$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a111577-ad49-3c3d-994c-2cb29a1212b8.roa File: 0a111577-ad49-3c3d-994c-2cb29a1212b8.roa (raw, json) Hash identifier: xXEhRdi86m2axtqo4rshTa9JMwoO2qH9ykpHBUJeByY= Subject key identifier: 4A:79:0A:C5:87:74:31:CF:E0:E3:B9:63:6F:A5:95:30:71:A3:DD:08 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D59EAAE9A7511CBFC601E5580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a111577-ad49-3c3d-994c-2cb29a1212b8.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 397196 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:ae:9a:75:11:cb:fc:60:1e:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=36bd7de3-7a4c-4355-be09-a90358c48628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b0:8b:ce:49:99:16:42:e6:a1:3a:ab:05:23: 25:4e:10:45:6e:39:de:a5:eb:96:e4:49:7e:ce:8b: ef:19:5d:b3:1e:a9:26:d5:9b:c5:11:dc:cc:b5:d4: 4a:31:0d:71:da:18:4e:23:af:a7:24:86:08:6e:20: c1:50:ea:70:a8:4d:fe:f5:06:c7:87:c4:9c:f6:8a: bd:1f:e1:47:e6:a3:56:16:e7:dd:32:a7:30:1f:cc: 37:82:36:c4:d4:e7:bf:b9:a4:4f:67:56:6d:82:27: 27:88:8a:a6:b4:01:a2:77:7c:72:25:19:f4:26:07: 15:26:41:12:95:dd:c4:5c:cf:52:31:1f:70:1d:fb: 9f:ec:7e:53:cc:27:bd:d9:35:ed:35:4c:72:65:38: 3f:f4:dd:e3:a6:1e:ad:39:4c:2e:99:de:71:28:5f: de:47:51:a2:fe:56:54:00:0a:77:fd:8f:48:6c:a4: 0a:dc:26:4d:d6:cb:d0:2c:71:e9:e2:ca:d7:fc:75: 7d:8f:47:60:a2:2c:71:a6:be:18:9d:f3:42:8b:7c: d6:64:da:35:8d:f8:6e:d1:ed:55:2d:ca:ae:cb:bd: 5c:7d:29:59:19:ef:ee:6b:ec:b6:da:07:45:8c:5d: b1:7e:22:bf:8f:4a:a5:ec:a8:85:ff:b2:51:6e:29: ca:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:79:0A:C5:87:74:31:CF:E0:E3:B9:63:6F:A5:95:30:71:A3:DD:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a111577-ad49-3c3d-994c-2cb29a1212b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:c4:95:02:bc:d2:0e:b9:04:ba:59:3b:23:b8:24:5d:69:f5: 07:46:32:20:6a:52:62:87:3d:57:fd:be:82:00:a5:99:19:79: 6b:49:0c:24:29:f6:71:ee:f7:3b:d4:fe:6e:78:b2:ec:d1:13: 5b:41:ed:1a:7c:34:9d:b3:fa:21:4a:f0:f7:6a:d8:68:ae:64: 07:e7:88:62:e2:51:c9:da:8a:f7:24:a1:b0:35:83:e4:e2:a1: f9:18:32:37:ca:52:0d:72:b6:f5:87:74:e7:75:d0:5f:83:05: 2b:1d:22:51:c4:e5:2c:9c:94:53:30:eb:e0:db:9f:12:da:bc: ea:a1:96:e6:4f:17:81:98:2b:91:92:f0:21:e3:95:a4:de:41: 45:dd:b3:a0:53:46:92:05:3f:16:dc:88:11:9d:6c:2f:ef:d6: 81:13:ed:7f:7c:8d:a3:5d:49:db:bc:bb:2f:e7:4d:ff:90:46: 70:5b:65:50:23:f0:2c:83:63:24:82:73:85:d7:00:51:a3:e9: f4:21:a9:fb:2d:26:b9:fd:fa:79:a6:8f:4b:d4:db:3f:16:cc: 60:81:35:fe:a0:a6:23:06:00:5b:d4:c5:b4:4a:3a:7f:33:14: 65:a3:4a:7b:fb:7a:e6:e4:5f:73:45:2c:86:3b:4c:67:3d:75: a7:1e:ec:56 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6q6adRHL/GAeVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk MzZiZDdkZTMtN2E0Yy00MzU1LWJlMDktYTkwMzU4YzQ4NjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7CLzkmZFkLmoTqrBSMlThBFbjnepeuW5El+ zovvGV2zHqkm1ZvFEdzMtdRKMQ1x2hhOI6+nJIYIbiDBUOpwqE3+9QbHh8Sc9oq9 H+FH5qNWFufdMqcwH8w3gjbE1Oe/uaRPZ1ZtgicniIqmtAGid3xyJRn0JgcVJkES ld3EXM9SMR9wHfuf7H5TzCe92TXtNUxyZTg/9N3jph6tOUwumd5xKF/eR1Gi/lZU AAp3/Y9IbKQK3CZN1svQLHHp4srX/HV9j0dgoixxpr4YnfNCi3zWZNo1jfhu0e1V Lcquy71cfSlZGe/ua+y22gdFjF2xfiK/j0ql7KiF/7JRbinKVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEp5CsWHdDHP4OO5Y2+llTBxo90IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGExMTE1NzctYWQ0OS0z YzNkLTk5NGMtMmNiMjlhMTIxMmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACPElQK80g65BLpZOyO4JF1p9QdGMiBqUmKHPVf9voIApZkZeWtJ DCQp9nHu9zvU/m54suzRE1tB7Rp8NJ2z+iFK8Pdq2GiuZAfniGLiUcnaivckobA1 g+TiofkYMjfKUg1ytvWHdOd10F+DBSsdIlHE5SyclFMw6+DbnxLavOqhluZPF4GY K5GS8CHjlaTeQUXds6BTRpIFPxbciBGdbC/v1oET7X98jaNdSdu8uy/nTf+QRnBb ZVAj8CyDYySCc4XXAFGj6fQhqfstJrn9+nmmj0vU2z8WzGCBNf6gpiMGAFvUxbRK On8zFGWjSnv7eubkX3NFLIY7TGc9dace7FY= -----END CERTIFICATE-----Generated at Fri Apr 17 16:26:16 2026 by rpki-client