$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2889c4a9-bce3-3e69-825c-c13c0fc07995.roa File: 2889c4a9-bce3-3e69-825c-c13c0fc07995.roa (raw, json) Hash identifier: BPOEdWdo9NVCxPW1zsmVtG7ox5jHlvE691x+gT776e0= Subject key identifier: 1C:AD:3D:1A:BD:FA:D0:42:14:A9:3E:67:18:6F:24:DB:6C:A1:DC:BD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D59EAB03BD747BD02D4CF4B2A Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2889c4a9-bce3-3e69-825c-c13c0fc07995.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 36631 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:b0:3b:d7:47:bd:02:d4:cf:4b:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=55da403e-3e5b-4592-b8f8-5b355ff9a4b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:08:fa:b7:f8:eb:6e:6d:a8:42:71:73:81:30: 75:97:96:b8:30:1d:20:82:87:ef:74:4a:a2:63:41: f7:02:6c:8a:b4:89:23:1e:8d:a4:9c:9e:ce:f3:2a: b8:00:7b:79:bf:b0:a0:c1:22:7b:35:b7:30:7c:65: 1f:c3:d3:aa:70:c4:a9:64:b3:3a:18:3b:1f:3b:ce: 07:26:e5:5a:03:32:a3:5e:fe:bc:04:55:ec:6c:67: 30:76:2d:dc:b8:2f:24:89:5d:38:c6:08:81:02:ef: e9:41:e1:a1:22:07:db:50:1b:8d:b9:8b:cc:3a:2d: f4:f8:7a:ac:1a:ca:c5:7c:0f:1b:ae:60:83:85:a6: f6:a9:ee:3b:48:5d:d4:c5:c1:cf:3e:f6:ad:f3:2a: 25:98:66:3e:9d:ed:ea:60:75:08:7e:47:f5:60:02: 10:b9:81:92:63:ec:77:53:01:7d:f6:d1:5e:ad:60: 1d:9e:de:f7:5b:0c:69:d0:3c:19:1d:dd:cd:6a:9c: 68:14:32:d3:c2:52:98:d3:7b:00:29:b3:58:e6:05: ff:f6:2f:82:3f:1e:30:47:de:ed:04:ab:5c:37:28: ba:ab:d2:e0:14:29:1c:56:e8:2d:03:5e:6b:3c:38: e8:70:e8:45:33:2e:8f:2b:91:5a:f3:86:85:f6:ae: e3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:AD:3D:1A:BD:FA:D0:42:14:A9:3E:67:18:6F:24:DB:6C:A1:DC:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2889c4a9-bce3-3e69-825c-c13c0fc07995.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:51:d0:0c:a2:30:b0:02:ea:b7:00:62:b5:16:eb:82:07:89: eb:eb:3f:00:f5:78:8d:dd:7d:52:5a:94:80:be:20:f7:4e:b9: 1a:ea:f3:2d:6a:63:c7:f8:79:2c:7f:c6:db:9c:4d:8d:d2:14: e3:f9:5b:78:93:a7:38:f8:0a:5d:c2:59:e1:f8:81:18:2a:c9: 25:61:74:33:c3:49:b1:d5:b8:27:e7:8e:af:0a:24:36:df:bb: ae:6e:57:07:bd:a7:0c:f4:5a:33:f1:f1:a5:de:ed:98:38:cb: 16:0c:6d:da:b3:22:0d:1a:af:09:80:d5:35:90:a0:ba:59:1a: ac:57:a7:5a:d7:77:35:5e:09:fd:dd:d7:bb:c4:8c:bd:19:03: 57:78:38:75:73:88:1e:d6:24:19:23:ac:db:71:0f:35:04:a6: 88:15:f2:9a:ba:cb:9e:01:7a:41:8d:2d:27:b2:9c:15:d0:9c: f2:7e:e4:5f:ae:cc:22:54:78:6b:80:b8:67:dd:32:9c:b7:bc: b7:be:d4:67:fd:6c:02:5b:5c:a0:37:eb:5a:6b:51:22:54:60: f2:61:0a:7b:29:49:11:19:62:27:80:00:5c:49:3b:1f:77:87: 61:a4:c4:b1:7d:13:9a:53:a1:87:9e:88:39:50:5c:b5:fc:19: 84:ae:85:2a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6rA710e9AtTPSyowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NTVkYTQwM2UtM2U1Yi00NTkyLWI4ZjgtNWIzNTVmZjlhNGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAj6t/jrbm2oQnFzgTB1l5a4MB0ggofvdEqi Y0H3AmyKtIkjHo2knJ7O8yq4AHt5v7CgwSJ7NbcwfGUfw9OqcMSpZLM6GDsfO84H JuVaAzKjXv68BFXsbGcwdi3cuC8kiV04xgiBAu/pQeGhIgfbUBuNuYvMOi30+Hqs GsrFfA8brmCDhab2qe47SF3UxcHPPvat8yolmGY+ne3qYHUIfkf1YAIQuYGSY+x3 UwF99tFerWAdnt73Wwxp0DwZHd3NapxoFDLTwlKY03sAKbNY5gX/9i+CPx4wR97t BKtcNyi6q9LgFCkcVugtA15rPDjocOhFMy6PK5Fa84aF9q7jnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBytPRq9+tBCFKk+ZxhvJNtsody9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjg4OWM0YTktYmNlMy0z ZTY5LTgyNWMtYzEzYzBmYzA3OTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKxR0AyiMLAC6rcAYrUW64IHievrPwD1eI3dfVJalIC+IPdOuRrq 8y1qY8f4eSx/xtucTY3SFOP5W3iTpzj4Cl3CWeH4gRgqySVhdDPDSbHVuCfnjq8K JDbfu65uVwe9pwz0WjPx8aXe7Zg4yxYMbdqzIg0arwmA1TWQoLpZGqxXp1rXdzVe Cf3d17vEjL0ZA1d4OHVziB7WJBkjrNtxDzUEpogV8pq6y54BekGNLSeynBXQnPJ+ 5F+uzCJUeGuAuGfdMpy3vLe+1Gf9bAJbXKA361prUSJUYPJhCnspSREZYieAAFxJ Ox93h2GkxLF9E5pToYeeiDlQXLX8GYSuhSo= -----END CERTIFICATE-----Generated at Fri Apr 17 14:46:22 2026 by rpki-client