$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38f4ab1f-c77f-348d-ac54-63056f057f0b.roa File: 38f4ab1f-c77f-348d-ac54-63056f057f0b.roa (raw, json) Hash identifier: LyVf+FycBfMKL5Y2Nvk8ZijXEdu5Ys9Y7uKCZ55dKgQ= Subject key identifier: EE:15:56:96:81:17:F3:1E:0A:54:06:15:63:FC:B2:03:24:F1:04:4B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D59EAB0C24ADCA59F3066D100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38f4ab1f-c77f-348d-ac54-63056f057f0b.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 397198 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:b0:c2:4a:dc:a5:9f:30:66:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=074ee752-16f4-4bf1-afa1-f11c333746c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a6:06:cb:02:11:f4:04:59:1d:71:07:35:21: ef:a4:3f:42:77:4b:01:57:e2:de:ab:9c:1b:ce:24: 1f:e0:c2:67:86:73:e0:34:e1:97:2e:4c:c9:91:2f: 8b:e0:e7:14:2f:26:db:f0:3e:93:e1:16:94:c8:4b: eb:f0:5b:cc:f4:1f:e4:b2:68:04:cb:e2:9f:e4:e3: e6:87:25:b8:ac:32:5c:f6:ab:6e:3f:5d:56:32:5c: 25:bf:77:9b:55:3d:05:98:65:a7:ba:17:7b:f9:f9: 81:5a:8b:72:8b:ec:66:aa:e4:03:1d:41:a5:5a:1d: 91:e7:37:3a:29:88:49:f2:63:85:8e:ba:ec:82:43: 13:49:33:6e:89:1f:8d:5f:42:cc:b9:be:0d:16:14: 43:10:b3:49:6b:83:f3:1c:7b:72:8e:d1:33:cc:56: 24:88:4d:61:59:1a:a2:64:9f:4d:9b:9d:49:97:46: 4f:a4:ba:b8:1d:17:48:da:14:11:21:6a:79:7d:fa: 9b:81:e1:c1:79:95:4d:15:ca:13:cd:8b:46:da:82: 09:de:0e:c9:bb:29:35:2b:18:e5:52:55:b3:9e:87: ab:07:7e:34:be:2e:f8:7a:d1:a6:b8:e8:a1:71:8d: d0:6a:fc:f8:46:15:1c:d1:d7:79:cb:b7:4a:72:4a: 48:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:15:56:96:81:17:F3:1E:0A:54:06:15:63:FC:B2:03:24:F1:04:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38f4ab1f-c77f-348d-ac54-63056f057f0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:d0:b8:c0:3d:8f:84:66:81:ca:51:74:eb:2c:42:f7:30:3f: 64:dd:3f:58:cc:55:83:e1:b2:04:4b:5f:18:5c:af:aa:e6:01: 7d:ec:e6:a8:de:51:68:1e:09:e5:9c:c8:c8:cc:c0:2a:53:e9: ab:e8:10:6b:f5:e5:ae:bf:83:69:e1:d7:5f:da:db:fa:4f:f2: 55:8c:7d:77:43:96:f2:e7:67:20:fa:0c:67:d8:4f:be:fa:96: 55:71:c3:2e:9f:30:25:d0:fc:e4:e0:f8:fd:41:49:65:7d:c6: 43:26:aa:13:de:7e:30:27:0a:d3:af:97:f4:9d:0a:54:93:94: 2c:29:77:cd:c0:cd:4d:4d:61:da:bc:71:db:25:67:2b:ba:86: 97:46:82:7b:a3:4f:d1:da:d2:a8:37:b7:40:05:f9:fb:8b:31: c8:2b:93:6f:da:d0:4d:58:0e:0e:69:29:d9:76:58:08:54:ed: df:5b:e7:9c:36:a1:ae:d1:4a:8d:38:cd:d5:a2:e7:90:49:2e: a6:75:84:58:19:d7:3f:d8:c4:ae:16:16:e1:2b:ce:9a:09:79: 99:79:84:cc:05:8f:74:35:e7:eb:e5:f7:8e:17:4d:83:8f:8e: f9:a9:7d:71:65:f0:5a:91:83:39:cb:5b:af:f2:92:aa:fb:1d: fa:b5:cf:f9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6rDCStylnzBm0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk MDc0ZWU3NTItMTZmNC00YmYxLWFmYTEtZjExYzMzMzc0NmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6YGywIR9ARZHXEHNSHvpD9Cd0sBV+Leq5wb ziQf4MJnhnPgNOGXLkzJkS+L4OcULybb8D6T4RaUyEvr8FvM9B/ksmgEy+Kf5OPm hyW4rDJc9qtuP11WMlwlv3ebVT0FmGWnuhd7+fmBWotyi+xmquQDHUGlWh2R5zc6 KYhJ8mOFjrrsgkMTSTNuiR+NX0LMub4NFhRDELNJa4PzHHtyjtEzzFYkiE1hWRqi ZJ9Nm51Jl0ZPpLq4HRdI2hQRIWp5ffqbgeHBeZVNFcoTzYtG2oIJ3g7Juyk1Kxjl UlWznoerB340vi74etGmuOihcY3Qavz4RhUc0dd5y7dKckpIgwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO4VVpaBF/MeClQGFWP8sgMk8QRLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzhmNGFiMWYtYzc3Zi0z NDhkLWFjNTQtNjMwNTZmMDU3ZjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACfQuMA9j4RmgcpRdOssQvcwP2TdP1jMVYPhsgRLXxhcr6rmAX3s 5qjeUWgeCeWcyMjMwCpT6avoEGv15a6/g2nh11/a2/pP8lWMfXdDlvLnZyD6DGfY T776llVxwy6fMCXQ/OTg+P1BSWV9xkMmqhPefjAnCtOvl/SdClSTlCwpd83AzU1N Ydq8cdslZyu6hpdGgnujT9Ha0qg3t0AF+fuLMcgrk2/a0E1YDg5pKdl2WAhU7d9b 55w2oa7RSo04zdWi55BJLqZ1hFgZ1z/YxK4WFuErzpoJeZl5hMwFj3Q15+vl944X TYOPjvmpfXFl8FqRgznLW6/ykqr7Hfq1z/k= -----END CERTIFICATE-----Generated at Fri Apr 17 01:54:45 2026 by rpki-client