$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd7d11a3-79a0-3022-bbbf-0ac6dba9fb28.roa File: bd7d11a3-79a0-3022-bbbf-0ac6dba9fb28.roa (raw, json) Hash identifier: 0xL8WkT0kdU5cEzDNTIIJ2ktVw/Tb5FowRsOVABVGJk= Subject key identifier: C8:40:D6:87:8E:99:90:C9:4A:0D:87:96:54:9D:0D:90:1F:B7:E9:74 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D83CAE6D2EB4720A2A0C42B00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd7d11a3-79a0-3022-bbbf-0ac6dba9fb28.roa Signing time: Wed 15 Apr 2026 13:00:30 +0000 ROA not before: Wed 15 Apr 2026 13:00:30 +0000 ROA not after: Tue 14 Jul 2026 13:00:30 +0000 asID: 40717 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:83:ca:e6:d2:eb:47:20:a2:a0:c4:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 15 13:00:30 2026 GMT Not After : Jul 14 13:00:30 2026 GMT Subject: CN=0b5efa30-60b5-49a0-8858-df22e22d5aa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f6:33:1b:3d:e9:25:26:b7:da:42:33:2f:06: 90:ba:66:e9:44:d7:2d:1e:f7:2b:40:0d:c9:49:90: dd:90:74:37:95:d5:0b:d9:b4:1e:09:74:f7:b0:68: 8c:c5:60:3e:79:dc:7a:3b:83:1c:a1:13:0f:5e:7f: 5d:de:c8:ab:d6:b4:32:ff:80:73:31:a3:54:b9:4b: ba:e2:5b:4f:1d:10:e9:25:6d:4b:36:a7:bc:fe:f2: f6:c8:24:3f:25:cf:f0:5a:ec:01:57:34:c8:86:6d: 14:67:b2:1d:c3:89:f4:79:08:16:52:09:85:3d:c6: 34:02:2e:44:1c:f5:60:40:19:6b:23:4d:6e:bc:5d: 2e:f6:61:94:5f:9e:5a:cb:69:c1:fd:ef:09:4c:85: 8f:11:2e:16:32:aa:e2:81:3a:a1:ac:24:5d:e5:d2: 1f:6a:c9:ca:26:35:b2:49:54:c6:10:70:71:4d:69: 7a:bd:6d:f8:38:0e:84:9d:8b:c2:24:58:45:18:cc: 4e:c6:33:54:2a:a1:e8:7f:7a:7d:a9:46:1a:cc:5a: 66:bb:f4:72:d2:ec:4f:b3:ea:0f:ee:0a:c3:60:43: 01:f5:a5:4d:0e:d0:8c:39:33:96:14:f4:cf:c5:73: e7:80:32:32:da:eb:4d:2f:49:d6:37:71:69:ad:1f: 37:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:40:D6:87:8E:99:90:C9:4A:0D:87:96:54:9D:0D:90:1F:B7:E9:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd7d11a3-79a0-3022-bbbf-0ac6dba9fb28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:67:77:ff:64:cb:52:ba:e3:2c:d2:16:f6:88:14:18:fc:21: 59:52:ff:95:17:08:61:d3:18:b0:72:aa:61:3d:ce:4e:44:60: da:85:89:fc:da:09:76:fa:19:68:04:71:e7:8a:e0:d6:ad:64: 2a:c8:09:99:d9:f8:93:17:d5:23:01:0b:7e:8c:12:7f:ae:b8: 70:fd:0f:83:70:e4:57:7f:a8:d0:73:2a:f1:23:37:f6:e3:aa: ee:17:b1:d5:bd:80:4e:4a:d2:dd:39:fb:7e:ac:a1:aa:aa:aa: f9:77:38:ba:ab:aa:a4:8d:4e:a2:0d:e6:f2:21:02:91:ce:da: a5:36:7a:8e:a5:e1:2c:bc:27:ac:ec:c6:7f:b4:be:94:3b:7e: 62:a4:aa:31:84:5a:04:6e:fa:ec:a1:d0:42:e7:b4:bc:89:97: 60:26:79:86:8f:5a:e1:57:53:90:55:71:46:c5:a4:af:78:2c: c6:03:fc:7a:46:08:46:3d:1a:de:03:fb:43:dc:e3:fe:a2:f8: c4:83:d0:e7:5c:e4:32:45:2d:60:65:96:3e:ed:57:ee:23:88: 75:6f:dc:53:90:40:f4:b7:6e:d1:8f:cd:5c:02:0a:56:12:32: 0c:bd:53:54:b7:af:47:79:dd:9e:24:85:c6:87:cd:3a:62:49: a7:88:6d:60 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE2DyubS60cgoqDEKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk MGI1ZWZhMzAtNjBiNS00OWEwLTg4NTgtZGYyMmUyMmQ1YWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPYzGz3pJSa32kIzLwaQumbpRNctHvcrQA3J SZDdkHQ3ldUL2bQeCXT3sGiMxWA+edx6O4McoRMPXn9d3sir1rQy/4BzMaNUuUu6 4ltPHRDpJW1LNqe8/vL2yCQ/Jc/wWuwBVzTIhm0UZ7Idw4n0eQgWUgmFPcY0Ai5E HPVgQBlrI01uvF0u9mGUX55ay2nB/e8JTIWPES4WMqrigTqhrCRd5dIfasnKJjWy SVTGEHBxTWl6vW34OA6EnYvCJFhFGMxOxjNUKqHof3p9qUYazFpmu/Ry0uxPs+oP 7grDYEMB9aVNDtCMOTOWFPTPxXPngDIy2utNL0nWN3FprR83ywIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMhA1oeOmZDJSg2HllSdDZAft+l0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmQ3ZDExYTMtNzlhMC0z MDIyLWJiYmYtMGFjNmRiYTlmYjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQATZ3f/ZMtSuuMs0hb2iBQY/CFZUv+VFwhh0xiw cqphPc5ORGDahYn82gl2+hloBHHniuDWrWQqyAmZ2fiTF9UjAQt+jBJ/rrhw/Q+D cORXf6jQcyrxIzf246ruF7HVvYBOStLdOft+rKGqqqr5dzi6q6qkjU6iDebyIQKR ztqlNnqOpeEsvCes7MZ/tL6UO35ipKoxhFoEbvrsodBC57S8iZdgJnmGj1rhV1OQ VXFGxaSveCzGA/x6RghGPRreA/tD3OP+ovjEg9DnXOQyRS1gZZY+7VfuI4h1b9xT kED0t27Rj81cAgpWEjIMvVNUt69Hed2eJIXGh806YkmniG1g -----END CERTIFICATE-----Generated at Fri Apr 17 11:56:16 2026 by rpki-client