$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2cdbaa3b-dee9-33da-9fd5-50423845c543.roa File: 2cdbaa3b-dee9-33da-9fd5-50423845c543.roa (raw, json) Hash identifier: wYSfsiCz0oW4RoEvyDWz0GHuFH/KQDm2/bhZAZQIH34= Subject key identifier: ED:AC:AC:49:F2:4B:5A:3E:FF:ED:E1:DD:F7:E7:7C:67:6C:9A:CE:C2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D6DA18BC5E89867C12914C300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2cdbaa3b-dee9-33da-9fd5-50423845c543.roa Signing time: Tue 07 Apr 2026 14:30:11 +0000 ROA not before: Tue 07 Apr 2026 14:30:11 +0000 ROA not after: Mon 06 Jul 2026 14:30:11 +0000 asID: 396585 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:a1:8b:c5:e8:98:67:c1:29:14:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 7 14:30:11 2026 GMT Not After : Jul 6 14:30:11 2026 GMT Subject: CN=a3529f81-cc00-4baa-ac03-8822304b733c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:da:16:5b:2c:7b:9d:e5:12:00:99:af:bc:84: 17:cf:5c:02:2e:83:45:a3:27:dc:e8:2c:f3:59:eb: 25:32:df:42:c6:8a:29:b7:6a:76:e2:4d:70:70:62: c0:76:4d:64:4f:0c:23:4d:f5:5a:de:59:bd:9a:b8: 40:75:51:74:d7:ab:b8:54:d4:17:eb:8f:04:18:04: 7f:f9:d8:d0:80:50:49:85:ef:75:19:3d:45:d7:4d: 6b:da:c2:8f:47:dd:b9:3e:79:3d:63:f6:6b:2c:6a: fa:f1:30:5c:8d:85:f8:7a:67:b3:c0:4b:3b:3a:8c: 45:f9:62:cf:3f:4f:75:3a:8c:5c:d6:e1:d1:93:6e: 3e:67:f5:7e:61:13:8d:b2:ba:21:ee:9a:47:69:c3: 61:ea:9f:e2:2a:44:ab:35:08:29:e1:a8:72:5a:45: 83:cc:4d:50:e8:73:96:e5:4d:a6:58:d6:38:17:1e: 7d:2b:c5:bd:a2:ee:db:65:4d:bc:88:58:fc:c9:4f: 87:5c:5f:6e:f2:72:3d:18:de:af:4e:2b:d3:bc:7c: d3:bb:be:71:48:b3:85:c6:eb:0d:99:45:63:28:70: 82:49:f9:ff:11:08:c9:a9:5a:27:f6:11:ad:0a:bb: 7a:26:a2:12:73:33:26:3c:78:28:92:22:0b:9c:5f: 95:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:AC:AC:49:F2:4B:5A:3E:FF:ED:E1:DD:F7:E7:7C:67:6C:9A:CE:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2cdbaa3b-dee9-33da-9fd5-50423845c543.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:8a:89:50:0e:e5:9f:de:f2:01:09:56:9d:1f:39:22:d8:e9: 1b:ae:34:88:f3:1f:cc:76:f2:3e:27:67:76:bf:c7:6a:11:b0: de:85:77:53:c5:0c:3f:cf:b2:a2:2c:1c:6f:5d:d1:29:9c:22: 67:9f:8c:15:8d:5d:ee:9f:6f:5c:c8:0e:b5:58:fe:f9:6b:e6: 2c:1e:94:e0:74:9d:ef:c3:f8:bd:ec:a5:7c:83:d6:e5:20:b4: 81:e4:cb:44:fd:a7:b5:66:87:6e:9c:1a:a7:96:1d:96:d3:06: 11:e2:37:20:4c:92:a6:ad:5e:aa:77:b3:3f:ee:65:ee:e6:c6: 79:83:63:72:90:25:3b:14:ec:80:46:3f:04:5b:a9:77:82:72: 18:ef:f3:0c:9d:e5:c6:20:e1:86:40:12:e1:ef:0d:4a:cf:fc: ff:4e:05:44:d5:aa:bb:c1:fc:da:6c:c7:41:21:fe:a4:5f:65: af:88:97:1c:8d:25:53:d9:83:2d:cc:92:e8:06:a3:39:c2:e3: 24:57:97:09:3e:f3:d0:a3:da:24:40:98:db:3a:1c:97:5e:ae: 97:f3:38:4f:7b:a0:f9:ca:dd:f9:ec:ff:41:62:50:00:ca:d3: 36:5b:e3:84:6a:4d:78:9d:6f:33:d9:2a:dd:88:d3:a0:71:e4: c5:2d:52:8f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1toYvF6JhnwSkUwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwNzE0MzAxMVoXDTI2MDcwNjE0MzAxMVowLzEtMCsGA1UEAxMk YTM1MjlmODEtY2MwMC00YmFhLWFjMDMtODgyMjMwNGI3MzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNoWWyx7neUSAJmvvIQXz1wCLoNFoyfc6Czz WeslMt9Cxoopt2p24k1wcGLAdk1kTwwjTfVa3lm9mrhAdVF016u4VNQX648EGAR/ +djQgFBJhe91GT1F101r2sKPR925Pnk9Y/ZrLGr68TBcjYX4emezwEs7OoxF+WLP P091Ooxc1uHRk24+Z/V+YRONsroh7ppHacNh6p/iKkSrNQgp4ahyWkWDzE1Q6HOW 5U2mWNY4Fx59K8W9ou7bZU28iFj8yU+HXF9u8nI9GN6vTivTvHzTu75xSLOFxusN mUVjKHCCSfn/EQjJqVon9hGtCrt6JqISczMmPHgokiILnF+V+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO2srEnyS1o+/+3h3ffnfGdsms7CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmNkYmFhM2ItZGVlOS0z M2RhLTlmZDUtNTA0MjM4NDVjNTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAICKiVAO5Z/e8gEJVp0fOSLY6RuuNIjzH8x28j4nZ3a/x2oRsN6F d1PFDD/PsqIsHG9d0SmcImefjBWNXe6fb1zIDrVY/vlr5iwelOB0ne/D+L3spXyD 1uUgtIHky0T9p7Vmh26cGqeWHZbTBhHiNyBMkqatXqp3sz/uZe7mxnmDY3KQJTsU 7IBGPwRbqXeCchjv8wyd5cYg4YZAEuHvDUrP/P9OBUTVqrvB/Npsx0Eh/qRfZa+I lxyNJVPZgy3MkugGoznC4yRXlwk+89Cj2iRAmNs6HJderpfzOE97oPnK3fns/0Fi UADK0zZb44RqTXidbzPZKt2I06Bx5MUtUo8= -----END CERTIFICATE-----Generated at Sun Apr 19 11:38:32 2026 by rpki-client