$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a20a9c10-fe85-3c52-88b2-71a1f1d4a817.roa File: a20a9c10-fe85-3c52-88b2-71a1f1d4a817.roa (raw, json) Hash identifier: nKP/ybJ7p3ePsytS2fzgtnWnV9Uzkn3tQaWeRs3HoYM= Subject key identifier: 10:29:FE:33:EB:38:0A:B0:B0:6D:24:EE:B0:94:BF:AF:90:04:01:08 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D83CAFCD7AA03D62C6FAB71C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a20a9c10-fe85-3c52-88b2-71a1f1d4a817.roa Signing time: Wed 15 Apr 2026 13:00:30 +0000 ROA not before: Wed 15 Apr 2026 13:00:30 +0000 ROA not after: Tue 14 Jul 2026 13:00:30 +0000 asID: 36626 IP address blocks: 2001:500:126::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:83:ca:fc:d7:aa:03:d6:2c:6f:ab:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 15 13:00:30 2026 GMT Not After : Jul 14 13:00:30 2026 GMT Subject: CN=90eb8263-b6a1-4132-9630-e43ead679676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3b:b4:9e:69:ad:ca:0a:4b:6d:18:5d:2b:4f: c8:8b:d5:f2:3d:ad:1b:f9:ce:3c:15:cd:e3:65:d7: e8:32:2c:ca:5a:b2:c7:d7:50:11:04:6b:6d:71:47: d5:95:a1:3b:6c:7c:9b:b1:4f:e9:a7:57:a2:36:22: d5:1f:7a:a9:0c:d4:d3:e6:0b:ca:84:56:09:62:11: c5:4b:97:96:59:eb:fa:da:bd:40:78:95:bf:8b:9a: e9:cc:39:eb:61:33:43:67:67:c6:8a:35:a6:4c:cd: 7d:98:d4:30:f1:c9:7e:b3:24:94:fd:d0:16:c7:b6: da:87:f4:e5:a7:af:83:48:d7:a2:d8:b0:83:de:aa: fb:cf:ee:4c:77:52:2e:2c:6b:c7:0a:fb:d9:02:f1: bb:7d:2b:ab:e0:9a:ea:62:df:14:83:8f:6c:de:03: f1:05:c7:47:92:b3:a4:0b:1a:b9:b8:c7:41:3a:6a: a8:79:e7:2e:4e:f2:4b:f4:6e:8b:35:db:b4:32:f2: ff:40:50:14:af:f2:88:bf:c9:7b:d9:1b:e5:41:cc: 3a:48:33:54:14:97:bc:38:2a:ea:9e:b0:e4:a9:ad: 66:ee:44:d7:fc:f7:a8:dd:b9:9e:ac:6e:a3:27:fe: 14:47:8f:f1:f4:06:63:90:b7:23:55:10:b2:3e:e4: 96:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:29:FE:33:EB:38:0A:B0:B0:6D:24:EE:B0:94:BF:AF:90:04:01:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a20a9c10-fe85-3c52-88b2-71a1f1d4a817.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:ad:cb:2c:12:69:e8:92:5f:1a:b5:00:70:31:5c:8d:43:f4: 64:86:38:d2:fe:9d:20:db:a8:a5:ec:4e:ba:e5:e0:64:19:25: db:e4:85:0e:cf:fd:2c:41:98:57:b0:35:45:ee:d1:49:81:8d: 63:f0:ec:99:27:1f:62:8a:8d:3a:28:30:18:e7:c1:2c:7c:16: 0d:73:da:d1:cd:81:56:cf:c0:39:5c:20:d2:d7:ae:ae:49:5e: 2a:c1:54:07:46:ca:9e:48:1d:2c:00:84:5c:f8:72:81:0f:60: 75:e4:af:78:2e:91:70:50:b4:c5:7a:b1:8f:de:a9:1e:ab:e7: 5d:cd:48:fd:dd:fd:38:1d:7e:56:a9:71:53:94:a3:73:5a:6d: 1b:0c:14:e3:f5:e6:1d:a7:e4:81:0f:ee:89:11:f1:31:27:4a: 4e:77:53:93:53:92:33:c9:46:54:59:81:f7:b3:ea:24:59:64: c2:43:ac:a7:3f:cb:5b:4b:2d:ba:d8:cf:18:a6:30:11:54:8a: b7:88:a8:cf:b4:6b:33:eb:91:29:bd:38:1e:12:fe:9b:50:d4: 0c:39:66:11:04:e4:1f:04:4e:63:08:44:00:85:8e:9e:5f:7a: 74:81:57:36:c8:95:91:68:2a:56:c3:e6:7a:dd:0a:2e:c7:70: a2:26:6c:43 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE2DyvzXqgPWLG+rccAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk OTBlYjgyNjMtYjZhMS00MTMyLTk2MzAtZTQzZWFkNjc5Njc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiju0nmmtygpLbRhdK0/Ii9XyPa0b+c48Fc3j ZdfoMizKWrLH11ARBGttcUfVlaE7bHybsU/pp1eiNiLVH3qpDNTT5gvKhFYJYhHF S5eWWev62r1AeJW/i5rpzDnrYTNDZ2fGijWmTM19mNQw8cl+sySU/dAWx7bah/Tl p6+DSNei2LCD3qr7z+5Md1IuLGvHCvvZAvG7fSur4JrqYt8Ug49s3gPxBcdHkrOk Cxq5uMdBOmqoeecuTvJL9G6LNdu0MvL/QFAUr/KIv8l72RvlQcw6SDNUFJe8OCrq nrDkqa1m7kTX/Peo3bmerG6jJ/4UR4/x9AZjkLcjVRCyPuSWXQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBAp/jPrOAqwsG0k7rCUv6+QBAEIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTIwYTljMTAtZmU4NS0z YzUyLTg4YjItNzFhMWYxZDRhODE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEm AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCQrcssEmnokl8atQBwMVyNQ/RkhjjS/p0g26il 7E665eBkGSXb5IUOz/0sQZhXsDVF7tFJgY1j8OyZJx9iio06KDAY58EsfBYNc9rR zYFWz8A5XCDS166uSV4qwVQHRsqeSB0sAIRc+HKBD2B15K94LpFwULTFerGP3qke q+ddzUj93f04HX5WqXFTlKNzWm0bDBTj9eYdp+SBD+6JEfExJ0pOd1OTU5IzyUZU WYH3s+okWWTCQ6ynP8tbSy262M8YpjARVIq3iKjPtGsz65EpvTgeEv6bUNQMOWYR BOQfBE5jCEQAhY6eX3p0gVc2yJWRaCpWw+Z63Qoux3CiJmxD -----END CERTIFICATE-----Generated at Fri Apr 17 12:22:54 2026 by rpki-client