$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4afd8722-9820-34dc-9863-63c0a5b6e737.roa File: 4afd8722-9820-34dc-9863-63c0a5b6e737.roa (raw, json) Hash identifier: Mpn9ClLB8r9/fr6+zCIw7eKyLzmm8flqS0LmmbU+12o= Subject key identifier: 0A:E9:CF:5E:27:61:7E:D7:1B:06:28:0D:F9:C6:CD:8D:D5:B4:2F:58 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D8128696BCC8916BB07274580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4afd8722-9820-34dc-9863-63c0a5b6e737.roa Signing time: Tue 14 Apr 2026 14:22:17 +0000 ROA not before: Tue 14 Apr 2026 14:22:17 +0000 ROA not after: Mon 13 Jul 2026 14:22:17 +0000 asID: 396588 IP address blocks: 2001:500:124::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:81:28:69:6b:cc:89:16:bb:07:27:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 14 14:22:17 2026 GMT Not After : Jul 13 14:22:17 2026 GMT Subject: CN=1a045885-f97f-444c-a831-c95054f3a26d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:cc:48:3b:04:14:d2:30:85:ee:0e:00:c2:79: 69:9e:ab:32:68:c7:f1:82:8f:f8:66:d6:ab:a6:3d: 55:d3:ff:2b:80:94:ab:93:c2:c9:ea:9e:e6:5c:da: bc:2d:b5:e0:65:43:dc:5f:a6:5f:ef:95:5b:a1:35: c5:e9:31:b5:83:20:33:55:32:2d:63:b4:d0:94:aa: 97:21:15:c4:c5:4a:ed:13:05:b9:57:3f:4e:fe:a8: 59:dc:3e:2e:37:8e:b1:eb:94:60:bb:8f:29:5d:dc: 14:f7:7e:12:fb:35:34:f9:08:39:2b:9a:d1:e6:e7: 26:bf:64:84:81:88:ff:f2:f8:04:a5:ac:40:f4:0c: 4c:28:6a:41:0d:18:f0:a5:74:84:d3:13:65:00:fb: a7:5c:d1:bf:63:bf:0b:df:35:9f:c8:02:7b:86:c8: 1e:98:2b:ce:e7:0a:8f:0e:16:d3:2b:30:9a:02:7a: 1f:bf:3e:df:b7:5c:86:97:9c:61:19:07:a3:c5:84: 13:46:2e:2c:cf:5d:c3:f7:45:d3:32:ff:7e:2c:9e: d4:38:00:b0:82:8b:1c:72:e5:5a:9b:c5:b9:a2:14: ec:10:ba:b5:40:e4:d2:2c:1c:c1:a3:58:fb:e1:dd: ed:de:71:8b:3a:92:56:26:c3:07:11:1f:86:da:02: b7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E9:CF:5E:27:61:7E:D7:1B:06:28:0D:F9:C6:CD:8D:D5:B4:2F:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4afd8722-9820-34dc-9863-63c0a5b6e737.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:124::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:48:84:ad:5a:ce:03:6f:c6:4c:29:4f:29:e7:20:e9:de:61: 77:a0:23:4a:a1:8e:3a:c1:09:df:3b:28:b1:11:0b:d3:67:aa: 6a:19:28:08:e8:6e:c2:7f:22:f0:8b:9a:2e:56:29:34:b3:c6: 22:cf:69:3b:9e:60:d8:8a:bd:2f:fc:48:75:66:02:61:e7:a8: f5:0d:33:ee:b4:2d:4e:f6:22:5c:af:98:23:99:c1:51:18:b0: 1d:64:2e:ef:1e:f6:37:7f:01:80:68:29:33:34:ac:be:24:07: 5a:7c:15:e9:8f:a6:5b:c1:ed:cc:65:a0:40:1a:a1:45:c2:53: 64:80:f3:11:67:ed:2c:c4:f6:62:53:c4:86:bc:f0:e1:d2:0a: 4f:41:46:89:8b:9f:c8:a1:b9:80:5b:d1:a5:a0:c9:33:54:cb: ea:12:ab:df:ff:a8:05:67:ba:2b:d7:f6:bc:5d:ac:03:c0:1f: a5:72:36:cb:b9:a0:e3:8b:d2:de:5e:f1:65:4c:70:e4:44:92: 4b:87:10:4d:92:0f:d0:2e:58:f0:20:eb:49:bd:7c:f6:3b:a9: 82:4b:fd:39:4f:39:62:50:c2:0d:31:14:a0:19:af:3b:60:02: 3f:9c:b2:42:19:3e:8f:4a:c0:d7:2f:02:4d:ef:11:b1:08:95: 14:c5:9d:b2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2BKGlrzIkWuwcnRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxNDE0MjIxN1oXDTI2MDcxMzE0MjIxN1owLzEtMCsGA1UEAxMk MWEwNDU4ODUtZjk3Zi00NDRjLWE4MzEtYzk1MDU0ZjNhMjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8xIOwQU0jCF7g4AwnlpnqsyaMfxgo/4Ztar pj1V0/8rgJSrk8LJ6p7mXNq8LbXgZUPcX6Zf75VboTXF6TG1gyAzVTItY7TQlKqX IRXExUrtEwW5Vz9O/qhZ3D4uN46x65Rgu48pXdwU934S+zU0+Qg5K5rR5ucmv2SE gYj/8vgEpaxA9AxMKGpBDRjwpXSE0xNlAPunXNG/Y78L3zWfyAJ7hsgemCvO5wqP DhbTKzCaAnofvz7ft1yGl5xhGQejxYQTRi4sz13D90XTMv9+LJ7UOACwgosccuVa m8W5ohTsELq1QOTSLBzBo1j74d3t3nGLOpJWJsMHER+G2gK3UwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFArpz14nYX7XGwYoDfnGzY3VtC9YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGFmZDg3MjItOTgyMC0z NGRjLTk4NjMtNjNjMGE1YjZlNzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKhIhK1azgNvxkwpTynnIOneYXegI0qhjjrBCd87KLERC9NnqmoZ KAjobsJ/IvCLmi5WKTSzxiLPaTueYNiKvS/8SHVmAmHnqPUNM+60LU72IlyvmCOZ wVEYsB1kLu8e9jd/AYBoKTM0rL4kB1p8FemPplvB7cxloEAaoUXCU2SA8xFn7SzE 9mJTxIa88OHSCk9BRomLn8ihuYBb0aWgyTNUy+oSq9//qAVnuivX9rxdrAPAH6Vy Nsu5oOOL0t5e8WVMcOREkkuHEE2SD9AuWPAg60m9fPY7qYJL/TlPOWJQwg0xFKAZ rztgAj+cskIZPo9KwNcvAk3vEbEIlRTFnbI= -----END CERTIFICATE-----Generated at Fri Apr 17 17:12:52 2026 by rpki-client