$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43e81f08-18fa-32d3-90e2-7115a8a6c472.roa File: 43e81f08-18fa-32d3-90e2-7115a8a6c472.roa (raw, json) Hash identifier: zVx6sQRfyNo7FX1RxMHvQHMYqxgt5hEf+mUvOhnbtxQ= Subject key identifier: 43:1C:A7:18:0C:39:36:BC:02:42:88:B9:6E:4A:6A:51:AD:A5:D9:5F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D83CAD9B864FADCCD6CCC0780 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43e81f08-18fa-32d3-90e2-7115a8a6c472.roa Signing time: Wed 15 Apr 2026 13:00:30 +0000 ROA not before: Wed 15 Apr 2026 13:00:30 +0000 ROA not after: Tue 14 Jul 2026 13:00:30 +0000 asID: 36631 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:83:ca:d9:b8:64:fa:dc:cd:6c:cc:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 15 13:00:30 2026 GMT Not After : Jul 14 13:00:30 2026 GMT Subject: CN=879c70f3-966c-45ff-90a6-02e5bf286223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5b:44:88:02:85:9a:6f:e5:c7:dd:eb:66:bd: c0:15:5c:c6:99:f9:0c:30:bc:5f:1b:81:ab:07:5b: e3:12:12:78:f7:a4:e0:49:1e:54:7c:3c:96:5b:23: bd:34:ed:87:e8:b5:0b:3e:3c:a5:c4:6d:a3:3e:7d: 01:c8:76:13:33:bc:d9:80:7c:71:55:29:b1:24:90: a2:2f:c9:27:7a:6d:60:39:a0:2f:4e:e7:93:2b:9a: e6:f6:e1:2d:b5:42:5b:59:e7:24:f8:f0:6d:2a:57: 56:33:a7:72:fe:24:0e:b5:7e:7a:b0:d3:1f:1b:24: 18:77:89:1e:51:9a:43:34:cb:13:7a:4c:0b:71:40: c6:cd:e8:09:99:92:ec:40:0b:fa:d7:0e:b2:44:28: 96:b1:84:c3:92:a4:15:c4:11:c7:eb:d5:9a:a0:cb: a5:bc:f2:9b:17:e6:ca:ca:8a:e9:c6:88:43:ce:d2: 04:70:8d:57:db:97:c1:16:47:8c:24:d4:94:e9:2d: a8:f9:56:3d:e6:3b:65:80:c3:54:ad:d3:a1:fc:75: 3d:22:81:99:60:b6:13:01:f1:3b:67:54:f8:0a:c9: 3d:cb:c7:0a:5f:af:0a:a5:11:59:19:29:90:5d:b4: f5:5a:92:d5:6d:28:db:87:0d:48:37:2b:03:96:b4: 2c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1C:A7:18:0C:39:36:BC:02:42:88:B9:6E:4A:6A:51:AD:A5:D9:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43e81f08-18fa-32d3-90e2-7115a8a6c472.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:b3:5a:0a:b3:fb:4a:cb:9d:f5:db:5e:ff:8d:d3:ed:a9:2e: 04:0b:91:c6:1d:a3:3c:aa:d1:8f:f8:f6:b2:78:a3:d2:25:96: 9e:2c:f4:d1:d5:cb:f7:84:26:c1:60:57:bc:6d:7e:34:0e:c2: c4:1c:86:07:00:e2:2c:df:f9:74:67:25:bd:2c:31:94:c4:a3: 68:8e:a3:a8:ad:a0:d6:5b:86:b0:6a:87:29:c0:50:69:45:d9: 43:bc:60:8b:b0:33:31:a2:79:72:e2:d4:c3:97:f9:16:4e:6d: 59:c2:8b:81:fa:5d:21:ac:d8:f4:9c:ad:6a:75:bc:e0:af:99: d6:ec:50:2d:7e:f4:97:2f:46:92:b2:b3:2f:d3:6e:3b:3b:72: 7a:c1:00:01:46:ec:92:c3:dc:03:e8:f5:65:ec:d4:18:46:bc: 5a:a0:7e:de:2d:90:eb:78:ce:7f:dd:bb:ba:c9:71:2b:26:f0: 4d:80:7d:f6:53:80:59:91:11:ec:1e:55:5b:08:75:91:39:e3: df:a8:6f:5a:fc:2a:1e:04:a1:7e:a4:04:a1:c0:c3:09:49:d0: 1a:6a:a5:d2:27:aa:9c:aa:b7:92:ef:3a:16:bd:9f:82:5b:c6: 91:c2:19:89:e8:6c:27:c8:c8:a2:ad:e6:36:76:e5:f1:da:98: 31:38:66:62 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE2Dytm4ZPrczWzMB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk ODc5YzcwZjMtOTY2Yy00NWZmLTkwYTYtMDJlNWJmMjg2MjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVtEiAKFmm/lx93rZr3AFVzGmfkMMLxfG4Gr B1vjEhJ496TgSR5UfDyWWyO9NO2H6LULPjylxG2jPn0ByHYTM7zZgHxxVSmxJJCi L8knem1gOaAvTueTK5rm9uEttUJbWeck+PBtKldWM6dy/iQOtX56sNMfGyQYd4ke UZpDNMsTekwLcUDGzegJmZLsQAv61w6yRCiWsYTDkqQVxBHH69WaoMulvPKbF+bK yorpxohDztIEcI1X25fBFkeMJNSU6S2o+VY95jtlgMNUrdOh/HU9IoGZYLYTAfE7 Z1T4Csk9y8cKX68KpRFZGSmQXbT1WpLVbSjbhw1INysDlrQsqQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEMcpxgMOTa8AkKIuW5KalGtpdlfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDNlODFmMDgtMThmYS0z MmQzLTkwZTItNzExNWE4YTZjNDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBPs1oKs/tKy531217/jdPtqS4EC5HGHaM8qtGP +PayeKPSJZaeLPTR1cv3hCbBYFe8bX40DsLEHIYHAOIs3/l0ZyW9LDGUxKNojqOo raDWW4awaocpwFBpRdlDvGCLsDMxonly4tTDl/kWTm1ZwouB+l0hrNj0nK1qdbzg r5nW7FAtfvSXL0aSsrMv0247O3J6wQABRuySw9wD6PVl7NQYRrxaoH7eLZDreM5/ 3bu6yXErJvBNgH32U4BZkRHsHlVbCHWROePfqG9a/CoeBKF+pAShwMMJSdAaaqXS J6qcqreS7zoWvZ+CW8aRwhmJ6GwnyMiireY2duXx2pgxOGZi -----END CERTIFICATE-----Generated at Fri Apr 17 12:16:38 2026 by rpki-client