$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3071f568-965b-3ee5-ae68-d1e14f08d684.roa File: 3071f568-965b-3ee5-ae68-d1e14f08d684.roa (raw, json) Hash identifier: Ahfkpl1QLocQXCylqOwuIrC15X5oeY72VjtTZ6ak6jM= Subject key identifier: 34:ED:5A:88:67:68:40:AA:80:DC:CD:EF:E6:3A:10:7D:2A:A8:5C:4B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D6DA18B5634B33FF6D86EC9C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3071f568-965b-3ee5-ae68-d1e14f08d684.roa Signing time: Tue 07 Apr 2026 14:30:11 +0000 ROA not before: Tue 07 Apr 2026 14:30:11 +0000 ROA not after: Mon 06 Jul 2026 14:30:11 +0000 asID: 396553 IP address blocks: 2001:500:13f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:a1:8b:56:34:b3:3f:f6:d8:6e:c9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 7 14:30:11 2026 GMT Not After : Jul 6 14:30:11 2026 GMT Subject: CN=7b740a47-2bf6-425f-80fb-dcb7ce10b410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:66:f6:ab:1a:ec:9e:36:6e:02:3b:8e:c2:3e: 9c:ed:cf:13:ec:eb:7e:b4:c1:0d:17:73:ca:8b:b8: 10:b4:ef:60:62:3c:31:a5:5c:e5:a2:05:c4:61:56: 6a:2d:c4:10:f5:21:88:9b:20:aa:7a:19:ac:cd:7c: 23:1f:2b:b2:a3:16:89:1b:01:d1:71:4f:83:61:8a: 20:cb:99:7c:64:82:d4:0e:b2:69:c0:94:2e:8b:59: 08:a6:c8:44:53:4a:f6:27:3b:f4:cc:96:3a:96:da: 97:5b:0f:0f:4c:1f:b5:b2:ba:75:07:ce:f7:fa:7e: a7:93:08:9d:4c:17:d2:f6:2e:70:9e:23:e6:94:d2: 46:4f:7d:d6:84:44:94:1c:c7:73:42:39:9d:60:2c: 7d:36:df:bb:0f:7e:6c:10:15:48:99:f4:db:e9:0c: a4:6b:96:5c:4f:de:04:98:e9:f9:59:d5:3b:0b:78: d0:ef:83:09:ff:89:91:3f:b7:48:0c:95:2e:5a:92: 04:bf:69:28:b0:c1:a5:80:0b:64:62:59:62:5c:57: ad:4a:4e:d7:ed:e5:44:b9:98:75:70:6a:da:a1:51: 48:35:e1:47:15:58:20:bd:4f:09:0e:74:fb:8a:41: 7c:b0:3d:ae:5e:f7:f2:bf:e1:78:13:f2:2c:d4:b0: e8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:ED:5A:88:67:68:40:AA:80:DC:CD:EF:E6:3A:10:7D:2A:A8:5C:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3071f568-965b-3ee5-ae68-d1e14f08d684.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:13f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:3f:21:02:d0:c4:3d:64:eb:5f:df:31:77:e9:8c:1e:fb:07: e3:3b:3c:48:89:b7:4a:ed:4e:6c:33:01:32:bf:9c:0a:7b:23: fa:20:df:0f:65:13:9b:06:d2:83:be:16:d3:40:9c:02:fb:98: 5f:b1:c7:53:a8:07:d1:d7:a9:82:db:c3:13:c8:8f:29:f5:ee: 78:1b:6f:ac:f3:56:00:f9:14:32:1b:bd:8c:c9:ed:3a:51:80: 55:30:94:8d:e7:c9:bc:23:1e:59:44:07:6e:7f:59:d4:7d:35: 2f:57:46:0b:66:d3:61:23:6d:4d:61:ce:ab:41:42:51:24:43: be:90:cd:06:78:68:81:d9:b1:03:cc:0f:d9:82:73:b1:ba:e9: 72:f0:73:47:0e:a4:8c:f7:9a:74:23:3e:9d:f9:3d:4f:4c:51: 55:b1:50:12:7a:c3:36:03:5c:7e:d8:b7:4b:45:64:f1:56:8a: bb:61:70:2e:0d:f6:f9:ff:78:e1:8a:97:f4:dd:9f:ee:ab:67: 77:a8:6b:57:a1:ce:bc:df:47:3f:f4:98:a9:a3:6b:7e:48:bb: 91:98:6a:85:76:8e:15:fc:1d:0f:07:fb:74:15:06:24:8a:9d: 61:a8:aa:e9:53:1b:e9:7f:3a:6d:fc:89:d6:52:ed:4c:5e:4e: 15:72:e7:d6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1toYtWNLM/9thuycAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwNzE0MzAxMVoXDTI2MDcwNjE0MzAxMVowLzEtMCsGA1UEAxMk N2I3NDBhNDctMmJmNi00MjVmLTgwZmItZGNiN2NlMTBiNDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomb2qxrsnjZuAjuOwj6c7c8T7Ot+tMENF3PK i7gQtO9gYjwxpVzlogXEYVZqLcQQ9SGImyCqehmszXwjHyuyoxaJGwHRcU+DYYog y5l8ZILUDrJpwJQui1kIpshEU0r2Jzv0zJY6ltqXWw8PTB+1srp1B873+n6nkwid TBfS9i5wniPmlNJGT33WhESUHMdzQjmdYCx9Nt+7D35sEBVImfTb6Qyka5ZcT94E mOn5WdU7C3jQ74MJ/4mRP7dIDJUuWpIEv2kosMGlgAtkYlliXFetSk7X7eVEuZh1 cGraoVFINeFHFVggvU8JDnT7ikF8sD2uXvfyv+F4E/Is1LDoiwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDTtWohnaECqgNzN7+Y6EH0qqFxLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzA3MWY1NjgtOTY1Yi0z ZWU1LWFlNjgtZDFlMTRmMDhkNjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEU/IQLQxD1k61/fMXfpjB77B+M7PEiJt0rtTmwzATK/nAp7I/og 3w9lE5sG0oO+FtNAnAL7mF+xx1OoB9HXqYLbwxPIjyn17ngbb6zzVgD5FDIbvYzJ 7TpRgFUwlI3nybwjHllEB25/WdR9NS9XRgtm02EjbU1hzqtBQlEkQ76QzQZ4aIHZ sQPMD9mCc7G66XLwc0cOpIz3mnQjPp35PU9MUVWxUBJ6wzYDXH7Yt0tFZPFWirth cC4N9vn/eOGKl/Tdn+6rZ3eoa1ehzrzfRz/0mKmja35Iu5GYaoV2jhX8HQ8H+3QV BiSKnWGoqulTG+l/Om38idZS7UxeThVy59Y= -----END CERTIFICATE-----Generated at Fri Apr 17 13:31:59 2026 by rpki-client