$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/209c2afd-1ef7-350d-ac7f-66af5a91c679.roa File: 209c2afd-1ef7-350d-ac7f-66af5a91c679.roa (raw, json) Hash identifier: FqBy6u8bKTBLUbH9ifaxh0V8OQMSNXUX/l77LVV6wb8= Subject key identifier: 23:5E:A3:24:2C:1D:A8:88:C0:F1:13:E4:5E:7D:AA:28:F0:C5:1B:33 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D59EA4CF62CA6258406241B00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/209c2afd-1ef7-350d-ac7f-66af5a91c679.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 32651 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:4c:f6:2c:a6:25:84:06:24:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=e82d2c06-cd45-40e8-99d9-76e876423921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ae:a6:ec:f6:34:22:f6:eb:e8:76:2e:fe:c0: b6:42:b1:56:56:79:d6:19:8e:a5:71:f3:52:6f:30: b7:0d:a8:a7:40:3e:a6:cd:c4:9a:c9:67:5d:df:a1: 01:81:67:17:a0:56:b2:0a:41:f0:9a:7b:b5:84:34: f0:13:d8:78:fa:7b:64:0b:f6:7c:ef:f9:0f:5b:36: c9:7b:9a:f4:a0:24:f7:f7:2e:ef:fb:8f:d6:5d:b5: 26:69:14:53:9e:33:ae:d1:65:b0:b6:91:32:1b:d8: 20:74:0c:76:5a:71:6f:8a:15:6a:c1:65:0e:3c:14: 56:d3:18:7e:d4:5e:a4:c0:b2:f9:f4:c4:0f:4a:62: 5b:de:4b:61:ad:6e:b0:68:e3:30:26:30:f4:08:cb: 94:82:16:49:40:68:b9:e5:ae:cb:49:9f:45:5b:3d: 4a:8b:ce:ef:ec:39:41:38:d3:2c:4e:68:1b:ba:23: bc:10:b0:3d:86:12:c3:86:27:c8:25:fc:a9:9f:87: 63:ca:56:5a:40:45:80:43:12:6f:ba:ad:c3:95:20: 87:03:fd:25:c9:70:8a:aa:3f:09:7e:47:58:6f:7b: 69:c6:9a:0f:67:ec:c0:bd:9c:4d:63:53:ef:e3:b3: 14:d3:c5:b8:25:a3:3c:ff:8e:e1:4b:82:b6:75:68: 03:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:5E:A3:24:2C:1D:A8:88:C0:F1:13:E4:5E:7D:AA:28:F0:C5:1B:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/209c2afd-1ef7-350d-ac7f-66af5a91c679.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:d3:ab:3b:09:69:da:69:10:3e:fd:da:a1:96:8c:22:23:97: 30:54:30:d8:c4:4b:86:1b:b8:f2:a3:cb:c2:2b:d7:f1:e0:d8: 2d:2e:05:86:35:7b:d1:25:21:28:dc:c1:d8:b0:2e:cf:31:a9: 63:09:10:be:6f:f1:b1:25:d6:26:fb:85:37:3c:35:13:0f:c1: 65:a9:0e:9d:ff:40:08:f7:90:06:13:a2:d0:62:55:67:ba:8e: d1:20:7c:df:4e:ad:ac:34:0e:13:09:29:6c:2b:e4:c3:89:63: 7d:f1:64:0a:48:12:a3:7b:ac:94:a5:c3:da:5c:28:b9:89:aa: 59:8b:e9:89:f9:bd:b6:42:b4:aa:bb:93:10:2b:72:a2:fd:b8: 8a:9a:ef:a2:f7:ab:b9:f5:a7:ea:49:b4:c4:73:7e:9d:2a:f4: 41:7a:ff:41:2e:1b:7e:f8:94:b1:50:49:02:5a:fb:2e:1d:c3: 83:25:a4:d4:c0:46:9a:fc:b4:a5:69:c3:d4:31:00:ca:03:81: c3:57:fa:1a:b8:d2:c2:dc:76:b0:8d:2c:b8:3d:2d:6a:36:76: 5c:34:4a:45:3f:2e:5d:d4:7d:2b:0f:65:68:38:2d:2d:f1:14: 7d:15:1a:3e:e7:47:dd:25:38:1b:76:05:db:91:9f:dd:e3:05: 75:39:76:46 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6kz2LKYlhAYkGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk ZTgyZDJjMDYtY2Q0NS00MGU4LTk5ZDktNzZlODc2NDIzOTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1K6m7PY0Ivbr6HYu/sC2QrFWVnnWGY6lcfNS bzC3DainQD6mzcSayWdd36EBgWcXoFayCkHwmnu1hDTwE9h4+ntkC/Z87/kPWzbJ e5r0oCT39y7v+4/WXbUmaRRTnjOu0WWwtpEyG9ggdAx2WnFvihVqwWUOPBRW0xh+ 1F6kwLL59MQPSmJb3kthrW6waOMwJjD0CMuUghZJQGi55a7LSZ9FWz1Ki87v7DlB ONMsTmgbuiO8ELA9hhLDhifIJfypn4djylZaQEWAQxJvuq3DlSCHA/0lyXCKqj8J fkdYb3tpxpoPZ+zAvZxNY1Pv47MU08W4JaM8/47hS4K2dWgDawIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCNeoyQsHaiIwPET5F59qijwxRszMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjA5YzJhZmQtMWVmNy0z NTBkLWFjN2YtNjZhZjVhOTFjNjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI/TqzsJadppED792qGWjCIjlzBUMNjES4YbuPKjy8Ir1/Hg2C0u BYY1e9ElISjcwdiwLs8xqWMJEL5v8bEl1ib7hTc8NRMPwWWpDp3/QAj3kAYTotBi VWe6jtEgfN9Oraw0DhMJKWwr5MOJY33xZApIEqN7rJSlw9pcKLmJqlmL6Yn5vbZC tKq7kxArcqL9uIqa76L3q7n1p+pJtMRzfp0q9EF6/0EuG374lLFQSQJa+y4dw4Ml pNTARpr8tKVpw9QxAMoDgcNX+hq40sLcdrCNLLg9LWo2dlw0SkU/Ll3UfSsPZWg4 LS3xFH0VGj7nR90lOBt2BduRn93jBXU5dkY= -----END CERTIFICATE-----Generated at Fri Apr 17 03:20:55 2026 by rpki-client