$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b7dee87-62db-3c9c-b11e-afd3a47d3da2.roa File: 0b7dee87-62db-3c9c-b11e-afd3a47d3da2.roa (raw, json) Hash identifier: /1yiR2RIuWMPOd0wrqEbrvxvLuQo9nZaq/e6QvnkFu4= Subject key identifier: 87:F7:C2:E2:A1:A6:0B:B1:0A:20:28:1F:3E:0A:A2:88:3A:0E:8A:EB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D59EA4B543339B06F0CFE73C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b7dee87-62db-3c9c-b11e-afd3a47d3da2.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 396585 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:4b:54:33:39:b0:6f:0c:fe:73:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=1a8008e2-7c2d-4b6d-9520-1d47bf551a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e8:e8:d8:14:be:ee:e1:ea:39:f9:fb:47:70: a3:2b:91:9a:55:42:24:06:84:38:72:1e:13:5b:8e: 3d:55:d2:d1:a6:4b:b1:ad:9b:d6:6f:6d:a0:64:d3: 0a:27:c9:90:be:28:63:5d:fe:91:9a:d0:b0:b5:a1: 4c:d8:c3:a4:3b:90:b6:b5:06:a6:1e:5b:c4:9e:43: 5c:26:65:e2:b0:32:c5:64:55:83:9a:90:03:ac:13: 16:75:ad:bb:cb:5e:50:fd:fb:53:c8:76:f0:1f:09: c2:79:33:fd:23:91:87:a3:96:9d:f9:06:ed:34:0d: bb:84:7b:09:0e:94:24:4c:ac:8b:db:c5:79:13:cc: 48:b7:8d:48:bb:40:f6:82:d8:78:cc:75:26:07:43: da:50:c0:d0:3f:4c:08:86:5e:65:1e:21:34:e5:56: ee:a4:fb:e7:ae:91:51:af:1c:b8:90:10:be:a0:8a: 7a:e5:34:55:5d:b5:44:be:bc:53:9b:79:d5:55:97: 96:03:23:4a:cf:6f:38:95:93:b5:0e:e0:5c:27:f8: c6:46:d7:48:c0:7a:d4:0e:df:da:c9:36:27:41:7e: 94:3e:6f:1d:68:10:53:7d:00:c1:7c:73:50:5e:3c: 4c:0e:d9:e2:0a:eb:e0:54:f7:72:c0:57:20:35:23: f6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F7:C2:E2:A1:A6:0B:B1:0A:20:28:1F:3E:0A:A2:88:3A:0E:8A:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b7dee87-62db-3c9c-b11e-afd3a47d3da2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:ac:05:29:7a:5c:8b:e7:72:1f:32:2b:a8:c0:7f:ac:95:16: cf:43:82:ca:f1:e1:eb:47:ca:53:1e:d2:f6:6a:80:42:14:f2: e4:b5:18:8a:97:56:7a:01:9f:33:e2:66:dd:c2:6b:20:1f:7e: 4e:17:c0:66:13:04:fa:3b:fd:cd:c6:b6:76:68:e7:42:b3:dd: 95:3d:47:49:be:72:6a:e8:62:b9:5f:89:a4:14:32:62:66:ce: f1:d5:8e:28:ff:e1:1b:0b:47:ce:9f:a2:c2:11:02:40:8f:d5: 91:73:4c:e5:4f:0b:d1:3a:79:1c:08:11:8a:b2:3c:a0:be:7f: a6:b8:fb:67:c3:a0:5e:40:f5:90:a2:a6:4d:07:ed:c6:66:45: 4c:5f:59:b8:df:9a:a8:e9:26:e9:d3:4c:02:d3:10:bc:6e:6c: 5c:3d:0c:e7:c1:5b:54:40:24:cf:15:3d:c9:95:ee:26:56:b2: d3:a3:8b:39:48:f0:bb:b5:11:e8:a3:98:bd:88:c9:4c:3b:54: 9f:ad:98:b6:7c:9c:55:c5:ee:89:13:df:6d:f7:e1:85:f3:d8: 6d:46:1f:cf:15:19:41:dd:b9:4e:8b:9e:5f:97:35:cf:1e:1e: 96:d7:51:82:e8:b6:58:50:9b:f9:12:e1:cf:16:0e:31:1a:bc: 57:22:08:5a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6ktUMzmwbwz+c8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk MWE4MDA4ZTItN2MyZC00YjZkLTk1MjAtMWQ0N2JmNTUxYTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+jo2BS+7uHqOfn7R3CjK5GaVUIkBoQ4ch4T W449VdLRpkuxrZvWb22gZNMKJ8mQvihjXf6RmtCwtaFM2MOkO5C2tQamHlvEnkNc JmXisDLFZFWDmpADrBMWda27y15Q/ftTyHbwHwnCeTP9I5GHo5ad+QbtNA27hHsJ DpQkTKyL28V5E8xIt41Iu0D2gth4zHUmB0PaUMDQP0wIhl5lHiE05VbupPvnrpFR rxy4kBC+oIp65TRVXbVEvrxTm3nVVZeWAyNKz284lZO1DuBcJ/jGRtdIwHrUDt/a yTYnQX6UPm8daBBTfQDBfHNQXjxMDtniCuvgVPdywFcgNSP2gQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIf3wuKhpguxCiAoHz4Koog6DorrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGI3ZGVlODctNjJkYi0z YzljLWIxMWUtYWZkM2E0N2QzZGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIisBSl6XIvnch8yK6jAf6yVFs9Dgsrx4etHylMe0vZqgEIU8uS1 GIqXVnoBnzPiZt3CayAffk4XwGYTBPo7/c3GtnZo50Kz3ZU9R0m+cmroYrlfiaQU MmJmzvHVjij/4RsLR86fosIRAkCP1ZFzTOVPC9E6eRwIEYqyPKC+f6a4+2fDoF5A 9ZCipk0H7cZmRUxfWbjfmqjpJunTTALTELxubFw9DOfBW1RAJM8VPcmV7iZWstOj izlI8Lu1EeijmL2IyUw7VJ+tmLZ8nFXF7okT32334YXz2G1GH88VGUHduU6Lnl+X Nc8eHpbXUYLotlhQm/kS4c8WDjEavFciCFo= -----END CERTIFICATE-----Generated at Fri Apr 17 10:00:55 2026 by rpki-client