$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a86754b-7bbe-33f9-8aa6-180cc4131b2c.roa File: 8a86754b-7bbe-33f9-8aa6-180cc4131b2c.roa (raw, json) Hash identifier: R3qMQ/W79tYhlfOGmzI4PSJvoQ6ZyN/hNCZnKe/oXr8= Subject key identifier: 0D:96:39:9A:89:94:1E:9A:78:0A:B0:89:BB:30:BC:F0:BB:DF:FB:AA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D9A2028E00DFF873280A1F940 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a86754b-7bbe-33f9-8aa6-180cc4131b2c.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 396566 IP address blocks: 2001:500:120::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:28:e0:0d:ff:87:32:80:a1:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=37c543bd-7b09-4760-a2f0-ac507ef4b883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3b:44:d7:9d:c0:99:55:6e:1d:6c:dc:cd:31: 41:16:a6:6c:4f:56:b8:27:98:4c:7b:7b:a8:1f:27: ef:58:77:17:02:50:e4:08:17:33:8b:c3:8a:e4:cb: bb:8a:f1:3c:4c:d2:9d:a5:f3:ea:db:fe:c4:ae:8b: c1:97:60:07:e5:2f:42:9d:85:68:36:a4:af:97:bd: 88:67:96:cb:fd:86:19:15:27:7f:a4:c5:4c:e8:eb: a3:54:c0:2d:eb:2d:02:83:ee:f4:fc:a4:6e:e1:c7: b8:cb:f3:b3:19:4a:78:f3:92:4e:24:67:e4:26:7e: 6d:ec:2e:f7:08:58:4c:0b:11:f3:5e:92:9d:a4:80: 3c:72:ba:64:13:54:cd:6c:e8:dd:ed:77:6c:bc:6a: 59:85:81:19:fa:50:d4:20:3d:46:0b:49:8a:39:45: 5c:8d:79:3b:ff:f9:06:29:04:b2:d9:56:4d:75:29: 84:4c:1f:14:66:8c:b9:07:24:0d:11:17:c9:d2:9c: 06:89:ae:56:fa:fb:ea:57:27:cd:67:ad:e9:68:d4: ed:f2:ed:2a:1a:70:cc:ee:a3:68:86:5e:c0:b4:14: 5f:ba:e0:04:c5:dc:f3:c0:18:de:0d:7a:f1:94:36: f4:0e:90:31:ff:80:c8:af:38:d0:8c:71:b1:06:9e: ad:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:96:39:9A:89:94:1E:9A:78:0A:B0:89:BB:30:BC:F0:BB:DF:FB:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a86754b-7bbe-33f9-8aa6-180cc4131b2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:09:d6:12:cc:bf:de:d6:18:d9:a2:b7:4d:f1:df:2c:b3:cc: 71:e3:43:0f:41:fc:79:85:6a:f8:99:b0:c9:16:8b:70:ea:13: b9:7b:14:aa:50:3b:76:a1:22:e9:21:a5:12:8d:fe:e1:69:a0: b2:52:8f:11:7a:c4:4c:f5:0c:a1:df:c8:3a:0d:5e:56:06:e1: 56:ba:a1:81:0c:d7:27:3c:60:87:87:b5:9e:12:eb:87:30:c2: 13:a5:51:4c:c0:a3:d0:12:13:be:f8:22:1e:f5:89:d7:e7:9a: 8d:d9:da:5e:c2:2c:24:8b:d4:c6:a8:13:db:cb:aa:39:97:4f: 2e:da:b6:06:1a:b2:5a:79:f2:c2:96:3e:46:c8:89:1c:52:3c: 67:74:e6:19:54:e5:f2:90:03:72:1d:24:e3:b5:44:f2:57:9b: 79:2c:9e:1b:33:d3:0e:d5:23:38:ee:cd:68:ce:4b:3b:09:24: a4:48:9e:8b:13:d5:20:9e:cb:41:91:db:07:54:64:3c:f1:12: 48:f9:e9:88:ac:b2:9a:f6:c1:16:aa:54:a8:a8:4e:0f:97:2c: fe:45:ef:f0:24:f8:ec:38:77:37:8d:57:f3:cc:24:46:b3:1a: 4a:03:e4:c5:12:1a:14:9d:06:d8:ef:d5:c5:23:e2:77:3d:05: 78:ff:42:d4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE2aICjgDf+HMoCh+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk MzdjNTQzYmQtN2IwOS00NzYwLWEyZjAtYWM1MDdlZjRiODgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsztE153AmVVuHWzczTFBFqZsT1a4J5hMe3uo HyfvWHcXAlDkCBczi8OK5Mu7ivE8TNKdpfPq2/7ErovBl2AH5S9CnYVoNqSvl72I Z5bL/YYZFSd/pMVM6OujVMAt6y0Cg+70/KRu4ce4y/OzGUp485JOJGfkJn5t7C73 CFhMCxHzXpKdpIA8crpkE1TNbOjd7XdsvGpZhYEZ+lDUID1GC0mKOUVcjXk7//kG KQSy2VZNdSmETB8UZoy5ByQNERfJ0pwGia5W+vvqVyfNZ63paNTt8u0qGnDM7qNo hl7AtBRfuuAExdzzwBjeDXrxlDb0DpAx/4DIrzjQjHGxBp6t0wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFA2WOZqJlB6aeAqwibswvPC73/uqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGE4Njc1NGItN2JiZS0z M2Y5LThhYTYtMTgwY2M0MTMxYjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBeCdYSzL/e1hjZordN8d8ss8xx40MPQfx5hWr4 mbDJFotw6hO5exSqUDt2oSLpIaUSjf7haaCyUo8ResRM9Qyh38g6DV5WBuFWuqGB DNcnPGCHh7WeEuuHMMITpVFMwKPQEhO++CIe9YnX55qN2dpewiwki9TGqBPby6o5 l08u2rYGGrJaefLClj5GyIkcUjxndOYZVOXykANyHSTjtUTyV5t5LJ4bM9MO1SM4 7s1ozks7CSSkSJ6LE9UgnstBkdsHVGQ88RJI+emIrLKa9sEWqlSoqE4Plyz+Re/w JPjsOHc3jVfzzCRGsxpKA+TFEhoUnQbY79XFI+J3PQV4/0LU -----END CERTIFICATE-----Generated at Wed May 13 07:20:10 2026 by rpki-client