$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/026152dc-3de0-3537-83ba-c5dd29bfe5f5.roa File: 026152dc-3de0-3537-83ba-c5dd29bfe5f5.roa (raw, json) Hash identifier: gkczwgu+tHkKImDXnMOUBzYFoWQIzrbO86JGUqIiek4= Subject key identifier: 8E:CA:32:22:88:97:B6:3C:F9:E3:4A:63:43:F7:1E:5E:8C:7E:49:5E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D732BD798C4007096F5063CA0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/026152dc-3de0-3537-83ba-c5dd29bfe5f5.roa Signing time: Thu 09 Apr 2026 14:07:52 +0000 ROA not before: Thu 09 Apr 2026 14:07:52 +0000 ROA not after: Wed 08 Jul 2026 14:07:52 +0000 asID: 396586 IP address blocks: 2001:500:133::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:73:2b:d7:98:c4:00:70:96:f5:06:3c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 9 14:07:52 2026 GMT Not After : Jul 8 14:07:52 2026 GMT Subject: CN=8beb9dc5-7a43-4e8a-8754-5c1324af3023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b5:d6:85:e9:e8:58:4d:2c:b1:59:da:df:42: d6:44:ba:fe:a7:42:fc:6f:6c:52:06:01:c7:af:a2: cd:43:bc:b4:95:d1:64:b3:60:0d:71:2f:97:e4:11: ab:99:e3:3b:bf:d3:8a:b7:17:47:16:97:0c:89:64: d0:9d:d0:d9:2c:f8:7c:b2:06:c4:11:05:94:c7:15: 86:e9:ca:14:cf:9a:54:fd:1a:9f:48:dc:3e:74:3a: 9b:13:12:ee:bc:40:5a:70:c2:96:18:c1:bb:8b:3c: 7b:d2:13:54:dd:a5:0d:aa:76:2f:83:17:a1:3d:a4: 67:c7:47:1c:7e:36:c1:84:04:f5:54:10:52:fd:25: 18:9b:b5:82:39:ed:07:90:f6:01:8e:40:1a:11:ef: 16:7c:ad:6d:5d:0e:ee:2e:33:69:dc:17:ca:a7:c8: 75:d4:55:78:18:df:70:f5:c8:3b:e1:98:9c:9e:18: d0:51:d5:27:77:f5:47:a0:ac:47:75:42:f9:7a:ff: b4:d6:c3:ca:01:c0:1f:f9:a5:21:91:39:11:65:8b: 92:c1:a2:6d:8a:cc:e1:24:28:cc:fc:20:99:21:54: 2d:82:e3:aa:84:a6:6d:0f:c3:21:bc:c8:e5:43:d8: 91:cf:c8:e6:33:b9:fa:0e:b8:88:37:e3:1f:0b:98: e9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:CA:32:22:88:97:B6:3C:F9:E3:4A:63:43:F7:1E:5E:8C:7E:49:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/026152dc-3de0-3537-83ba-c5dd29bfe5f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:04:5a:9c:b4:46:07:b3:d0:4b:4a:5f:0c:6e:d3:b2:fc:74: 7b:aa:9f:b8:bd:36:6b:04:fa:4f:f0:2e:51:f4:13:52:7b:dd: 72:d1:a7:e8:01:5b:a9:90:ce:25:91:f0:cc:06:d3:c6:15:c5: 1e:cc:87:a3:35:23:4b:af:ff:04:c4:d5:ee:2a:4e:1c:d6:78: ad:6f:70:b9:34:2f:7f:57:21:08:18:83:96:4a:fe:c5:6e:36: f2:58:d7:0f:74:7c:b4:0a:77:1b:49:8c:99:06:7c:3c:97:c3: 50:7c:2d:56:94:35:77:ed:01:f6:0b:6b:6b:58:6d:77:2e:25: b2:8d:c2:44:73:c4:19:a3:cd:29:86:19:7f:31:15:82:f6:55: 75:05:78:05:dd:53:60:1a:c6:a0:b5:bb:84:53:01:aa:7f:b3: b8:cb:7c:1b:55:fd:5b:23:94:86:59:f6:ea:19:fc:ea:63:2c: c8:ad:db:6d:ea:d6:78:f5:35:32:11:e7:8f:58:2a:3c:6d:31: 11:3e:c3:3f:72:5e:19:65:b1:be:07:1d:5f:a5:eb:53:c8:29: 73:4c:b2:2e:45:17:42:5e:62:db:9a:36:ca:69:aa:59:92:46: f9:22:da:4a:65:a9:9c:ec:ef:44:64:84:3d:5b:36:96:63:2b: 38:c9:67:f1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1zK9eYxABwlvUGPKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwOTE0MDc1MloXDTI2MDcwODE0MDc1MlowLzEtMCsGA1UEAxMk OGJlYjlkYzUtN2E0My00ZThhLTg3NTQtNWMxMzI0YWYzMDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbXWhenoWE0ssVna30LWRLr+p0L8b2xSBgHH r6LNQ7y0ldFks2ANcS+X5BGrmeM7v9OKtxdHFpcMiWTQndDZLPh8sgbEEQWUxxWG 6coUz5pU/RqfSNw+dDqbExLuvEBacMKWGMG7izx70hNU3aUNqnYvgxehPaRnx0cc fjbBhAT1VBBS/SUYm7WCOe0HkPYBjkAaEe8WfK1tXQ7uLjNp3BfKp8h11FV4GN9w 9cg74ZicnhjQUdUnd/VHoKxHdUL5ev+01sPKAcAf+aUhkTkRZYuSwaJtiszhJCjM /CCZIVQtguOqhKZtD8MhvMjlQ9iRz8jmM7n6DriIN+MfC5jpvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI7KMiKIl7Y8+eNKY0P3Hl6MfkleMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDI2MTUyZGMtM2RlMC0z NTM3LTgzYmEtYzVkZDI5YmZlNWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGQEWpy0Rgez0EtKXwxu07L8dHuqn7i9NmsE+k/wLlH0E1J73XLR p+gBW6mQziWR8MwG08YVxR7Mh6M1I0uv/wTE1e4qThzWeK1vcLk0L39XIQgYg5ZK /sVuNvJY1w90fLQKdxtJjJkGfDyXw1B8LVaUNXftAfYLa2tYbXcuJbKNwkRzxBmj zSmGGX8xFYL2VXUFeAXdU2AaxqC1u4RTAap/s7jLfBtV/VsjlIZZ9uoZ/OpjLMit 223q1nj1NTIR549YKjxtMRE+wz9yXhllsb4HHV+l61PIKXNMsi5FF0JeYtuaNspp qlmSRvki2kplqZzs70RkhD1bNpZjKzjJZ/E= -----END CERTIFICATE-----Generated at Fri Apr 17 11:01:04 2026 by rpki-client