$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfb3076f-5305-36a0-a1dd-97ec59b09acd.roa File: dfb3076f-5305-36a0-a1dd-97ec59b09acd.roa (raw, json) Hash identifier: 45Z+mB7GTDljSJG49v4YtVGS3kVgu6GWMqnwaJqIWVY= Subject key identifier: D0:93:AB:17:2A:D2:F1:E4:65:FB:20:1E:C1:B1:8C:C4:59:84:31:65 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D6DA18F5EE757894A911F3E40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfb3076f-5305-36a0-a1dd-97ec59b09acd.roa Signing time: Tue 07 Apr 2026 14:30:13 +0000 ROA not before: Tue 07 Apr 2026 14:30:13 +0000 ROA not after: Mon 06 Jul 2026 14:30:13 +0000 asID: 396602 IP address blocks: 2001:500:13f::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:a1:8f:5e:e7:57:89:4a:91:1f:3e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 7 14:30:13 2026 GMT Not After : Jul 6 14:30:13 2026 GMT Subject: CN=20d7f7ff-0a47-45dc-8ef8-e14c192c088c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:02:97:67:6f:1a:0d:b8:56:56:80:1c:02:06: 38:13:56:7f:fa:53:1c:9e:55:d6:6f:25:b5:a8:d2: 71:bd:ff:de:ba:15:82:5f:d5:e3:06:58:23:6d:f4: aa:f5:53:d1:8a:e2:cf:1e:d7:28:de:fd:3e:d7:39: 54:02:df:66:64:ee:30:3e:8a:86:e6:52:e2:db:b7: 26:a1:19:f2:e0:ab:8b:39:b5:15:12:3b:1c:f7:16: 7c:46:bc:7e:47:32:d9:77:70:19:16:34:5f:aa:56: 8f:ba:5a:01:26:fb:74:f0:0b:26:77:f0:d2:4e:cf: b3:fe:c8:6d:8f:7d:4a:e9:dd:12:df:62:b2:c8:a8: fa:21:59:fe:ce:60:cd:21:39:c9:3f:82:bb:57:e2: 9b:47:25:cc:61:45:1e:c6:23:5d:a9:09:06:eb:aa: 75:eb:b9:0a:cf:51:e6:91:16:7a:9b:28:59:fe:88: 8a:0a:de:d1:0a:97:c6:e8:2b:ab:f0:9e:78:8d:dd: 7c:c6:93:4c:dc:b8:17:52:e6:9b:f8:34:d9:01:00: 5c:24:5b:23:e3:db:21:52:85:c1:6f:32:69:88:63: 34:97:41:8c:00:e7:e2:f1:50:b6:a1:b7:42:eb:2a: 4d:a1:9a:1c:99:2e:ed:58:38:0b:e3:a2:2c:b0:64: 2a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:93:AB:17:2A:D2:F1:E4:65:FB:20:1E:C1:B1:8C:C4:59:84:31:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfb3076f-5305-36a0-a1dd-97ec59b09acd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:13f:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:c7:3a:a0:38:a9:3d:f6:bc:7b:9f:fb:02:41:f9:b5:1b:21: 4c:d8:fb:cf:eb:ec:0d:42:cd:0c:cc:6f:6b:91:8f:9e:0f:44: 17:71:13:f1:d1:5e:f7:a8:a3:ae:e9:8b:26:97:a1:da:81:fd: 31:80:bb:a1:01:70:df:71:45:79:2d:bf:80:a5:97:7d:43:98: 3d:7b:61:c1:d2:52:b2:1d:63:c9:c4:ed:36:6d:df:48:bd:ef: 99:22:c6:14:02:5a:be:4f:85:9a:dd:5a:ec:fc:e7:8d:d3:c3: b5:c4:1f:98:6d:2b:9c:57:2d:60:e1:82:49:92:b4:8a:f3:a3: ac:59:86:62:ea:ba:ed:2c:b9:13:9d:d7:d6:e8:12:02:8f:86: f4:ac:2e:8b:d8:96:15:f2:d2:43:57:99:98:6a:58:f0:4c:5b: e0:c5:49:05:4c:d2:fc:a1:d9:16:34:1f:22:55:3e:bd:a6:ec: 33:72:50:2a:d6:e3:08:8e:8b:26:d7:0b:3f:22:ad:3d:92:d0: 7c:e0:64:1f:f8:ad:76:00:94:95:3a:1c:97:1b:d7:47:9a:4a: e7:0d:2e:5e:c6:1b:a3:ab:39:d0:be:2d:dc:4d:23:cb:e8:ad: 6a:46:92:26:9a:a0:a3:09:e5:6c:3e:a8:41:cd:14:27:2b:57: d8:eb:49:2a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1toY9e51eJSpEfPkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwNzE0MzAxM1oXDTI2MDcwNjE0MzAxM1owLzEtMCsGA1UEAxMk MjBkN2Y3ZmYtMGE0Ny00NWRjLThlZjgtZTE0YzE5MmMwODhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAKXZ28aDbhWVoAcAgY4E1Z/+lMcnlXWbyW1 qNJxvf/euhWCX9XjBlgjbfSq9VPRiuLPHtco3v0+1zlUAt9mZO4wPoqG5lLi27cm oRny4KuLObUVEjsc9xZ8Rrx+RzLZd3AZFjRfqlaPuloBJvt08Asmd/DSTs+z/sht j31K6d0S32KyyKj6IVn+zmDNITnJP4K7V+KbRyXMYUUexiNdqQkG66p167kKz1Hm kRZ6myhZ/oiKCt7RCpfG6Cur8J54jd18xpNM3LgXUuab+DTZAQBcJFsj49shUoXB bzJpiGM0l0GMAOfi8VC2obdC6ypNoZocmS7tWDgL46IssGQqlQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNCTqxcq0vHkZfsgHsGxjMRZhDFlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGZiMzA3NmYtNTMwNS0z NmEwLWExZGQtOTdlYzU5YjA5YWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE/ AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBWxzqgOKk99rx7n/sCQfm1GyFM2PvP6+wNQs0M zG9rkY+eD0QXcRPx0V73qKOu6Ysml6Hagf0xgLuhAXDfcUV5Lb+ApZd9Q5g9e2HB 0lKyHWPJxO02bd9Ive+ZIsYUAlq+T4Wa3Vrs/OeN08O1xB+YbSucVy1g4YJJkrSK 86OsWYZi6rrtLLkTndfW6BICj4b0rC6L2JYV8tJDV5mYaljwTFvgxUkFTNL8odkW NB8iVT69puwzclAq1uMIjosm1ws/Iq09ktB84GQf+K12AJSVOhyXG9dHmkrnDS5e xhujqznQvi3cTSPL6K1qRpImmqCjCeVsPqhBzRQnK1fY60kq -----END CERTIFICATE-----Generated at Fri Apr 17 10:35:26 2026 by rpki-client