$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48be5e8e-265d-3dae-9afc-decae193902b.roa File: 48be5e8e-265d-3dae-9afc-decae193902b.roa (raw, json) Hash identifier: cwyLsyRag38RjFsaPhq0ulusEq7N+YoRIjdaXtuBkRE= Subject key identifier: 3E:64:6A:E7:ED:8C:58:AE:5A:41:A9:B2:8B:4C:DB:96:1C:C1:9D:77 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D6DA1878B5337C5C99AF4C600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48be5e8e-265d-3dae-9afc-decae193902b.roa Signing time: Tue 07 Apr 2026 14:30:09 +0000 ROA not before: Tue 07 Apr 2026 14:30:09 +0000 ROA not after: Mon 06 Jul 2026 14:30:09 +0000 asID: 396576 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:a1:87:8b:53:37:c5:c9:9a:f4:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 7 14:30:09 2026 GMT Not After : Jul 6 14:30:09 2026 GMT Subject: CN=8996b421-7d92-4a94-bf70-b1588eaaa23a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:cc:7e:8f:0d:58:c8:73:ba:38:2d:11:02:b6: 51:19:13:b8:93:f6:4c:fc:91:44:59:e8:67:cc:b4: 7a:e4:4c:d2:38:5a:38:c3:0c:bb:7a:86:fe:87:5e: f9:6b:5d:3a:6e:a9:d9:45:8d:4b:5e:b7:b5:b0:5e: 3d:67:fc:d6:c2:71:18:b2:48:55:2a:a4:be:02:42: 6f:ff:c0:0e:08:40:43:de:02:68:f3:0b:99:21:b8: f0:9e:ff:60:18:da:b2:03:73:46:2f:05:06:d6:f1: 1a:d0:35:78:c1:c8:a6:be:ff:fc:45:1c:ed:3e:eb: b7:8f:b0:8a:bc:86:48:e8:9d:8e:da:52:ea:80:82: 66:fc:b4:e9:d5:ca:d7:86:ec:ed:80:68:81:3b:26: 27:71:d0:5f:a5:e8:85:53:29:78:70:90:3c:3a:be: ba:bb:96:54:9a:92:63:0e:a9:29:a9:7a:e1:e4:14: 55:37:a7:b2:d9:52:3b:4b:0a:6d:af:c5:e8:df:f7: fa:4e:2b:3a:0a:a9:20:5c:d8:32:c5:3b:80:f2:92: 92:b9:e7:fe:30:88:1f:be:0e:a1:9e:97:6c:9b:09: f5:a3:71:4e:30:63:c9:3e:12:2e:88:ba:da:c8:1f: 42:7d:4d:91:69:02:a4:d6:82:2c:88:d1:a7:a2:74: b8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:64:6A:E7:ED:8C:58:AE:5A:41:A9:B2:8B:4C:DB:96:1C:C1:9D:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48be5e8e-265d-3dae-9afc-decae193902b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:61:c4:cc:c7:fd:e1:f4:00:6b:91:52:21:e7:64:3f:78:b2: 15:ba:7e:95:20:7c:ed:e4:e3:f0:58:94:4d:bf:11:1d:16:25: 76:37:82:37:5d:a0:0c:8c:a9:ea:31:94:30:ed:df:4b:4b:6a: 32:42:7e:d0:ca:c0:a4:bc:63:fb:8b:14:f3:de:00:ed:bc:f9: 41:9b:24:b2:94:91:6a:1b:7b:db:12:f4:73:c5:fe:f4:fe:e5: f2:fb:37:88:65:8c:21:d3:9e:ca:eb:68:ae:d1:45:90:91:56: 37:99:4f:a8:8b:95:99:b7:63:92:a4:d7:80:a4:2e:f0:ad:62: 87:f4:d3:4c:cd:90:55:7b:c6:0c:7b:b8:79:21:9d:a1:7f:dc: ca:e7:d9:35:64:29:0a:3b:ea:c7:55:0a:ab:62:e6:ab:df:57: f3:f3:6f:e3:c2:5d:d6:9b:53:1d:01:cd:ce:17:e0:d9:b9:77: 2c:23:30:51:2c:95:20:3f:f9:26:d1:73:34:5d:86:5a:7f:5e: 4f:fd:de:af:36:b8:5b:76:4a:8f:e9:88:17:98:46:88:1c:96: d0:76:42:b0:b3:77:16:8b:ac:8f:d3:3c:50:d4:c2:ef:7d:82: 50:59:45:d6:b2:fb:03:2c:aa:5a:f8:c2:28:de:75:81:d0:d2: f5:4d:a1:51 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1toYeLUzfFyZr0xgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwNzE0MzAwOVoXDTI2MDcwNjE0MzAwOVowLzEtMCsGA1UEAxMk ODk5NmI0MjEtN2Q5Mi00YTk0LWJmNzAtYjE1ODhlYWFhMjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8x+jw1YyHO6OC0RArZRGRO4k/ZM/JFEWehn zLR65EzSOFo4wwy7eob+h175a106bqnZRY1LXre1sF49Z/zWwnEYskhVKqS+AkJv /8AOCEBD3gJo8wuZIbjwnv9gGNqyA3NGLwUG1vEa0DV4wcimvv/8RRztPuu3j7CK vIZI6J2O2lLqgIJm/LTp1crXhuztgGiBOyYncdBfpeiFUyl4cJA8Or66u5ZUmpJj DqkpqXrh5BRVN6ey2VI7Swptr8Xo3/f6Tis6CqkgXNgyxTuA8pKSuef+MIgfvg6h npdsmwn1o3FOMGPJPhIuiLrayB9CfU2RaQKk1oIsiNGnonS4owIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD5kauftjFiuWkGpsotM25YcwZ13MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDhiZTVlOGUtMjY1ZC0z ZGFlLTlhZmMtZGVjYWUxOTM5MDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJZhxMzH/eH0AGuRUiHnZD94shW6fpUgfO3k4/BYlE2/ER0WJXY3 gjddoAyMqeoxlDDt30tLajJCftDKwKS8Y/uLFPPeAO28+UGbJLKUkWobe9sS9HPF /vT+5fL7N4hljCHTnsrraK7RRZCRVjeZT6iLlZm3Y5Kk14CkLvCtYof000zNkFV7 xgx7uHkhnaF/3Mrn2TVkKQo76sdVCqti5qvfV/Pzb+PCXdabUx0Bzc4X4Nm5dywj MFEslSA/+SbRczRdhlp/Xk/93q82uFt2So/piBeYRogcltB2QrCzdxaLrI/TPFDU wu99glBZRday+wMsqlr4wijedYHQ0vVNoVE= -----END CERTIFICATE-----Generated at Fri Apr 17 04:22:42 2026 by rpki-client