$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0728cfc8-83ea-3dc7-a14f-b12ae6426e3c.roa File: 0728cfc8-83ea-3dc7-a14f-b12ae6426e3c.roa (raw, json) Hash identifier: S6R9mNOVql4Gk8gnt8Bsd0tN4QRN95+pcZ4apWUX8JU= Subject key identifier: 34:92:23:37:2F:2E:77:E3:5A:AF:0B:62:38:35:45:CF:32:E5:F3:81 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D6DA18FF0C02CC1F8766F8480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0728cfc8-83ea-3dc7-a14f-b12ae6426e3c.roa Signing time: Tue 07 Apr 2026 14:30:13 +0000 ROA not before: Tue 07 Apr 2026 14:30:13 +0000 ROA not after: Mon 06 Jul 2026 14:30:13 +0000 asID: 397211 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:a1:8f:f0:c0:2c:c1:f8:76:6f:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 7 14:30:13 2026 GMT Not After : Jul 6 14:30:13 2026 GMT Subject: CN=97fa12a5-95e0-4557-9834-b36930bebd19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:18:29:10:a8:a0:c5:3b:9e:03:89:3b:d3:6a: 75:be:f9:c1:3e:25:6a:a2:bb:b2:34:11:08:02:19: 80:30:0f:16:52:0d:7e:f2:b0:35:cb:59:2c:0d:dd: 86:4a:a8:38:1c:94:f9:80:fa:4b:31:d0:be:e0:fb: db:43:c7:00:b2:58:5d:f6:08:ae:cf:8a:6d:0b:78: 79:a4:38:b9:b5:14:ed:cf:92:b7:f9:b9:4c:44:51: 66:49:5a:2e:38:18:05:20:2b:5f:f7:b1:e7:f9:21: 97:bb:63:72:ef:c8:a7:4d:a4:ea:66:1a:34:1c:e1: 81:7c:37:40:69:89:48:c8:f2:7d:1b:36:6f:31:4d: de:93:9e:73:92:08:7c:d0:81:95:b2:cd:9a:84:28: ba:c6:b9:72:ef:24:f7:20:36:f4:c9:dc:5d:8c:45: ec:c3:bb:3a:5b:11:b5:c6:b2:b1:f3:9e:92:f8:4f: 2b:88:83:b5:36:09:80:b3:21:f8:76:cb:76:8b:ad: 76:f5:06:0b:50:1a:ee:b0:93:62:92:81:74:e3:23: 9c:e1:8f:d1:af:11:e0:e6:71:9a:7b:e5:9e:e8:50: 03:ca:93:61:01:e6:1d:36:27:e7:2a:13:f1:70:21: a5:55:c4:e6:9b:54:f7:05:6e:82:58:94:c5:36:d6: bf:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:92:23:37:2F:2E:77:E3:5A:AF:0B:62:38:35:45:CF:32:E5:F3:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0728cfc8-83ea-3dc7-a14f-b12ae6426e3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:1d:4d:29:a0:2c:6c:54:f0:5a:29:3e:5c:e8:bc:27:10:49: 91:83:c3:c6:43:4b:4c:6d:71:7d:80:96:18:37:02:86:f4:fe: 80:02:99:d4:ca:76:27:fd:41:47:c6:2c:28:6b:7c:ee:0c:c1: bd:7e:47:50:a3:2a:28:56:15:da:af:56:3f:12:da:7c:fe:da: 02:bd:36:d8:77:9f:ea:43:f7:f1:e4:aa:09:97:35:06:bd:54: 6d:d2:43:f7:17:5e:53:b9:e6:f7:fa:06:b7:e8:87:91:ab:42: d0:11:66:a8:54:b1:2c:39:0e:06:3f:a0:8f:84:29:ee:2f:d6: db:5b:2d:3e:f4:66:bf:c6:0f:4c:1a:00:9a:c5:6d:c2:e9:fb: a5:d3:35:86:55:3b:7c:71:04:fe:c6:c7:b5:19:5e:b4:8a:fe: f2:e7:bf:04:2b:a2:0c:0d:d8:0d:f3:9c:fb:2b:36:44:ae:f6: 28:97:e5:bd:dc:08:09:78:62:54:f9:de:ee:36:e5:f0:e3:6c: 62:15:aa:1e:1b:7e:3a:0c:96:1f:0a:33:b9:59:a7:2e:01:f3: c7:68:26:15:88:c8:30:52:02:c0:3c:70:66:35:0b:99:0f:49: 98:4b:79:73:68:55:de:3c:4b:df:5e:9d:f9:26:cf:1b:fd:d6: 41:51:da:f6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1toY/wwCzB+HZvhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwNzE0MzAxM1oXDTI2MDcwNjE0MzAxM1owLzEtMCsGA1UEAxMk OTdmYTEyYTUtOTVlMC00NTU3LTk4MzQtYjM2OTMwYmViZDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RgpEKigxTueA4k702p1vvnBPiVqoruyNBEI AhmAMA8WUg1+8rA1y1ksDd2GSqg4HJT5gPpLMdC+4PvbQ8cAslhd9giuz4ptC3h5 pDi5tRTtz5K3+blMRFFmSVouOBgFICtf97Hn+SGXu2Ny78inTaTqZho0HOGBfDdA aYlIyPJ9GzZvMU3ek55zkgh80IGVss2ahCi6xrly7yT3IDb0ydxdjEXsw7s6WxG1 xrKx856S+E8riIO1NgmAsyH4dst2i6129QYLUBrusJNikoF04yOc4Y/RrxHg5nGa e+We6FADypNhAeYdNifnKhPxcCGlVcTmm1T3BW6CWJTFNta/0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDSSIzcvLnfjWq8LYjg1Rc8y5fOBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDcyOGNmYzgtODNlYS0z ZGM3LWExNGYtYjEyYWU2NDI2ZTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKMdTSmgLGxU8FopPlzovCcQSZGDw8ZDS0xtcX2Alhg3Aob0/oAC mdTKdif9QUfGLChrfO4Mwb1+R1CjKihWFdqvVj8S2nz+2gK9Nth3n+pD9/HkqgmX NQa9VG3SQ/cXXlO55vf6Brfoh5GrQtARZqhUsSw5DgY/oI+EKe4v1ttbLT70Zr/G D0waAJrFbcLp+6XTNYZVO3xxBP7Gx7UZXrSK/vLnvwQrogwN2A3znPsrNkSu9iiX 5b3cCAl4YlT53u425fDjbGIVqh4bfjoMlh8KM7lZpy4B88doJhWIyDBSAsA8cGY1 C5kPSZhLeXNoVd48S99enfkmzxv91kFR2vY= -----END CERTIFICATE-----Generated at Fri Apr 17 03:13:53 2026 by rpki-client