$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40b55e34-80be-363f-9540-de51ee093a1e.roa File: 40b55e34-80be-363f-9540-de51ee093a1e.roa (raw, json) Hash identifier: ZBbb+qnSNDH+c9lCZUYkaj+iKMF7etcc0vf7YnLJrfc= Subject key identifier: 53:55:90:F7:96:78:05:F4:6E:09:55:EB:B5:73:6A:EC:86:BD:A7:08 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D8C2AA98991336886C84F1580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40b55e34-80be-363f-9540-de51ee093a1e.roa Signing time: Sat 18 Apr 2026 13:00:30 +0000 ROA not before: Sat 18 Apr 2026 13:00:30 +0000 ROA not after: Fri 17 Jul 2026 13:00:30 +0000 asID: 396572 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:2a:a9:89:91:33:68:86:c8:4f:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 18 13:00:30 2026 GMT Not After : Jul 17 13:00:30 2026 GMT Subject: CN=80b66891-238c-4d9f-930c-7b80e140cd80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a7:f0:a2:79:be:15:c9:b8:0c:55:72:84:58: 27:27:16:d3:d4:97:7b:2f:14:db:88:42:b5:6f:aa: 5f:c6:1a:8b:a3:e5:ef:78:4e:91:43:59:45:a9:8b: bb:7d:04:78:fc:6c:92:f4:fc:d0:ba:18:be:f8:d3: b5:26:21:3e:c7:aa:1b:10:66:70:ef:aa:b3:67:c0: 90:f2:64:76:79:66:d2:f8:01:42:d2:e5:69:8e:72: da:62:df:7a:0b:5b:e3:ae:44:88:71:3b:bc:e7:da: 0b:dd:10:66:86:ec:5b:56:a5:32:d3:4f:8c:dd:6a: 2a:bf:e6:d2:f1:c4:2b:f6:4c:c9:47:0a:46:42:8c: 9a:71:f0:d6:8f:1c:78:e4:cf:e7:b8:23:89:e5:e0: 39:7f:59:a0:ad:a8:8e:3d:62:62:25:4c:1e:95:21: ce:a6:9e:70:34:d4:f2:54:73:8c:9b:36:01:94:3c: 54:d1:67:36:48:ff:a2:e7:da:17:d2:7e:9f:98:c8: be:82:61:5f:da:4c:06:a2:2a:f6:1e:0d:b2:67:d9: 54:e7:61:86:d6:e2:d6:8e:bd:f6:f5:71:d8:68:cb: c6:e1:94:4b:a3:65:88:68:bb:93:c4:3a:56:02:95: 48:d6:4c:3d:2a:25:5d:46:39:2a:e8:51:48:a3:e5: 09:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:55:90:F7:96:78:05:F4:6E:09:55:EB:B5:73:6A:EC:86:BD:A7:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40b55e34-80be-363f-9540-de51ee093a1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:10:b2:3e:65:10:35:97:b2:bc:e8:45:ba:1b:b8:72:1b:ad: b0:cc:f3:78:ca:92:4a:5e:17:ad:f3:e6:c5:2a:93:b2:af:19: 0b:86:4d:67:54:29:9b:2e:24:69:7f:b1:e3:7a:79:46:d0:a7: 98:ff:f4:d8:9e:60:2a:bc:9d:d7:6e:ff:3e:ec:e0:0e:fd:9b: c6:e7:11:ab:bf:e8:83:97:7a:11:74:f2:f4:33:da:d6:28:3c: ab:06:43:63:63:f3:e6:4b:e9:82:49:46:1b:fa:6c:1c:82:d1: 33:82:cf:5e:47:7f:46:5e:41:94:f6:ff:7f:78:c8:ab:6f:4c: 25:a2:d3:73:0d:cc:b4:4c:84:73:9b:1a:d9:86:94:c8:a9:24: 49:6c:67:c3:71:aa:9c:d8:cc:0f:ec:46:bc:bd:e6:bb:32:8b: 8a:3f:fc:dd:1a:3c:37:9e:31:84:28:ef:28:a9:66:b8:cc:15: b3:0f:37:03:53:26:05:ea:ea:ba:22:f7:ef:be:12:08:a8:ce: 68:2e:9f:4a:2c:40:6c:40:1d:9b:65:3c:4d:bc:4f:2f:8b:ce: 1a:fc:44:b2:c2:c4:53:93:56:fd:be:1a:34:23:68:38:10:de: b4:09:a5:7e:4b:0c:1e:1f:8d:41:bb:a2:95:e2:79:04:5d:b3: 03:d3:3e:1d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE2MKqmJkTNohshPFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk ODBiNjY4OTEtMjM4Yy00ZDlmLTkzMGMtN2I4MGUxNDBjZDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6fwonm+Fcm4DFVyhFgnJxbT1Jd7LxTbiEK1 b6pfxhqLo+XveE6RQ1lFqYu7fQR4/GyS9PzQuhi++NO1JiE+x6obEGZw76qzZ8CQ 8mR2eWbS+AFC0uVpjnLaYt96C1vjrkSIcTu859oL3RBmhuxbVqUy00+M3Woqv+bS 8cQr9kzJRwpGQoyacfDWjxx45M/nuCOJ5eA5f1mgraiOPWJiJUwelSHOpp5wNNTy VHOMmzYBlDxU0Wc2SP+i59oX0n6fmMi+gmFf2kwGoir2Hg2yZ9lU52GG1uLWjr32 9XHYaMvG4ZRLo2WIaLuTxDpWApVI1kw9KiVdRjkq6FFIo+UJ4wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFNVkPeWeAX0bglV67VzauyGvacIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDBiNTVlMzQtODBiZS0z NjNmLTk1NDAtZGU1MWVlMDkzYTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAAELI+ZRA1l7K86EW6G7hyG62wzPN4ypJKXhet 8+bFKpOyrxkLhk1nVCmbLiRpf7HjenlG0KeY//TYnmAqvJ3Xbv8+7OAO/ZvG5xGr v+iDl3oRdPL0M9rWKDyrBkNjY/PmS+mCSUYb+mwcgtEzgs9eR39GXkGU9v9/eMir b0wlotNzDcy0TIRzmxrZhpTIqSRJbGfDcaqc2MwP7Ea8vea7MouKP/zdGjw3njGE KO8oqWa4zBWzDzcDUyYF6uq6IvfvvhIIqM5oLp9KLEBsQB2bZTxNvE8vi84a/ESy wsRTk1b9vho0I2g4EN60CaV+SwweH41Bu6KV4nkEXbMD0z4d -----END CERTIFICATE-----Generated at Wed May 13 12:00:52 2026 by rpki-client