$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b57f601-4ff4-33d1-82da-5ddff70a8df3.roa File: 0b57f601-4ff4-33d1-82da-5ddff70a8df3.roa (raw, json) Hash identifier: edoNDstcslH6uw8zjjNNeB2p+HA6ygQSKHU3lbiNykk= Subject key identifier: 3C:28:06:E9:E6:B7:D4:23:AB:5F:9F:51:59:85:37:B0:CE:43:ED:E1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D5E1A7FC2B1293650B53E2F80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b57f601-4ff4-33d1-82da-5ddff70a8df3.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 397203 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:7f:c2:b1:29:36:50:b5:3e:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=fbbcbb5a-a3d1-49b8-9f83-c62547f5a56e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4e:37:f8:1e:f0:bc:55:55:c5:3a:85:3b:c2: 38:84:b7:a9:c5:97:3c:2e:e2:de:4b:20:1e:0b:fc: ec:2e:d1:e5:35:93:a6:ce:75:a0:9c:41:d0:98:56: 21:6f:29:2c:0e:cd:e8:93:34:11:97:1c:6d:7d:17: c3:6b:78:65:13:f9:37:53:85:41:bd:3c:85:0e:87: ca:c7:34:15:00:8c:0e:99:b7:37:ad:9c:4e:23:b5: 40:2e:45:86:f0:dc:e9:6e:92:f4:20:b3:4b:93:b7: 89:be:f1:79:51:7d:e3:4d:bd:52:91:b1:f3:da:11: e8:f0:0b:76:f3:f8:09:a6:89:d0:14:a8:5b:f7:65: d9:46:04:9e:51:e8:db:7f:9b:1b:14:e4:fa:10:bd: 15:dc:b5:cb:5a:d8:83:11:15:8a:eb:dd:b1:ee:3e: 25:75:7a:98:8d:be:f5:13:71:6d:9e:26:5b:34:2c: c6:be:bd:ad:1f:4e:b5:ea:34:86:ec:70:cf:9a:a3: e6:83:03:90:3a:ef:66:2f:5c:88:0f:b3:2c:87:80: 20:a3:79:73:48:08:b0:e2:8f:c1:a8:df:75:0f:95: 44:a5:b9:ce:9e:ef:fd:cf:6d:06:b0:1d:ed:30:ce: 51:62:de:3a:67:50:3c:84:8d:71:22:fd:13:a0:ce: fe:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:28:06:E9:E6:B7:D4:23:AB:5F:9F:51:59:85:37:B0:CE:43:ED:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b57f601-4ff4-33d1-82da-5ddff70a8df3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:e4:ae:ff:a8:ae:25:d2:7b:62:19:a8:24:9d:81:4a:d6:22: cb:40:6a:9c:d3:74:58:60:12:0a:3b:a2:ff:6d:f0:6e:d8:d8: f4:24:2d:e5:00:92:90:f1:10:26:49:d5:8f:3a:bd:b5:32:e2: 38:97:6b:59:cd:eb:db:2d:e1:00:de:43:cf:cf:cb:bc:93:28: 40:fe:78:a7:82:c2:9c:7b:f4:20:a3:bd:3b:af:ac:a8:41:d1: cc:c6:69:bd:9b:67:d2:3b:5b:c4:f4:4c:62:80:e1:5d:52:bd: 89:f7:0c:80:21:4e:0c:e0:5c:d7:4e:e2:6b:26:ae:59:fe:98: 22:95:f8:28:8b:36:b7:61:bf:7c:bc:fd:cd:32:0e:9b:3c:5c: 0d:06:67:7e:4a:7b:f4:2d:ff:e6:34:ff:84:38:fd:b2:0f:1e: 95:45:b2:0c:9e:ff:44:62:b0:a9:45:34:46:c3:fb:32:e1:56: 26:3e:c2:40:2a:9a:38:22:82:ee:d2:43:7e:e8:f3:81:57:ab: 05:10:1e:b4:da:ba:c5:e5:71:97:79:3a:22:29:e0:b1:01:e9: 6a:77:19:8c:b5:c7:98:c5:2a:22:6d:28:40:42:c2:d9:90:3e: 03:83:d5:47:42:03:95:50:c5:c2:61:26:16:f1:5d:b5:6e:dd: 8f:a6:ca:e8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1eGn/CsSk2ULU+L4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk ZmJiY2JiNWEtYTNkMS00OWI4LTlmODMtYzYyNTQ3ZjVhNTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlE43+B7wvFVVxTqFO8I4hLepxZc8LuLeSyAe C/zsLtHlNZOmznWgnEHQmFYhbyksDs3okzQRlxxtfRfDa3hlE/k3U4VBvTyFDofK xzQVAIwOmbc3rZxOI7VALkWG8NzpbpL0ILNLk7eJvvF5UX3jTb1SkbHz2hHo8At2 8/gJponQFKhb92XZRgSeUejbf5sbFOT6EL0V3LXLWtiDERWK692x7j4ldXqYjb71 E3FtniZbNCzGvr2tH0616jSG7HDPmqPmgwOQOu9mL1yID7Msh4Ago3lzSAiw4o/B qN91D5VEpbnOnu/9z20GsB3tMM5RYt46Z1A8hI1xIv0ToM7+6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDwoBunmt9Qjq1+fUVmFN7DOQ+3hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGI1N2Y2MDEtNGZmNC0z M2QxLTgyZGEtNWRkZmY3MGE4ZGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADrkrv+oriXSe2IZqCSdgUrWIstAapzTdFhgEgo7ov9t8G7Y2PQk LeUAkpDxECZJ1Y86vbUy4jiXa1nN69st4QDeQ8/Py7yTKED+eKeCwpx79CCjvTuv rKhB0czGab2bZ9I7W8T0TGKA4V1SvYn3DIAhTgzgXNdO4msmrln+mCKV+CiLNrdh v3y8/c0yDps8XA0GZ35Ke/Qt/+Y0/4Q4/bIPHpVFsgye/0RisKlFNEbD+zLhViY+ wkAqmjgigu7SQ37o84FXqwUQHrTausXlcZd5OiIp4LEB6Wp3GYy1x5jFKiJtKEBC wtmQPgOD1UdCA5VQxcJhJhbxXbVu3Y+myug= -----END CERTIFICATE-----Generated at Fri Apr 17 10:34:35 2026 by rpki-client