$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64574f02-84c1-3da9-821a-a8f700aa7fe6.roa File: 64574f02-84c1-3da9-821a-a8f700aa7fe6.roa (raw, json) Hash identifier: 5r8kXc6CkzZHImMMdqadPsWWU92cSuEyCgl689QY85Y= Subject key identifier: 42:A5:49:3E:36:D3:97:55:C9:15:E7:4F:B2:71:71:DD:66:7C:5A:B5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D59EA482C75A4300F7CE0E840 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64574f02-84c1-3da9-821a-a8f700aa7fe6.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 396573 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:48:2c:75:a4:30:0f:7c:e0:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=75e06776-f7ad-4d5f-8d9c-5796f2562a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:63:a6:ad:4c:f4:6f:40:cb:3d:f9:b2:92:c7: d3:2a:77:24:d9:9c:d7:4e:a6:c3:44:e0:ce:61:2d: 4a:38:e3:d6:bf:f9:f1:99:32:4b:77:3a:e2:ed:c1: 00:fd:7e:72:e0:7a:9b:59:4d:52:bf:ec:e3:13:ec: 59:ea:b9:f6:cd:02:b6:4e:19:7e:93:aa:4c:38:35: 4f:b1:40:64:59:ae:4d:bd:d5:b9:bb:a4:b3:8c:14: 02:61:a0:e8:dc:14:8d:8e:bd:07:7e:49:c4:ad:3f: 75:a8:5b:da:22:05:ab:bb:49:45:ef:b3:b3:28:84: e1:f0:5b:98:4e:a5:7b:59:0f:c7:ca:bf:79:6f:87: b2:45:d1:aa:8a:61:99:52:81:5d:6d:68:8a:8e:e3: 91:20:4a:66:c6:42:9a:cf:80:2c:34:8f:b0:db:c6: c1:83:c8:a9:09:ad:8f:15:6f:c1:cf:04:a2:4e:23: 4d:86:bd:38:26:46:6d:79:1f:bf:6a:a0:1b:ae:4a: f5:20:99:e4:64:c5:9c:8c:ca:ac:aa:78:9b:26:6d: 2d:26:e5:c8:cf:4e:94:6e:b7:fd:21:19:13:7d:f0: 58:08:6f:41:53:30:9b:7e:ae:f7:3a:93:be:ed:0c: 37:2e:f9:b7:23:cd:1c:7a:fe:68:6e:d2:ff:64:18: d2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A5:49:3E:36:D3:97:55:C9:15:E7:4F:B2:71:71:DD:66:7C:5A:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64574f02-84c1-3da9-821a-a8f700aa7fe6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:a6:1c:0d:11:72:e1:27:24:b5:67:e1:3e:40:56:ce:cd:d8: 90:6b:7f:5b:73:00:75:4d:3e:e2:82:cc:ae:06:c3:d3:8d:36: 5b:38:5c:92:d1:20:0f:31:64:0c:5a:ab:2e:25:f4:c1:f1:4a: 5f:66:a8:01:85:e3:cb:b1:0f:50:6a:80:36:d5:e4:81:97:79: 38:1e:18:76:2b:32:a0:07:3f:56:86:46:1e:f1:d9:e0:ab:a3: 09:51:a9:91:33:a3:22:c8:60:19:d3:c9:65:4e:05:c3:5a:b5: 3b:b7:75:c1:8f:a4:67:71:ca:12:e7:79:e3:31:d9:e6:2b:8b: 64:7c:2b:97:2d:ce:40:61:c0:af:f8:f1:19:1f:58:84:7d:e9: 0a:7b:bd:89:51:72:39:7c:9e:9f:02:5a:14:44:7a:77:be:b6: 07:48:50:02:8e:3e:b0:64:d6:b3:65:e2:88:42:56:03:32:66: 45:85:40:75:63:06:8b:7a:f8:dd:d2:32:cf:75:75:19:47:fc: 19:08:41:3c:3e:be:b6:2b:46:cf:77:3d:a6:6d:27:ce:78:a2: bf:09:a5:a8:97:c5:57:54:06:a9:64:63:45:e0:d9:f2:1f:49: 26:9a:0e:af:46:91:a3:95:5a:6b:a5:7e:a8:d6:2a:1f:79:f6: 3b:fc:d2:3e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6kgsdaQwD3zg6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NzVlMDY3NzYtZjdhZC00ZDVmLThkOWMtNTc5NmYyNTYyYTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWOmrUz0b0DLPfmyksfTKnck2ZzXTqbDRODO YS1KOOPWv/nxmTJLdzri7cEA/X5y4HqbWU1Sv+zjE+xZ6rn2zQK2Thl+k6pMODVP sUBkWa5NvdW5u6SzjBQCYaDo3BSNjr0HfknErT91qFvaIgWru0lF77OzKITh8FuY TqV7WQ/Hyr95b4eyRdGqimGZUoFdbWiKjuORIEpmxkKaz4AsNI+w28bBg8ipCa2P FW/BzwSiTiNNhr04JkZteR+/aqAbrkr1IJnkZMWcjMqsqnibJm0tJuXIz06Ubrf9 IRkTffBYCG9BUzCbfq73OpO+7Qw3Lvm3I80cev5obtL/ZBjSvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEKlST4205dVyRXnT7Jxcd1mfFq1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjQ1NzRmMDItODRjMS0z ZGE5LTgyMWEtYThmNzAwYWE3ZmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKGmHA0RcuEnJLVn4T5AVs7N2JBrf1tzAHVNPuKCzK4Gw9ONNls4 XJLRIA8xZAxaqy4l9MHxSl9mqAGF48uxD1BqgDbV5IGXeTgeGHYrMqAHP1aGRh7x 2eCrowlRqZEzoyLIYBnTyWVOBcNatTu3dcGPpGdxyhLneeMx2eYri2R8K5ctzkBh wK/48RkfWIR96Qp7vYlRcjl8np8CWhREene+tgdIUAKOPrBk1rNl4ohCVgMyZkWF QHVjBot6+N3SMs91dRlH/BkIQTw+vrYrRs93PaZtJ854or8JpaiXxVdUBqlkY0Xg 2fIfSSaaDq9GkaOVWmulfqjWKh959jv80j4= -----END CERTIFICATE-----Generated at Fri Apr 17 19:02:29 2026 by rpki-client