$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/408e4007-5250-3835-a8ef-18d680e0b827.roa File: 408e4007-5250-3835-a8ef-18d680e0b827.roa (raw, json) Hash identifier: GX0kLxHitXEya88e4XBah76I4AMYQSBMM0hCVRg6T0M= Subject key identifier: 4F:EC:1C:1E:63:2A:3E:F1:66:16:B2:D3:54:FA:AA:F2:34:8F:42:5D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D59EA5E70AE9D363F13374A00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/408e4007-5250-3835-a8ef-18d680e0b827.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 396553 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:5e:70:ae:9d:36:3f:13:37:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=48271f4e-f4d5-47d0-ad93-556f5b1fa028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7a:d2:1b:ea:e2:ed:e3:51:86:d4:24:7c:40: 20:0a:96:e1:a7:98:38:7c:05:c0:4e:4b:01:6d:af: 79:3e:17:9e:6c:7a:58:a2:9b:d0:c1:d8:b1:97:3d: 61:47:71:df:f7:bf:cb:9e:5f:52:1a:d5:0b:72:75: 0e:77:0a:14:2a:31:71:ce:e8:5e:f8:71:11:f2:04: bd:34:5c:81:bd:0d:9c:47:33:a3:ec:f2:b0:ae:c8: 4f:89:da:0b:ce:90:27:40:99:c4:23:c4:ef:74:32: 3a:19:8f:99:ac:51:db:31:1d:7d:41:a1:06:ec:38: 6e:37:87:32:66:27:e6:57:53:a0:4a:68:f2:44:cc: 8a:6f:5a:0c:1b:40:2c:1b:af:2f:1e:28:73:92:ad: 88:b0:5f:5a:2a:79:62:3b:94:46:53:7c:e7:76:41: d3:07:98:ed:e5:ee:68:59:eb:c3:d4:ec:e3:2d:ca: 4f:58:b2:29:13:09:5e:d2:81:93:2f:09:e0:df:46: c5:04:08:6b:e2:be:21:f3:ad:84:36:d5:54:8c:7c: 75:85:bd:10:b5:09:4f:01:d2:ef:4c:79:91:d4:68: 8b:65:f4:1e:4a:f4:79:27:6a:55:8e:77:5a:9f:d8: f3:86:6d:3e:91:7f:8b:c4:d2:94:fd:52:f2:bc:82: fc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:EC:1C:1E:63:2A:3E:F1:66:16:B2:D3:54:FA:AA:F2:34:8F:42:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/408e4007-5250-3835-a8ef-18d680e0b827.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:c4:a3:b1:7e:0e:f3:af:80:3f:4b:47:5d:04:1b:35:fb:26: b8:0d:db:23:e5:0a:ca:9e:91:be:fd:2b:83:97:22:f2:e5:f8: 39:1a:1a:c3:2f:17:78:5f:70:66:cb:fd:ec:1b:11:09:13:f1: 1f:bc:7d:2f:0d:be:2e:0c:70:50:93:d9:65:9e:d0:af:d0:20: 84:11:f1:1e:f1:af:a8:d4:09:e8:1e:8b:a7:2e:84:c5:28:68: 54:82:3a:9c:25:23:c3:c0:77:1b:3f:9c:06:7a:43:7e:73:61: ff:66:ce:84:f1:71:4c:97:d4:c6:fb:e8:cf:64:20:7d:49:c5: 2b:c4:94:2c:6a:62:84:79:de:52:5d:c5:ba:03:04:b7:9c:0d: a1:1e:6e:4f:eb:86:69:36:9d:b2:df:0a:11:9f:43:66:de:ba: 56:74:90:bd:b2:9a:d2:53:91:e3:d6:b4:c9:77:92:08:2b:fd: 4f:e9:09:87:41:1e:85:cd:72:63:e1:ae:1c:c9:42:8c:f8:52: 4c:9e:39:d8:0f:a0:29:59:ec:57:e1:fb:27:5d:c9:d2:d4:39: 1c:5e:4a:86:48:6c:84:0c:41:9b:73:06:cd:ac:57:05:3b:67: bb:c3:50:79:e3:b0:f1:c3:46:3f:d7:a6:66:07:21:d6:57:6b: 43:c1:f5:20 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6l5wrp02PxM3SgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NDgyNzFmNGUtZjRkNS00N2QwLWFkOTMtNTU2ZjViMWZhMDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3rSG+ri7eNRhtQkfEAgCpbhp5g4fAXATksB ba95PheebHpYopvQwdixlz1hR3Hf97/Lnl9SGtULcnUOdwoUKjFxzuhe+HER8gS9 NFyBvQ2cRzOj7PKwrshPidoLzpAnQJnEI8TvdDI6GY+ZrFHbMR19QaEG7DhuN4cy ZifmV1OgSmjyRMyKb1oMG0AsG68vHihzkq2IsF9aKnliO5RGU3zndkHTB5jt5e5o WevD1OzjLcpPWLIpEwle0oGTLwng30bFBAhr4r4h862ENtVUjHx1hb0QtQlPAdLv THmR1GiLZfQeSvR5J2pVjndan9jzhm0+kX+LxNKU/VLyvIL8wQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE/sHB5jKj7xZhay01T6qvI0j0JdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDA4ZTQwMDctNTI1MC0z ODM1LWE4ZWYtMThkNjgwZTBiODI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKDEo7F+DvOvgD9LR10EGzX7JrgN2yPlCsqekb79K4OXIvLl+Dka GsMvF3hfcGbL/ewbEQkT8R+8fS8Nvi4McFCT2WWe0K/QIIQR8R7xr6jUCegei6cu hMUoaFSCOpwlI8PAdxs/nAZ6Q35zYf9mzoTxcUyX1Mb76M9kIH1JxSvElCxqYoR5 3lJdxboDBLecDaEebk/rhmk2nbLfChGfQ2beulZ0kL2ymtJTkePWtMl3kggr/U/p CYdBHoXNcmPhrhzJQoz4UkyeOdgPoClZ7Ffh+yddydLUORxeSoZIbIQMQZtzBs2s VwU7Z7vDUHnjsPHDRj/XpmYHIdZXa0PB9SA= -----END CERTIFICATE-----Generated at Fri Apr 17 16:09:03 2026 by rpki-client