$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/61c6eb7c-643d-3194-a1b4-3880e386df30.roa File: 61c6eb7c-643d-3194-a1b4-3880e386df30.roa (raw, json) Hash identifier: 2kjDY4BfPXnzlyQIJEEqSYjnVa+O+12NEUmtOWmp6hY= Subject key identifier: A1:F1:F1:22:78:A6:2F:77:BB:65:F8:70:97:F7:79:4F:1C:2F:EE:94 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D5E1A79AD3DFCD1939D2934C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/61c6eb7c-643d-3194-a1b4-3880e386df30.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 36619 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:79:ad:3d:fc:d1:93:9d:29:34:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=a4624342-d5c8-4386-9a19-4d7d22a00218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8b:f3:2c:6b:d4:88:b5:91:f0:4a:4b:ec:45: c7:b8:df:56:1c:6b:22:54:9a:96:1d:ba:d5:94:b9: f0:0b:c3:9b:a1:3f:0c:fe:27:1f:ac:f6:84:a1:13: c3:b7:c3:99:1e:04:19:4f:94:95:53:c9:54:61:90: 38:18:f4:9c:79:0c:1e:26:b3:73:6e:f8:c1:1e:ba: fd:1e:47:f0:0c:8a:1f:77:61:39:ef:7a:35:4c:7f: 5b:46:65:bb:f8:20:e0:60:e5:cf:9b:b2:d8:59:1e: 2a:c9:c4:cd:b8:2e:81:9f:6b:ef:c4:75:53:48:dc: 77:ca:d5:47:f5:99:f3:ca:94:03:e6:45:21:4f:2c: d8:d8:74:20:7b:ec:91:cc:98:63:0f:0e:2d:44:aa: 1d:40:6b:2e:91:83:36:f4:b0:04:9c:0e:16:cd:92: 3d:24:dd:42:c4:e1:be:fa:10:56:fd:3b:a7:41:10: d0:14:4c:84:50:c1:dc:93:bb:d2:05:57:c5:e2:e1: 41:72:d9:9a:62:83:ff:55:d9:6b:20:2b:0d:9b:86: be:bb:61:9c:b3:72:75:67:38:83:38:b8:87:dd:74: 5c:e8:2a:cb:0b:c3:c2:f5:a6:b8:e0:db:a7:ac:01: af:8c:aa:f7:75:ae:3c:14:b0:3b:23:89:cb:cb:29: fc:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F1:F1:22:78:A6:2F:77:BB:65:F8:70:97:F7:79:4F:1C:2F:EE:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/61c6eb7c-643d-3194-a1b4-3880e386df30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:95:68:08:01:32:b7:81:91:9c:04:99:ba:3f:8f:c0:2d:0b: f8:9b:94:9a:94:21:75:04:c4:ef:99:38:62:b2:cd:2b:58:0e: 95:f7:cc:aa:85:eb:c1:0f:81:ed:c6:be:d3:56:b9:fb:6a:e4: 84:a5:ea:99:c2:8e:2e:ec:80:e8:1e:77:46:58:31:51:1d:db: dc:a5:21:33:80:df:88:f9:31:37:f7:8b:c8:21:73:a4:0e:9d: b9:f3:25:18:ff:c7:25:99:a8:26:c6:f1:3b:f8:d5:8d:24:04: cd:f6:17:6e:69:e2:5d:29:8d:68:c7:c8:a1:11:ae:44:e8:b8: 1e:db:f9:55:d7:f5:66:4c:d4:18:22:e8:ae:b9:8d:81:47:e2: 56:ec:1a:f8:a7:e1:26:f5:d6:80:97:75:dd:95:7d:af:2a:54: ee:ee:60:aa:5f:f7:88:90:04:b5:e1:14:f5:63:d9:07:e9:39: 79:20:c4:ba:8c:d2:4d:6d:d8:6a:ee:92:3a:29:e6:47:0d:cc: 79:1d:b0:06:f3:e3:f8:9a:d6:ab:3c:1e:f1:c0:91:03:9d:65: 57:76:d9:ba:35:4e:f1:8c:a1:6f:c7:b7:b0:76:c5:18:b1:0d: 66:f8:96:7c:55:72:0b:97:30:3a:f9:ea:42:f1:c0:f3:03:af: 40:ce:2a:3b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1eGnmtPfzRk50pNMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk YTQ2MjQzNDItZDVjOC00Mzg2LTlhMTktNGQ3ZDIyYTAwMjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIvzLGvUiLWR8EpL7EXHuN9WHGsiVJqWHbrV lLnwC8OboT8M/icfrPaEoRPDt8OZHgQZT5SVU8lUYZA4GPSceQweJrNzbvjBHrr9 HkfwDIofd2E573o1TH9bRmW7+CDgYOXPm7LYWR4qycTNuC6Bn2vvxHVTSNx3ytVH 9ZnzypQD5kUhTyzY2HQge+yRzJhjDw4tRKodQGsukYM29LAEnA4WzZI9JN1CxOG+ +hBW/TunQRDQFEyEUMHck7vSBVfF4uFBctmaYoP/VdlrICsNm4a+u2Gcs3J1ZziD OLiH3XRc6CrLC8PC9aa44NunrAGvjKr3da48FLA7I4nLyyn8hQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKHx8SJ4pi93u2X4cJf3eU8cL+6UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjFjNmViN2MtNjQzZC0z MTk0LWExYjQtMzg4MGUzODZkZjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFKVaAgBMreBkZwEmbo/j8AtC/iblJqUIXUExO+ZOGKyzStYDpX3 zKqF68EPge3GvtNWuftq5ISl6pnCji7sgOged0ZYMVEd29ylITOA34j5MTf3i8gh c6QOnbnzJRj/xyWZqCbG8Tv41Y0kBM32F25p4l0pjWjHyKERrkTouB7b+VXX9WZM 1Bgi6K65jYFH4lbsGvin4Sb11oCXdd2Vfa8qVO7uYKpf94iQBLXhFPVj2QfpOXkg xLqM0k1t2Grukjop5kcNzHkdsAbz4/ia1qs8HvHAkQOdZVd22bo1TvGMoW/Ht7B2 xRixDWb4lnxVcguXMDr56kLxwPMDr0DOKjs= -----END CERTIFICATE-----Generated at Fri Apr 17 04:04:11 2026 by rpki-client