$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9cf351a-94eb-3fc3-b6f5-1547c4d87cb9.roa File: b9cf351a-94eb-3fc3-b6f5-1547c4d87cb9.roa (raw, json) Hash identifier: glfNqskSHH/Oh1ICALQg3RC4p4R5iS2biT5ZTUHaFZI= Subject key identifier: C8:04:80:22:20:E7:D3:B0:9D:97:CA:FD:1A:FE:10:B1:6F:FC:D7:72 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D7A0548DD22448DD3D5B46D00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9cf351a-94eb-3fc3-b6f5-1547c4d87cb9.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 396550 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:48:dd:22:44:8d:d3:d5:b4:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=84e003f5-81ca-4f0b-bce1-bd9cec228bc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:73:3a:65:23:9e:76:71:fd:bd:3c:eb:cb:7f: 12:69:fe:2c:0c:f3:70:3d:06:0b:ee:d5:6c:10:32: a3:81:28:e7:2c:14:b7:3a:a0:60:3a:c5:37:be:6b: 98:52:e8:3d:45:87:cf:31:b1:db:2f:6e:9e:32:c2: 46:54:f4:5f:12:b3:31:1a:2f:c6:fa:b4:75:fd:a0: 4e:b5:22:7a:3a:b4:53:4c:22:84:89:5f:68:6a:0d: 4e:e0:83:5d:ce:1b:88:b3:06:fd:ce:8e:d4:80:fa: 3e:3d:6d:a6:da:6f:17:ae:71:8d:a7:7e:fe:26:6e: 7d:69:ef:5f:20:59:91:16:fd:64:c4:6f:bb:fc:f8: 0e:b1:3e:a5:47:9e:83:3b:4b:14:72:94:ce:95:28: 3e:e6:cf:95:9c:67:9b:a6:73:2f:48:6b:3f:b9:61: a4:3d:9e:61:68:5d:48:ce:b1:97:d0:cb:1d:f3:39: 1b:f1:94:87:c2:f3:2b:b0:d7:95:7f:0b:5a:66:92: ce:2d:e8:22:ea:39:fa:2e:52:48:6f:2c:5e:d9:26: b9:89:47:f8:39:03:ce:26:21:d1:5c:d2:b8:7e:6b: 84:49:c9:cb:3d:2a:d4:d1:58:fc:31:e2:55:25:7f: ff:ad:d9:6a:07:72:c7:8d:0b:03:62:e0:52:c5:a3: cc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:04:80:22:20:E7:D3:B0:9D:97:CA:FD:1A:FE:10:B1:6F:FC:D7:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9cf351a-94eb-3fc3-b6f5-1547c4d87cb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:83:df:be:99:f3:15:47:9a:89:fe:d7:d2:8b:0a:34:13:93: 1d:06:57:02:c8:cf:98:ad:48:73:7b:9c:78:d5:56:da:a2:63: ce:59:73:16:2b:23:46:90:54:d4:bf:0c:19:fb:43:33:8a:bc: d1:bd:e5:5f:d9:eb:13:f6:59:ea:4f:2e:a3:10:4f:1a:08:3a: 42:fd:3e:1a:39:89:cf:cb:e5:c2:de:bc:6f:da:85:b8:a8:49: 07:b6:13:9f:b6:26:59:5e:fe:80:14:16:a8:1d:f2:7b:5b:41: aa:31:bf:57:28:0b:9b:38:bc:6f:ff:1e:c9:03:55:f7:57:57: 39:ab:29:cc:e1:d8:e8:b6:3f:3c:7a:53:43:34:53:75:49:51: 6f:49:47:09:b7:50:f0:15:5f:a0:d7:b2:81:b5:f7:eb:00:50: 08:2b:96:e6:ad:3e:99:68:c1:48:d7:a1:b1:81:99:e7:80:7e: 9a:54:2b:72:8c:9a:43:1b:6d:da:05:d5:a7:a2:01:bd:68:56: 18:23:5b:93:6d:7c:c3:93:1a:82:51:84:fa:9b:1b:d7:a5:fb: a2:0d:4d:5e:af:59:ba:21:75:bc:37:2c:d3:b1:47:27:3e:88: c1:27:58:53:c5:73:9c:d2:c8:d7:86:7f:a2:a7:c6:1a:5d:d4: 9f:41:e7:eb -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE16BUjdIkSN09W0bQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk ODRlMDAzZjUtODFjYS00ZjBiLWJjZTEtYmQ5Y2VjMjI4YmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXM6ZSOednH9vTzry38Saf4sDPNwPQYL7tVs EDKjgSjnLBS3OqBgOsU3vmuYUug9RYfPMbHbL26eMsJGVPRfErMxGi/G+rR1/aBO tSJ6OrRTTCKEiV9oag1O4INdzhuIswb9zo7UgPo+PW2m2m8XrnGNp37+Jm59ae9f IFmRFv1kxG+7/PgOsT6lR56DO0sUcpTOlSg+5s+VnGebpnMvSGs/uWGkPZ5haF1I zrGX0Msd8zkb8ZSHwvMrsNeVfwtaZpLOLegi6jn6LlJIbyxe2Sa5iUf4OQPOJiHR XNK4fmuEScnLPSrU0Vj8MeJVJX//rdlqB3LHjQsDYuBSxaPMDwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMgEgCIg59OwnZfK/Rr+ELFv/NdyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjljZjM1MWEtOTRlYi0z ZmMzLWI2ZjUtMTU0N2M0ZDg3Y2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB1g9++mfMVR5qJ/tfSiwo0E5MdBlcCyM+YrUhz e5x41VbaomPOWXMWKyNGkFTUvwwZ+0MzirzRveVf2esT9lnqTy6jEE8aCDpC/T4a OYnPy+XC3rxv2oW4qEkHthOftiZZXv6AFBaoHfJ7W0GqMb9XKAubOLxv/x7JA1X3 V1c5qynM4djotj88elNDNFN1SVFvSUcJt1DwFV+g17KBtffrAFAIK5bmrT6ZaMFI 16GxgZnngH6aVCtyjJpDG23aBdWnogG9aFYYI1uTbXzDkxqCUYT6mxvXpfuiDU1e r1m6IXW8NyzTsUcnPojBJ1hTxXOc0sjXhn+ip8YaXdSfQefr -----END CERTIFICATE-----Generated at Fri Apr 17 13:58:28 2026 by rpki-client