$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a85e5af-726e-3fc4-a7dd-ee94a828a998.roa File: 2a85e5af-726e-3fc4-a7dd-ee94a828a998.roa (raw, json) Hash identifier: JkNd5WS5rbdhIY4NEvcRreYFotJ9oWCWhahDSzkyS6g= Subject key identifier: 0E:72:24:F5:58:49:53:26:8E:8A:63:E5:04:9E:F8:57:16:10:54:43 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D7A054645087CC48C34908E60 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a85e5af-726e-3fc4-a7dd-ee94a828a998.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 396553 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:46:45:08:7c:c4:8c:34:90:8e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=a0b9e0ea-4525-4f43-a112-d1fe6bd223a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:60:12:a9:13:d3:1c:d9:67:26:95:a9:68:ab: b5:28:c0:24:1c:2e:b3:12:db:69:7e:69:e5:18:50: 4f:31:a8:22:e3:02:9e:fc:bc:db:68:01:f0:0c:e0: 03:b1:b5:fb:fe:8a:ad:e6:73:f1:eb:a9:bb:36:9c: 2e:da:05:dc:25:95:3c:16:6c:a5:b8:d3:49:3c:73: f0:4a:ff:52:58:7d:91:c4:e5:c5:30:4d:92:a0:29: 45:77:cb:38:4b:ac:88:91:56:b5:9a:77:d1:3e:dc: 7c:e1:5c:df:24:c6:18:c5:75:ff:7e:7a:cb:10:29: 98:85:86:e8:b8:e7:eb:e0:53:ad:6b:b0:1b:f3:23: 2a:74:1d:b4:9e:9a:1b:00:46:16:37:08:2b:20:23: 0b:27:b8:cb:6a:7c:bb:54:b2:db:da:6e:d7:ef:dc: b6:4e:d7:9d:39:4b:19:e6:65:dd:e5:a4:8a:ea:bf: 45:60:4b:2a:9b:82:b0:85:bd:18:f2:39:88:34:72: 68:1a:b6:c6:11:08:98:d3:67:81:6c:f7:7b:15:8d: 57:90:77:0d:f0:3e:31:fe:0f:48:2c:c0:22:70:a3: cc:0b:34:e8:f8:b1:11:a7:a9:b3:b1:b1:bd:dc:d6: b1:77:77:0e:78:a3:62:1a:03:6d:f4:6b:ef:a8:29: 18:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:72:24:F5:58:49:53:26:8E:8A:63:E5:04:9E:F8:57:16:10:54:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a85e5af-726e-3fc4-a7dd-ee94a828a998.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:7a:9d:65:57:09:20:b4:8f:93:21:0c:62:a6:9e:a6:4e:dc: 91:62:36:72:d3:17:9a:a5:bf:19:0d:8b:92:dd:5b:f3:cf:8d: 56:ff:1c:74:27:38:05:fa:b9:91:c6:f9:c3:b9:fb:c3:42:5c: 05:b9:0b:4a:5f:3d:2a:ce:b1:c1:82:5d:fe:28:c7:84:b8:1e: 06:c8:70:74:b2:b1:2f:59:c9:09:b1:3a:c3:7d:de:c2:37:d6: e7:3b:06:0a:6c:57:e6:f1:75:0c:f7:a8:ad:e7:60:e8:87:ae: e5:39:86:39:ac:80:49:df:74:cf:95:b2:b2:b5:85:37:3d:50: 04:60:f3:ff:fe:57:b4:32:1c:08:79:56:25:82:14:bb:22:5e: 00:a3:95:ab:e1:9f:4e:54:db:c8:17:7b:f6:16:28:ac:6b:75: 41:16:cc:dd:7e:40:8e:bc:0f:b1:1a:bf:6c:ec:60:f7:18:4b: 73:a1:84:2e:41:b6:24:9e:76:93:fe:da:b6:45:d9:f9:75:12: df:f8:a6:1c:f7:b2:73:3b:a2:3c:97:51:2f:9a:cf:bb:f3:93: 60:e4:c5:49:27:67:77:b3:04:da:13:dd:26:e2:26:d2:1f:f0: 50:de:e3:8c:8a:2f:70:7a:90:53:34:a1:4a:b4:9b:15:cd:2c: 21:5f:96:04 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE16BUZFCHzEjDSQjmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk YTBiOWUwZWEtNDUyNS00ZjQzLWExMTItZDFmZTZiZDIyM2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWASqRPTHNlnJpWpaKu1KMAkHC6zEttpfmnl GFBPMagi4wKe/LzbaAHwDOADsbX7/oqt5nPx66m7Npwu2gXcJZU8FmyluNNJPHPw Sv9SWH2RxOXFME2SoClFd8s4S6yIkVa1mnfRPtx84VzfJMYYxXX/fnrLECmYhYbo uOfr4FOta7Ab8yMqdB20npobAEYWNwgrICMLJ7jLany7VLLb2m7X79y2TtedOUsZ 5mXd5aSK6r9FYEsqm4Kwhb0Y8jmINHJoGrbGEQiY02eBbPd7FY1XkHcN8D4x/g9I LMAicKPMCzTo+LERp6mzsbG93Naxd3cOeKNiGgNt9GvvqCkYowIDAQABo4IDYjCC A14wHQYDVR0OBBYEFA5yJPVYSVMmjopj5QSe+FcWEFRDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmE4NWU1YWYtNzI2ZS0z ZmM0LWE3ZGQtZWU5NGE4MjhhOTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBDep1lVwkgtI+TIQxipp6mTtyRYjZy0xeapb8Z DYuS3Vvzz41W/xx0JzgF+rmRxvnDufvDQlwFuQtKXz0qzrHBgl3+KMeEuB4GyHB0 srEvWckJsTrDfd7CN9bnOwYKbFfm8XUM96it52Doh67lOYY5rIBJ33TPlbKytYU3 PVAEYPP//le0MhwIeVYlghS7Il4Ao5Wr4Z9OVNvIF3v2Fiisa3VBFszdfkCOvA+x Gr9s7GD3GEtzoYQuQbYknnaT/tq2Rdn5dRLf+KYc97JzO6I8l1Evms+785Ng5MVJ J2d3swTaE90m4ibSH/BQ3uOMii9wepBTNKFKtJsVzSwhX5YE -----END CERTIFICATE-----Generated at Fri Apr 17 11:41:27 2026 by rpki-client