$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/688bcdf9-c855-36cb-ba91-b6738cf61ef3.roa File: 688bcdf9-c855-36cb-ba91-b6738cf61ef3.roa (raw, json) Hash identifier: tW3hqrqgDBmZtHxgTdS0h5YD994UFfrTF/6dI52sdws= Subject key identifier: 77:2D:F6:9C:E1:C4:4F:54:09:2E:33:BD:A1:79:3C:64:25:61:74:1A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D83CAE396936F49386F465580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/688bcdf9-c855-36cb-ba91-b6738cf61ef3.roa Signing time: Wed 15 Apr 2026 13:00:30 +0000 ROA not before: Wed 15 Apr 2026 13:00:30 +0000 ROA not after: Tue 14 Jul 2026 13:00:30 +0000 asID: 36631 IP address blocks: 2001:500:127::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:83:ca:e3:96:93:6f:49:38:6f:46:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 15 13:00:30 2026 GMT Not After : Jul 14 13:00:30 2026 GMT Subject: CN=8b19fb90-6a89-4a2d-89a1-e58f4a61a151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:49:a4:9f:c4:2e:6c:f1:8b:b8:65:4f:5e:de: a4:22:d0:b1:75:6d:3b:47:b7:5a:11:d2:ba:c1:02: 06:e5:b8:58:a6:64:2d:ca:7d:f0:10:07:38:ca:0f: 03:11:a9:4d:14:b9:ba:03:52:cf:17:cb:61:0c:11: 39:47:4c:17:df:1e:1d:a3:8e:ed:0e:dd:d5:5f:da: 6a:dc:4d:f8:95:8e:ac:22:7d:43:79:d3:1b:0c:6a: f6:1b:23:1a:2f:15:1f:df:a5:28:d7:58:cd:d9:cc: b0:3d:73:69:26:47:7e:43:02:bb:3b:00:28:5d:a7: 51:c9:ce:99:e4:fd:a7:d5:34:27:74:dc:bc:32:2e: 12:f4:77:9b:60:bf:08:50:2b:04:68:17:da:e5:99: 1b:17:96:67:e4:9d:4e:48:83:8b:1e:49:5d:bc:c7: 5a:bc:1b:4e:da:0c:1b:d6:49:4d:a6:a5:e1:2b:3a: 73:4d:ed:39:73:8b:a4:34:05:72:00:8e:42:13:35: b5:8a:3f:24:c6:ce:34:9b:5a:dd:dc:fe:ef:7d:20: 3c:19:82:63:02:66:cf:28:01:4e:63:45:58:27:b5: 96:2e:ea:44:00:81:b2:3f:ca:a1:11:43:f9:6f:25: 7c:4b:4b:78:3a:9e:93:e8:51:07:b5:78:38:47:b3: 80:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:2D:F6:9C:E1:C4:4F:54:09:2E:33:BD:A1:79:3C:64:25:61:74:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/688bcdf9-c855-36cb-ba91-b6738cf61ef3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:d5:5f:70:48:7e:89:a0:46:6f:b5:a7:84:22:7f:d3:83:9c: 64:eb:a9:22:e3:cc:bc:20:d5:26:10:81:44:26:7a:17:98:1c: fd:16:5a:e7:63:8f:64:71:81:d5:32:23:48:68:47:63:c0:ba: fc:82:7e:31:45:75:b2:ad:bb:26:98:c9:7c:e6:3c:24:29:63: e1:99:2d:d1:b4:d4:49:7b:51:c8:24:94:cf:d8:8e:3f:d9:49: b1:4c:4a:4d:f5:fb:74:d4:a5:88:c0:5f:1f:1f:af:61:93:5d: fa:5d:33:d1:64:43:f9:5b:2b:cc:fb:40:ee:33:0e:ea:3a:94: 1e:78:01:00:88:ab:9b:d1:ad:39:6c:52:e5:ee:99:20:e2:d6: 0a:09:db:91:0b:7f:7d:c1:6a:22:81:2b:a0:2d:5e:4a:db:0e: fa:55:21:47:7d:a4:ca:33:d9:8f:a4:35:7b:99:46:6b:3f:02: 55:6a:2d:0c:b5:ee:f5:01:ef:82:f9:fc:6e:1c:12:2e:3c:c0: b7:19:2b:e8:dd:f2:29:af:25:27:80:52:44:5b:9a:74:6b:7d: 35:45:f2:f7:83:bd:8c:be:b9:ee:c6:86:3f:0d:44:92:f8:2e: 34:dc:29:3b:59:f0:78:e2:56:0b:de:3a:2d:57:47:d9:fd:0d: a8:93:07:b9 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE2DyuOWk29JOG9GVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk OGIxOWZiOTAtNmE4OS00YTJkLTg5YTEtZTU4ZjRhNjFhMTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkmkn8QubPGLuGVPXt6kItCxdW07R7daEdK6 wQIG5bhYpmQtyn3wEAc4yg8DEalNFLm6A1LPF8thDBE5R0wX3x4do47tDt3VX9pq 3E34lY6sIn1DedMbDGr2GyMaLxUf36Uo11jN2cywPXNpJkd+QwK7OwAoXadRyc6Z 5P2n1TQndNy8Mi4S9HebYL8IUCsEaBfa5ZkbF5Zn5J1OSIOLHkldvMdavBtO2gwb 1klNpqXhKzpzTe05c4ukNAVyAI5CEzW1ij8kxs40m1rd3P7vfSA8GYJjAmbPKAFO Y0VYJ7WWLupEAIGyP8qhEUP5byV8S0t4Op6T6FEHtXg4R7OA2wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHct9pzhxE9UCS4zvaF5PGQlYXQaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjg4YmNkZjktYzg1NS0z NmNiLWJhOTEtYjY3MzhjZjYxZWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEn AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAf1V9wSH6JoEZvtaeEIn/Tg5xk66ki48y8INUm EIFEJnoXmBz9FlrnY49kcYHVMiNIaEdjwLr8gn4xRXWyrbsmmMl85jwkKWPhmS3R tNRJe1HIJJTP2I4/2UmxTEpN9ft01KWIwF8fH69hk136XTPRZEP5WyvM+0DuMw7q OpQeeAEAiKub0a05bFLl7pkg4tYKCduRC399wWoigSugLV5K2w76VSFHfaTKM9mP pDV7mUZrPwJVai0Mte71Ae+C+fxuHBIuPMC3GSvo3fIpryUngFJEW5p0a301RfL3 g72MvrnuxoY/DUSS+C403Ck7WfB44lYL3jotV0fZ/Q2okwe5 -----END CERTIFICATE-----Generated at Fri Apr 17 11:22:19 2026 by rpki-client