$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/208ca7c8-f9a8-356a-95b8-980a48341daa.roa File: 208ca7c8-f9a8-356a-95b8-980a48341daa.roa (raw, json) Hash identifier: GxP+5uRzGgYykbiqf1x0SmsJhebZvUHFmc91tqpvnSs= Subject key identifier: 03:DC:00:83:F8:22:93:6F:AE:65:13:6B:1D:38:F8:F2:99:75:72:BD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D732BD38283D3095CFD1E6F00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/208ca7c8-f9a8-356a-95b8-980a48341daa.roa Signing time: Thu 09 Apr 2026 14:07:50 +0000 ROA not before: Thu 09 Apr 2026 14:07:50 +0000 ROA not after: Wed 08 Jul 2026 14:07:50 +0000 asID: 396604 IP address blocks: 2001:500:133::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:73:2b:d3:82:83:d3:09:5c:fd:1e:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 9 14:07:50 2026 GMT Not After : Jul 8 14:07:50 2026 GMT Subject: CN=3d39ff95-450f-4f79-b733-4f08e99deeed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ca:36:b8:66:b2:cb:38:dc:96:29:7e:10:3f: 5d:df:ac:5b:95:aa:08:5e:ed:6b:3f:ef:9b:69:39: 42:71:67:a7:89:7d:76:35:e5:80:95:3c:e3:d1:8a: 57:50:f6:39:d4:11:bd:9d:0a:0f:dc:8f:25:7e:0c: 50:6c:32:39:62:c8:12:e9:dd:47:91:56:44:f8:d7: 8b:e7:90:46:a8:29:0d:ab:af:89:cc:0c:21:1b:90: a6:41:06:f8:c3:e4:40:f2:73:f5:55:2d:6d:fd:8f: 8f:b0:38:f1:6a:f3:56:a0:fb:cc:7f:a1:5a:fa:73: 37:a3:51:3c:3e:c6:ac:68:77:30:19:52:2d:24:a2: 20:ec:0a:b2:96:85:b9:a7:3f:b0:75:f0:3b:16:77: 7f:5f:f1:30:f2:da:31:0d:e5:e8:6c:47:94:62:b6: 5c:c4:a4:fd:16:a9:36:65:7e:88:ce:9b:36:24:a8: d1:16:e7:cd:80:f2:08:17:f1:32:c0:47:4d:3d:38: 81:3e:2f:78:fa:0b:c6:49:30:ee:9b:5b:f4:77:43: 4b:4f:5f:c1:ed:4b:76:a7:59:6c:7d:77:a2:6a:fe: 42:a6:a1:69:30:e9:1a:b0:8d:18:b9:20:ee:fe:a7: 44:ee:a6:35:83:11:a8:ef:4f:50:07:50:9a:70:a6: 07:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:DC:00:83:F8:22:93:6F:AE:65:13:6B:1D:38:F8:F2:99:75:72:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/208ca7c8-f9a8-356a-95b8-980a48341daa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:0d:a9:b8:80:d9:01:50:d6:f4:9f:63:c0:25:eb:0a:de:30: 1d:9b:4c:d4:11:0e:24:38:aa:65:e3:9a:47:fd:09:37:8e:c8: ea:e7:6b:33:c9:7a:ca:f9:d2:2b:8a:16:ba:55:2b:a1:38:25: bf:ab:9e:e2:a8:fa:c9:2e:dc:9c:59:1b:5e:c2:89:87:a2:08: 6d:ee:65:98:f1:e3:5e:e6:a9:c2:da:07:9e:a4:c3:9d:be:35: 6f:49:5a:48:eb:f7:a7:b9:94:fe:5d:be:91:9b:f5:29:cf:9a: 0c:9d:20:5a:a1:d0:b5:82:2e:8c:1a:7b:7b:7f:74:4d:fa:b2: ad:78:8c:e6:fd:e8:ac:3e:37:36:03:3e:35:0c:ef:8d:91:87: 58:d4:44:21:1b:5c:8d:f7:4e:50:e0:28:71:f5:0b:32:6b:18: 55:0c:60:4a:ee:65:7f:72:5e:14:cb:a6:9d:c6:fc:4f:5b:c4: a9:90:74:f2:f9:80:68:95:79:cf:6d:cb:c5:a6:de:cf:88:20: 1f:65:a5:91:04:34:aa:92:e4:86:6f:e8:dc:0c:2c:51:78:44: 0d:31:33:42:de:d4:8f:df:80:fd:4d:5d:8f:01:99:16:3d:97: 7d:c9:90:2e:45:db:0e:f8:81:e4:7c:cc:64:1b:de:db:b8:d1: 00:0b:9b:51 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1zK9OCg9MJXP0ebwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwOTE0MDc1MFoXDTI2MDcwODE0MDc1MFowLzEtMCsGA1UEAxMk M2QzOWZmOTUtNDUwZi00Zjc5LWI3MzMtNGYwOGU5OWRlZWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmco2uGayyzjclil+ED9d36xblaoIXu1rP++b aTlCcWeniX12NeWAlTzj0YpXUPY51BG9nQoP3I8lfgxQbDI5YsgS6d1HkVZE+NeL 55BGqCkNq6+JzAwhG5CmQQb4w+RA8nP1VS1t/Y+PsDjxavNWoPvMf6Fa+nM3o1E8 PsasaHcwGVItJKIg7AqyloW5pz+wdfA7Fnd/X/Ew8toxDeXobEeUYrZcxKT9Fqk2 ZX6Izps2JKjRFufNgPIIF/EywEdNPTiBPi94+gvGSTDum1v0d0NLT1/B7Ut2p1ls fXeiav5CpqFpMOkasI0YuSDu/qdE7qY1gxGo709QB1CacKYHvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAPcAIP4IpNvrmUTax04+PKZdXK9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjA4Y2E3YzgtZjlhOC0z NTZhLTk1YjgtOTgwYTQ4MzQxZGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAINqbiA2QFQ1vSfY8Al6wreMB2bTNQRDiQ4qmXjmkf9CTeOyOrn azPJesr50iuKFrpVK6E4Jb+rnuKo+sku3JxZG17CiYeiCG3uZZjx417mqcLaB56k w52+NW9JWkjr96e5lP5dvpGb9SnPmgydIFqh0LWCLowae3t/dE36sq14jOb96Kw+ NzYDPjUM742Rh1jURCEbXI33TlDgKHH1CzJrGFUMYEruZX9yXhTLpp3G/E9bxKmQ dPL5gGiVec9ty8Wm3s+IIB9lpZEENKqS5IZv6NwMLFF4RA0xM0Le1I/fgP1NXY8B mRY9l33JkC5F2w74geR8zGQb3tu40QALm1E= -----END CERTIFICATE-----Generated at Fri Apr 17 15:55:05 2026 by rpki-client