$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21aa4f37-1aef-3131-91eb-374125dffe2b.roa File: 21aa4f37-1aef-3131-91eb-374125dffe2b.roa (raw, json) Hash identifier: ArKWAo2cV+f/h/QuI4DeqIFtgxc/masSqvvnPIOXAuk= Subject key identifier: DF:F7:7F:ED:C1:F1:E5:10:D0:C2:24:79:AD:A1:9F:B5:ED:39:13:37 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D83CAF9C1D0D2642374D2A3C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21aa4f37-1aef-3131-91eb-374125dffe2b.roa Signing time: Wed 15 Apr 2026 13:00:30 +0000 ROA not before: Wed 15 Apr 2026 13:00:30 +0000 ROA not after: Tue 14 Jul 2026 13:00:30 +0000 asID: 396617 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:83:ca:f9:c1:d0:d2:64:23:74:d2:a3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 15 13:00:30 2026 GMT Not After : Jul 14 13:00:30 2026 GMT Subject: CN=796fa6fc-a3cd-420a-bf04-415e86e49868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9a:fb:6a:f3:48:93:79:a0:2e:cc:09:3f:36: 69:ee:b0:98:7c:db:2d:05:06:18:24:b0:6a:c5:29: 17:93:52:e7:40:22:b6:da:d7:a8:f5:df:1e:1c:00: 83:85:23:7d:50:30:9c:64:52:e4:ee:fd:0c:60:04: 7c:e7:c9:18:0d:13:a3:12:92:de:cd:6b:99:b6:85: 84:c2:44:25:79:c4:0e:2b:33:a6:0a:ac:02:f7:31: a4:54:d4:7d:56:87:98:f7:76:cf:b7:24:e8:4e:62: 6b:da:2c:a7:15:ad:fc:88:95:3a:e9:d2:1d:89:55: 1f:ca:16:eb:16:1f:64:1e:44:49:41:e5:8d:06:e6: a0:78:a7:fe:45:77:c3:6e:c3:56:50:9a:58:cd:ef: 97:c7:38:00:a1:77:93:96:95:a3:28:cc:c8:ea:91: 85:9b:ee:d0:2d:af:d1:f3:d9:34:27:8e:d5:b9:06: 8d:b7:3b:78:3a:ad:50:95:cb:e0:47:e9:3c:54:04: 7f:ee:c8:36:9b:ea:25:2a:17:cb:72:b2:07:b8:72: d6:4b:63:54:50:dd:ca:89:fb:2b:77:64:28:01:2e: fc:c5:6e:53:9c:ed:88:2d:bc:72:55:a8:a7:4b:9d: fb:3e:c8:8f:ca:42:34:c5:6d:26:02:4a:a7:86:d8: db:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F7:7F:ED:C1:F1:E5:10:D0:C2:24:79:AD:A1:9F:B5:ED:39:13:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21aa4f37-1aef-3131-91eb-374125dffe2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:a5:d8:7a:67:54:8e:7e:14:45:79:00:e7:ca:3b:d1:f9:e4: fd:5a:f7:db:7c:73:87:61:31:a4:57:ed:bb:5c:83:57:2f:db: 98:52:01:85:2b:40:9f:23:ad:0d:ae:17:07:d6:39:9b:21:e5: c3:7f:01:df:5a:1a:e3:62:45:78:1d:5f:c1:16:03:6f:d7:b8: 7d:0e:33:cc:17:99:87:39:db:48:5e:05:bc:91:da:ce:90:e0: 2f:d2:f3:a2:d3:d4:fb:fd:fa:fe:dc:74:58:77:c0:45:4f:36: f2:5b:bc:a0:cf:8b:65:1f:79:7c:93:04:c6:6d:54:62:e3:4b: a2:6a:74:5c:fb:58:eb:4b:cf:98:bc:3e:d9:2b:23:42:9e:a0: 8d:58:dc:42:91:ec:81:b2:b6:c2:54:da:5d:27:c1:d9:f6:7d: c1:8e:29:85:d5:20:0d:7e:8a:4b:70:7c:68:c3:ea:1d:86:22: df:7d:4c:9e:95:67:83:f6:d2:0f:81:5a:17:b4:9c:eb:e2:dc: 41:d1:75:a1:a5:50:3b:eb:17:fe:33:a4:ca:1b:02:c5:eb:f2: 52:71:b2:77:ea:80:42:b9:81:1f:8b:73:60:70:57:eb:ae:75: 02:32:c9:c2:20:35:27:23:20:95:87:b9:6c:d0:2e:d7:36:01: 2b:31:5e:25 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE2DyvnB0NJkI3TSo8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk Nzk2ZmE2ZmMtYTNjZC00MjBhLWJmMDQtNDE1ZTg2ZTQ5ODY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5r7avNIk3mgLswJPzZp7rCYfNstBQYYJLBq xSkXk1LnQCK22teo9d8eHACDhSN9UDCcZFLk7v0MYAR858kYDROjEpLezWuZtoWE wkQlecQOKzOmCqwC9zGkVNR9VoeY93bPtyToTmJr2iynFa38iJU66dIdiVUfyhbr Fh9kHkRJQeWNBuageKf+RXfDbsNWUJpYze+XxzgAoXeTlpWjKMzI6pGFm+7QLa/R 89k0J47VuQaNtzt4Oq1QlcvgR+k8VAR/7sg2m+olKhfLcrIHuHLWS2NUUN3Kifsr d2QoAS78xW5TnO2ILbxyVainS537PsiPykI0xW0mAkqnhtjbHQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFN/3f+3B8eUQ0MIkea2hn7XtORM3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjFhYTRmMzctMWFlZi0z MTMxLTkxZWItMzc0MTI1ZGZmZTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQADpdh6Z1SOfhRFeQDnyjvR+eT9WvfbfHOHYTGk V+27XINXL9uYUgGFK0CfI60NrhcH1jmbIeXDfwHfWhrjYkV4HV/BFgNv17h9DjPM F5mHOdtIXgW8kdrOkOAv0vOi09T7/fr+3HRYd8BFTzbyW7ygz4tlH3l8kwTGbVRi 40uianRc+1jrS8+YvD7ZKyNCnqCNWNxCkeyBsrbCVNpdJ8HZ9n3BjimF1SANfopL cHxow+odhiLffUyelWeD9tIPgVoXtJzr4txB0XWhpVA76xf+M6TKGwLF6/JScbJ3 6oBCuYEfi3NgcFfrrnUCMsnCIDUnIyCVh7ls0C7XNgErMV4l -----END CERTIFICATE-----Generated at Fri Apr 17 13:05:26 2026 by rpki-client