$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25c49a2f-6283-3487-adff-c5c6998fbac4.roa File: 25c49a2f-6283-3487-adff-c5c6998fbac4.roa (raw, json) Hash identifier: rmf4hJxUqy1fB8ddrKEBP6sYRHKiH3nD+mxDMAzMt9o= Subject key identifier: B4:3A:70:01:ED:B6:E1:9A:A6:50:89:BF:1F:20:12:33:3A:6D:B9:21 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D6DA192DCDA27CCD8BB9D6880 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25c49a2f-6283-3487-adff-c5c6998fbac4.roa Signing time: Tue 07 Apr 2026 14:30:14 +0000 ROA not before: Tue 07 Apr 2026 14:30:14 +0000 ROA not after: Mon 06 Jul 2026 14:30:14 +0000 asID: 20172 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:a1:92:dc:da:27:cc:d8:bb:9d:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 7 14:30:14 2026 GMT Not After : Jul 6 14:30:14 2026 GMT Subject: CN=618376dc-5f1b-42eb-bf3b-b80ae4b44751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:89:d8:46:30:cc:05:e4:48:05:86:c1:6d:7d: ec:3b:b0:85:d9:98:b4:df:26:d1:fc:38:60:bb:06: d6:92:69:0e:92:20:f8:81:4f:8a:eb:f4:d2:42:29: e7:54:7c:e5:5c:f9:fc:51:a7:c9:1a:33:e0:6b:9d: 68:db:a3:48:fe:35:5f:d8:8a:f3:e3:d1:06:43:6d: 5e:17:c3:9b:3c:cb:2d:f9:32:fc:b2:49:b3:9e:23: c9:c7:11:ed:55:5f:70:89:04:65:7d:1e:57:0f:e6: a9:12:7b:4e:2c:2c:fd:fe:90:58:73:f2:f1:89:5d: 9f:f4:a0:a5:3a:26:09:96:50:99:fa:36:5e:a2:cd: a6:9f:16:ef:cc:2d:50:9c:75:7f:c4:72:3f:96:48: 12:14:3e:95:3a:4e:86:ed:a4:58:f3:90:7c:22:68: ce:80:45:4c:c9:c8:0b:08:27:22:a7:f3:43:f1:30: 80:db:a4:44:26:fc:fd:a4:ca:7a:ca:9c:34:1c:83: fd:5c:cd:4d:df:bd:ae:93:59:fa:aa:d3:a9:c0:d1: c4:d2:e0:6f:2d:63:98:e3:44:eb:e3:33:f5:c4:43: 85:95:dc:f4:9c:f6:a3:2d:82:a3:60:59:cc:2a:f7: 52:ca:b7:19:cf:21:cd:b7:89:06:21:57:52:cd:fb: 39:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3A:70:01:ED:B6:E1:9A:A6:50:89:BF:1F:20:12:33:3A:6D:B9:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25c49a2f-6283-3487-adff-c5c6998fbac4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:01:1a:11:b0:28:22:0c:84:b1:24:c7:dd:ff:0d:a9:7a:77: f0:4a:68:32:8d:92:dd:66:14:b4:6d:f2:60:99:48:01:92:ad: e6:d2:58:e2:53:33:d8:74:fd:59:a9:0e:17:63:e0:c4:2c:ec: a7:04:42:15:aa:e1:cf:05:5e:2b:5f:3b:4e:19:9f:b9:cb:55: 1c:b3:5c:3b:9d:b0:72:14:f2:29:c0:73:07:16:44:87:af:36: 42:95:e7:a3:a4:70:bd:56:f7:b2:cb:f2:dc:92:b5:72:d1:c2: d7:b6:5b:ec:f6:cf:e6:d9:26:ff:33:34:f7:32:80:49:33:d0: b7:84:ea:5e:81:f5:c7:65:91:03:a2:6f:cb:e8:b2:37:74:d5: 37:2d:3b:8b:f2:d9:20:c5:4b:4d:de:0a:28:ad:09:e0:83:9c: c4:1a:62:46:14:d1:0f:69:27:c7:49:4c:6b:85:1c:9e:f2:d5: a1:1c:3e:11:d2:30:96:c8:57:2c:94:78:7b:01:5d:0e:b5:55: c9:5b:87:ea:f6:8c:7b:2a:6d:c2:60:5d:b9:9d:d3:e1:69:d4: f2:71:ae:fa:0c:f1:3c:c7:6e:81:8d:9d:c7:99:76:24:6f:6e: 19:82:73:19:64:19:3f:65:2f:e0:39:a4:4e:aa:a0:3f:9e:49: 0e:cb:42:c9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1toZLc2ifM2LudaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwNzE0MzAxNFoXDTI2MDcwNjE0MzAxNFowLzEtMCsGA1UEAxMk NjE4Mzc2ZGMtNWYxYi00MmViLWJmM2ItYjgwYWU0YjQ0NzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1onYRjDMBeRIBYbBbX3sO7CF2Zi03ybR/Dhg uwbWkmkOkiD4gU+K6/TSQinnVHzlXPn8UafJGjPga51o26NI/jVf2Irz49EGQ21e F8ObPMst+TL8skmzniPJxxHtVV9wiQRlfR5XD+apEntOLCz9/pBYc/LxiV2f9KCl OiYJllCZ+jZeos2mnxbvzC1QnHV/xHI/lkgSFD6VOk6G7aRY85B8ImjOgEVMycgL CCcip/ND8TCA26REJvz9pMp6ypw0HIP9XM1N372uk1n6qtOpwNHE0uBvLWOY40Tr 4zP1xEOFldz0nPajLYKjYFnMKvdSyrcZzyHNt4kGIVdSzfs5GQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLQ6cAHttuGaplCJvx8gEjM6bbkhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjVjNDlhMmYtNjI4My0z NDg3LWFkZmYtYzVjNjk5OGZiYWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAABGhGwKCIMhLEkx93/Dal6d/BKaDKNkt1mFLRt8mCZSAGSrebS WOJTM9h0/VmpDhdj4MQs7KcEQhWq4c8FXitfO04Zn7nLVRyzXDudsHIU8inAcwcW RIevNkKV56OkcL1W97LL8tyStXLRwte2W+z2z+bZJv8zNPcygEkz0LeE6l6B9cdl kQOib8vosjd01TctO4vy2SDFS03eCiitCeCDnMQaYkYU0Q9pJ8dJTGuFHJ7y1aEc PhHSMJbIVyyUeHsBXQ61Vclbh+r2jHsqbcJgXbmd0+Fp1PJxrvoM8TzHboGNnceZ diRvbhmCcxlkGT9lL+A5pE6qoD+eSQ7LQsk= -----END CERTIFICATE-----Generated at Fri Apr 17 22:56:38 2026 by rpki-client