$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3adf6668-74e6-3c45-a178-2dcf00e0e383.roa File: 3adf6668-74e6-3c45-a178-2dcf00e0e383.roa (raw, json) Hash identifier: 3NgvdyhMLLLQdpZ/E+0gSVUBPNwAunp7EtXvAGIIils= Subject key identifier: AF:5A:CA:CF:DD:69:6A:52:14:64:BF:8C:DA:1D:1C:44:AE:06:60:F3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D5E1A4306B52A4B7A0CD2DB40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3adf6668-74e6-3c45-a178-2dcf00e0e383.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 396588 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:43:06:b5:2a:4b:7a:0c:d2:db:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=f51d7efa-5c2a-4672-b7c5-d3f8c98fe910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:47:76:d0:c3:14:1f:ed:50:41:af:5d:ec:3d: 30:d2:d1:73:91:2c:a7:c7:96:7e:c8:92:38:bc:9a: 01:b3:94:51:54:df:3b:80:0f:0c:39:b9:1f:d3:c1: e7:22:a5:36:63:33:e2:df:ff:b7:d5:52:49:0a:e1: 81:40:a2:9f:83:99:d9:05:eb:b0:74:79:16:2b:b3: 97:b5:4f:7b:8f:22:21:c6:6b:8b:4c:f4:94:a5:c7: 0f:42:db:40:8b:60:11:ba:17:44:56:de:08:0c:17: 79:a3:0b:fd:c3:93:b8:89:e0:f7:40:55:b0:5b:b2: aa:7c:9c:84:3d:7f:8c:78:00:44:7b:06:a7:01:ba: 96:70:25:08:f7:93:8e:38:65:97:2a:70:97:56:c3: 95:6c:28:4c:ad:13:2f:4f:c6:e0:65:4f:a1:8e:93: 36:33:b7:0d:7a:e1:49:d1:20:5a:cf:d1:00:1a:fe: 64:e5:13:52:50:ce:c5:ac:9e:c6:78:c3:14:01:6b: a4:8c:60:89:d9:61:03:ab:8b:e4:89:c3:7d:ed:46: 81:29:9e:ee:c9:a1:7e:ac:82:83:6d:f0:03:3c:e5: f8:e7:8c:7d:98:e9:d9:2d:20:21:87:6c:9f:13:2a: aa:db:2e:56:35:a0:09:62:1a:75:61:21:37:b3:57: b4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:5A:CA:CF:DD:69:6A:52:14:64:BF:8C:DA:1D:1C:44:AE:06:60:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3adf6668-74e6-3c45-a178-2dcf00e0e383.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:cf:b0:f3:cb:79:a6:6e:30:1d:2a:f4:a6:e5:21:81:c5:0b: e1:ee:1b:9c:e1:23:3f:85:91:d8:a2:8b:3a:5d:bc:e1:30:09: 3b:03:25:52:f9:f9:5c:6a:c4:6e:09:a1:8b:ac:bf:99:9c:c8: db:68:c8:d1:fc:38:28:80:b3:58:14:a4:55:9a:fa:11:32:6d: 73:41:ef:4d:c4:7c:78:87:88:41:53:b9:14:a0:bf:37:9a:9e: 15:24:4f:90:27:14:f4:c5:64:a0:ce:1d:33:e0:3e:5f:f9:6f: ef:d6:b9:f1:6a:03:a6:5f:f0:49:5d:6c:8b:7c:8a:91:cc:5e: ff:5c:c6:bd:2a:ab:98:97:af:de:5e:54:ec:f2:5f:df:d1:0c: 33:ca:5e:31:1d:cc:f9:8d:7e:21:a4:08:bf:31:7d:8a:b9:88: 47:b3:0b:44:47:12:0f:74:3b:b2:0f:92:0e:12:b3:77:13:c1: a4:c0:c6:3b:ec:1e:42:a9:80:37:50:53:23:a7:18:08:49:07: a3:57:d8:af:fb:e4:c2:82:14:5e:3f:bb:bb:05:03:d9:0d:d4: b4:c4:64:ca:b9:65:03:e9:48:d3:5f:4c:c6:d5:2e:fe:2d:6f: dc:64:70:6a:58:9c:21:82:ef:69:8d:ad:d6:b1:6c:b3:30:1d: a4:9f:d2:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1eGkMGtSpLegzS20AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk ZjUxZDdlZmEtNWMyYS00NjcyLWI3YzUtZDNmOGM5OGZlOTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6kd20MMUH+1QQa9d7D0w0tFzkSynx5Z+yJI4 vJoBs5RRVN87gA8MObkf08HnIqU2YzPi3/+31VJJCuGBQKKfg5nZBeuwdHkWK7OX tU97jyIhxmuLTPSUpccPQttAi2ARuhdEVt4IDBd5owv9w5O4ieD3QFWwW7KqfJyE PX+MeABEewanAbqWcCUI95OOOGWXKnCXVsOVbChMrRMvT8bgZU+hjpM2M7cNeuFJ 0SBaz9EAGv5k5RNSUM7FrJ7GeMMUAWukjGCJ2WEDq4vkicN97UaBKZ7uyaF+rIKD bfADPOX454x9mOnZLSAhh2yfEyqq2y5WNaAJYhp1YSE3s1e0HwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK9ays/daWpSFGS/jNodHESuBmDzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2FkZjY2NjgtNzRlNi0z YzQ1LWExNzgtMmRjZjAwZTBlMzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGzPsPPLeaZuMB0q9KblIYHFC+HuG5zhIz+FkdiiizpdvOEwCTsD JVL5+VxqxG4JoYusv5mcyNtoyNH8OCiAs1gUpFWa+hEybXNB703EfHiHiEFTuRSg vzeanhUkT5AnFPTFZKDOHTPgPl/5b+/WufFqA6Zf8EldbIt8ipHMXv9cxr0qq5iX r95eVOzyX9/RDDPKXjEdzPmNfiGkCL8xfYq5iEezC0RHEg90O7IPkg4Ss3cTwaTA xjvsHkKpgDdQUyOnGAhJB6NX2K/75MKCFF4/u7sFA9kN1LTEZMq5ZQPpSNNfTMbV Lv4tb9xkcGpYnCGC72mNrdaxbLMwHaSf0g8= -----END CERTIFICATE-----Generated at Fri Apr 17 12:20:22 2026 by rpki-client