$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/15deaa4e-ff97-349f-9df6-19a0d6fc3a99.roa File: 15deaa4e-ff97-349f-9df6-19a0d6fc3a99.roa (raw, json) Hash identifier: RSXHWtgy1uglfueQhr38N2xzIDL5k4R8VlWzLVxfHYo= Subject key identifier: 1A:65:FE:7B:A0:21:22:C8:5F:D8:3C:BE:EF:A8:49:CB:6E:18:7D:F7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D5E1A79F2132DD2532FE31E10 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/15deaa4e-ff97-349f-9df6-19a0d6fc3a99.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 396544 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:79:f2:13:2d:d2:53:2f:e3:1e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=d8b66d4a-d7e0-4e26-8e60-dbf5fd4e63c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:2a:3e:96:6e:5e:81:3b:c6:e9:ee:af:6d:a6: 40:2e:bc:b3:0b:1b:d6:8e:93:27:bb:3d:27:9e:31: 59:92:8e:2e:f8:e6:c9:ce:c5:34:fb:9e:c3:48:c2: 80:c4:7e:65:aa:01:ed:98:54:3f:fe:63:45:57:91: 4f:aa:76:27:86:ab:43:b3:41:e9:70:cc:eb:dd:ea: 92:12:0c:af:67:b6:28:be:eb:5b:c8:57:c5:c8:84: 31:3a:c8:0b:90:86:0f:d4:47:75:7f:e8:e7:3e:59: 0d:77:45:62:6f:7a:20:ea:4a:ca:97:cd:93:dd:7a: 63:f3:f8:64:01:33:76:80:ed:01:f0:14:19:c1:b4: 7d:53:f9:35:ec:dc:2f:c3:21:ed:67:c7:f4:35:64: 70:91:56:40:85:c8:04:38:ef:d8:56:a5:39:db:8e: 42:9f:7e:6f:61:b7:06:58:14:31:e8:50:b6:7e:9e: 81:92:03:d3:06:d6:c9:0c:8f:c3:d7:0c:8f:aa:26: 7a:1c:94:8f:8d:f5:dd:5b:6b:7a:6a:06:30:e4:fa: 97:ab:66:6b:05:03:39:70:bf:9c:97:65:81:43:50: 56:1c:bf:f1:e0:79:36:a0:40:43:ce:69:91:c5:bf: c0:76:e2:99:05:42:52:6a:64:67:76:40:8f:be:72: 9b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:65:FE:7B:A0:21:22:C8:5F:D8:3C:BE:EF:A8:49:CB:6E:18:7D:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/15deaa4e-ff97-349f-9df6-19a0d6fc3a99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:e8:a2:84:5c:35:6f:55:9b:96:d6:a0:19:03:58:e9:95:79: 23:9d:fd:1b:2b:22:5f:fc:46:64:2e:b5:c7:c6:29:6e:39:09: bf:92:da:52:6f:de:bc:b5:50:07:2f:b9:ac:39:da:89:4c:81: 2e:93:16:f6:d7:58:47:c5:41:a0:7b:d9:12:5d:2a:57:59:4c: 2f:6e:80:03:04:9c:22:21:55:20:f9:98:10:0e:22:d0:d4:a1: 02:2e:d6:9c:63:1a:fd:2a:0b:85:16:62:d1:d5:83:c3:00:ec: 8c:b4:a1:26:8a:ff:b5:40:4f:04:da:a3:f0:f7:94:06:46:d6: 27:1c:fd:d7:a2:d7:c5:3a:e7:88:45:95:49:57:3f:2a:d3:4f: 60:36:3e:a4:c1:4c:91:9c:3a:40:12:ff:99:45:47:69:1f:e0: d5:52:31:ed:1e:ff:3a:a9:e3:59:c4:24:db:0a:74:20:0f:9f: 4f:af:2e:43:4d:2f:3f:3c:2b:c0:2e:ae:fa:74:0a:db:6e:24: eb:9a:a8:6e:7e:1d:63:02:47:1c:31:68:3a:a6:3a:bc:14:36: fa:80:30:3d:4c:41:d3:63:40:e9:85:61:3d:bb:b7:0f:0c:30: 01:79:a9:07:57:ed:91:1d:77:11:84:6f:31:1c:46:7c:c2:12: 01:f0:57:2d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1eGnnyEy3SUy/jHhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk ZDhiNjZkNGEtZDdlMC00ZTI2LThlNjAtZGJmNWZkNGU2M2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhio+lm5egTvG6e6vbaZALryzCxvWjpMnuz0n njFZko4u+ObJzsU0+57DSMKAxH5lqgHtmFQ//mNFV5FPqnYnhqtDs0HpcMzr3eqS EgyvZ7YovutbyFfFyIQxOsgLkIYP1Ed1f+jnPlkNd0Vib3og6krKl82T3Xpj8/hk ATN2gO0B8BQZwbR9U/k17NwvwyHtZ8f0NWRwkVZAhcgEOO/YVqU5245Cn35vYbcG WBQx6FC2fp6BkgPTBtbJDI/D1wyPqiZ6HJSPjfXdW2t6agYw5PqXq2ZrBQM5cL+c l2WBQ1BWHL/x4Hk2oEBDzmmRxb/AduKZBUJSamRndkCPvnKbAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBpl/nugISLIX9g8vu+oSctuGH33MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTVkZWFhNGUtZmY5Ny0z NDlmLTlkZjYtMTlhMGQ2ZmMzYTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKzoooRcNW9Vm5bWoBkDWOmVeSOd/RsrIl/8RmQutcfGKW45Cb+S 2lJv3ry1UAcvuaw52olMgS6TFvbXWEfFQaB72RJdKldZTC9ugAMEnCIhVSD5mBAO ItDUoQIu1pxjGv0qC4UWYtHVg8MA7Iy0oSaK/7VATwTao/D3lAZG1icc/dei18U6 54hFlUlXPyrTT2A2PqTBTJGcOkAS/5lFR2kf4NVSMe0e/zqp41nEJNsKdCAPn0+v LkNNLz88K8Aurvp0CttuJOuaqG5+HWMCRxwxaDqmOrwUNvqAMD1MQdNjQOmFYT27 tw8MMAF5qQdX7ZEddxGEbzEcRnzCEgHwVy0= -----END CERTIFICATE-----Generated at Fri Apr 17 07:21:21 2026 by rpki-client