$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28a61ba9-4981-330e-9187-5e16813a87a0.roa File: 28a61ba9-4981-330e-9187-5e16813a87a0.roa (raw, json) Hash identifier: bHX44LDpAc033Zgp4oyxrzeSODjQ/SVIGczGKIqx5vE= Subject key identifier: C0:75:20:35:B0:27:02:39:70:6B:66:A5:9F:64:F0:F1:F5:20:C3:B6 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D812867B0E9D975B1B1445F80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28a61ba9-4981-330e-9187-5e16813a87a0.roa Signing time: Tue 14 Apr 2026 14:22:16 +0000 ROA not before: Tue 14 Apr 2026 14:22:16 +0000 ROA not after: Mon 13 Jul 2026 14:22:16 +0000 asID: 397198 IP address blocks: 2001:500:124::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:81:28:67:b0:e9:d9:75:b1:b1:44:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 14 14:22:16 2026 GMT Not After : Jul 13 14:22:16 2026 GMT Subject: CN=73be902f-ea10-40b7-a9f1-0b659d7dd5fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d3:9f:7a:2b:73:e6:42:b6:f2:67:62:42:1e: 33:23:a5:6c:ab:a5:6e:e5:5d:82:f4:59:ab:53:18: 71:cd:c3:c3:62:4d:55:6a:b0:f0:c5:1e:56:f2:3b: 0e:46:30:be:22:0d:5a:15:0d:4f:ef:da:2d:d2:f0: 35:a3:49:26:42:77:7a:af:03:82:ba:cc:f0:c1:be: 40:66:63:90:c0:82:4d:7f:a0:98:9b:5d:11:d1:36: ec:eb:19:f0:e7:a0:b7:69:5a:5e:5c:a2:8f:93:bf: 62:c2:bf:79:d1:0e:5a:6f:ae:b5:a2:66:a8:61:5f: e8:d3:0d:e4:f3:4b:63:78:62:55:a5:f1:6b:9a:b2: 63:61:8f:6c:bc:61:9f:85:79:d2:4d:98:ff:f1:59: 42:95:35:e5:de:49:ad:20:2a:ec:2b:13:b2:24:82: fa:c6:2b:ae:7b:37:1a:d2:1a:4b:62:c8:1f:c0:72: ff:31:6f:5f:ce:51:1d:ee:aa:b0:1a:3d:59:5d:2d: f8:01:86:0a:4b:9b:20:f3:7e:26:0a:59:8b:d7:58: ac:dc:a9:26:0d:71:d9:30:9d:7c:10:12:25:83:d8: f0:07:8d:e8:d4:da:fd:00:05:a9:33:31:a6:ef:ea: a1:27:ae:57:52:57:7e:c9:9b:78:2c:71:aa:11:1c: 39:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:75:20:35:B0:27:02:39:70:6B:66:A5:9F:64:F0:F1:F5:20:C3:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28a61ba9-4981-330e-9187-5e16813a87a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:124::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:23:36:88:0f:b5:e7:45:28:84:6b:70:0b:c6:8c:0f:b6:76: eb:23:eb:a4:0d:19:b2:48:bd:76:3e:22:c4:76:6d:83:2e:82: 2d:1b:96:19:3d:5e:43:50:0a:23:58:ae:34:23:5c:4f:b1:fa: 5c:3c:35:6c:f0:e0:87:77:09:ca:a0:b4:3a:bb:e7:15:54:82: 8c:b8:0c:f6:fa:a9:7e:4a:8a:82:79:78:70:4a:6f:6e:ba:3d: 0f:56:40:95:5f:5b:69:ce:b6:8c:1c:0e:1f:6b:0f:72:4e:cc: f4:57:1b:ec:ff:99:3e:6e:c0:58:3d:58:68:76:55:ec:41:90: ac:ce:b1:1c:84:ca:a8:c1:53:90:6f:f2:22:57:6b:00:2c:85: 1b:69:10:39:d8:ba:2e:a2:07:5d:0b:a9:7c:fe:d6:c8:b5:55: 7c:c3:6c:81:e6:74:4b:4d:ff:12:60:cd:96:f3:a8:9e:28:3d: f2:0e:0d:67:8f:73:bd:e4:ca:49:54:30:e2:71:6e:e7:83:92: a3:59:15:3c:75:95:2a:22:87:2e:17:cc:c4:11:71:f3:26:82: 5a:44:66:d3:cf:45:a8:fb:bb:c0:30:67:be:77:df:85:82:08: a9:23:ba:29:56:ab:23:ce:f7:5c:35:03:a9:fc:05:62:70:3a: c2:7a:1b:2f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2BKGew6dl1sbFEX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxNDE0MjIxNloXDTI2MDcxMzE0MjIxNlowLzEtMCsGA1UEAxMk NzNiZTkwMmYtZWExMC00MGI3LWE5ZjEtMGI2NTlkN2RkNWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNOfeitz5kK28mdiQh4zI6Vsq6Vu5V2C9Fmr UxhxzcPDYk1VarDwxR5W8jsORjC+Ig1aFQ1P79ot0vA1o0kmQnd6rwOCuszwwb5A ZmOQwIJNf6CYm10R0Tbs6xnw56C3aVpeXKKPk79iwr950Q5ab661omaoYV/o0w3k 80tjeGJVpfFrmrJjYY9svGGfhXnSTZj/8VlClTXl3kmtICrsKxOyJIL6xiuuezca 0hpLYsgfwHL/MW9fzlEd7qqwGj1ZXS34AYYKS5sg834mClmL11is3KkmDXHZMJ18 EBIlg9jwB43o1Nr9AAWpMzGm7+qhJ65XUld+yZt4LHGqERw5lQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMB1IDWwJwI5cGtmpZ9k8PH1IMO2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjhhNjFiYTktNDk4MS0z MzBlLTkxODctNWUxNjgxM2E4N2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHYjNogPtedFKIRrcAvGjA+2dusj66QNGbJIvXY+IsR2bYMugi0b lhk9XkNQCiNYrjQjXE+x+lw8NWzw4Id3CcqgtDq75xVUgoy4DPb6qX5KioJ5eHBK b266PQ9WQJVfW2nOtowcDh9rD3JOzPRXG+z/mT5uwFg9WGh2VexBkKzOsRyEyqjB U5Bv8iJXawAshRtpEDnYui6iB10LqXz+1si1VXzDbIHmdEtN/xJgzZbzqJ4oPfIO DWePc73kyklUMOJxbueDkqNZFTx1lSoihy4XzMQRcfMmglpEZtPPRaj7u8AwZ753 34WCCKkjuilWqyPO91w1A6n8BWJwOsJ6Gy8= -----END CERTIFICATE-----Generated at Fri Apr 17 04:23:01 2026 by rpki-client