$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3aa2ec60-0c8e-3cae-9fa4-1268e50c5ebe.roa File: 3aa2ec60-0c8e-3cae-9fa4-1268e50c5ebe.roa (raw, json) Hash identifier: 7CMwx6q6d56o97z+Ar2VSkCpcKlNZt1cC//F6QZg4y4= Subject key identifier: 2E:7D:6C:DC:92:9F:92:0C:2B:C1:53:C8:E9:16:98:77:D8:00:75:1B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D732BDE1D62490578B34E0880 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3aa2ec60-0c8e-3cae-9fa4-1268e50c5ebe.roa Signing time: Thu 09 Apr 2026 14:07:55 +0000 ROA not before: Thu 09 Apr 2026 14:07:55 +0000 ROA not after: Wed 08 Jul 2026 14:07:55 +0000 asID: 397202 IP address blocks: 2001:500:133::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:73:2b:de:1d:62:49:05:78:b3:4e:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 9 14:07:55 2026 GMT Not After : Jul 8 14:07:55 2026 GMT Subject: CN=20552b58-9dd0-40d7-8820-88397395f561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ce:fe:9c:3d:d5:6d:e3:10:01:8e:da:b7:28: 67:79:61:d0:bf:bd:7b:89:f3:ea:bf:26:8e:03:47: e8:a5:10:0b:d9:f1:13:7c:b9:46:14:ca:23:03:28: 7c:0f:7a:2a:c1:57:1b:5f:56:e0:4d:47:d9:b6:13: ff:eb:7a:27:1a:06:ef:77:75:55:6a:bc:83:a0:30: 14:59:b1:6e:56:ed:7f:12:86:63:91:17:60:1d:ed: dc:21:31:ab:3b:49:3c:38:c2:eb:4e:ac:ba:79:f3: d5:80:8a:16:ae:b1:02:9f:23:1c:bf:db:57:18:c2: 97:8f:26:f0:a6:64:51:b9:54:12:bb:a8:7b:e8:e4: 5e:8c:fc:bb:b9:e5:fc:3e:09:02:57:8e:31:84:f7: cb:83:a2:d3:e3:7c:67:b2:28:cd:3c:94:8a:5e:d1: 60:e5:30:bb:53:e9:46:b1:25:ad:74:94:29:25:0f: 99:42:3e:2e:b6:76:db:bb:0b:9e:80:21:f6:cf:8b: 8d:97:cd:39:80:cd:c0:e2:54:88:b7:1d:b6:00:9a: f3:0c:51:02:99:ae:dc:3e:09:b7:3a:3c:8e:d2:29: 6e:6f:7b:13:39:f5:fe:e3:cc:85:30:e7:14:19:7f: a4:a7:65:42:e9:53:bd:ab:32:50:13:34:13:c1:59: 89:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:7D:6C:DC:92:9F:92:0C:2B:C1:53:C8:E9:16:98:77:D8:00:75:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3aa2ec60-0c8e-3cae-9fa4-1268e50c5ebe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:00:4d:b4:81:e3:1e:a5:8e:79:2f:91:53:e2:4d:df:c5:8c: 7c:b1:f6:a6:3c:79:41:b6:e4:e6:ec:0e:57:f2:9b:4e:01:5b: 98:da:e4:0b:c5:a4:98:35:a6:c8:d2:a4:6f:7f:ff:af:39:3b: 30:71:d2:e4:85:08:91:bb:b6:09:11:f1:2c:c1:ce:58:9f:f6: 99:7b:fe:b9:3d:09:1d:6d:93:3a:d9:97:97:71:eb:49:29:0c: 82:cc:e1:9e:2b:79:5f:cb:a1:80:db:ec:98:e7:27:f3:73:55: 65:4d:7d:3d:bd:40:ef:42:4c:e0:61:7b:48:e2:17:e9:3f:d3: 10:99:43:2c:84:f7:da:03:68:85:5d:45:63:13:89:11:63:af: ae:51:1e:5b:58:3e:97:0e:b3:a0:37:f9:0e:ff:b3:b9:3c:a2: db:77:ef:2c:d1:6e:64:8e:c0:34:c3:3f:ea:56:47:43:97:7d: 28:03:bd:79:85:bf:ac:c5:13:86:67:9f:97:59:36:c8:e9:9b: be:ce:60:35:ce:f7:65:fb:0a:8c:a0:52:72:4e:e1:d3:c7:02: 9f:33:9f:e0:89:db:ef:99:0a:c1:2d:4e:93:ce:52:7e:be:29: 08:6a:69:41:c6:30:fa:34:21:13:7a:5f:7b:24:6a:e0:36:90: 27:ed:17:78 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1zK94dYkkFeLNOCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwOTE0MDc1NVoXDTI2MDcwODE0MDc1NVowLzEtMCsGA1UEAxMk MjA1NTJiNTgtOWRkMC00MGQ3LTg4MjAtODgzOTczOTVmNTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkc7+nD3VbeMQAY7atyhneWHQv717ifPqvyaO A0fopRAL2fETfLlGFMojAyh8D3oqwVcbX1bgTUfZthP/63onGgbvd3VVaryDoDAU WbFuVu1/EoZjkRdgHe3cITGrO0k8OMLrTqy6efPVgIoWrrECnyMcv9tXGMKXjybw pmRRuVQSu6h76ORejPy7ueX8PgkCV44xhPfLg6LT43xnsijNPJSKXtFg5TC7U+lG sSWtdJQpJQ+ZQj4utnbbuwuegCH2z4uNl805gM3A4lSItx22AJrzDFECma7cPgm3 OjyO0ilub3sTOfX+48yFMOcUGX+kp2VC6VO9qzJQEzQTwVmJoQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC59bNySn5IMK8FTyOkWmHfYAHUbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2FhMmVjNjAtMGM4ZS0z Y2FlLTlmYTQtMTI2OGU1MGM1ZWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADYATbSB4x6ljnkvkVPiTd/FjHyx9qY8eUG25ObsDlfym04BW5ja 5AvFpJg1psjSpG9//685OzBx0uSFCJG7tgkR8SzBzlif9pl7/rk9CR1tkzrZl5dx 60kpDILM4Z4reV/LoYDb7JjnJ/NzVWVNfT29QO9CTOBhe0jiF+k/0xCZQyyE99oD aIVdRWMTiRFjr65RHltYPpcOs6A3+Q7/s7k8ott37yzRbmSOwDTDP+pWR0OXfSgD vXmFv6zFE4Znn5dZNsjpm77OYDXO92X7CoygUnJO4dPHAp8zn+CJ2++ZCsEtTpPO Un6+KQhqaUHGMPo0IRN6X3skauA2kCftF3g= -----END CERTIFICATE-----Generated at Fri Apr 17 01:19:48 2026 by rpki-client