$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68151d75-90a6-3c49-9e44-b49e1f4d2be5.roa File: 68151d75-90a6-3c49-9e44-b49e1f4d2be5.roa (raw, json) Hash identifier: DP1QwoGi2euJk+lkLnqac+I99a65sbddp7WR9CZSwNk= Subject key identifier: CF:16:FD:20:5A:9E:ED:9D:2E:49:77:BF:99:CC:3E:13:E2:4D:D7:D8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D5E1A5D2E32FB4D84311646C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68151d75-90a6-3c49-9e44-b49e1f4d2be5.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 20362 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:5d:2e:32:fb:4d:84:31:16:46:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=f977b864-d082-48ac-930f-e5966a8f6281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2b:ae:f2:8e:8a:51:a6:4e:be:68:cc:66:c3: d3:71:a7:67:22:44:50:1f:6d:fb:0c:46:0f:c2:48: ae:da:77:9a:a5:76:21:9e:63:41:75:e4:b5:92:55: 49:28:a5:d4:d7:43:38:5b:94:d8:65:0a:a0:7c:6b: a3:ec:68:14:94:a1:0c:34:6e:d7:47:46:e3:ca:f3: ba:ee:0e:6c:9a:22:81:20:90:e9:40:f2:4a:40:6e: 3a:6e:11:32:7e:31:c2:40:14:f9:4d:2d:af:6e:9c: 76:dc:6b:99:2b:b1:17:f7:4f:0f:4d:9b:fe:f0:7d: 5e:0a:f2:20:d2:fd:47:ea:17:7a:74:d8:08:4a:85: 82:d1:15:9c:9a:7c:56:11:76:9a:d1:ef:33:79:c4: 52:0f:77:aa:06:e4:ed:e3:dc:2c:c1:1d:37:32:1d: f5:57:da:3e:cb:86:66:71:bb:ee:19:cc:31:26:53: 85:2f:1a:3c:2c:ab:e8:5b:2f:a1:4c:b0:32:53:56: c7:48:16:be:8b:2a:c0:c0:ee:c8:95:01:a5:13:7f: ac:bc:79:ff:ef:26:6a:e7:86:10:42:b9:0e:51:bb: 74:1b:36:fe:8c:ab:2c:3b:ec:a2:68:72:04:08:93: f9:f6:33:31:32:f5:a0:cd:10:3c:82:33:79:6d:14: b3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:16:FD:20:5A:9E:ED:9D:2E:49:77:BF:99:CC:3E:13:E2:4D:D7:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68151d75-90a6-3c49-9e44-b49e1f4d2be5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:bc:6e:77:f2:d6:24:48:04:1b:f8:d3:3a:c6:cc:39:f6:78: 06:22:6f:c1:ec:ef:50:dc:a4:1a:e6:50:76:9f:a6:a8:e1:1d: 11:ea:e8:20:41:73:ba:d0:26:b1:89:a6:11:5a:0c:5d:39:e1: e3:e6:28:a9:2f:c6:25:43:51:1e:cf:a4:4c:92:fa:fb:17:c0: 3d:ec:54:d5:1e:64:d0:6f:e1:07:a6:07:a1:15:31:af:5e:9c: 0f:1e:2a:a0:d0:18:6b:e6:bd:30:36:a6:b1:3d:3d:46:b6:e2: 08:21:32:1b:61:6e:37:ad:44:f2:67:8a:20:65:c3:31:b4:a2: 83:04:4d:cf:44:5c:4b:e5:01:9c:b8:28:3b:07:b7:c9:a4:99: f8:3d:a8:b3:e8:f4:39:7a:0c:f2:85:e0:07:70:61:0d:d0:cc: 17:c3:c2:c3:1e:7c:37:1c:3e:e7:21:0c:9f:94:87:17:27:b6: 19:39:1e:8c:92:b1:a8:d9:66:52:a3:aa:79:22:5b:38:c3:a6: a9:de:da:96:de:73:83:b1:42:49:c6:cd:ac:41:2c:06:0f:ea: 6e:0b:df:81:22:00:cf:4b:3f:16:13:23:df:d4:ef:8f:d8:ee: 51:c7:0d:d3:1f:7a:cf:36:37:b6:09:a4:57:41:39:ae:dc:bb: 04:0d:af:cd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1eGl0uMvtNhDEWRsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk Zjk3N2I4NjQtZDA4Mi00OGFjLTkzMGYtZTU5NjZhOGY2MjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCuu8o6KUaZOvmjMZsPTcadnIkRQH237DEYP wkiu2neapXYhnmNBdeS1klVJKKXU10M4W5TYZQqgfGuj7GgUlKEMNG7XR0bjyvO6 7g5smiKBIJDpQPJKQG46bhEyfjHCQBT5TS2vbpx23GuZK7EX908PTZv+8H1eCvIg 0v1H6hd6dNgISoWC0RWcmnxWEXaa0e8zecRSD3eqBuTt49wswR03Mh31V9o+y4Zm cbvuGcwxJlOFLxo8LKvoWy+hTLAyU1bHSBa+iyrAwO7IlQGlE3+svHn/7yZq54YQ QrkOUbt0Gzb+jKssO+yiaHIECJP59jMxMvWgzRA8gjN5bRSz4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM8W/SBanu2dLkl3v5nMPhPiTdfYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjgxNTFkNzUtOTBhNi0z YzQ5LTllNDQtYjQ5ZTFmNGQyYmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKi8bnfy1iRIBBv40zrGzDn2eAYib8Hs71DcpBrmUHafpqjhHRHq 6CBBc7rQJrGJphFaDF054ePmKKkvxiVDUR7PpEyS+vsXwD3sVNUeZNBv4QemB6EV Ma9enA8eKqDQGGvmvTA2prE9PUa24gghMhthbjetRPJniiBlwzG0ooMETc9EXEvl AZy4KDsHt8mkmfg9qLPo9Dl6DPKF4AdwYQ3QzBfDwsMefDccPuchDJ+Uhxcnthk5 HoySsajZZlKjqnkiWzjDpqne2pbec4OxQknGzaxBLAYP6m4L34EiAM9LPxYTI9/U 74/Y7lHHDdMfes82N7YJpFdBOa7cuwQNr80= -----END CERTIFICATE-----Generated at Fri Apr 17 11:41:05 2026 by rpki-client