$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a85b4313-c024-373f-95a0-524b5b2e756e.roa File: a85b4313-c024-373f-95a0-524b5b2e756e.roa (raw, json) Hash identifier: xwvhGd5S6BFYpco5jghEK4jl9EO//xjTio5cuFxshvc= Subject key identifier: B0:3F:A4:72:51:33:06:AB:26:9E:BF:D8:BD:86:41:0A:07:44:69:44 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D7A05490AACFCAF56AAB64B00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a85b4313-c024-373f-95a0-524b5b2e756e.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 397211 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:49:0a:ac:fc:af:56:aa:b6:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=df150a70-489c-460b-a24a-6c6c1dbd8af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e2:58:93:c7:f8:5b:44:0e:b6:13:56:a7:93: f1:15:35:d9:46:c0:fb:96:bf:60:57:11:df:37:ce: 8e:a1:20:24:ad:6e:7d:26:08:57:be:72:82:7f:fb: 88:16:65:24:f9:a2:91:9e:d1:4a:26:06:bb:18:dc: 25:7b:7f:b2:cc:18:6f:c8:9b:3f:0b:bf:f8:07:92: d7:0e:8d:0c:44:22:12:ad:19:07:5f:e2:2b:71:eb: b1:ec:0d:76:3e:5c:0b:9e:25:98:97:5f:b8:55:70: a1:15:f9:08:bf:3f:74:31:de:67:08:8f:24:6e:5b: d5:ae:97:32:73:73:49:f5:4b:eb:41:71:79:7e:10: b6:ba:df:4f:65:6f:ad:d0:d5:14:01:7e:45:5a:cd: 4d:bd:e4:41:e4:79:13:ec:f0:71:8f:7f:e5:c3:43: f9:eb:a3:8e:3e:c6:a2:17:49:5e:bb:06:03:46:f9: e1:a8:f7:cd:4c:40:4d:0a:ec:fb:d7:7a:5a:fa:46: 92:9a:fb:1f:6d:99:78:7b:25:43:74:1c:33:27:36: d8:7f:d9:a1:12:02:c9:0a:84:ea:74:c5:52:84:bf: 83:41:61:29:f1:bb:4a:2c:46:00:87:de:ef:ec:21: 43:b9:a8:ed:5d:b0:c5:ed:50:48:2b:4f:82:b7:6d: 42:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:3F:A4:72:51:33:06:AB:26:9E:BF:D8:BD:86:41:0A:07:44:69:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a85b4313-c024-373f-95a0-524b5b2e756e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:86:0d:4a:23:ab:f6:7c:d4:e6:a7:56:da:bd:dc:4a:9f:34: 25:30:36:cb:0e:2d:ca:c9:b7:73:a1:af:0f:13:0b:44:ed:f0: b1:7f:5b:0f:fe:89:a4:b1:f1:bc:74:5a:db:6d:2e:99:e4:c9: a9:b2:66:fa:a0:c0:1e:48:d8:e7:75:3b:44:0d:c4:45:49:25: aa:1a:3d:97:d6:e6:fa:81:d6:3a:86:11:1e:33:74:42:74:81: af:13:23:73:b0:15:e9:ac:a4:1a:ad:d9:c2:1b:7d:a9:1d:1c: 97:41:d8:53:1a:f2:d3:91:70:09:5d:bb:c1:64:9a:b4:a1:9b: e2:22:4e:47:e4:36:68:1e:b9:1b:d5:f6:27:07:29:79:48:78: 38:7d:60:36:d0:42:fd:4b:d4:2f:bc:c2:8c:4f:d1:7a:ad:1c: 72:b6:b6:50:f7:23:4c:3e:dd:8a:43:26:9b:18:b5:f2:28:2f: 94:a8:63:16:34:c4:63:3b:fe:5c:07:1a:94:5e:b1:64:3f:42: bb:f1:ce:dd:55:b4:ab:36:03:70:0e:97:6c:73:6c:60:c3:8d: 15:d4:49:9e:11:08:6c:ac:3c:de:27:d9:d5:ac:4d:d2:20:10: 63:59:6a:a3:2a:82:39:73:5d:36:32:1d:a6:8d:6a:d0:c8:41: 80:fc:86:61 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE16BUkKrPyvVqq2SwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk ZGYxNTBhNzAtNDg5Yy00NjBiLWEyNGEtNmM2YzFkYmQ4YWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eJYk8f4W0QOthNWp5PxFTXZRsD7lr9gVxHf N86OoSAkrW59JghXvnKCf/uIFmUk+aKRntFKJga7GNwle3+yzBhvyJs/C7/4B5LX Do0MRCISrRkHX+Irceux7A12PlwLniWYl1+4VXChFfkIvz90Md5nCI8kblvVrpcy c3NJ9UvrQXF5fhC2ut9PZW+t0NUUAX5FWs1NveRB5HkT7PBxj3/lw0P566OOPsai F0leuwYDRvnhqPfNTEBNCuz713pa+kaSmvsfbZl4eyVDdBwzJzbYf9mhEgLJCoTq dMVShL+DQWEp8btKLEYAh97v7CFDuajtXbDF7VBIK0+Ct21CAwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLA/pHJRMwarJp6/2L2GQQoHRGlEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTg1YjQzMTMtYzAyNC0z NzNmLTk1YTAtNTI0YjViMmU3NTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB0hg1KI6v2fNTmp1bavdxKnzQlMDbLDi3Kybdz oa8PEwtE7fCxf1sP/omksfG8dFrbbS6Z5Mmpsmb6oMAeSNjndTtEDcRFSSWqGj2X 1ub6gdY6hhEeM3RCdIGvEyNzsBXprKQardnCG32pHRyXQdhTGvLTkXAJXbvBZJq0 oZviIk5H5DZoHrkb1fYnByl5SHg4fWA20EL9S9QvvMKMT9F6rRxytrZQ9yNMPt2K QyabGLXyKC+UqGMWNMRjO/5cBxqUXrFkP0K78c7dVbSrNgNwDpdsc2xgw40V1Eme EQhsrDzeJ9nVrE3SIBBjWWqjKoI5c102Mh2mjWrQyEGA/IZh -----END CERTIFICATE-----Generated at Fri Apr 17 14:31:51 2026 by rpki-client