$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e991c1e-3883-3916-b728-2ec3d5ae2076.roa File: 3e991c1e-3883-3916-b728-2ec3d5ae2076.roa (raw, json) Hash identifier: AHG0Xj9e2DsyawOUv6yr+MJZKreZfRRXR5d1xipGjhA= Subject key identifier: 17:89:BE:71:F8:CE:C9:5F:24:34:89:59:BD:1D:C3:2C:18:FE:33:DD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D83CAF4A53181C1F323365A00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e991c1e-3883-3916-b728-2ec3d5ae2076.roa Signing time: Wed 15 Apr 2026 13:00:30 +0000 ROA not before: Wed 15 Apr 2026 13:00:30 +0000 ROA not after: Tue 14 Jul 2026 13:00:30 +0000 asID: 36630 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:83:ca:f4:a5:31:81:c1:f3:23:36:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 15 13:00:30 2026 GMT Not After : Jul 14 13:00:30 2026 GMT Subject: CN=1185cc0d-1c5a-41cd-8c1a-b74483b55a30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8e:8e:f8:8e:c2:98:5e:53:5d:8f:22:b5:9a: a3:83:b4:7c:99:d1:e4:09:42:59:36:b7:c7:a5:4f: ea:a9:d8:fe:96:76:2f:37:8e:12:0f:2e:cb:83:62: 8f:6d:11:db:5c:a2:4d:24:e0:f2:90:41:37:cb:ea: 0e:ae:e9:ee:66:b0:f2:f3:5a:e8:db:87:21:36:99: 3f:2d:ee:57:91:97:37:3d:b8:53:60:04:9b:62:f7: 97:d1:e0:ca:35:84:62:93:7a:df:88:ee:e2:0e:21: 41:cc:dd:70:35:a5:e5:a6:f7:ef:5c:da:16:77:39: 46:73:79:93:67:02:86:e2:11:bf:da:95:0b:fa:e6: 67:bf:10:cb:8e:9a:be:43:5f:98:f2:96:ec:32:7a: 8a:cf:f8:60:26:9e:80:c7:4a:1a:80:11:1d:5f:be: cd:ce:42:d2:9e:27:2a:a0:18:25:ca:27:65:33:5a: 59:44:c1:61:4b:fa:db:db:48:19:f9:2b:99:28:75: 41:5f:98:95:e8:dc:84:8c:7c:34:30:54:64:07:e4: b5:f6:f3:9c:06:7a:4c:06:ca:03:e4:1e:a1:48:eb: 21:5c:16:e3:9b:5d:fa:11:f8:6b:c1:5b:c7:b0:4c: cd:3a:cb:6b:0c:f5:61:f2:40:f5:a9:3d:50:dc:4e: 2c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:89:BE:71:F8:CE:C9:5F:24:34:89:59:BD:1D:C3:2C:18:FE:33:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e991c1e-3883-3916-b728-2ec3d5ae2076.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:a4:5a:1d:d0:21:d1:c4:d6:0b:2a:ee:09:b4:34:aa:96:b6: eb:91:b2:c6:a6:84:24:4f:b3:7b:b6:36:35:76:87:f6:38:e8: 0e:da:81:3e:af:13:86:b9:b8:6a:3b:8a:d7:79:15:0a:89:44: 2f:e2:fa:57:50:c7:93:be:d0:10:d6:7e:5f:3d:be:85:34:fb: c6:88:11:d0:77:59:8f:1d:a8:82:f7:a3:f2:29:0b:6d:69:92: 9f:a7:47:2b:94:5b:83:09:66:7e:7b:53:ee:48:27:43:ed:d0: 0f:bd:46:64:bd:be:1b:b0:6b:ed:8e:61:7e:8e:51:01:73:32: 87:60:44:73:27:ad:6d:77:2d:ac:3d:14:44:f4:9e:f8:f5:2f: 15:7e:3a:bb:34:2d:62:b2:c8:51:c6:8d:b8:5d:ee:32:7b:df: 4f:23:80:29:55:13:d3:66:5b:e2:3e:83:10:e5:8f:6d:11:68: 60:c9:aa:65:ec:ec:73:df:7a:87:df:bc:b2:c4:0c:e4:fa:02: 2d:6e:dd:6a:7c:fe:0e:d8:7b:14:5a:44:3a:72:0d:bd:b1:d5: 55:60:d9:0d:d6:c1:52:3d:39:ca:d1:ad:e5:50:04:5e:12:32: 16:de:fc:b2:a7:78:7f:06:bd:ed:0b:79:4a:72:ea:cc:e7:04: 16:b7:af:d8 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE2DyvSlMYHB8yM2WgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk MTE4NWNjMGQtMWM1YS00MWNkLThjMWEtYjc0NDgzYjU1YTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz46O+I7CmF5TXY8itZqjg7R8mdHkCUJZNrfH pU/qqdj+lnYvN44SDy7Lg2KPbRHbXKJNJODykEE3y+oOrunuZrDy81ro24chNpk/ Le5XkZc3PbhTYASbYveX0eDKNYRik3rfiO7iDiFBzN1wNaXlpvfvXNoWdzlGc3mT ZwKG4hG/2pUL+uZnvxDLjpq+Q1+Y8pbsMnqKz/hgJp6Ax0oagBEdX77NzkLSnicq oBglyidlM1pZRMFhS/rb20gZ+SuZKHVBX5iV6NyEjHw0MFRkB+S19vOcBnpMBsoD 5B6hSOshXBbjm136EfhrwVvHsEzNOstrDPVh8kD1qT1Q3E4sCwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBeJvnH4zslfJDSJWb0dwywY/jPdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2U5OTFjMWUtMzg4My0z OTE2LWI3MjgtMmVjM2Q1YWUyMDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC+pFod0CHRxNYLKu4JtDSqlrbrkbLGpoQkT7N7 tjY1dof2OOgO2oE+rxOGubhqO4rXeRUKiUQv4vpXUMeTvtAQ1n5fPb6FNPvGiBHQ d1mPHaiC96PyKQttaZKfp0crlFuDCWZ+e1PuSCdD7dAPvUZkvb4bsGvtjmF+jlEB czKHYERzJ61tdy2sPRRE9J749S8Vfjq7NC1isshRxo24Xe4ye99PI4ApVRPTZlvi PoMQ5Y9tEWhgyapl7Oxz33qH37yyxAzk+gItbt1qfP4O2HsUWkQ6cg29sdVVYNkN 1sFSPTnK0a3lUAReEjIW3vyyp3h/Br3tC3lKcurM5wQWt6/Y -----END CERTIFICATE-----Generated at Fri Apr 17 23:00:22 2026 by rpki-client