDsANytFOByvQWcYLkYcJwjmfIGui4dfJWVSIW Zmu13RaDykYeh6VgGsnz84w59snjF3HNMu/PC6olCeiTOPW2EpKXYKgaeHZ9zLWS +titO3IpEiJJxBFyJn1UWcMDl7AxZ0uZjKbPHhygmnvAv0Rppax37Vi1tfrmC+R5 eD5tGtOGFs+Ca4ccJpc2yD/eivzJcgKmxf+VXxiAF+vW1ONjuwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCVSEv+xQQO30bwH7gvD23EsRxj6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDNmNzg2OTMtZjY3YS0z MTIwLWFhYTQtYTE5ZGU1NTA3NWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEk AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAD8Du8pPbtEcErK+S383LVzMpnnr+Q6+rB+IWy SpEmm2fiN0q5wnYu9CwAeagfGXI6XPdl6MkV2zCmi6NSTIkPWG4qRAlvGTuboDwb 6XIXiukLeG3ZTXzUKcHmIvIZJjMao/DQxtXl0xViujmCGm1XSgLAjr39xvBN1u22 ByJTl7WdracIeOWVzzjxq8EWyxY0QeVwpWIigokAUs4H0gYYq407n36AMbgHBqaE UzW8cIN6Om9YJbP0CO9/DiT9XIoNmdYr+v+n0Opgri0NRQgiodJczrV4DGy/jOK7 5kMB2dzRRrvweV6SI7uYlk7C7YuK/9kVM8+CXaE2WJgkZBR5 -----END CERTIFICATE-----Generated at Thu Oct 8 14:43:53 2026 by rpki-client