$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf396b27-1498-3439-acc8-7ea8d9da0e83.roa File: cf396b27-1498-3439-acc8-7ea8d9da0e83.roa (raw, json) Hash identifier: zidoVS+baPWkHFI8mQXLab3h/f6e08VsMHErCK4KN6w= Subject key identifier: 10:B7:4B:91:19:4A:10:06:AF:5E:D8:CB:E4:E0:01:52:5F:49:E1:65 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D8C2AA54AA25BA203FF517B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf396b27-1498-3439-acc8-7ea8d9da0e83.roa Signing time: Sat 18 Apr 2026 13:00:30 +0000 ROA not before: Sat 18 Apr 2026 13:00:30 +0000 ROA not after: Fri 17 Jul 2026 13:00:30 +0000 asID: 396580 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:2a:a5:4a:a2:5b:a2:03:ff:51:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 18 13:00:30 2026 GMT Not After : Jul 17 13:00:30 2026 GMT Subject: CN=c9c2b857-8246-40e1-9f73-513afd4b9c33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cc:df:e7:50:4f:bc:f3:18:c4:1f:64:78:4e: ee:5a:a5:3f:8b:38:36:cd:3f:35:cc:95:ca:95:b1: ff:ad:74:60:f3:7b:84:07:0e:31:75:52:b5:9a:73: dc:90:5b:39:cd:1a:5b:da:1b:0c:09:64:0c:23:7c: 2f:bc:5f:0c:10:87:5a:f3:0a:b5:cf:40:a7:62:18: 3e:97:b4:2a:3e:a8:ec:f4:af:22:b3:c4:f8:b9:9a: fa:64:6e:11:50:ec:ae:19:92:c8:00:c3:64:c9:a9: 6d:bd:3d:e8:ec:40:65:bc:68:cf:54:12:85:a1:cf: 63:3e:6a:b7:31:5a:30:ec:ae:83:c8:48:a2:3f:a2: 20:41:c9:c2:2e:b5:8e:44:0f:a1:9f:a9:1c:0a:49: 43:6d:48:ae:b2:ea:05:c0:d6:68:80:6e:d1:4b:c9: 58:60:86:d6:ce:8e:9a:ec:88:e9:aa:ec:5c:07:41: f4:22:86:00:38:59:c2:51:d4:1a:99:56:91:1f:08: b0:96:9c:e3:d4:fe:d1:32:b4:79:a4:09:22:f5:87: 0e:75:9c:7c:bf:45:8f:9e:6f:32:66:4b:86:c6:8a: eb:1f:fb:7a:89:b9:13:34:91:ff:db:e1:46:ff:17: d5:c6:f5:88:2c:0d:07:03:7f:c5:fb:f7:ab:3b:51: 26:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B7:4B:91:19:4A:10:06:AF:5E:D8:CB:E4:E0:01:52:5F:49:E1:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf396b27-1498-3439-acc8-7ea8d9da0e83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:bf:19:56:3d:38:7b:8a:af:07:07:67:f1:df:3b:db:59:45: f8:f8:27:8b:27:85:66:ac:e2:70:52:19:71:f7:6a:ae:a6:da: d8:41:f1:34:0e:36:b2:bb:6b:72:6c:02:66:d6:c6:1b:d3:cb: 02:65:34:2d:ab:88:4b:e1:d1:15:9e:a8:32:9e:a5:62:0d:42: f3:55:01:42:94:de:62:7f:4a:84:e0:35:23:87:8b:e9:c8:f8: 7f:cc:56:4c:ba:ae:2d:2e:20:ce:b7:d7:01:e6:e9:23:64:7f: 1a:76:16:e1:76:13:34:a0:9c:0e:bf:4b:a5:7e:40:47:47:ee: 45:7f:9f:0c:9e:c0:8f:9f:43:48:10:5d:84:ca:94:18:d2:21: 86:0c:5a:c2:a8:6d:7d:94:d7:8e:00:9d:0b:74:9e:af:14:38: 99:3e:7c:53:d4:d9:d4:07:16:d7:51:c3:40:41:ac:d4:39:26: d2:49:f4:f9:29:f0:b6:2b:d4:f2:f6:5a:20:07:ad:8b:db:6e: 88:3b:e9:f1:50:3b:ba:f5:e4:ee:03:69:42:c3:4a:1a:25:27: 12:0d:09:d1:6c:34:6d:e6:7f:81:3c:d6:87:ef:2d:cc:10:1c: d7:5b:f7:66:72:a4:25:c8:eb:37:2e:88:7e:96:c3:71:00:39: d1:f4:0c:c6 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE2MKqVKoluiA/9Re4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk YzljMmI4NTctODI0Ni00MGUxLTlmNzMtNTEzYWZkNGI5YzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoszf51BPvPMYxB9keE7uWqU/izg2zT81zJXK lbH/rXRg83uEBw4xdVK1mnPckFs5zRpb2hsMCWQMI3wvvF8MEIda8wq1z0CnYhg+ l7QqPqjs9K8is8T4uZr6ZG4RUOyuGZLIAMNkyaltvT3o7EBlvGjPVBKFoc9jPmq3 MVow7K6DyEiiP6IgQcnCLrWORA+hn6kcCklDbUiusuoFwNZogG7RS8lYYIbWzo6a 7IjpquxcB0H0IoYAOFnCUdQamVaRHwiwlpzj1P7RMrR5pAki9YcOdZx8v0WPnm8y ZkuGxorrH/t6ibkTNJH/2+FG/xfVxvWILA0HA3/F+/erO1Em3wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBC3S5EZShAGr17Yy+TgAVJfSeFlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2YzOTZiMjctMTQ5OC0z NDM5LWFjYzgtN2VhOGQ5ZGEwZTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAlvxlWPTh7iq8HB2fx3zvbWUX4+CeLJ4VmrOJw Uhlx92quptrYQfE0Djayu2tybAJm1sYb08sCZTQtq4hL4dEVnqgynqViDULzVQFC lN5if0qE4DUjh4vpyPh/zFZMuq4tLiDOt9cB5ukjZH8adhbhdhM0oJwOv0ulfkBH R+5Ff58MnsCPn0NIEF2EypQY0iGGDFrCqG19lNeOAJ0LdJ6vFDiZPnxT1NnUBxbX UcNAQazUOSbSSfT5KfC2K9Ty9logB62L226IO+nxUDu69eTuA2lCw0oaJScSDQnR bDRt5n+BPNaH7y3MEBzXW/dmcqQlyOs3Loh+lsNxADnR9AzG -----END CERTIFICATE-----Generated at Wed May 13 10:04:59 2026 by rpki-client