$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/435dd662-6c54-3076-9bf3-f90d5669c892.roa File: 435dd662-6c54-3076-9bf3-f90d5669c892.roa (raw, json) Hash identifier: eKSKFc1hRMVKVxBqQdGNfVPCIr4xmS1HnM0WZrtgsck= Subject key identifier: 3E:23:D5:06:A0:1B:DF:F0:B0:D1:26:19:74:A6:01:4B:23:8A:9D:BB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D59EAAE584C820CF080185720 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/435dd662-6c54-3076-9bf3-f90d5669c892.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 396617 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:ae:58:4c:82:0c:f0:80:18:57:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=b55366c1-a65f-4418-8ab4-486525f91ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f6:6d:e2:10:9d:f4:90:62:75:4e:62:75:62: 0a:18:7c:81:89:c4:f3:0a:88:ce:be:a2:1d:98:c1: 21:61:6c:b7:9d:91:2a:de:a9:21:19:85:7b:1d:4e: 77:94:2c:67:30:d2:72:a7:0b:d7:1f:1e:ea:19:e8: 03:be:c0:66:f5:d1:9a:a1:f2:81:a4:e5:59:a1:35: a3:75:c0:d1:0e:01:95:bc:20:a2:20:af:cb:49:bf: 47:76:c3:90:e0:26:2d:a1:b7:11:b5:7f:8f:b7:8c: b6:44:7a:88:54:3d:9e:17:ac:d3:1e:87:57:f4:69: 34:fe:51:df:a2:4a:bf:8b:72:6d:94:01:cb:89:d2: 7a:dd:3b:b2:6f:59:3a:94:dd:cd:a4:0b:06:c7:26: 18:6b:ec:36:21:0d:d0:1c:43:f2:b8:3d:ee:fe:c9: a8:7f:d0:6a:e1:15:38:12:8a:aa:29:eb:cf:d6:32: ad:e9:f5:8f:d1:78:63:25:c1:90:7a:29:fd:86:d0: 7f:36:42:e8:f1:e3:ce:ba:28:2b:7e:fa:88:dc:3d: 34:3c:8c:16:8d:3b:a7:44:97:db:d9:7e:98:f6:1c: 66:6d:55:84:37:4b:12:ba:04:14:95:b2:b0:af:1c: 7c:62:6b:d5:4d:cc:df:7b:0e:e3:60:ca:57:8b:58: c4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:23:D5:06:A0:1B:DF:F0:B0:D1:26:19:74:A6:01:4B:23:8A:9D:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/435dd662-6c54-3076-9bf3-f90d5669c892.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:f7:de:bb:92:97:14:ef:09:a0:91:22:de:60:06:9d:77:01: 2f:3f:6e:63:cd:97:aa:9c:68:b4:f0:b1:a0:25:39:b2:cf:1b: 95:71:da:97:97:ef:07:dd:2a:d9:60:58:82:cd:71:f8:e1:fb: 8b:75:7f:c6:5b:62:dc:dd:97:98:43:97:4e:c7:ce:79:25:91: 7a:34:fa:da:e5:61:e8:9c:7d:dd:69:58:46:36:86:9b:bf:38: 49:9b:8a:a9:6f:73:46:cb:75:ad:fc:57:bf:fd:e5:a9:92:a8: cd:0d:a3:ff:14:e4:51:01:a3:c0:35:4e:07:46:f6:c4:8e:90: 21:fe:a6:31:bb:ab:e4:a9:b2:94:c6:ff:f2:2e:17:58:47:bc: 55:f1:2a:b8:23:56:ac:a6:70:1f:93:fd:ba:8c:0d:c7:14:33: 83:5f:09:05:28:5d:bc:be:3c:2e:cc:ec:bf:d1:0c:e9:9f:21: 52:2c:04:9b:36:2a:02:e0:af:59:09:6b:78:8b:ea:00:4d:c4: 52:10:0f:07:55:b0:44:fe:c0:02:b6:6d:08:7e:e9:81:75:d1: 2a:3b:37:52:38:4b:aa:9f:5e:df:e3:36:e9:1f:8e:c3:99:7f: 19:c0:d0:60:5a:55:8b:fe:3e:e2:c6:86:b3:96:b3:b9:da:cf: c8:24:ac:38 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6q5YTIIM8IAYVyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk YjU1MzY2YzEtYTY1Zi00NDE4LThhYjQtNDg2NTI1ZjkxYWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPZt4hCd9JBidU5idWIKGHyBicTzCojOvqId mMEhYWy3nZEq3qkhGYV7HU53lCxnMNJypwvXHx7qGegDvsBm9dGaofKBpOVZoTWj dcDRDgGVvCCiIK/LSb9HdsOQ4CYtobcRtX+Pt4y2RHqIVD2eF6zTHodX9Gk0/lHf okq/i3JtlAHLidJ63Tuyb1k6lN3NpAsGxyYYa+w2IQ3QHEPyuD3u/smof9Bq4RU4 EoqqKevP1jKt6fWP0XhjJcGQein9htB/NkLo8ePOuigrfvqI3D00PIwWjTunRJfb 2X6Y9hxmbVWEN0sSugQUlbKwrxx8YmvVTczfew7jYMpXi1jEaQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD4j1QagG9/wsNEmGXSmAUsjip27MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDM1ZGQ2NjItNmM1NC0z MDc2LTliZjMtZjkwZDU2NjljODkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGP33ruSlxTvCaCRIt5gBp13AS8/bmPNl6qcaLTwsaAlObLPG5Vx 2peX7wfdKtlgWILNcfjh+4t1f8ZbYtzdl5hDl07HznklkXo0+trlYeicfd1pWEY2 hpu/OEmbiqlvc0bLda38V7/95amSqM0No/8U5FEBo8A1TgdG9sSOkCH+pjG7q+Sp spTG//IuF1hHvFXxKrgjVqymcB+T/bqMDccUM4NfCQUoXby+PC7M7L/RDOmfIVIs BJs2KgLgr1kJa3iL6gBNxFIQDwdVsET+wAK2bQh+6YF10So7N1I4S6qfXt/jNukf jsOZfxnA0GBaVYv+PuLGhrOWs7naz8gkrDg= -----END CERTIFICATE-----Generated at Fri Apr 17 23:42:18 2026 by rpki-client