$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02eb2678-08b4-3db9-aa6a-912e70201d2a.roa File: 02eb2678-08b4-3db9-aa6a-912e70201d2a.roa (raw, json) Hash identifier: +87bDyqxjjM7uJntCbhk89vyhllAx6Zj0SfTY98Vt8Q= Subject key identifier: 94:D3:EA:02:04:31:D1:3E:D9:A6:47:C6:6C:54:7C:7A:16:A5:64:B8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D83CAE812318D290B5A9EC280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02eb2678-08b4-3db9-aa6a-912e70201d2a.roa Signing time: Wed 15 Apr 2026 13:00:30 +0000 ROA not before: Wed 15 Apr 2026 13:00:30 +0000 ROA not after: Tue 14 Jul 2026 13:00:30 +0000 asID: 396608 IP address blocks: 2001:500:127::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:83:ca:e8:12:31:8d:29:0b:5a:9e:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 15 13:00:30 2026 GMT Not After : Jul 14 13:00:30 2026 GMT Subject: CN=b523ed6e-61fc-4abc-b106-6651f4baab8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e7:81:ac:2d:79:08:1d:38:42:3b:bc:80:70: 53:65:67:d9:f1:56:e8:94:ca:c9:15:f4:95:df:fc: 8e:09:9c:1a:f9:12:6d:d5:8d:92:47:6c:02:61:31: 74:6c:b7:d5:dc:b3:85:e7:db:d5:4f:20:0a:b4:e5: 88:2c:5f:6c:ff:ce:b5:4e:b9:6a:9e:91:13:01:28: 83:3a:52:cb:34:e5:77:6d:7b:27:a1:f0:43:3d:01: ba:a7:12:53:d5:b2:d4:1a:0a:34:73:63:b1:b7:59: 3e:e3:8e:b3:3c:ef:5f:55:0b:7b:04:d1:b5:6d:46: 41:b6:34:72:87:4c:95:7d:07:a6:f3:6b:97:4c:67: 3e:cb:e5:68:9c:1d:5b:65:b1:1f:66:5d:2f:35:89: 15:ee:b8:14:a9:87:10:03:27:75:56:43:3c:3f:f5: 80:a9:bb:e6:7b:39:9c:a4:ae:b0:9c:e7:84:37:8d: 9b:87:87:0c:a1:32:f6:71:7c:a8:d0:db:21:82:06: 3e:d1:a2:34:b5:ec:ec:b2:17:2d:e9:05:6b:1d:6c: 47:17:06:75:e9:7f:c0:26:b0:49:d4:d0:f6:e8:81: 8e:98:8f:8c:23:ff:0e:e3:fe:2f:32:2e:00:32:eb: b6:47:39:a4:70:72:02:2a:24:78:b0:86:1a:2d:b0: 67:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D3:EA:02:04:31:D1:3E:D9:A6:47:C6:6C:54:7C:7A:16:A5:64:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02eb2678-08b4-3db9-aa6a-912e70201d2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:37:78:82:2e:d9:52:eb:2a:8f:c3:29:47:ce:d5:cc:10:ef: 3c:46:6d:3f:1f:b4:95:2e:9a:59:d2:9d:cb:0f:b8:ef:00:b8: 0f:af:ab:17:56:9c:87:f8:95:ca:7b:c2:17:0f:a4:0f:e3:87: 10:9b:a1:ee:17:c5:96:ea:16:e8:30:5b:ce:6d:59:2e:e6:a2: 87:27:24:98:0c:60:77:a2:78:5b:93:5e:93:98:7b:02:0f:7c: d9:74:92:82:ab:99:69:28:a1:38:c0:ce:58:54:07:b3:56:a8: ca:c2:25:a6:43:b8:67:4a:9a:ae:4a:41:98:f7:74:b2:3b:d5: 96:5a:14:66:61:29:0d:21:b1:1e:a9:dd:24:92:3a:d1:b4:4e: eb:bc:6a:ed:80:83:0f:46:c2:03:f4:a0:94:b4:10:67:9c:42: 76:5e:6b:36:c4:86:dd:75:c5:ac:97:3e:61:42:ef:9a:e6:58: 16:25:fb:51:38:ec:1c:01:fe:c9:04:02:6e:9e:68:a6:c5:3b: 01:f2:17:21:d7:4f:2f:88:80:17:18:12:09:7e:fe:0a:4c:30: c8:c6:a8:cc:3e:25:80:ca:ba:d6:25:28:c2:9f:54:d0:aa:5e: a5:d2:64:7f:e7:e9:9f:5f:d6:fd:2f:fa:1d:3f:67:aa:f3:e1: 8d:7f:f0:80 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE2DyugSMY0pC1qewoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk YjUyM2VkNmUtNjFmYy00YWJjLWIxMDYtNjY1MWY0YmFhYjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmueBrC15CB04Qju8gHBTZWfZ8VbolMrJFfSV 3/yOCZwa+RJt1Y2SR2wCYTF0bLfV3LOF59vVTyAKtOWILF9s/861TrlqnpETASiD OlLLNOV3bXsnofBDPQG6pxJT1bLUGgo0c2Oxt1k+446zPO9fVQt7BNG1bUZBtjRy h0yVfQem82uXTGc+y+VonB1bZbEfZl0vNYkV7rgUqYcQAyd1VkM8P/WAqbvmezmc pK6wnOeEN42bh4cMoTL2cXyo0NshggY+0aI0tezsshct6QVrHWxHFwZ16X/AJrBJ 1ND26IGOmI+MI/8O4/4vMi4AMuu2RzmkcHICKiR4sIYaLbBnUwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJTT6gIEMdE+2aZHxmxUfHoWpWS4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDJlYjI2NzgtMDhiNC0z ZGI5LWFhNmEtOTEyZTcwMjAxZDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEn AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAMN3iCLtlS6yqPwylHztXMEO88Rm0/H7SVLppZ 0p3LD7jvALgPr6sXVpyH+JXKe8IXD6QP44cQm6HuF8WW6hboMFvObVku5qKHJySY DGB3onhbk16TmHsCD3zZdJKCq5lpKKE4wM5YVAezVqjKwiWmQ7hnSpquSkGY93Sy O9WWWhRmYSkNIbEeqd0kkjrRtE7rvGrtgIMPRsID9KCUtBBnnEJ2Xms2xIbddcWs lz5hQu+a5lgWJftROOwcAf7JBAJunmimxTsB8hch108viIAXGBIJfv4KTDDIxqjM PiWAyrrWJSjCn1TQql6l0mR/5+mfX9b9L/odP2eq8+GNf/CA -----END CERTIFICATE-----Generated at Fri Apr 17 13:14:27 2026 by rpki-client