$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/15cb3000-86fb-3603-9c23-d2fccbcc65a3.roa File: 15cb3000-86fb-3603-9c23-d2fccbcc65a3.roa (raw, json) Hash identifier: lW/WDNNcMi1smY6orV9pm3GxQ6dWNjFm4Znh4emX9Yw= Subject key identifier: EE:D5:BD:88:55:29:8B:AC:78:7A:88:9A:16:05:47:52:61:88:FD:1C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D59EA48644D8EF54183D30CA0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/15cb3000-86fb-3603-9c23-d2fccbcc65a3.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 40717 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:48:64:4d:8e:f5:41:83:d3:0c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=08148d57-0c40-4504-ab41-2982434643fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2f:76:cf:03:08:2c:96:20:6c:86:ad:1c:2a: 56:aa:bd:5a:1f:92:09:e1:86:6f:7a:65:af:ae:34: b0:3e:f6:17:36:87:c5:cb:b4:65:d4:8c:cc:c6:e4: ce:ac:e1:eb:7f:82:ad:fe:d7:01:7e:33:01:4e:ee: f0:27:3e:ef:2c:72:2e:f6:bf:59:d9:de:bb:99:2b: f6:8d:3d:c3:16:0f:74:0d:d6:25:59:29:4c:82:05: 1c:bb:f7:58:c7:14:6b:e0:e3:f3:3b:50:29:56:57: 51:c4:44:13:e4:f7:ce:ad:2c:9e:67:12:b1:5e:74: 3e:68:22:af:bb:2c:68:24:b5:74:be:88:55:29:f6: 89:ca:f1:75:bb:47:b4:c5:a1:9a:c5:f6:f0:ad:ad: 29:05:f1:6c:20:e5:ff:0b:cf:f1:cd:9d:15:24:49: 1a:aa:f6:70:81:d1:2d:3a:e6:a0:cd:0a:8a:9d:34: d8:44:f9:46:d5:c5:88:83:4f:df:e8:6a:a8:ca:08: 52:9b:28:bf:36:d5:ec:05:87:94:f8:1e:79:ce:88: dc:12:10:6e:36:7e:ea:2d:1f:fc:68:94:c5:10:31: 08:d4:30:7a:5e:3c:29:80:ab:68:10:07:f8:cd:97: 47:a4:68:e5:91:85:d5:0b:43:c7:4d:7b:ba:79:b0: c7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:D5:BD:88:55:29:8B:AC:78:7A:88:9A:16:05:47:52:61:88:FD:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/15cb3000-86fb-3603-9c23-d2fccbcc65a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:8a:0a:a4:1f:2e:df:47:8f:66:cf:62:5a:d7:47:b2:5c:b9: b5:96:03:63:8e:18:78:ba:cf:2b:74:48:19:ba:22:8f:06:22: 35:13:9a:f8:57:43:b0:0d:a0:7c:54:05:d1:1b:bb:1f:21:90: cf:60:ca:a9:cd:bc:89:24:1f:dd:fe:43:df:05:58:62:4e:4e: 72:94:3a:d5:af:47:d0:60:d5:34:4c:b4:9e:e8:b6:6b:d9:36: e4:c7:7b:eb:f1:81:e8:08:a5:84:ba:0d:c5:00:58:ff:95:ce: 22:91:97:a2:3c:8a:6a:8c:27:42:77:f1:58:b5:40:9d:30:af: 1d:f0:46:68:ca:95:59:90:ce:7b:c4:e0:a0:2a:cb:6a:2c:94: 70:82:b9:c1:eb:97:72:6d:97:7e:4c:24:b1:e5:25:69:c2:a2: 69:04:76:24:ba:06:96:1e:c8:6a:6f:fa:87:7c:8f:fa:cf:87: 9f:8d:78:04:e6:bc:5a:39:e3:e5:b7:70:6a:0d:11:f6:a3:a8: 1b:fd:a3:58:11:55:cd:03:b0:54:03:5c:c0:44:51:8f:44:cf: ab:af:0e:48:8c:86:27:a5:2d:f4:33:99:71:1d:19:a5:cc:91: 25:aa:53:69:1c:0a:3f:70:5e:4f:20:7a:32:e4:e6:2b:50:56: 8a:61:5d:8e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6khkTY71QYPTDKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk MDgxNDhkNTctMGM0MC00NTA0LWFiNDEtMjk4MjQzNDY0M2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC92zwMILJYgbIatHCpWqr1aH5IJ4YZvemWv rjSwPvYXNofFy7Rl1IzMxuTOrOHrf4Kt/tcBfjMBTu7wJz7vLHIu9r9Z2d67mSv2 jT3DFg90DdYlWSlMggUcu/dYxxRr4OPzO1ApVldRxEQT5PfOrSyeZxKxXnQ+aCKv uyxoJLV0vohVKfaJyvF1u0e0xaGaxfbwra0pBfFsIOX/C8/xzZ0VJEkaqvZwgdEt OuagzQqKnTTYRPlG1cWIg0/f6GqoyghSmyi/NtXsBYeU+B55zojcEhBuNn7qLR/8 aJTFEDEI1DB6XjwpgKtoEAf4zZdHpGjlkYXVC0PHTXu6ebDHmQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO7VvYhVKYuseHqImhYFR1JhiP0cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTVjYjMwMDAtODZmYi0z NjAzLTljMjMtZDJmY2NiY2M2NWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJSKCqQfLt9Hj2bPYlrXR7JcubWWA2OOGHi6zyt0SBm6Io8GIjUT mvhXQ7ANoHxUBdEbux8hkM9gyqnNvIkkH93+Q98FWGJOTnKUOtWvR9Bg1TRMtJ7o tmvZNuTHe+vxgegIpYS6DcUAWP+VziKRl6I8imqMJ0J38Vi1QJ0wrx3wRmjKlVmQ znvE4KAqy2oslHCCucHrl3Jtl35MJLHlJWnComkEdiS6BpYeyGpv+od8j/rPh5+N eATmvFo54+W3cGoNEfajqBv9o1gRVc0DsFQDXMBEUY9Ez6uvDkiMhielLfQzmXEd GaXMkSWqU2kcCj9wXk8gejLk5itQVophXY4= -----END CERTIFICATE-----Generated at Fri Apr 17 14:09:05 2026 by rpki-client