$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e85e0d5-04f1-3abe-9e6b-6eeb6908e164.roa File: 3e85e0d5-04f1-3abe-9e6b-6eeb6908e164.roa (raw, json) Hash identifier: Tl8u0FqsjoPpQ6RNWrviLbAJz0LRI3b6yJQylQZ3L6k= Subject key identifier: C1:16:97:C7:3F:65:AE:5A:F5:AA:67:B9:23:6C:CD:C6:FD:75:6E:8F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D6DA1965E8F9DA8B39D931940 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e85e0d5-04f1-3abe-9e6b-6eeb6908e164.roa Signing time: Tue 07 Apr 2026 14:30:16 +0000 ROA not before: Tue 07 Apr 2026 14:30:16 +0000 ROA not after: Mon 06 Jul 2026 14:30:16 +0000 asID: 396611 IP address blocks: 2001:500:13f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:a1:96:5e:8f:9d:a8:b3:9d:93:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 7 14:30:16 2026 GMT Not After : Jul 6 14:30:16 2026 GMT Subject: CN=8fde3fec-1bc1-4de4-94ca-39f84c60be71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:48:fe:ee:62:09:3e:6f:f5:ff:6f:3e:6b:31: a7:43:8d:91:82:30:01:e3:00:6b:3d:71:cb:11:34: 14:13:0b:02:93:47:34:09:cb:b9:22:03:fb:ff:ca: 26:9a:71:41:7f:75:b9:7e:00:a9:25:f8:da:9c:49: 86:e0:e9:d8:75:90:ba:2c:3d:3b:ca:75:a1:eb:22: 18:c4:c6:04:94:02:d0:fe:13:c3:c2:ae:ba:30:9c: a8:08:a9:e4:bb:31:27:b6:3f:de:78:f2:70:7a:b6: ee:15:a2:ca:69:73:2c:0d:9d:77:e8:e6:4b:10:4f: b2:69:0d:78:aa:61:ee:9f:55:be:1e:40:5c:9c:06: f7:df:b9:79:f7:9c:eb:70:b4:61:27:97:36:93:23: 0e:a0:27:c3:07:a9:f7:45:9b:a7:f3:66:4f:56:8d: 98:0c:99:77:83:b8:d4:9a:3e:d9:ae:21:5d:38:08: e3:46:b5:ee:5d:d8:df:d4:13:8d:4f:72:fc:fc:5d: bf:b8:40:7a:6a:c4:3f:d8:83:3c:30:40:7f:28:62: 39:e8:2c:ff:66:46:b8:a4:d3:a7:82:da:83:ea:80: b2:34:32:45:89:10:50:f9:8e:cd:7c:c5:0e:64:00: f5:79:76:5f:e5:a0:8e:05:db:93:d5:33:b1:56:cb: e7:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:16:97:C7:3F:65:AE:5A:F5:AA:67:B9:23:6C:CD:C6:FD:75:6E:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e85e0d5-04f1-3abe-9e6b-6eeb6908e164.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:13f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:3b:e5:8f:8a:9a:11:f8:41:df:8d:b6:88:c8:67:16:75:63: ef:09:cf:6e:78:76:62:59:ab:ec:cb:60:34:c9:e9:8e:f6:f0: 8e:79:80:1f:22:f1:b1:ab:33:be:a5:72:f0:ec:a6:80:a1:a6: 24:a4:67:55:b4:0b:55:c5:49:2e:01:ae:03:be:72:5f:e6:69: 78:30:8e:4a:0a:5d:e6:07:c3:f7:cf:a8:7c:16:09:79:5d:7a: f8:f7:71:1d:5e:23:10:cb:ff:95:04:01:84:83:b4:95:db:39: f8:4c:2d:62:1b:43:52:51:db:eb:d9:68:a9:5a:63:90:f2:9f: 39:f9:b2:61:67:6d:f3:8c:69:55:07:cc:25:85:d7:37:e9:54: ff:00:60:26:c2:32:8f:d9:c9:9c:0e:24:96:08:d8:91:c2:4e: 71:15:22:1a:ff:00:b3:61:69:27:0b:f1:41:6c:c8:5a:f4:b3: 64:c1:1e:cb:2e:cf:36:c9:9a:42:5f:18:26:54:65:4f:8c:96: 3f:72:3c:de:fd:ab:2e:2d:1e:e7:5f:6d:62:47:1b:ea:a8:81: be:0e:d0:6a:42:42:d8:f4:d9:ad:94:42:89:df:6a:cf:e4:b4: 9d:18:a9:8f:bd:b1:2a:2a:a8:2c:3c:2c:c2:05:f8:68:dd:32: 3d:7a:e0:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1toZZej52os52TGUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwNzE0MzAxNloXDTI2MDcwNjE0MzAxNlowLzEtMCsGA1UEAxMk OGZkZTNmZWMtMWJjMS00ZGU0LTk0Y2EtMzlmODRjNjBiZTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0j+7mIJPm/1/28+azGnQ42RgjAB4wBrPXHL ETQUEwsCk0c0Ccu5IgP7/8ommnFBf3W5fgCpJfjanEmG4OnYdZC6LD07ynWh6yIY xMYElALQ/hPDwq66MJyoCKnkuzEntj/eePJwerbuFaLKaXMsDZ136OZLEE+yaQ14 qmHun1W+HkBcnAb337l595zrcLRhJ5c2kyMOoCfDB6n3RZun82ZPVo2YDJl3g7jU mj7ZriFdOAjjRrXuXdjf1BONT3L8/F2/uEB6asQ/2IM8MEB/KGI56Cz/Zka4pNOn gtqD6oCyNDJFiRBQ+Y7NfMUOZAD1eXZf5aCOBduT1TOxVsvnYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMEWl8c/Za5a9apnuSNszcb9dW6PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2U4NWUwZDUtMDRmMS0z YWJlLTllNmItNmVlYjY5MDhlMTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALA75Y+KmhH4Qd+NtojIZxZ1Y+8Jz254dmJZq+zLYDTJ6Y728I55 gB8i8bGrM76lcvDspoChpiSkZ1W0C1XFSS4BrgO+cl/maXgwjkoKXeYHw/fPqHwW CXldevj3cR1eIxDL/5UEAYSDtJXbOfhMLWIbQ1JR2+vZaKlaY5Dynzn5smFnbfOM aVUHzCWF1zfpVP8AYCbCMo/ZyZwOJJYI2JHCTnEVIhr/ALNhaScL8UFsyFr0s2TB HssuzzbJmkJfGCZUZU+Mlj9yPN79qy4tHudfbWJHG+qogb4O0GpCQtj02a2UQonf as/ktJ0YqY+9sSoqqCw8LMIF+GjdMj164A8= -----END CERTIFICATE-----Generated at Fri Apr 17 10:17:10 2026 by rpki-client