$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3856a0d5-8bf5-3295-933c-bffa295f1ab5.roa File: 3856a0d5-8bf5-3295-933c-bffa295f1ab5.roa (raw, json) Hash identifier: qOBugB17eLfWM08hsamEsFcGEDqTXWjARQHfhyKVKAk= Subject key identifier: B7:5B:D6:3F:D0:C5:06:2A:9E:D7:F4:4E:A7:8F:D9:B7:65:2F:D2:15 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D83CAD94573B73E27A045E080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3856a0d5-8bf5-3295-933c-bffa295f1ab5.roa Signing time: Wed 15 Apr 2026 13:00:30 +0000 ROA not before: Wed 15 Apr 2026 13:00:30 +0000 ROA not after: Tue 14 Jul 2026 13:00:30 +0000 asID: 397204 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:83:ca:d9:45:73:b7:3e:27:a0:45:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 15 13:00:30 2026 GMT Not After : Jul 14 13:00:30 2026 GMT Subject: CN=e0b37948-a3ff-4758-897a-711bc00af8d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:1a:38:55:97:ed:bc:15:13:9d:b0:32:6d:72: d6:54:66:55:2e:72:f5:92:51:80:7e:b1:5e:de:c6: db:fb:0a:62:40:40:ca:c4:3b:72:d7:a1:02:8b:54: 66:ce:c5:bc:12:be:09:7e:c6:f0:0d:91:30:1c:07: 0d:65:18:a9:18:14:b7:48:45:5d:7a:79:c1:b0:f2: 8d:e4:f0:11:25:7b:43:33:c3:1f:64:5d:4d:3d:a8: 4e:73:ca:fd:88:1c:86:e4:6a:c7:a4:41:51:ad:06: 0f:56:f3:86:f3:52:a7:cc:4a:0a:29:9c:75:90:ae: bf:0a:8b:49:c3:3e:4b:0b:4d:3d:c1:d4:2e:cf:88: aa:fe:d7:69:cc:dd:fc:1a:72:bd:27:36:c1:93:91: 19:e9:95:b8:31:55:4b:ea:b8:9d:0a:36:94:e0:69: 99:74:6b:fe:a7:65:57:dc:b5:1d:e8:32:8b:b2:82: 5b:34:84:48:37:77:e8:b3:e3:47:d6:e3:7e:e0:c4: ae:09:9d:a6:c3:6a:2a:f6:62:17:d6:4e:52:1b:66: b9:ed:dc:69:4e:60:94:27:e1:d8:40:0f:c8:ca:18: cb:49:fa:d2:0a:4e:09:40:42:22:48:10:6d:70:6a: a2:e4:87:7f:a6:74:ab:95:f8:d4:57:58:77:57:d9: ef:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:5B:D6:3F:D0:C5:06:2A:9E:D7:F4:4E:A7:8F:D9:B7:65:2F:D2:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3856a0d5-8bf5-3295-933c-bffa295f1ab5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:b3:5f:e9:16:1a:7c:72:eb:db:3e:ec:36:52:16:ab:93:ab: 95:51:98:c5:a8:e5:82:a9:12:cf:e2:dc:2d:c1:94:94:8a:e5: d4:47:64:39:02:bd:99:60:e8:43:85:a0:35:1e:0f:99:dc:ac: 6f:e7:e8:c9:ff:4d:ea:d1:d5:fe:c8:b8:e4:de:30:ec:ae:1e: 0e:ba:cb:2a:ed:3b:95:eb:7e:c1:2e:17:cf:17:1d:05:6d:5f: e8:06:1a:be:10:b0:71:25:f2:90:0b:36:97:b0:3b:62:74:29: 36:d9:62:23:3d:21:56:8e:a8:ff:b9:f1:75:69:d9:8e:36:02: ec:77:1d:45:96:a0:d1:a2:57:9c:59:01:08:3e:99:12:71:23: 1e:7a:62:3a:d3:e1:e4:bc:a8:1d:9a:54:63:d5:27:2c:41:04: 81:dd:67:f0:e4:24:aa:e8:e1:d0:73:71:74:e3:de:4b:45:68: 17:6d:7a:34:1b:9c:53:72:e7:8e:97:fa:a5:8d:c7:8a:d7:07: cb:a8:b2:2a:b7:71:64:cc:11:cb:28:8d:19:6a:03:68:f5:21: 51:be:9f:aa:86:02:13:62:d1:67:bc:79:30:f6:fa:1d:0b:a3: 35:e7:ab:96:b0:b2:8f:a0:60:2e:ea:db:a7:90:76:98:e9:1b: 4b:23:5c:34 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE2DytlFc7c+J6BF4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk ZTBiMzc5NDgtYTNmZi00NzU4LTg5N2EtNzExYmMwMGFmOGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxo4VZftvBUTnbAybXLWVGZVLnL1klGAfrFe 3sbb+wpiQEDKxDty16ECi1RmzsW8Er4JfsbwDZEwHAcNZRipGBS3SEVdennBsPKN 5PARJXtDM8MfZF1NPahOc8r9iByG5GrHpEFRrQYPVvOG81KnzEoKKZx1kK6/CotJ wz5LC009wdQuz4iq/tdpzN38GnK9JzbBk5EZ6ZW4MVVL6ridCjaU4GmZdGv+p2VX 3LUd6DKLsoJbNIRIN3fos+NH1uN+4MSuCZ2mw2oq9mIX1k5SG2a57dxpTmCUJ+HY QA/IyhjLSfrSCk4JQEIiSBBtcGqi5Id/pnSrlfjUV1h3V9nv+wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLdb1j/QxQYqntf0TqeP2bdlL9IVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzg1NmEwZDUtOGJmNS0z Mjk1LTkzM2MtYmZmYTI5NWYxYWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBCs1/pFhp8cuvbPuw2Uhark6uVUZjFqOWCqRLP 4twtwZSUiuXUR2Q5Ar2ZYOhDhaA1Hg+Z3Kxv5+jJ/03q0dX+yLjk3jDsrh4Oussq 7TuV637BLhfPFx0FbV/oBhq+ELBxJfKQCzaXsDtidCk22WIjPSFWjqj/ufF1admO NgLsdx1FlqDRolecWQEIPpkScSMeemI60+HkvKgdmlRj1ScsQQSB3Wfw5CSq6OHQ c3F0495LRWgXbXo0G5xTcueOl/qljceK1wfLqLIqt3FkzBHLKI0ZagNo9SFRvp+q hgITYtFnvHkw9vodC6M156uWsLKPoGAu6tunkHaY6RtLI1w0 -----END CERTIFICATE-----Generated at Fri Apr 17 13:26:08 2026 by rpki-client