$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37cebcda-fad2-3fc6-af5e-aafa5c47fc2c.roa File: 37cebcda-fad2-3fc6-af5e-aafa5c47fc2c.roa (raw, json) Hash identifier: Oe+nXu99/RxXiBYrUce70J62+HKw+Cr3vsMVgDLtifI= Subject key identifier: 07:83:48:79:F8:2D:DA:9E:84:9E:CA:60:28:C4:B6:CA:F4:E4:72:B4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D6DA1876CEE51AF38F648D9A0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37cebcda-fad2-3fc6-af5e-aafa5c47fc2c.roa Signing time: Tue 07 Apr 2026 14:30:09 +0000 ROA not before: Tue 07 Apr 2026 14:30:09 +0000 ROA not after: Mon 06 Jul 2026 14:30:09 +0000 asID: 396591 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:a1:87:6c:ee:51:af:38:f6:48:d9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 7 14:30:09 2026 GMT Not After : Jul 6 14:30:09 2026 GMT Subject: CN=195619ca-ac07-4f5c-bc67-35e48c2f7a75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:57:b2:cd:bb:af:b9:2d:8b:a8:20:86:d4:97: e0:96:a3:f5:0b:08:ab:d3:7f:6a:e2:7c:52:90:26: ab:f7:17:0b:e8:ac:81:a1:96:05:0a:18:f2:93:e0: 7b:2a:5a:1d:57:34:97:d6:88:d3:37:3c:5b:fe:73: b1:de:f4:cc:f1:6b:7f:9e:0d:96:b3:a2:d1:e0:5f: 5d:c1:5e:2d:0d:fd:c7:53:95:e1:00:8b:d6:f6:09: 78:2b:b0:c2:fb:72:27:41:00:99:a7:7c:75:32:2c: 00:01:94:88:96:6d:7a:c9:8b:f5:dd:b4:ac:9d:5b: bf:e0:10:4b:c3:95:35:d6:fb:1a:f7:75:34:a9:b4: 28:88:71:1b:7f:d8:41:9e:8c:72:c7:79:b4:26:ee: 8d:1b:78:ec:19:ec:1e:f2:0d:dc:a1:98:e4:f5:51: a1:33:41:56:bd:e5:7f:00:02:9d:26:b6:62:ed:90: b5:79:48:2e:c5:eb:eb:c1:5f:fa:c4:f6:24:8b:82: 4d:37:86:3a:0b:5d:1c:28:bd:ab:6d:fb:ae:db:04: 54:9c:28:de:11:11:e5:6b:40:b0:04:73:92:bb:ea: 2d:af:e4:c7:ea:8f:2b:c0:a9:9c:7d:3e:da:d1:8e: b7:ff:70:c8:7d:48:a9:0b:2a:23:d4:50:62:a8:14: 98:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:83:48:79:F8:2D:DA:9E:84:9E:CA:60:28:C4:B6:CA:F4:E4:72:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37cebcda-fad2-3fc6-af5e-aafa5c47fc2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:a8:e5:f2:c2:da:4c:38:be:82:ea:41:69:71:ea:6c:2c:54: fa:ef:ad:0e:79:61:71:d9:9c:35:72:83:f8:fc:3b:9c:ca:8b: f2:d3:aa:87:88:5e:0e:15:30:f2:3f:f2:99:35:b6:83:81:24: d0:88:47:fd:d4:65:77:95:d6:5c:95:28:0e:8a:51:b8:24:8c: 82:a8:d2:2a:6f:b7:46:fa:a9:52:82:c4:ef:ad:b6:ee:4a:8e: 83:7c:c7:fe:df:02:94:9e:d2:93:b0:5c:d0:7d:f1:98:de:98: 03:f4:52:32:da:af:9e:31:0c:a0:81:d3:52:a5:07:06:c2:f9: 6a:c5:9a:62:b7:41:c9:ba:af:60:54:78:81:19:f1:cd:a1:bd: e1:93:d5:d9:72:65:50:88:74:ad:f1:4f:c3:c2:4e:2f:13:0a: cd:c7:15:6c:79:04:ed:22:98:91:9c:4e:ba:c5:b9:fd:1d:f2: e7:7c:b5:ea:74:9e:0a:8e:d1:f8:40:5d:f3:49:cc:90:e5:b8: 15:c1:3e:c8:9a:3d:7a:59:e6:6e:d6:1c:a4:f6:8a:67:27:e2: 46:5a:08:cb:f1:4a:20:f4:68:9d:dc:2b:0e:5d:d2:73:fb:97: a7:22:40:d7:7e:dd:1d:a4:32:f1:c8:17:4b:9f:63:fc:19:5d: 35:bc:69:c4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1toYds7lGvOPZI2aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwNzE0MzAwOVoXDTI2MDcwNjE0MzAwOVowLzEtMCsGA1UEAxMk MTk1NjE5Y2EtYWMwNy00ZjVjLWJjNjctMzVlNDhjMmY3YTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVeyzbuvuS2LqCCG1JfglqP1Cwir039q4nxS kCar9xcL6KyBoZYFChjyk+B7KlodVzSX1ojTNzxb/nOx3vTM8Wt/ng2Ws6LR4F9d wV4tDf3HU5XhAIvW9gl4K7DC+3InQQCZp3x1MiwAAZSIlm16yYv13bSsnVu/4BBL w5U11vsa93U0qbQoiHEbf9hBnoxyx3m0Ju6NG3jsGewe8g3coZjk9VGhM0FWveV/ AAKdJrZi7ZC1eUguxevrwV/6xPYki4JNN4Y6C10cKL2rbfuu2wRUnCjeERHla0Cw BHOSu+otr+TH6o8rwKmcfT7a0Y63/3DIfUipCyoj1FBiqBSYKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAeDSHn4LdqehJ7KYCjEtsr05HK0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzdjZWJjZGEtZmFkMi0z ZmM2LWFmNWUtYWFmYTVjNDdmYzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKeo5fLC2kw4voLqQWlx6mwsVPrvrQ55YXHZnDVyg/j8O5zKi/LT qoeIXg4VMPI/8pk1toOBJNCIR/3UZXeV1lyVKA6KUbgkjIKo0ipvt0b6qVKCxO+t tu5KjoN8x/7fApSe0pOwXNB98ZjemAP0UjLar54xDKCB01KlBwbC+WrFmmK3Qcm6 r2BUeIEZ8c2hveGT1dlyZVCIdK3xT8PCTi8TCs3HFWx5BO0imJGcTrrFuf0d8ud8 tep0ngqO0fhAXfNJzJDluBXBPsiaPXpZ5m7WHKT2imcn4kZaCMvxSiD0aJ3cKw5d 0nP7l6ciQNd+3R2kMvHIF0ufY/wZXTW8acQ= -----END CERTIFICATE-----Generated at Fri Apr 17 03:13:42 2026 by rpki-client