$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/016cff11-5fc5-3ed5-9db9-3ac3f3c07bbd.roa File: 016cff11-5fc5-3ed5-9db9-3ac3f3c07bbd.roa (raw, json) Hash identifier: HDbLyZSCBAtkgzJlEeYuAsAFr3SvuuXFQ/4poMIpfPY= Subject key identifier: D6:DE:B0:9E:B4:E6:2C:C4:0E:84:C2:0B:C4:96:26:F3:C6:D4:BD:08 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D6DA196E9E6A66F13D1C44B00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/016cff11-5fc5-3ed5-9db9-3ac3f3c07bbd.roa Signing time: Tue 07 Apr 2026 14:30:16 +0000 ROA not before: Tue 07 Apr 2026 14:30:16 +0000 ROA not after: Mon 06 Jul 2026 14:30:16 +0000 asID: 396599 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:a1:96:e9:e6:a6:6f:13:d1:c4:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 7 14:30:16 2026 GMT Not After : Jul 6 14:30:16 2026 GMT Subject: CN=5e435aa5-5e3f-4466-9047-4bd6308bf18b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9d:69:d4:5b:54:6c:8b:55:f3:d3:2c:5e:6c: 49:a2:8d:04:a0:4d:78:83:23:9f:2d:cd:db:69:b6: cc:8e:90:77:c1:3d:ae:92:75:61:e7:8b:10:62:a9: 54:15:5e:dc:55:82:00:58:5e:c5:0c:cb:0e:33:c8: 45:89:22:ae:6a:90:71:b7:05:d7:3b:87:87:d6:fc: 5f:2d:b2:67:bb:13:46:2e:06:ed:43:19:ba:2c:10: 93:93:c3:ee:8a:d9:66:72:c2:e7:60:89:0e:1c:80: 77:2c:64:81:6e:9d:31:c1:f3:2e:62:6c:ae:b6:65: 95:8a:86:c8:3f:b9:28:55:31:bc:53:10:f5:72:75: d2:75:f8:0d:bf:76:37:63:bf:8e:b6:41:eb:59:73: 1c:57:26:1b:4f:88:9e:62:90:30:a1:96:87:3a:ad: be:3a:11:0f:65:72:ea:97:88:33:18:3e:f8:a8:8e: 51:90:d1:41:d5:29:ba:cb:25:51:0e:d7:7c:5c:79: 76:6d:81:e5:3a:13:83:ba:a0:1f:45:53:c5:0e:7a: 66:44:9e:51:4a:cf:11:e7:ef:41:a1:b4:b4:31:56: c0:d6:13:e3:c0:66:3b:3d:be:f8:42:94:e7:08:2e: 87:70:ec:7c:a4:1e:ed:88:d7:64:8f:b3:23:cf:6b: 2f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:DE:B0:9E:B4:E6:2C:C4:0E:84:C2:0B:C4:96:26:F3:C6:D4:BD:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/016cff11-5fc5-3ed5-9db9-3ac3f3c07bbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:e5:14:5a:1d:d8:74:cf:1e:01:3a:71:4c:f4:d3:3a:7c:7b: 4d:34:82:b1:2d:1b:83:a3:18:42:d3:51:a6:20:9f:d1:b8:97: b0:c0:7b:85:b9:7c:c1:3e:60:c8:15:21:4c:7b:c1:c2:cd:44: e7:b9:4b:7d:7e:16:24:09:ba:83:7c:ee:6b:bd:10:5e:b2:ba: ec:11:e0:ca:72:01:84:74:1e:82:ed:fa:26:f9:52:c1:68:c3: f5:46:f5:a5:db:af:98:b1:93:e8:e1:53:ff:b7:76:38:57:7d: ae:86:20:c1:98:5d:86:39:cd:94:c5:06:25:4f:22:fe:66:63: d1:ea:90:c8:bb:c6:66:f8:8d:4f:8e:f6:61:48:df:3e:7c:39: fe:20:80:bb:d9:91:d6:f3:d0:b6:b5:99:72:f7:bf:30:b1:9f: 8b:90:2f:99:37:a0:c4:db:b3:41:f0:e5:c2:b1:1b:62:ad:25: 71:a6:d0:e2:9c:b9:df:ea:45:cc:7e:1a:d3:89:13:96:3c:f9: a6:d1:0b:f1:5c:d9:cf:a3:99:16:ab:0b:5d:5b:53:39:54:3a: 5d:96:7a:08:69:3d:eb:79:00:31:fe:07:d3:1d:11:c1:7a:6d: de:6d:68:1e:52:6a:62:a6:2d:7d:95:2b:99:12:a8:a9:99:e2: d9:fb:9e:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1toZbp5qZvE9HESwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwNzE0MzAxNloXDTI2MDcwNjE0MzAxNlowLzEtMCsGA1UEAxMk NWU0MzVhYTUtNWUzZi00NDY2LTkwNDctNGJkNjMwOGJmMThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAup1p1FtUbItV89MsXmxJoo0EoE14gyOfLc3b abbMjpB3wT2uknVh54sQYqlUFV7cVYIAWF7FDMsOM8hFiSKuapBxtwXXO4eH1vxf LbJnuxNGLgbtQxm6LBCTk8PuitlmcsLnYIkOHIB3LGSBbp0xwfMuYmyutmWViobI P7koVTG8UxD1cnXSdfgNv3Y3Y7+OtkHrWXMcVyYbT4ieYpAwoZaHOq2+OhEPZXLq l4gzGD74qI5RkNFB1Sm6yyVRDtd8XHl2bYHlOhODuqAfRVPFDnpmRJ5RSs8R5+9B obS0MVbA1hPjwGY7Pb74QpTnCC6HcOx8pB7tiNdkj7Mjz2svnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNbesJ605izEDoTCC8SWJvPG1L0IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDE2Y2ZmMTEtNWZjNS0z ZWQ1LTlkYjktM2FjM2YzYzA3YmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABflFFod2HTPHgE6cUz00zp8e000grEtG4OjGELTUaYgn9G4l7DA e4W5fME+YMgVIUx7wcLNROe5S31+FiQJuoN87mu9EF6yuuwR4MpyAYR0HoLt+ib5 UsFow/VG9aXbr5ixk+jhU/+3djhXfa6GIMGYXYY5zZTFBiVPIv5mY9HqkMi7xmb4 jU+O9mFI3z58Of4ggLvZkdbz0La1mXL3vzCxn4uQL5k3oMTbs0Hw5cKxG2KtJXGm 0OKcud/qRcx+GtOJE5Y8+abRC/Fc2c+jmRarC11bUzlUOl2WeghpPet5ADH+B9Md EcF6bd5taB5SamKmLX2VK5kSqKmZ4tn7ng8= -----END CERTIFICATE-----Generated at Fri Apr 17 13:30:38 2026 by rpki-client