$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba5ca9f9-5ec6-3a35-acd1-aabe4bcb9101.roa File: ba5ca9f9-5ec6-3a35-acd1-aabe4bcb9101.roa (raw, json) Hash identifier: 7h3SC34jtZWak6c/uZ+hsJ65ZadxP+64cve+8GCtBqs= Subject key identifier: B9:CB:04:9A:A5:F4:02:65:D3:38:51:97:FE:2E:31:5F:85:8E:4D:68 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D86956CED568A662EAF200700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba5ca9f9-5ec6-3a35-acd1-aabe4bcb9101.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 36626 IP address blocks: 2001:500:122::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:6c:ed:56:8a:66:2e:af:20:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=df10228c-67f1-498f-8c95-68b6b3b3c20d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bd:39:8f:c4:c9:68:2c:3c:e6:62:24:da:11: b4:33:9d:f4:6b:97:0b:8b:44:10:a7:e0:6b:c0:41: 8e:4b:97:2e:32:fa:c5:8c:55:5c:e6:7a:d6:b5:ae: c3:94:cb:8c:5b:8f:17:9b:e6:1b:2a:3c:af:d1:8f: a9:0d:f3:6f:ab:d2:86:23:b5:a3:f7:1b:cf:92:29: 0b:17:0a:20:f4:26:89:f6:8a:87:44:0b:1a:ba:81: 2f:c0:c3:ee:03:22:ef:33:4e:cc:09:27:59:a9:db: 38:97:b0:8b:36:be:b6:a3:0a:62:e3:f5:24:46:13: c0:d2:6b:1f:7c:b5:fc:9a:b0:c0:eb:9a:fa:8f:77: 16:d2:ac:7c:f0:48:36:1d:8c:1c:a3:4b:85:d8:24: 81:e7:bb:c9:90:16:cf:df:db:5b:8f:7d:b9:6c:e9: fb:a6:56:4d:c9:1c:06:1b:18:cf:8b:78:c3:f8:f7: f1:ea:8a:36:f8:a4:12:72:51:4e:5a:1c:7f:9d:78: e9:34:d9:e3:d8:5f:e8:2f:52:c6:63:0a:5b:b1:b2: 74:45:35:e0:e6:57:dc:e6:c8:21:46:88:19:51:6c: 2e:86:74:86:f8:d9:18:7b:0a:a3:5c:8d:59:a0:c0: ce:a0:91:ec:0b:f0:6d:e2:02:e8:8b:3e:90:e5:6c: 5b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:CB:04:9A:A5:F4:02:65:D3:38:51:97:FE:2E:31:5F:85:8E:4D:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba5ca9f9-5ec6-3a35-acd1-aabe4bcb9101.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:ce:fc:22:e2:3d:a6:1b:32:a4:2d:7b:f2:96:6e:3d:ea:29: 3c:2e:7e:09:c8:33:06:b0:54:d1:07:f5:4c:09:c9:6f:1b:80: 4e:75:a9:3e:78:ec:98:f0:d3:c8:99:e5:e0:29:8f:9c:bf:0b: 15:75:23:0b:b4:98:87:37:78:aa:da:d9:0c:4a:8d:37:fd:7c: fc:98:8e:22:c1:82:2e:8f:74:a4:7f:5b:a8:37:7f:94:bd:bb: e7:ff:ff:7b:58:4b:f5:ca:52:99:cb:28:ec:12:c1:9b:37:70: 2d:f0:cf:ad:d2:f1:ff:f0:9a:f8:06:0c:e7:2f:ac:65:72:98: ce:2a:10:c0:92:9b:0e:29:c6:aa:57:78:ec:9f:69:1a:77:1a: e7:08:75:90:2a:9e:9d:41:0f:9f:71:21:e2:f8:d6:e5:a4:3d: 8a:a7:cd:e5:62:76:23:d5:fb:b7:3a:3a:4b:63:95:77:4f:c0: 0b:6f:9c:f7:00:21:00:41:03:c4:0e:eb:3e:c6:7e:da:3f:a4: 59:d8:19:7f:a7:b9:26:53:04:44:fa:d1:be:90:19:6c:30:5e: 95:48:b3:3a:ae:92:0a:68:86:ae:df:8b:80:38:ef:d1:39:59: e4:dd:d2:2d:c6:67:0f:ec:86:de:6b:1a:74:14:c7:b6:51:9f: c3:f2:cf:3a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE2GlWztVopmLq8gBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk ZGYxMDIyOGMtNjdmMS00OThmLThjOTUtNjhiNmIzYjNjMjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvL05j8TJaCw85mIk2hG0M530a5cLi0QQp+Br wEGOS5cuMvrFjFVc5nrWta7DlMuMW48Xm+YbKjyv0Y+pDfNvq9KGI7Wj9xvPkikL Fwog9CaJ9oqHRAsauoEvwMPuAyLvM07MCSdZqds4l7CLNr62owpi4/UkRhPA0msf fLX8mrDA65r6j3cW0qx88Eg2HYwco0uF2CSB57vJkBbP39tbj325bOn7plZNyRwG GxjPi3jD+Pfx6oo2+KQSclFOWhx/nXjpNNnj2F/oL1LGYwpbsbJ0RTXg5lfc5sgh RogZUWwuhnSG+NkYewqjXI1ZoMDOoJHsC/Bt4gLoiz6Q5WxbLQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLnLBJql9AJl0zhRl/4uMV+Fjk1oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmE1Y2E5ZjktNWVjNi0z YTM1LWFjZDEtYWFiZTRiY2I5MTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAOzvwi4j2mGzKkLXvylm496ik8Ln4JyDMGsFTR B/VMCclvG4BOdak+eOyY8NPImeXgKY+cvwsVdSMLtJiHN3iq2tkMSo03/Xz8mI4i wYIuj3Skf1uoN3+Uvbvn//97WEv1ylKZyyjsEsGbN3At8M+t0vH/8Jr4BgznL6xl cpjOKhDAkpsOKcaqV3jsn2kadxrnCHWQKp6dQQ+fcSHi+NblpD2Kp83lYnYj1fu3 OjpLY5V3T8ALb5z3ACEAQQPEDus+xn7aP6RZ2Bl/p7kmUwRE+tG+kBlsMF6VSLM6 rpIKaIau34uAOO/ROVnk3dItxmcP7Ibeaxp0FMe2UZ/D8s86 -----END CERTIFICATE-----Generated at Fri Apr 17 11:57:13 2026 by rpki-client