$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ea17f1a-3190-3717-93f5-2f67bf505718.roa File: 2ea17f1a-3190-3717-93f5-2f67bf505718.roa (raw, json) Hash identifier: fQzohCJ5bCrfhbnIeN0dS6L4MxN6mMw3fhG0eT9nkek= Subject key identifier: CB:70:22:5F:57:F2:5E:3F:D3:16:DF:27:08:AE:51:0E:1D:DC:7F:4F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D83CAD8E23A3F2D321B6FC080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ea17f1a-3190-3717-93f5-2f67bf505718.roa Signing time: Wed 15 Apr 2026 13:00:30 +0000 ROA not before: Wed 15 Apr 2026 13:00:30 +0000 ROA not after: Tue 14 Jul 2026 13:00:30 +0000 asID: 396561 IP address blocks: 2001:500:124::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:83:ca:d8:e2:3a:3f:2d:32:1b:6f:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 15 13:00:30 2026 GMT Not After : Jul 14 13:00:30 2026 GMT Subject: CN=a5fe7031-29cd-4b41-b1f4-9a8602a3fa07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:39:1d:51:c3:b9:2a:6f:46:bd:35:cd:15:cf: 7a:34:a0:b9:ef:32:83:a0:1e:fc:63:db:d0:0f:dd: 44:72:54:db:1f:96:77:ba:50:1e:31:52:1b:33:1b: e4:e8:41:2d:26:f7:79:81:49:f3:6b:64:3e:8a:f5: 36:74:a1:21:ed:c4:01:4d:58:e8:34:52:64:92:a8: a2:eb:c1:c9:5c:c5:a2:79:5b:7b:b5:3e:da:74:a5: 41:d2:53:ec:78:50:08:31:31:86:a0:f2:a2:30:ba: 4c:65:aa:17:0f:59:f4:a5:81:02:c3:a9:84:d5:55: 67:86:e2:2f:22:74:42:d3:c3:39:4a:64:3f:02:79: 7a:e0:63:f6:c2:0a:9b:5e:fa:59:fb:4e:23:99:83: 19:b3:7e:2a:af:32:5c:a1:03:63:09:28:74:d0:62: b0:55:1c:0e:36:60:28:5b:81:ab:fc:73:2e:e2:02: 20:f0:5f:8b:bb:50:d8:c6:30:85:26:f5:17:1a:c1: 65:a0:ef:32:fd:13:05:28:dd:51:4f:9c:76:ed:31: f9:43:46:f3:22:8c:4f:f7:7b:f8:0b:b2:c8:0e:64: dd:7a:12:c7:51:29:e7:c8:f5:69:17:90:f4:1b:44: 5d:95:41:86:e6:25:01:a7:5f:02:dd:ac:c5:f9:3b: 00:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:70:22:5F:57:F2:5E:3F:D3:16:DF:27:08:AE:51:0E:1D:DC:7F:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ea17f1a-3190-3717-93f5-2f67bf505718.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:124:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:c4:c3:09:c8:42:d0:84:34:51:d4:e9:29:6c:8c:2e:42:b8: a0:1a:21:dd:1f:de:4f:c8:1b:7d:2b:de:72:0b:3d:f7:a1:76: d5:79:95:15:17:6f:7c:a0:64:04:9f:d5:f5:1f:f5:bd:07:32: 1c:4e:41:0d:6f:94:92:8f:a9:ff:22:70:c4:cb:5c:67:42:31: c5:bd:35:36:ee:cf:88:17:86:99:5f:b8:36:84:64:ba:43:84: aa:c2:fc:f8:46:cc:01:ff:2a:5a:15:19:2a:6a:55:8a:61:c5: cb:ab:ac:4e:50:8f:0a:b7:a2:18:0a:99:41:26:0a:02:dc:d9: 89:60:40:7e:e1:ca:3c:e9:e1:e2:db:e9:50:cf:e9:e6:ba:52: 05:d7:4a:41:bf:4d:d7:07:af:ed:24:f8:04:6d:d2:93:de:af: 79:08:a6:a0:e5:b3:1c:25:68:51:5f:ce:0a:5d:e7:e0:7a:80: 9d:94:eb:30:d3:26:91:7e:61:dc:ba:4f:de:fa:d4:4e:e1:33: c1:12:af:55:2e:28:cd:e4:b2:75:9b:1b:09:a8:80:e0:ba:5b: cd:99:11:53:70:b5:a2:2d:2c:bc:34:46:f8:a3:5b:ef:30:06: 01:44:97:b7:53:19:66:cf:ae:bb:81:39:fb:9c:00:e3:5a:88: a5:82:28:1d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE2DytjiOj8tMhtvwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk YTVmZTcwMzEtMjljZC00YjQxLWIxZjQtOWE4NjAyYTNmYTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizkdUcO5Km9GvTXNFc96NKC57zKDoB78Y9vQ D91EclTbH5Z3ulAeMVIbMxvk6EEtJvd5gUnza2Q+ivU2dKEh7cQBTVjoNFJkkqii 68HJXMWieVt7tT7adKVB0lPseFAIMTGGoPKiMLpMZaoXD1n0pYECw6mE1VVnhuIv InRC08M5SmQ/Anl64GP2wgqbXvpZ+04jmYMZs34qrzJcoQNjCSh00GKwVRwONmAo W4Gr/HMu4gIg8F+Lu1DYxjCFJvUXGsFloO8y/RMFKN1RT5x27TH5Q0bzIoxP93v4 C7LIDmTdehLHUSnnyPVpF5D0G0RdlUGG5iUBp18C3azF+TsAHwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMtwIl9X8l4/0xbfJwiuUQ4d3H9PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmVhMTdmMWEtMzE5MC0z NzE3LTkzZjUtMmY2N2JmNTA1NzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEk AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCPxMMJyELQhDRR1OkpbIwuQrigGiHdH95PyBt9 K95yCz33oXbVeZUVF298oGQEn9X1H/W9BzIcTkENb5SSj6n/InDEy1xnQjHFvTU2 7s+IF4aZX7g2hGS6Q4Sqwvz4RswB/ypaFRkqalWKYcXLq6xOUI8Kt6IYCplBJgoC 3NmJYEB+4co86eHi2+lQz+nmulIF10pBv03XB6/tJPgEbdKT3q95CKag5bMcJWhR X84KXefgeoCdlOsw0yaRfmHcuk/e+tRO4TPBEq9VLijN5LJ1mxsJqIDgulvNmRFT cLWiLSy8NEb4o1vvMAYBRJe3Uxlmz667gTn7nADjWoilgigd -----END CERTIFICATE-----Generated at Fri Apr 17 15:57:02 2026 by rpki-client