$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/480d49c8-6508-39b7-aefa-03d0cfa9df0e.roa File: 480d49c8-6508-39b7-aefa-03d0cfa9df0e.roa (raw, json) Hash identifier: Xxb19Jg1e6VRAvHEXxti6nGYVXjS+X/kEsu/ZgGQfJ8= Subject key identifier: AE:79:10:FE:A3:83:04:D8:38:4F:DD:5F:F9:27:57:E8:02:3C:54:47 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D9A202B0DE0EEEB39451209A0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/480d49c8-6508-39b7-aefa-03d0cfa9df0e.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 36620 IP address blocks: 2001:500:120::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:2b:0d:e0:ee:eb:39:45:12:09:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=dd2dae61-dffb-419a-8ae6-e3bb67d7244d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ca:b3:7f:5e:d2:e6:70:a9:c3:a6:38:d8:ac: a7:0d:95:df:3e:12:d9:75:b7:a8:50:6f:51:a7:a4: 1e:99:64:e8:a7:48:d8:bd:56:f5:c3:7b:1a:85:2d: 84:e5:fd:cc:bb:74:3e:11:8a:e3:97:ee:6b:25:77: 27:ca:a5:db:a5:2e:73:98:f2:52:75:ea:0d:28:70: db:1c:c9:c9:18:4e:1e:23:33:50:e0:79:0b:05:f3: eb:dd:b3:79:fc:c2:fe:90:d7:39:a6:5c:75:59:46: 90:97:99:6e:23:9f:43:93:98:d0:5e:cd:b3:dc:31: 39:d0:e5:6b:8c:6b:73:6c:53:93:2f:d6:fa:b4:c2: c3:3b:67:7d:1b:67:1e:47:85:38:f1:cb:40:ce:ec: 57:aa:63:aa:dc:8d:e4:02:72:2c:d6:64:fa:c5:58: d0:1d:91:da:a2:37:78:07:60:69:18:e5:60:02:18: 44:49:d3:12:d8:87:76:82:c1:c3:4a:9a:dc:b5:b9: de:5c:d8:48:ba:4c:bc:6b:17:2d:8f:12:8b:23:7a: 90:b8:0b:82:59:a6:72:f7:42:b8:74:cc:b9:56:3a: 0e:57:8f:5d:4e:ac:24:ea:73:39:7e:5c:3b:70:94: e1:20:71:4f:6f:10:1c:0a:7a:cf:49:d8:9d:b6:f3: 89:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:79:10:FE:A3:83:04:D8:38:4F:DD:5F:F9:27:57:E8:02:3C:54:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/480d49c8-6508-39b7-aefa-03d0cfa9df0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:4d:25:2f:03:92:d3:82:a3:b1:56:fb:ea:dd:a8:85:3b:2f: 62:d1:d1:4c:af:e6:fa:f0:a9:20:3c:76:d0:db:d6:7c:b8:7f: 45:de:6d:50:bb:d0:e0:9b:6d:43:c1:6a:5f:2a:8b:4e:0d:72: 75:0d:17:56:91:ea:0d:39:d9:2a:b9:f2:8a:35:5b:b1:56:fa: 65:73:b2:43:3d:a6:02:bc:82:d0:3c:26:ec:b8:05:e3:37:db: 7f:7a:e1:f6:7f:9e:d7:8f:6a:8b:21:97:c5:89:16:cb:ca:9b: 2a:2a:d8:21:84:6b:39:88:c2:cc:5c:5f:66:f8:94:7a:a2:9a: aa:36:1e:af:82:0d:bf:9b:9b:4f:07:e6:47:ca:06:57:10:1c: 5f:ff:da:41:25:b4:24:24:9f:35:12:89:1c:23:ab:eb:32:7b: 41:ef:29:0d:72:ce:ea:c0:db:63:2a:46:d0:80:97:a9:e5:10: f4:7d:82:d0:05:a7:12:7d:12:0d:a6:52:a0:8b:fd:43:99:54: d6:e4:cc:17:01:67:7c:9d:b9:87:e9:42:9a:52:41:0b:a1:6f: 89:88:92:f3:40:b5:00:a5:8e:f3:74:c8:9a:11:a2:d8:28:8f: cc:0e:3d:91:af:f0:f0:c1:5e:06:3b:69:ed:21:3a:b1:25:b1: 2c:f8:17:50 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE2aICsN4O7rOUUSCaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk ZGQyZGFlNjEtZGZmYi00MTlhLThhZTYtZTNiYjY3ZDcyNDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8qzf17S5nCpw6Y42KynDZXfPhLZdbeoUG9R p6QemWTop0jYvVb1w3sahS2E5f3Mu3Q+EYrjl+5rJXcnyqXbpS5zmPJSdeoNKHDb HMnJGE4eIzNQ4HkLBfPr3bN5/ML+kNc5plx1WUaQl5luI59Dk5jQXs2z3DE50OVr jGtzbFOTL9b6tMLDO2d9G2ceR4U48ctAzuxXqmOq3I3kAnIs1mT6xVjQHZHaojd4 B2BpGOVgAhhESdMS2Id2gsHDSprctbneXNhIuky8axctjxKLI3qQuAuCWaZy90K4 dMy5VjoOV49dTqwk6nM5flw7cJThIHFPbxAcCnrPSdidtvOJvwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFK55EP6jgwTYOE/dX/knV+gCPFRHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDgwZDQ5YzgtNjUwOC0z OWI3LWFlZmEtMDNkMGNmYTlkZjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCyTSUvA5LTgqOxVvvq3aiFOy9i0dFMr+b68Kkg PHbQ29Z8uH9F3m1Qu9Dgm21DwWpfKotODXJ1DRdWkeoNOdkqufKKNVuxVvplc7JD PaYCvILQPCbsuAXjN9t/euH2f57Xj2qLIZfFiRbLypsqKtghhGs5iMLMXF9m+JR6 opqqNh6vgg2/m5tPB+ZHygZXEBxf/9pBJbQkJJ81EokcI6vrMntB7ykNcs7qwNtj KkbQgJep5RD0fYLQBacSfRINplKgi/1DmVTW5MwXAWd8nbmH6UKaUkELoW+JiJLz QLUApY7zdMiaEaLYKI/MDj2Rr/DwwV4GO2ntITqxJbEs+BdQ -----END CERTIFICATE-----Generated at Wed May 13 05:09:18 2026 by rpki-client