$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3344fa1c-b4cc-371f-b8b0-6c587e326185.roa File: 3344fa1c-b4cc-371f-b8b0-6c587e326185.roa (raw, json) Hash identifier: q4OeSIzY7Je+6ysKDqGf3uvySUJ/6alUKcuNCC9SfO0= Subject key identifier: 08:1E:46:72:F0:29:DB:68:63:EA:8A:FE:82:CC:34:45:B1:5D:22:EF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D5E1A5AB61661A9F8551811C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3344fa1c-b4cc-371f-b8b0-6c587e326185.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 36618 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:5a:b6:16:61:a9:f8:55:18:11:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=d306d7b2-0c24-4b21-ab3e-7a16bd4e887c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:86:3a:d8:b4:03:e8:05:b4:39:6e:ab:06:9b: 96:fc:26:dd:4f:76:9a:82:41:00:be:cb:52:1d:37: 30:55:f2:e1:f0:c6:51:d5:31:ce:76:8b:76:b3:f8: 3e:0e:fe:8e:82:af:33:a3:7a:2d:20:69:ad:db:0a: 45:fe:d0:e6:b5:9d:ac:bb:ed:db:8d:9a:d1:36:14: 7d:82:ff:f2:86:c6:88:0c:00:1d:cf:6c:d8:78:98: d8:30:04:f9:5a:18:65:17:7c:9a:4e:56:55:7c:c1: 26:3c:97:f4:61:f3:b5:31:30:c1:e0:bb:f1:8d:70: 76:bf:e2:76:4a:8c:c6:2a:bf:f3:ac:f8:2e:bd:85: ee:cb:c3:f4:31:05:a0:4a:24:07:5d:07:42:c9:e9: 35:e6:16:2d:da:a0:87:2a:7f:76:f1:fb:a7:b3:a5: 60:96:67:35:b5:80:e4:4f:4c:8b:14:2f:27:3c:b3: 3e:55:46:7e:c3:75:b1:1d:f6:06:96:07:a0:b9:17: 95:67:d8:34:97:2f:63:dc:18:d1:92:eb:46:b8:ee: ec:e1:16:9e:3a:03:0c:5e:6a:3f:f6:39:0f:68:55: e7:d0:d2:a1:66:51:fa:99:55:a1:d3:d9:5d:02:d6: 3d:de:a7:ba:56:46:66:d5:e1:98:0d:42:73:ec:c4: 75:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:1E:46:72:F0:29:DB:68:63:EA:8A:FE:82:CC:34:45:B1:5D:22:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3344fa1c-b4cc-371f-b8b0-6c587e326185.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:9d:66:a2:b0:5b:82:09:95:51:bf:d6:5f:bc:4d:f2:dd:4b: 17:dd:32:1f:9f:57:8a:83:da:88:70:dc:e0:0b:ba:ac:fc:11: b8:fa:26:3b:73:21:40:22:29:87:f9:7a:65:f4:be:1d:da:c0: eb:da:81:e3:5f:a7:9d:11:94:6b:07:55:9e:8b:d7:4f:1c:57: 96:f9:95:5e:3b:34:58:47:67:5a:96:03:05:15:d3:ec:0d:69: e3:bd:22:e8:7d:e1:67:e2:6a:18:1e:c4:fa:2b:4e:2d:d1:6b: c3:ae:39:3a:93:67:41:b0:96:a1:9d:41:53:ad:a5:1d:56:66: 8c:8c:bc:7d:3d:07:fb:f2:57:6e:86:33:fb:28:cc:36:4a:24: 41:8a:58:72:b1:2d:d2:1b:b9:ab:00:99:8e:60:73:53:d8:45: 08:76:a6:ea:07:75:4f:3b:5b:5a:c1:31:38:c0:bc:af:ed:d0: 38:7f:97:75:e5:77:8f:be:ec:a8:00:5f:23:df:03:6d:96:08: d7:63:59:00:3f:78:6a:49:9d:9d:82:22:9f:8c:0e:77:3a:03: 0c:ca:75:8f:32:2d:f2:19:9b:0d:ef:3b:bf:41:ca:8e:48:3e: 8a:a4:0a:ab:a4:61:08:ae:97:75:28:7a:9d:f0:ef:3f:21:14: 36:09:06:d0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1eGlq2FmGp+FUYEcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk ZDMwNmQ3YjItMGMyNC00YjIxLWFiM2UtN2ExNmJkNGU4ODdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4Y62LQD6AW0OW6rBpuW/CbdT3aagkEAvstS HTcwVfLh8MZR1THOdot2s/g+Dv6Ogq8zo3otIGmt2wpF/tDmtZ2su+3bjZrRNhR9 gv/yhsaIDAAdz2zYeJjYMAT5WhhlF3yaTlZVfMEmPJf0YfO1MTDB4LvxjXB2v+J2 SozGKr/zrPguvYXuy8P0MQWgSiQHXQdCyek15hYt2qCHKn928funs6Vglmc1tYDk T0yLFC8nPLM+VUZ+w3WxHfYGlgeguReVZ9g0ly9j3BjRkutGuO7s4RaeOgMMXmo/ 9jkPaFXn0NKhZlH6mVWh09ldAtY93qe6VkZm1eGYDUJz7MR1LQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAgeRnLwKdtoY+qK/oLMNEWxXSLvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzM0NGZhMWMtYjRjYy0z NzFmLWI4YjAtNmM1ODdlMzI2MTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD2dZqKwW4IJlVG/1l+8TfLdSxfdMh+fV4qD2ohw3OALuqz8Ebj6 JjtzIUAiKYf5emX0vh3awOvageNfp50RlGsHVZ6L108cV5b5lV47NFhHZ1qWAwUV 0+wNaeO9Iuh94WfiahgexPorTi3Ra8OuOTqTZ0GwlqGdQVOtpR1WZoyMvH09B/vy V26GM/sozDZKJEGKWHKxLdIbuasAmY5gc1PYRQh2puoHdU87W1rBMTjAvK/t0Dh/ l3Xld4++7KgAXyPfA22WCNdjWQA/eGpJnZ2CIp+MDnc6AwzKdY8yLfIZmw3vO79B yo5IPoqkCqukYQiul3Uoep3w7z8hFDYJBtA= -----END CERTIFICATE-----Generated at Fri Apr 17 18:02:57 2026 by rpki-client