$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/285dc714-a143-32e7-bbeb-52ac73aac939.roa File: 285dc714-a143-32e7-bbeb-52ac73aac939.roa (raw, json) Hash identifier: LG2o1ur+6kyYNfTQoPPxBlRX3lxolZYVZKuR2g8fUg0= Subject key identifier: 35:05:02:9F:D5:AD:C3:97:8A:DA:B0:9C:9B:F9:04:01:C5:55:D1:72 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D6DA1863B2E01E8A8EAC2FC70 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/285dc714-a143-32e7-bbeb-52ac73aac939.roa Signing time: Tue 07 Apr 2026 14:30:08 +0000 ROA not before: Tue 07 Apr 2026 14:30:08 +0000 ROA not after: Mon 06 Jul 2026 14:30:08 +0000 asID: 396578 IP address blocks: 2001:500:13f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:a1:86:3b:2e:01:e8:a8:ea:c2:fc:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 7 14:30:08 2026 GMT Not After : Jul 6 14:30:08 2026 GMT Subject: CN=9db8b9ab-bbd2-44f7-89bb-36b14f48a437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ec:37:56:e2:af:6d:b7:2b:e9:cc:e7:75:e4: 69:e2:ee:41:b4:7e:8d:0c:0d:c8:3c:d7:1b:8b:a7: 40:11:36:03:83:09:d3:6f:3c:e4:76:1a:71:10:69: 0d:aa:68:b8:6a:0b:dc:db:2c:78:81:20:bb:ab:03: 3a:f3:ae:b1:65:ce:0d:74:72:b4:ac:0d:c4:db:fe: 83:cf:43:b5:3e:19:b1:a6:5d:50:b1:4f:f0:9e:76: f7:f9:b5:58:a7:12:b6:c6:dd:ce:da:d9:39:60:da: 5e:b0:80:0c:8d:21:67:42:a3:11:4b:85:ec:dd:5f: 5a:6e:c7:b4:d0:32:b9:54:fd:e7:f7:a6:22:94:2a: df:10:28:33:d8:77:43:bf:96:80:18:b3:55:13:ad: 70:85:0e:c5:e1:40:ac:64:b2:f7:76:09:b6:64:69: 96:8a:40:b6:bb:98:f1:7a:da:fe:33:66:e3:61:5f: 64:b4:f8:cd:ec:72:68:16:00:ea:ab:95:e8:cc:39: 88:7c:34:83:29:9b:76:ae:76:c4:d9:61:b9:88:05: 82:fa:68:05:34:09:05:00:a9:9b:57:14:75:c5:77: 72:28:bd:01:0d:f4:db:ed:1a:f6:cf:de:e4:3a:00: 34:a4:1b:5c:7f:42:13:f4:fa:6a:5f:ab:20:2d:c5: bb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:05:02:9F:D5:AD:C3:97:8A:DA:B0:9C:9B:F9:04:01:C5:55:D1:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/285dc714-a143-32e7-bbeb-52ac73aac939.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:13f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:5e:42:a8:39:09:02:0d:94:89:c0:8c:7c:f7:9e:93:27:19: 54:b3:3f:c4:e4:7e:5c:79:e9:c4:be:f0:7e:c8:4d:85:9c:cd: 4c:95:ce:a8:f3:8e:08:1c:9e:b0:60:f7:e9:a2:9d:50:b3:89: 62:5c:7d:cc:2b:45:14:ba:20:29:dd:5b:e9:02:89:9a:40:30: c6:9e:a2:30:3f:c4:36:74:1b:ec:3c:cc:90:bf:5d:ed:75:9a: 63:45:b3:8e:77:02:87:12:70:61:dc:27:b3:2b:c0:0d:b0:a9: ed:12:99:76:35:7e:9e:3d:67:0e:72:0f:97:ae:84:37:5a:2b: e2:4b:e2:bd:2e:2d:e1:0d:e8:65:44:74:ed:c3:8e:f5:24:78: 7c:f1:54:f3:c6:16:59:09:22:ff:f2:06:6f:5a:96:7b:a6:73: 1a:99:b9:0b:2d:aa:cf:6c:6c:56:2b:72:30:03:a3:2b:46:ff: df:78:b2:78:3d:c3:40:21:1f:72:17:fb:8b:3f:29:5f:d7:c8: d2:42:6b:60:54:dd:af:e8:b2:cc:17:b4:94:11:33:13:74:d3: a9:2b:de:e5:8d:e5:5b:1d:06:e0:43:09:fe:fa:fc:82:16:ee: 71:57:0a:eb:a8:b5:98:cc:f1:c1:f5:b4:aa:40:da:4e:64:c2: 55:b2:c4:b1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1toYY7LgHoqOrC/HAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwNzE0MzAwOFoXDTI2MDcwNjE0MzAwOFowLzEtMCsGA1UEAxMk OWRiOGI5YWItYmJkMi00NGY3LTg5YmItMzZiMTRmNDhhNDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ew3VuKvbbcr6czndeRp4u5BtH6NDA3IPNcb i6dAETYDgwnTbzzkdhpxEGkNqmi4agvc2yx4gSC7qwM6866xZc4NdHK0rA3E2/6D z0O1Phmxpl1QsU/wnnb3+bVYpxK2xt3O2tk5YNpesIAMjSFnQqMRS4Xs3V9abse0 0DK5VP3n96YilCrfECgz2HdDv5aAGLNVE61whQ7F4UCsZLL3dgm2ZGmWikC2u5jx etr+M2bjYV9ktPjN7HJoFgDqq5XozDmIfDSDKZt2rnbE2WG5iAWC+mgFNAkFAKmb VxR1xXdyKL0BDfTb7Rr2z97kOgA0pBtcf0IT9PpqX6sgLcW7QwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDUFAp/VrcOXitqwnJv5BAHFVdFyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjg1ZGM3MTQtYTE0My0z MmU3LWJiZWItNTJhYzczYWFjOTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKdeQqg5CQINlInAjHz3npMnGVSzP8Tkflx56cS+8H7ITYWczUyV zqjzjggcnrBg9+minVCziWJcfcwrRRS6ICndW+kCiZpAMMaeojA/xDZ0G+w8zJC/ Xe11mmNFs453AocScGHcJ7MrwA2wqe0SmXY1fp49Zw5yD5euhDdaK+JL4r0uLeEN 6GVEdO3DjvUkeHzxVPPGFlkJIv/yBm9alnumcxqZuQstqs9sbFYrcjADoytG/994 sng9w0AhH3IX+4s/KV/XyNJCa2BU3a/osswXtJQRMxN006kr3uWN5VsdBuBDCf76 /IIW7nFXCuuotZjM8cH1tKpA2k5kwlWyxLE= -----END CERTIFICATE-----Generated at Fri Apr 17 11:18:17 2026 by rpki-client