$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0002d672-f8a4-3887-a550-01417d6a6b1f.roa File: 0002d672-f8a4-3887-a550-01417d6a6b1f.roa (raw, json) Hash identifier: e/erKkbM9G8V4Av/z/PXE0Ao9V5nY3BH5jH7QFrnVoo= Subject key identifier: 50:C4:6C:E2:93:2E:0B:B8:5F:B7:E9:00:D8:F1:6A:A8:4F:4B:0C:68 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D8C2AAA6B98FFA052C8B39B60 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0002d672-f8a4-3887-a550-01417d6a6b1f.roa Signing time: Sat 18 Apr 2026 13:00:30 +0000 ROA not before: Sat 18 Apr 2026 13:00:30 +0000 ROA not after: Fri 17 Jul 2026 13:00:30 +0000 asID: 396581 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:2a:aa:6b:98:ff:a0:52:c8:b3:9b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 18 13:00:30 2026 GMT Not After : Jul 17 13:00:30 2026 GMT Subject: CN=0347568b-c870-4982-aacf-7c2dd3838459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:23:3a:2a:c3:71:d5:1b:1a:e8:87:4f:b7:16: a1:b8:59:00:6b:d9:19:9c:9f:e0:71:0c:5c:89:ce: e1:2c:67:3b:67:06:f6:44:08:4f:5a:ac:82:94:c6: d6:81:3c:4d:40:c0:e5:0b:f9:fd:f2:94:e1:95:03: b9:85:ec:09:f5:e0:37:cd:e9:1d:41:fd:44:4d:d1: 52:d5:46:13:3a:33:28:42:cb:d1:36:11:61:f2:8f: 11:2e:ce:90:f2:bb:89:09:ce:a1:4c:1d:a4:a3:6d: 0b:c4:ea:bb:94:48:07:69:8e:64:0f:bd:3b:b1:3e: 21:84:70:e5:2b:62:01:e4:b4:13:9d:58:c0:81:c9: 8c:50:e8:a9:ce:3d:a3:8d:8d:3e:86:c0:1e:cf:fb: cd:30:e5:ab:e3:da:48:5a:f6:96:11:c8:91:fa:ce: 50:5d:32:c9:7d:9e:82:66:6c:1d:9d:9a:a2:73:be: d9:8d:b7:bf:58:3f:42:8f:a0:cb:db:14:7b:a3:74: ca:88:16:ae:d4:1d:b9:9e:cb:b5:a4:c3:00:b9:36: 95:97:cd:af:6b:01:4b:55:27:cf:42:fb:d1:09:38: b9:a9:24:0e:88:19:2b:fe:e7:3b:37:14:34:42:00: b0:47:18:36:85:f7:27:17:ed:aa:81:9a:55:35:9d: 07:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C4:6C:E2:93:2E:0B:B8:5F:B7:E9:00:D8:F1:6A:A8:4F:4B:0C:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0002d672-f8a4-3887-a550-01417d6a6b1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:38:76:93:1f:4e:ec:e4:2c:ea:b7:94:50:72:10:d6:e2:f0: c0:86:e9:a8:30:af:ab:ea:17:86:c3:6d:67:df:4a:7a:29:fa: 68:88:fb:eb:8d:94:9d:9a:74:ab:25:e8:06:bb:09:2f:ec:89: 5a:07:1e:b0:73:c4:3b:9f:25:ca:b0:9d:3f:c0:37:86:9a:c5: de:e9:d2:50:d2:23:70:d5:a6:ae:7b:0b:9b:47:a7:69:f3:a2: a2:04:ea:4e:69:99:ac:35:66:d9:fe:df:dc:ef:0b:9e:35:dc: 5a:41:08:41:a0:29:c8:a2:89:ff:cc:c9:f7:54:ec:f8:28:0f: 2c:f0:9c:aa:57:ff:01:89:1e:39:90:6b:0a:f5:68:c8:53:f9: 4e:bc:96:c5:e2:c0:ca:6d:32:05:10:57:37:2d:a1:07:01:a4: 38:8e:f4:32:d7:4b:9c:c6:58:d9:66:9b:06:53:66:3f:a3:4a: 12:af:65:b0:3e:aa:5b:ad:9b:51:b3:f3:34:34:27:ff:e6:8c: a1:fc:3c:60:12:a5:3a:7c:82:ec:bd:f4:39:68:2d:36:29:ec: 35:5a:fd:53:cc:41:e6:0d:89:16:41:1f:fb:2d:a1:a5:ae:14: 6b:aa:ed:ac:44:9a:2b:cc:ae:99:a8:de:e5:71:73:15:b8:81: 78:1b:69:ad -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE2MKqprmP+gUsizm2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk MDM0NzU2OGItYzg3MC00OTgyLWFhY2YtN2MyZGQzODM4NDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiM6KsNx1Rsa6IdPtxahuFkAa9kZnJ/gcQxc ic7hLGc7Zwb2RAhPWqyClMbWgTxNQMDlC/n98pThlQO5hewJ9eA3zekdQf1ETdFS 1UYTOjMoQsvRNhFh8o8RLs6Q8ruJCc6hTB2ko20LxOq7lEgHaY5kD707sT4hhHDl K2IB5LQTnVjAgcmMUOipzj2jjY0+hsAez/vNMOWr49pIWvaWEciR+s5QXTLJfZ6C ZmwdnZqic77Zjbe/WD9Cj6DL2xR7o3TKiBau1B25nsu1pMMAuTaVl82vawFLVSfP QvvRCTi5qSQOiBkr/uc7NxQ0QgCwRxg2hfcnF+2qgZpVNZ0HRwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFDEbOKTLgu4X7fpANjxaqhPSwxoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDAwMmQ2NzItZjhhNC0z ODg3LWE1NTAtMDE0MTdkNmE2YjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCBOHaTH07s5Czqt5RQchDW4vDAhumoMK+r6heG w21n30p6KfpoiPvrjZSdmnSrJegGuwkv7IlaBx6wc8Q7nyXKsJ0/wDeGmsXe6dJQ 0iNw1aauewubR6dp86KiBOpOaZmsNWbZ/t/c7wueNdxaQQhBoCnIoon/zMn3VOz4 KA8s8JyqV/8BiR45kGsK9WjIU/lOvJbF4sDKbTIFEFc3LaEHAaQ4jvQy10ucxljZ ZpsGU2Y/o0oSr2WwPqpbrZtRs/M0NCf/5oyh/DxgEqU6fILsvfQ5aC02Kew1Wv1T zEHmDYkWQR/7LaGlrhRrqu2sRJorzK6ZqN7lcXMVuIF4G2mt -----END CERTIFICATE-----Generated at Wed May 13 14:29:07 2026 by rpki-client