$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49f7c9c0-60f0-3cb7-a858-24d9dac160cc.roa File: 49f7c9c0-60f0-3cb7-a858-24d9dac160cc.roa (raw, json) Hash identifier: 6mkM2n/vqrHz7eMKEo3Spht14QVbip8Tq53JAVmUBjM= Subject key identifier: 9F:65:3A:85:B9:93:B4:D1:C6:13:40:03:98:CF:7E:89:09:51:D4:9D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D6DA19A6C25AD834AFA2D5A00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49f7c9c0-60f0-3cb7-a858-24d9dac160cc.roa Signing time: Tue 07 Apr 2026 14:30:18 +0000 ROA not before: Tue 07 Apr 2026 14:30:18 +0000 ROA not after: Mon 06 Jul 2026 14:30:18 +0000 asID: 396610 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:a1:9a:6c:25:ad:83:4a:fa:2d:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 7 14:30:18 2026 GMT Not After : Jul 6 14:30:18 2026 GMT Subject: CN=8c828e3b-a7c6-4fcd-b0d8-9bfd63d16ebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e7:2f:b3:15:13:10:75:5b:83:91:76:03:a6: e0:9b:f6:24:fe:07:6a:33:9d:3f:0e:eb:04:8e:d7: 1c:c0:7b:8c:dd:3c:d7:c8:21:af:8b:ac:d4:ff:18: 03:69:8e:91:cb:6c:ae:99:4e:70:22:78:b1:8b:9d: d2:57:38:47:c7:e3:f0:47:f0:7f:53:5e:a7:ee:e6: 28:4b:0e:17:be:ac:57:41:29:28:bc:13:a5:84:9a: a8:d2:53:ee:dd:69:36:ef:18:f9:ff:c4:5d:b5:fd: 67:a0:ac:bd:c7:3f:7f:5d:9f:44:c0:12:82:db:0b: 71:d9:25:6f:3e:d2:a5:13:17:a2:21:b0:ca:c3:5b: 3b:04:f0:93:55:8f:a2:a1:77:32:62:4a:eb:36:5f: 62:c8:59:68:16:0e:e6:bc:3a:0c:4c:0e:6c:e0:29: c5:d0:0a:fb:5c:2b:47:38:ef:0d:68:eb:63:03:df: cf:ba:7a:d8:f4:ad:aa:d3:ae:30:69:c6:b1:b2:51: 01:8f:49:d2:14:08:58:21:25:92:51:4f:2a:55:60: c0:1d:a1:00:74:b5:e3:6a:f9:0e:16:05:68:95:a2: 33:41:66:4f:63:af:f6:e3:38:5f:11:38:96:0a:4f: 21:7f:f6:5f:44:f5:8a:05:fb:62:34:04:11:1d:e9: cf:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:65:3A:85:B9:93:B4:D1:C6:13:40:03:98:CF:7E:89:09:51:D4:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49f7c9c0-60f0-3cb7-a858-24d9dac160cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:39:da:c5:d9:ec:99:78:0b:0b:7f:d5:1d:f4:04:9c:b8:df: a9:40:38:b6:d1:26:c0:2c:b9:9b:6f:fa:36:b0:62:d0:5a:04: 91:4b:a0:c6:09:c0:f9:a8:be:fb:0b:56:78:97:7c:18:71:28: d1:b1:ee:89:1c:5f:a7:ae:90:b1:a1:17:90:82:15:3c:87:c7: b6:dc:da:cc:e6:c2:cb:23:38:85:a9:a5:4d:ff:2f:7a:54:c0: db:62:29:58:71:b3:4c:cf:81:3b:00:d5:5a:46:01:0a:b3:49: e2:b8:7f:83:a5:23:45:5d:60:13:95:33:e3:bf:fc:23:b6:25: 32:78:7e:64:27:70:1d:7c:db:21:0a:95:c7:d1:cd:48:5e:72: dd:b3:b9:a4:c1:be:8f:77:8a:0e:6d:4c:18:da:2f:f4:20:22: e3:48:bc:7c:5d:d4:d9:ea:55:24:ff:e9:51:18:78:52:81:1a: ac:85:15:38:80:1c:5f:ff:aa:e1:bb:0c:9c:25:92:cc:ff:4d: a6:c4:85:66:d4:6e:47:44:86:4c:f3:90:b9:ec:11:f0:2b:31: 18:48:53:9f:da:c1:23:7a:72:b6:e6:c1:ac:e1:05:52:db:81: f0:b1:33:a4:84:12:bc:ef:bc:72:f2:45:9f:04:dc:6e:40:6d: 1a:31:08:01 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1toZpsJa2DSvotWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwNzE0MzAxOFoXDTI2MDcwNjE0MzAxOFowLzEtMCsGA1UEAxMk OGM4MjhlM2ItYTdjNi00ZmNkLWIwZDgtOWJmZDYzZDE2ZWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOcvsxUTEHVbg5F2A6bgm/Yk/gdqM50/DusE jtccwHuM3TzXyCGvi6zU/xgDaY6Ry2yumU5wInixi53SVzhHx+PwR/B/U16n7uYo Sw4XvqxXQSkovBOlhJqo0lPu3Wk27xj5/8Rdtf1noKy9xz9/XZ9EwBKC2wtx2SVv PtKlExeiIbDKw1s7BPCTVY+ioXcyYkrrNl9iyFloFg7mvDoMTA5s4CnF0Ar7XCtH OO8NaOtjA9/PunrY9K2q064wacaxslEBj0nSFAhYISWSUU8qVWDAHaEAdLXjavkO FgVolaIzQWZPY6/24zhfETiWCk8hf/ZfRPWKBftiNAQRHenP2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ9lOoW5k7TRxhNAA5jPfokJUdSdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDlmN2M5YzAtNjBmMC0z Y2I3LWE4NTgtMjRkOWRhYzE2MGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADw52sXZ7Jl4Cwt/1R30BJy436lAOLbRJsAsuZtv+jawYtBaBJFL oMYJwPmovvsLVniXfBhxKNGx7okcX6eukLGhF5CCFTyHx7bc2szmwssjOIWppU3/ L3pUwNtiKVhxs0zPgTsA1VpGAQqzSeK4f4OlI0VdYBOVM+O//CO2JTJ4fmQncB18 2yEKlcfRzUhect2zuaTBvo93ig5tTBjaL/QgIuNIvHxd1NnqVST/6VEYeFKBGqyF FTiAHF//quG7DJwlksz/TabEhWbUbkdEhkzzkLnsEfArMRhIU5/awSN6crbmwazh BVLbgfCxM6SEErzvvHLyRZ8E3G5AbRoxCAE= -----END CERTIFICATE-----Generated at Fri Apr 17 22:57:11 2026 by rpki-client