$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12023c89-51df-3696-84ce-0c11f8fda1fe.roa File: 12023c89-51df-3696-84ce-0c11f8fda1fe.roa (raw, json) Hash identifier: hzSWJoDrWw4Gh4dMaEMzNrYHqIp2DRC/l6qza5TN1C0= Subject key identifier: 8A:74:04:E3:1C:9D:DB:6C:C6:3C:50:F9:B4:06:78:51:B4:70:92:92 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D8C2AAB646FAB36EF007B3000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12023c89-51df-3696-84ce-0c11f8fda1fe.roa Signing time: Sat 18 Apr 2026 13:00:30 +0000 ROA not before: Sat 18 Apr 2026 13:00:30 +0000 ROA not after: Fri 17 Jul 2026 13:00:30 +0000 asID: 396609 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:2a:ab:64:6f:ab:36:ef:00:7b:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 18 13:00:30 2026 GMT Not After : Jul 17 13:00:30 2026 GMT Subject: CN=a1e7f4d7-22f6-42df-a2a4-63c48ad75566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:52:f7:78:6b:43:a3:ee:14:c4:f4:9b:45:4c: c5:f2:d3:37:aa:19:39:61:64:76:b4:a7:96:e5:36: f4:03:67:46:4b:54:de:82:73:d1:1a:3f:8e:fc:26: 67:a5:06:1a:de:af:5d:1c:73:d3:1f:8a:bc:81:6b: e4:32:49:a9:2d:8f:af:92:9c:c2:2b:76:13:fc:e7: 95:50:b1:a6:89:ab:0c:53:40:b9:48:63:df:99:5c: dc:7d:60:7d:08:19:b5:c3:bb:8f:5c:e3:54:1a:45: 15:86:34:ce:8b:87:0c:a7:98:8c:38:76:5e:2d:73: 50:56:6c:ca:28:6f:00:55:71:7b:53:8d:60:00:8a: 08:ac:ce:3c:02:b2:b6:cb:eb:83:6d:50:2c:b1:bf: 40:d5:e0:ab:e8:89:b4:f8:e4:df:91:57:9c:13:ad: 74:02:3e:40:43:be:54:12:58:90:ac:b0:df:c5:2d: 24:cc:32:8c:39:0d:fa:85:93:58:63:67:01:ee:2c: 6b:71:e2:f9:07:47:da:4b:de:00:ef:9c:ab:67:d6: 76:5e:7c:25:5d:7f:d1:d2:d1:bc:b5:4c:bc:01:53: a4:b4:d3:8f:ad:b3:f3:4b:a0:29:f6:96:55:1e:d4: 63:6b:d8:a3:f7:53:0e:d6:49:4e:65:c0:c7:ea:92: 21:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:74:04:E3:1C:9D:DB:6C:C6:3C:50:F9:B4:06:78:51:B4:70:92:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12023c89-51df-3696-84ce-0c11f8fda1fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:12:2f:2e:0f:55:50:29:7a:b1:10:55:6e:88:40:19:e4:df: c1:48:7e:1b:69:c8:dd:df:77:e7:17:92:1e:c7:d8:36:46:ec: 48:ad:22:f7:6b:de:0a:7d:81:25:f4:c7:82:a3:33:ea:6d:6c: 9b:a2:5d:53:87:b1:67:36:92:48:7d:6a:83:b6:1f:07:87:de: 3e:84:c5:66:d7:67:38:11:2d:74:d1:00:3a:48:90:87:e7:60: 69:a6:eb:c8:24:a7:3a:71:e5:6e:49:e7:ae:5b:8a:1a:06:51: 09:73:09:d0:76:a1:27:1a:00:53:dc:e0:c0:ac:e9:88:53:f9: fa:76:36:c0:78:3e:e2:58:50:92:b1:ad:79:1f:c6:7d:9b:94: 07:65:83:83:9c:f7:b2:68:cb:b2:cf:08:ab:59:30:b8:d1:7d: 0c:e0:c8:f2:66:6e:52:ef:9e:30:2a:ea:8e:1d:8e:60:63:be: e7:c7:91:f3:f3:d5:eb:85:ad:af:cd:96:0f:d6:54:3f:be:c5: 62:71:81:cc:d3:cd:30:f3:a1:a6:8a:67:2a:53:a2:3d:1f:50: 0b:dd:e7:a6:82:36:10:74:f0:c3:75:a3:e7:c1:63:0b:3b:73: 28:19:b6:82:ad:9f:9d:75:8d:94:05:22:47:2d:3b:69:c9:cf: 18:0a:34:b6 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE2MKqtkb6s27wB7MAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk YTFlN2Y0ZDctMjJmNi00MmRmLWEyYTQtNjNjNDhhZDc1NTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1L3eGtDo+4UxPSbRUzF8tM3qhk5YWR2tKeW 5Tb0A2dGS1TegnPRGj+O/CZnpQYa3q9dHHPTH4q8gWvkMkmpLY+vkpzCK3YT/OeV ULGmiasMU0C5SGPfmVzcfWB9CBm1w7uPXONUGkUVhjTOi4cMp5iMOHZeLXNQVmzK KG8AVXF7U41gAIoIrM48ArK2y+uDbVAssb9A1eCr6Im0+OTfkVecE610Aj5AQ75U EliQrLDfxS0kzDKMOQ36hZNYY2cB7ixrceL5B0faS94A75yrZ9Z2XnwlXX/R0tG8 tUy8AVOktNOPrbPzS6Ap9pZVHtRja9ij91MO1klOZcDH6pIhowIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIp0BOMcndtsxjxQ+bQGeFG0cJKSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTIwMjNjODktNTFkZi0z Njk2LTg0Y2UtMGMxMWY4ZmRhMWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCMEi8uD1VQKXqxEFVuiEAZ5N/BSH4bacjd33fn F5Iex9g2RuxIrSL3a94KfYEl9MeCozPqbWybol1Th7FnNpJIfWqDth8Hh94+hMVm 12c4ES100QA6SJCH52BppuvIJKc6ceVuSeeuW4oaBlEJcwnQdqEnGgBT3ODArOmI U/n6djbAeD7iWFCSsa15H8Z9m5QHZYODnPeyaMuyzwirWTC40X0M4MjyZm5S754w KuqOHY5gY77nx5Hz89Xrha2vzZYP1lQ/vsVicYHM080w86GmimcqU6I9H1AL3eem gjYQdPDDdaPnwWMLO3MoGbaCrZ+ddY2UBSJHLTtpyc8YCjS2 -----END CERTIFICATE-----Generated at Wed May 13 12:56:16 2026 by rpki-client