$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2eb684ef-bcb7-3573-96fe-ed90d6f9084a.roa File: 2eb684ef-bcb7-3573-96fe-ed90d6f9084a.roa (raw, json) Hash identifier: QBG7un5+3GoBtHVFX8D2Ysr2CH7DqDT4ll6cxyQaHtY= Subject key identifier: 36:9F:C6:41:82:9C:8B:53:9E:7E:11:E0:2D:15:F3:73:AA:BA:AF:AC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D6DA1875DCB78C381D5E23B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2eb684ef-bcb7-3573-96fe-ed90d6f9084a.roa Signing time: Tue 07 Apr 2026 14:30:09 +0000 ROA not before: Tue 07 Apr 2026 14:30:09 +0000 ROA not after: Mon 06 Jul 2026 14:30:09 +0000 asID: 396594 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:a1:87:5d:cb:78:c3:81:d5:e2:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 7 14:30:09 2026 GMT Not After : Jul 6 14:30:09 2026 GMT Subject: CN=124e7417-9360-4fb0-8ae2-6cc4b2fcd10b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:25:d2:e4:1c:78:a5:13:37:b6:6c:83:c3:8d: 81:12:c5:e0:25:65:01:c0:a7:ac:dc:d7:f7:4f:10: df:41:e1:f5:41:68:e3:25:b2:de:1d:cb:bb:e5:66: af:d6:81:6b:89:1d:20:c4:cf:f4:04:06:e5:04:ec: 39:8a:2a:d8:3e:94:44:2d:92:aa:16:9c:99:cb:09: 72:f4:e4:45:8f:32:22:07:6d:7c:97:9e:1f:19:c0: c8:92:7b:06:64:91:45:1e:a3:27:8d:6f:4f:01:7b: 01:86:09:49:84:6a:65:80:45:26:5d:76:b2:f6:5b: 63:c4:15:50:ef:59:27:8d:fa:71:5c:ea:02:2c:c2: 40:5c:7b:fb:48:eb:c6:a4:da:50:61:bc:f2:44:3d: ea:5b:bd:39:67:a2:fd:92:3a:49:01:d6:49:36:2b: 78:c9:e0:9c:34:83:95:c0:ab:93:b1:e4:e9:34:8e: c6:59:07:44:d8:a5:bc:4a:11:24:22:98:69:db:cd: 73:1e:53:10:ab:7d:0f:76:e9:4e:67:98:51:59:8d: b6:7b:99:31:ce:e5:d0:0b:d6:41:bf:14:24:80:ac: 3a:ec:17:f2:69:fd:e0:23:26:63:24:f6:6b:54:c4: 26:e3:55:a8:20:8d:95:24:bd:7b:ba:1b:45:be:d5: 2b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:9F:C6:41:82:9C:8B:53:9E:7E:11:E0:2D:15:F3:73:AA:BA:AF:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2eb684ef-bcb7-3573-96fe-ed90d6f9084a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:e6:93:92:e4:f1:a0:0b:7c:5e:b9:51:dd:ff:5f:a8:7b:11: f5:30:1b:9f:fd:01:9c:1a:9e:fb:e3:9b:82:49:3c:e1:a6:fe: 34:3e:6b:04:91:5f:1b:42:ef:f7:7a:72:f1:6e:ec:6d:52:27: 64:2b:c6:29:3a:b5:8f:1a:c7:a1:04:4d:6a:1d:6c:f8:f5:6b: e7:4c:ec:36:0a:9c:ae:a8:e8:f6:f7:33:2f:14:dd:bf:6b:84: ad:20:38:3b:14:5e:27:03:7d:f7:41:19:01:75:fd:43:d8:40: 9d:89:e4:ad:bb:bd:6c:a0:3a:3b:99:a1:13:d8:a1:e6:9c:e2: 85:52:bd:9a:9d:51:d7:b4:05:23:a2:fc:ab:fe:19:77:44:6f: 82:1e:87:75:53:f7:33:46:2c:39:ae:b8:99:af:95:21:ea:98: fc:60:79:29:cc:df:8c:24:d2:6f:e9:67:04:a3:a1:07:7b:3a: 33:ef:63:cb:12:6b:b9:a4:12:dd:b5:c3:e9:6d:a7:41:0d:5c: 99:3f:8c:c2:ce:7c:2f:99:14:93:63:d0:74:de:c4:48:06:da: eb:ba:21:8d:f5:9f:67:ed:a0:27:74:48:06:89:77:65:58:5b: 4a:6a:2a:3a:05:34:ab:1a:1b:f0:34:80:68:a5:5e:44:9b:c5: 57:29:51:98 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1toYddy3jDgdXiO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwNzE0MzAwOVoXDTI2MDcwNjE0MzAwOVowLzEtMCsGA1UEAxMk MTI0ZTc0MTctOTM2MC00ZmIwLThhZTItNmNjNGIyZmNkMTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iXS5Bx4pRM3tmyDw42BEsXgJWUBwKes3Nf3 TxDfQeH1QWjjJbLeHcu75Wav1oFriR0gxM/0BAblBOw5iirYPpRELZKqFpyZywly 9ORFjzIiB218l54fGcDIknsGZJFFHqMnjW9PAXsBhglJhGplgEUmXXay9ltjxBVQ 71knjfpxXOoCLMJAXHv7SOvGpNpQYbzyRD3qW705Z6L9kjpJAdZJNit4yeCcNIOV wKuTseTpNI7GWQdE2KW8ShEkIphp281zHlMQq30PdulOZ5hRWY22e5kxzuXQC9ZB vxQkgKw67Bfyaf3gIyZjJPZrVMQm41WoII2VJL17uhtFvtUruwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDafxkGCnItTnn4R4C0V83Oquq+sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmViNjg0ZWYtYmNiNy0z NTczLTk2ZmUtZWQ5MGQ2ZjkwODRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA/mk5Lk8aALfF65Ud3/X6h7EfUwG5/9AZwanvvjm4JJPOGm/jQ+ awSRXxtC7/d6cvFu7G1SJ2Qrxik6tY8ax6EETWodbPj1a+dM7DYKnK6o6Pb3My8U 3b9rhK0gODsUXicDffdBGQF1/UPYQJ2J5K27vWygOjuZoRPYoeac4oVSvZqdUde0 BSOi/Kv+GXdEb4Ieh3VT9zNGLDmuuJmvlSHqmPxgeSnM34wk0m/pZwSjoQd7OjPv Y8sSa7mkEt21w+ltp0ENXJk/jMLOfC+ZFJNj0HTexEgG2uu6IY31n2ftoCd0SAaJ d2VYW0pqKjoFNKsaG/A0gGilXkSbxVcpUZg= -----END CERTIFICATE-----Generated at Sun Apr 19 10:33:48 2026 by rpki-client