$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf7ad16e-1f6d-3934-b834-c7fac1fa242d.roa File: bf7ad16e-1f6d-3934-b834-c7fac1fa242d.roa (raw, json) Hash identifier: CU/mtGgTN1R5bnMtG2iLeBLc67MvBXV6XLS3/wK8Lss= Subject key identifier: 47:23:D5:9B:E1:83:05:2F:35:46:D3:81:01:1F:6C:32:D8:03:42:69 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D9A202D5306646B8823965D80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf7ad16e-1f6d-3934-b834-c7fac1fa242d.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 36629 IP address blocks: 2001:500:120::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:2d:53:06:64:6b:88:23:96:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=30b46456-b8cd-471e-9942-4dbd97820406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6b:19:15:76:d3:8c:be:35:df:e9:7d:95:48: f5:ba:ac:e7:87:dc:23:b0:a2:f1:72:0f:4e:dd:42: d3:31:95:4e:87:71:cd:34:3b:30:b3:0b:72:44:a5: ea:a3:76:2e:0b:28:c2:88:4f:d1:5d:e2:27:ae:5a: 63:11:a0:30:74:09:f8:77:c7:b3:ab:26:b2:c5:44: 4d:0f:43:b3:90:15:00:c0:08:cd:bf:8c:30:9f:c7: 0c:1f:00:89:6f:87:75:2c:8a:0f:86:1e:93:d8:9a: 2a:0a:79:29:34:c4:6f:af:99:54:84:f9:26:1f:9d: 72:38:13:09:46:a1:76:93:17:aa:05:e8:16:ae:d1: 75:72:58:14:0a:8e:50:34:e9:fb:87:84:39:17:9f: a6:55:52:62:64:78:9c:bb:eb:12:a9:b7:73:b6:c1: 95:f6:e4:60:6a:b4:86:6e:58:8f:62:d4:c1:b2:c7: 4d:67:07:0f:51:28:40:4a:99:df:1f:fc:b7:46:7e: 85:b2:97:71:36:73:61:93:42:a7:6f:88:7a:47:61: 07:23:01:a6:5d:2e:1e:e5:c9:dc:24:09:36:da:59: f3:04:a2:22:9b:66:d2:29:5f:f0:f1:3b:22:d0:69: 34:a7:45:bf:ee:d9:b3:ff:f0:8b:ff:ab:d3:01:d2: 3b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:23:D5:9B:E1:83:05:2F:35:46:D3:81:01:1F:6C:32:D8:03:42:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf7ad16e-1f6d-3934-b834-c7fac1fa242d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:24:8b:9a:a7:56:66:a1:e0:d7:99:6f:78:3f:b6:14:0b:57: f6:df:7d:a3:b3:d5:d3:27:5b:15:d3:3c:72:6e:75:a8:33:51: 73:9d:57:84:e4:11:46:b4:be:d9:f6:7e:97:88:bf:af:fe:eb: 9d:22:46:66:1a:8b:ca:66:48:78:11:7f:bf:a6:7b:ca:b0:6e: 85:64:63:31:07:67:25:7e:22:34:a5:f3:38:03:50:d9:75:2e: af:55:8c:52:d3:7e:71:9b:a8:78:a3:dc:8b:6f:8a:a4:93:43: f7:59:77:54:10:ed:e7:f7:00:8e:4e:2a:1d:58:6a:0c:1d:38: 70:db:d1:9d:3a:8b:4a:88:ec:6a:05:e2:40:33:68:23:f4:a6: 09:b6:03:30:67:ce:85:c3:5a:7d:a5:18:36:53:7b:32:d2:9b: 98:b2:28:af:a4:f6:fb:6d:7b:da:da:2c:22:e0:65:4d:e3:ed: 76:a4:ce:17:a2:0c:84:b3:4b:ad:59:bb:21:65:d1:e9:e9:18: 1a:d1:2d:21:c1:e2:8c:6f:a0:6e:42:00:23:b1:ba:72:38:4d: d3:6c:38:d2:0e:aa:7a:e2:22:26:16:74:d4:5e:2b:f2:78:4f: 58:15:cc:86:4f:f6:2f:45:0a:1c:82:41:64:09:55:a0:be:77: f3:26:fe:17 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE2aIC1TBmRriCOWXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk MzBiNDY0NTYtYjhjZC00NzFlLTk5NDItNGRiZDk3ODIwNDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomsZFXbTjL413+l9lUj1uqznh9wjsKLxcg9O 3ULTMZVOh3HNNDswswtyRKXqo3YuCyjCiE/RXeInrlpjEaAwdAn4d8ezqyayxURN D0OzkBUAwAjNv4wwn8cMHwCJb4d1LIoPhh6T2JoqCnkpNMRvr5lUhPkmH51yOBMJ RqF2kxeqBegWrtF1clgUCo5QNOn7h4Q5F5+mVVJiZHicu+sSqbdztsGV9uRgarSG bliPYtTBssdNZwcPUShASpnfH/y3Rn6FspdxNnNhk0Knb4h6R2EHIwGmXS4e5cnc JAk22lnzBKIim2bSKV/w8Tsi0Gk0p0W/7tmz//CL/6vTAdI7LwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEcj1ZvhgwUvNUbTgQEfbDLYA0JpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmY3YWQxNmUtMWY2ZC0z OTM0LWI4MzQtYzdmYWMxZmEyNDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAcJIuap1ZmoeDXmW94P7YUC1f2332js9XTJ1sV 0zxybnWoM1FznVeE5BFGtL7Z9n6XiL+v/uudIkZmGovKZkh4EX+/pnvKsG6FZGMx B2clfiI0pfM4A1DZdS6vVYxS035xm6h4o9yLb4qkk0P3WXdUEO3n9wCOTiodWGoM HThw29GdOotKiOxqBeJAM2gj9KYJtgMwZ86Fw1p9pRg2U3sy0puYsiivpPb7bXva 2iwi4GVN4+12pM4XogyEs0utWbshZdHp6Rga0S0hweKMb6BuQgAjsbpyOE3TbDjS Dqp64iImFnTUXivyeE9YFcyGT/YvRQocgkFkCVWgvnfzJv4X -----END CERTIFICATE-----Generated at Wed May 13 08:10:56 2026 by rpki-client