$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3821673e-6bee-3996-9ffa-e0c7b3532a7e.roa File: 3821673e-6bee-3996-9ffa-e0c7b3532a7e.roa (raw, json) Hash identifier: 1zr4Zdl3fXZwQAjfAYmnOO32SIuofMtDjcRj/JMlgnI= Subject key identifier: 7B:8E:6B:6C:97:A4:1A:B1:0F:19:2D:C6:D5:3C:E2:8C:A4:F3:38:E4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D6DA19F6EBA030F1FE9233EF8 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3821673e-6bee-3996-9ffa-e0c7b3532a7e.roa Signing time: Tue 07 Apr 2026 14:30:20 +0000 ROA not before: Tue 07 Apr 2026 14:30:20 +0000 ROA not after: Mon 06 Jul 2026 14:30:20 +0000 asID: 396565 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:a1:9f:6e:ba:03:0f:1f:e9:23:3e:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 7 14:30:20 2026 GMT Not After : Jul 6 14:30:20 2026 GMT Subject: CN=b1d0b4dd-3c55-4422-a3e8-75c10bae1b04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:42:67:c9:f6:ea:1c:18:61:0f:d3:27:a3:24: 8f:78:7c:8c:51:61:34:52:23:9c:1d:bc:c7:21:50: e4:23:08:7d:42:5e:a4:f5:c3:49:25:5b:25:ad:d5: 19:96:60:bb:35:c7:13:60:cd:5f:c5:a6:25:a1:89: 66:72:92:e9:6e:7a:16:a3:b5:02:10:ab:d9:c8:82: 3c:8e:c0:86:c2:01:34:5f:2a:63:11:94:78:c0:aa: a1:79:17:2b:1c:ee:45:fe:d4:49:77:5c:88:3b:ac: d0:3e:7c:c5:3e:2b:42:bf:99:96:76:28:c6:02:a3: a5:c8:2a:95:37:50:a1:d0:9d:dc:21:7e:cb:d2:f9: fd:e1:0d:e7:17:be:da:8c:44:76:32:55:66:17:6e: e9:1b:f2:2e:67:11:c1:fb:89:0f:ea:11:56:37:ae: 7b:d4:e0:d9:21:a0:8b:cf:c2:c1:b8:89:34:41:8f: d5:1b:41:65:13:b5:01:01:4f:24:d7:43:b0:b9:c9: 67:4c:02:ee:27:5f:bb:de:0e:19:0a:50:69:bb:5e: 14:bf:3c:43:6b:9c:95:a3:9f:6e:5d:47:86:9f:58: e1:78:5e:45:ad:ff:3f:32:65:9c:cc:f0:8c:17:68: fa:fe:80:7c:29:12:bd:6d:76:ed:ca:ab:fb:3d:55: 8a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:8E:6B:6C:97:A4:1A:B1:0F:19:2D:C6:D5:3C:E2:8C:A4:F3:38:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3821673e-6bee-3996-9ffa-e0c7b3532a7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:50:53:c1:29:78:6d:ae:4a:eb:ad:5c:12:d4:a5:31:b0:d6: 3c:39:7e:da:31:c8:e4:ec:7e:49:a4:f2:cf:04:a4:e5:1e:c4: 8c:63:7b:83:dd:ed:3a:04:26:79:2e:74:5b:70:19:b6:d4:92: 96:99:f8:37:88:bf:90:e0:4d:4b:c4:96:90:81:a7:e4:d0:cf: 3e:e5:a3:fd:7f:81:79:ac:e9:b0:91:2b:1c:65:d6:e5:73:a8: 6d:c7:57:1e:a6:fa:f3:33:e7:1d:db:bc:28:8f:b2:c0:96:fe: 3d:14:7c:d0:22:bf:ea:7c:cc:18:66:51:2c:66:85:5b:05:15: 6f:b2:48:3e:c1:3f:1c:89:e5:b7:37:c4:11:92:13:4f:c1:7c: ac:da:62:9e:8c:0b:d6:4a:3b:77:c2:01:98:62:0c:6b:82:77: d4:88:0f:7b:eb:cd:7a:49:08:73:db:8a:68:3a:c6:b5:fa:ad: 2e:88:c2:72:eb:35:e6:f3:76:03:a8:54:e4:a0:37:d9:b1:39: be:84:d9:83:13:b4:18:9f:53:d6:3d:ba:7c:ba:a6:be:7d:20: d9:f8:e4:f6:69:93:91:a3:73:46:5d:d2:db:98:80:12:88:55: 09:8a:f4:23:2a:d8:c3:28:da:0c:4c:ea:6a:a6:ed:b2:51:b6: 49:85:23:18 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1toZ9uugMPH+kjPvgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwNzE0MzAyMFoXDTI2MDcwNjE0MzAyMFowLzEtMCsGA1UEAxMk YjFkMGI0ZGQtM2M1NS00NDIyLWEzZTgtNzVjMTBiYWUxYjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkJnyfbqHBhhD9MnoySPeHyMUWE0UiOcHbzH IVDkIwh9Ql6k9cNJJVslrdUZlmC7NccTYM1fxaYloYlmcpLpbnoWo7UCEKvZyII8 jsCGwgE0XypjEZR4wKqheRcrHO5F/tRJd1yIO6zQPnzFPitCv5mWdijGAqOlyCqV N1Ch0J3cIX7L0vn94Q3nF77ajER2MlVmF27pG/IuZxHB+4kP6hFWN6571ODZIaCL z8LBuIk0QY/VG0FlE7UBAU8k10OwuclnTALuJ1+73g4ZClBpu14UvzxDa5yVo59u XUeGn1jheF5Frf8/MmWczPCMF2j6/oB8KRK9bXbtyqv7PVWKjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHuOa2yXpBqxDxktxtU84oyk8zjkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzgyMTY3M2UtNmJlZS0z OTk2LTlmZmEtZTBjN2IzNTMyYTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFNQU8EpeG2uSuutXBLUpTGw1jw5ftoxyOTsfkmk8s8EpOUexIxj e4Pd7ToEJnkudFtwGbbUkpaZ+DeIv5DgTUvElpCBp+TQzz7lo/1/gXms6bCRKxxl 1uVzqG3HVx6m+vMz5x3bvCiPssCW/j0UfNAiv+p8zBhmUSxmhVsFFW+ySD7BPxyJ 5bc3xBGSE0/BfKzaYp6MC9ZKO3fCAZhiDGuCd9SID3vrzXpJCHPbimg6xrX6rS6I wnLrNebzdgOoVOSgN9mxOb6E2YMTtBifU9Y9uny6pr59INn45PZpk5Gjc0Zd0tuY gBKIVQmK9CMq2MMo2gxM6mqm7bJRtkmFIxg= -----END CERTIFICATE-----Generated at Fri Apr 17 05:26:11 2026 by rpki-client