$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a8198b5-b66c-3893-9d92-fe8f80e88a32.roa File: 0a8198b5-b66c-3893-9d92-fe8f80e88a32.roa (raw, json) Hash identifier: W0QPUx29yx+lYECEWCKjSa2UOj1+i70pn3EFUS3xJnQ= Subject key identifier: B1:39:91:5C:CE:6E:BA:47:7A:10:ED:D7:CB:D1:CD:B5:B0:C4:71:E1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D732BD2479088810C468F0BC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a8198b5-b66c-3893-9d92-fe8f80e88a32.roa Signing time: Thu 09 Apr 2026 14:07:50 +0000 ROA not before: Thu 09 Apr 2026 14:07:50 +0000 ROA not after: Wed 08 Jul 2026 14:07:50 +0000 asID: 396542 IP address blocks: 2001:500:133::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:73:2b:d2:47:90:88:81:0c:46:8f:0b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 9 14:07:50 2026 GMT Not After : Jul 8 14:07:50 2026 GMT Subject: CN=d3fdcde4-82f3-4f24-8729-8691af179a6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f5:cf:61:d7:25:de:7a:07:2c:96:43:d2:fa: 61:b5:10:0e:8c:23:db:0f:65:64:bf:3e:31:2a:6c: 9f:a1:1c:68:99:9f:09:7e:df:46:25:d6:80:51:51: bb:67:07:91:f2:36:95:bd:fc:9f:8f:19:a5:ab:a6: 84:22:eb:90:bf:05:58:45:5e:98:27:33:fe:39:98: ed:8b:be:a4:5f:3c:b1:6f:ab:55:17:f4:40:84:e7: e7:f4:26:2b:b1:f4:2f:51:06:97:1d:7f:8d:10:9a: 47:ed:8c:f5:a1:39:c5:bc:0b:71:5e:45:27:a9:0a: 92:d9:49:5e:d9:de:0f:c1:8b:65:07:da:7a:4f:e6: d2:36:7f:44:45:4c:9c:84:c9:89:bb:d9:df:9c:ca: 56:82:de:c7:12:61:37:1f:af:78:65:8a:0e:5e:c8: 3a:f4:fc:81:d1:ce:87:51:13:6e:2f:0c:f2:0b:3d: b7:25:79:39:46:8b:5d:92:0d:d0:f1:ad:15:b0:bc: ff:04:d9:45:77:35:95:c9:4f:90:d5:4b:82:0b:73: 73:51:3f:e6:77:52:53:4d:40:21:3f:58:34:16:da: f4:f8:83:15:6f:3f:60:aa:2b:80:ec:8a:6b:6a:88: 7f:b7:c9:ae:8b:a3:e3:23:43:78:1c:e5:b5:69:f3: 60:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:39:91:5C:CE:6E:BA:47:7A:10:ED:D7:CB:D1:CD:B5:B0:C4:71:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a8198b5-b66c-3893-9d92-fe8f80e88a32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:27:29:ed:f4:a8:39:fd:78:5c:35:5e:eb:ce:e5:b1:d7:bf: ab:22:00:69:8b:92:4a:26:ec:ee:af:5d:31:c2:61:05:a5:18: ee:3f:ae:16:7f:f2:9e:72:02:49:59:fa:ac:35:26:44:1b:bc: 0d:6a:0c:88:84:5b:96:89:c8:09:ae:e8:6d:5c:f0:bb:74:5b: 9b:e5:fc:96:67:72:97:eb:bc:9f:d9:1b:2e:0d:15:41:13:d1: 94:df:be:3d:40:6a:a2:5c:68:85:f8:db:de:e9:03:d9:98:43: f8:fe:f6:71:c2:fc:5c:81:27:02:b6:8d:37:e2:57:7f:f6:68: a7:54:4c:f1:a4:52:3d:d8:53:99:76:43:8e:40:4c:3f:f6:ff: 09:f9:a1:96:44:5a:d1:58:0a:5b:47:e2:42:37:34:99:cc:26: 78:ee:07:8c:bf:58:26:60:15:48:39:aa:d0:78:1e:c1:79:a4: cb:08:89:60:f9:21:13:a1:8d:92:54:ae:d8:d6:15:c7:62:32: 58:79:aa:e8:7b:4e:3d:44:d6:f8:ce:e9:a5:74:05:3c:f0:f8: bc:29:8a:98:25:eb:e0:d9:8c:d0:e6:61:6f:46:3b:34:61:2a: 33:57:7a:43:96:2e:7d:6c:00:97:9f:d2:43:cb:06:0e:71:81: 49:c3:ba:9f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1zK9JHkIiBDEaPC8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwOTE0MDc1MFoXDTI2MDcwODE0MDc1MFowLzEtMCsGA1UEAxMk ZDNmZGNkZTQtODJmMy00ZjI0LTg3MjktODY5MWFmMTc5YTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPXPYdcl3noHLJZD0vphtRAOjCPbD2Vkvz4x KmyfoRxomZ8Jft9GJdaAUVG7ZweR8jaVvfyfjxmlq6aEIuuQvwVYRV6YJzP+OZjt i76kXzyxb6tVF/RAhOfn9CYrsfQvUQaXHX+NEJpH7Yz1oTnFvAtxXkUnqQqS2Ule 2d4PwYtlB9p6T+bSNn9ERUychMmJu9nfnMpWgt7HEmE3H694ZYoOXsg69PyB0c6H URNuLwzyCz23JXk5Rotdkg3Q8a0VsLz/BNlFdzWVyU+Q1UuCC3NzUT/md1JTTUAh P1g0Ftr0+IMVbz9gqiuA7Ipraoh/t8mui6PjI0N4HOW1afNgtwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLE5kVzObrpHehDt18vRzbWwxHHhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGE4MTk4YjUtYjY2Yy0z ODkzLTlkOTItZmU4ZjgwZTg4YTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJAnKe30qDn9eFw1XuvO5bHXv6siAGmLkkom7O6vXTHCYQWlGO4/ rhZ/8p5yAklZ+qw1JkQbvA1qDIiEW5aJyAmu6G1c8Lt0W5vl/JZncpfrvJ/ZGy4N FUET0ZTfvj1AaqJcaIX4297pA9mYQ/j+9nHC/FyBJwK2jTfiV3/2aKdUTPGkUj3Y U5l2Q45ATD/2/wn5oZZEWtFYCltH4kI3NJnMJnjuB4y/WCZgFUg5qtB4HsF5pMsI iWD5IROhjZJUrtjWFcdiMlh5quh7Tj1E1vjO6aV0BTzw+Lwpipgl6+DZjNDmYW9G OzRhKjNXekOWLn1sAJef0kPLBg5xgUnDup8= -----END CERTIFICATE-----Generated at Fri Apr 17 13:31:42 2026 by rpki-client