$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65ec3d9c-8fa4-38f4-a16b-57fb16c6d997.roa File: 65ec3d9c-8fa4-38f4-a16b-57fb16c6d997.roa (raw, json) Hash identifier: Pmq6DzkZ/pdjNWKUafCLq2tsRfYvNbLNQkWGHHaSvY8= Subject key identifier: 62:11:97:91:A0:E8:68:25:83:11:46:24:6D:1C:04:71:31:FE:B5:C4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D732BD2D3681F7077FF199EE0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65ec3d9c-8fa4-38f4-a16b-57fb16c6d997.roa Signing time: Thu 09 Apr 2026 14:07:50 +0000 ROA not before: Thu 09 Apr 2026 14:07:50 +0000 ROA not after: Wed 08 Jul 2026 14:07:50 +0000 asID: 36618 IP address blocks: 2001:500:133::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:73:2b:d2:d3:68:1f:70:77:ff:19:9e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 9 14:07:50 2026 GMT Not After : Jul 8 14:07:50 2026 GMT Subject: CN=dc8717c9-7ef3-4bb2-8637-7e67ce9c76f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:71:cb:30:15:a9:54:03:91:93:a6:a6:13:4d: b9:f1:84:27:34:4b:8d:af:90:da:d6:2b:1d:85:58: 2b:15:09:43:0b:ea:40:c2:3c:3e:d7:38:a5:6f:11: b6:b7:88:55:3c:b7:79:71:05:8d:a7:b2:1e:b4:c5: 50:cc:5e:18:d0:1b:fd:44:98:83:52:f1:45:ba:94: 1d:9c:fc:13:55:4b:51:d7:fa:9d:f2:00:71:07:9d: fd:d6:ea:c6:82:8b:4d:d0:c8:e2:86:68:8d:80:7e: 3d:b6:4e:a3:93:e1:e6:b3:03:b5:94:87:fc:d4:35: 7d:a2:da:c2:30:b2:74:1a:77:97:20:11:a6:c5:7b: 5d:45:59:71:d6:75:21:e6:36:f3:7f:c4:67:51:d1: 96:bb:dd:f6:c8:0d:fe:8a:87:8b:6d:0d:67:e3:db: a3:72:1d:0e:ea:0d:f2:81:78:1e:fe:a7:57:90:0b: fc:5e:23:6b:22:e0:2f:f6:16:e9:03:81:02:a5:d5: 9b:a4:c7:97:a5:f0:82:ad:aa:97:8d:9f:25:45:c7: a4:10:c8:23:43:2a:f1:5d:8c:76:de:86:14:47:f8: 6e:4f:57:0d:cd:af:14:bc:a9:ec:7a:80:f3:bf:8f: 08:df:ae:52:d3:22:9f:85:58:74:25:24:92:58:b6: d0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:11:97:91:A0:E8:68:25:83:11:46:24:6D:1C:04:71:31:FE:B5:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65ec3d9c-8fa4-38f4-a16b-57fb16c6d997.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:2f:aa:93:90:b3:4e:82:e5:1e:05:43:db:c2:77:e9:a9:6f: 49:66:29:fc:7c:f1:38:f2:9a:5d:33:4d:a5:c1:27:51:e9:3e: 03:c1:bd:8c:e4:70:a0:38:de:98:f3:6f:d2:7d:82:15:d1:ea: 35:c2:70:64:80:74:b3:50:7a:37:e8:2d:18:fc:f2:a4:c9:78: 2d:76:e8:d2:37:0f:2c:82:42:48:00:7c:61:83:ca:cf:75:a3: 01:52:9b:e7:57:06:3c:51:ad:6c:e5:07:79:49:e2:c0:b8:1f: 1a:15:40:39:f5:61:10:b8:0e:e8:01:d0:c1:36:a0:41:92:59: 6e:64:3b:76:22:b3:c1:c2:57:cc:4e:a4:fc:b1:c4:9c:a0:18: 1b:14:7b:3c:33:15:24:40:eb:69:64:ff:fb:b5:2c:07:49:35: c1:0e:e7:0e:cd:28:bf:1d:3a:cf:15:4f:98:0c:1f:9f:be:1c: 90:b6:d7:b5:72:b5:dd:ec:bb:c7:b0:11:af:4c:34:d6:46:2e: 43:50:b6:23:e6:93:15:d7:51:bf:76:d7:d2:e9:55:d4:9e:75: 53:da:1b:85:a7:c9:d3:c8:ec:4b:8d:72:d0:4b:d7:42:67:84: b0:e6:75:30:15:b9:f4:e0:d8:65:1b:37:cd:e2:19:d4:a7:c1: 3f:37:d8:0b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1zK9LTaB9wd/8ZnuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwOTE0MDc1MFoXDTI2MDcwODE0MDc1MFowLzEtMCsGA1UEAxMk ZGM4NzE3YzktN2VmMy00YmIyLTg2MzctN2U2N2NlOWM3NmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXHLMBWpVAORk6amE0258YQnNEuNr5Da1isd hVgrFQlDC+pAwjw+1zilbxG2t4hVPLd5cQWNp7IetMVQzF4Y0Bv9RJiDUvFFupQd nPwTVUtR1/qd8gBxB5391urGgotN0MjihmiNgH49tk6jk+HmswO1lIf81DV9otrC MLJ0GneXIBGmxXtdRVlx1nUh5jbzf8RnUdGWu932yA3+ioeLbQ1n49ujch0O6g3y gXge/qdXkAv8XiNrIuAv9hbpA4ECpdWbpMeXpfCCraqXjZ8lRcekEMgjQyrxXYx2 3oYUR/huT1cNza8UvKnseoDzv48I365S0yKfhVh0JSSSWLbQVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGIRl5Gg6GglgxFGJG0cBHEx/rXEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjVlYzNkOWMtOGZhNC0z OGY0LWExNmItNTdmYjE2YzZkOTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADsvqpOQs06C5R4FQ9vCd+mpb0lmKfx88Tjyml0zTaXBJ1HpPgPB vYzkcKA43pjzb9J9ghXR6jXCcGSAdLNQejfoLRj88qTJeC126NI3DyyCQkgAfGGD ys91owFSm+dXBjxRrWzlB3lJ4sC4HxoVQDn1YRC4DugB0ME2oEGSWW5kO3Yis8HC V8xOpPyxxJygGBsUezwzFSRA62lk//u1LAdJNcEO5w7NKL8dOs8VT5gMH5++HJC2 17Vytd3su8ewEa9MNNZGLkNQtiPmkxXXUb9219LpVdSedVPaG4WnydPI7EuNctBL 10JnhLDmdTAVufTg2GUbN83iGdSnwT832As= -----END CERTIFICATE-----Generated at Fri Apr 17 03:17:42 2026 by rpki-client