$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6acaf44f-d07f-3803-9a8b-ca85e1c25256.roa File: 6acaf44f-d07f-3803-9a8b-ca85e1c25256.roa (raw, json) Hash identifier: y21FiAEvxoqeAMRhlRf/KZ9kGkKscX5lxvaxPVcL1Cs= Subject key identifier: C1:FF:D6:BE:11:4E:0D:2E:AC:63:69:9D:69:37:13:43:F4:70:F0:AF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D6DA19AACA626B4FF2DDC1540 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6acaf44f-d07f-3803-9a8b-ca85e1c25256.roa Signing time: Tue 07 Apr 2026 14:30:18 +0000 ROA not before: Tue 07 Apr 2026 14:30:18 +0000 ROA not after: Mon 06 Jul 2026 14:30:18 +0000 asID: 396549 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:a1:9a:ac:a6:26:b4:ff:2d:dc:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 7 14:30:18 2026 GMT Not After : Jul 6 14:30:18 2026 GMT Subject: CN=0543f16a-42fd-4dfe-b3fd-53e5a1b427e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:74:98:43:39:cb:30:8e:22:02:80:a5:18:98: 6d:79:ab:91:bb:60:52:b7:23:ae:a6:7c:6c:dc:79: b2:5d:e4:72:33:df:07:0e:9e:ba:30:de:82:a4:b2: 7f:85:39:cf:d7:52:33:79:d7:72:5d:62:37:79:04: 1d:20:d2:71:11:46:31:27:a5:50:d3:89:c5:80:d9: 7c:18:ef:c6:44:74:7d:41:bf:c9:9a:ee:44:9f:d3: d7:b8:dd:5f:95:28:00:96:a6:25:72:5d:69:7f:24: af:47:d6:1b:58:9f:c1:73:0c:3a:a1:55:70:48:ac: 61:fb:b6:d1:b2:40:19:6e:d0:96:c5:24:b7:de:99: 90:aa:be:b0:b3:59:68:5c:1b:24:65:53:08:a9:cf: ce:95:ce:d6:84:02:2a:59:fc:c6:2f:80:da:c4:0e: fc:ee:49:18:3c:49:c7:71:d3:72:95:46:c7:4d:70: 13:00:a9:51:ba:17:7e:97:c4:65:b0:b0:0c:14:4e: a0:d1:e3:61:53:06:47:88:35:7c:ae:bc:e8:7b:78: 48:fc:4d:42:74:65:8e:ad:82:a4:0b:50:f8:7c:27: 2e:74:8d:68:ca:38:2e:d6:cb:b8:96:21:5f:d6:5a: cb:3f:57:36:4c:96:68:1a:b7:bd:39:81:85:00:ba: 94:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:FF:D6:BE:11:4E:0D:2E:AC:63:69:9D:69:37:13:43:F4:70:F0:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6acaf44f-d07f-3803-9a8b-ca85e1c25256.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:8b:3a:bc:3f:64:70:52:dd:66:76:73:e7:86:cf:e9:6f:3e: 64:0e:3e:b9:f3:ac:cc:25:fd:17:60:2f:9f:99:ba:b9:6f:d1: 50:9d:cf:2a:97:52:45:dc:7a:9c:d6:a6:04:ed:7d:8c:f9:fd: c8:e7:11:c4:3f:1b:89:05:09:e7:88:6a:f7:17:30:49:ce:7f: fd:aa:64:74:c0:fa:b9:5e:b0:da:68:2a:05:99:91:c0:7d:70: 52:5e:bf:00:3b:3b:57:41:8b:ea:a8:e1:75:36:df:4c:ac:b2: 01:4d:21:2a:98:51:cb:d6:86:4c:ed:43:38:b5:c2:94:67:54: 48:e3:ce:45:af:f4:d2:98:c5:9f:d4:e0:ce:97:db:37:a2:db: ee:49:83:c2:a6:d5:08:c2:9c:49:46:50:75:08:20:14:ef:3a: b5:6a:d0:b8:d8:84:6c:a1:f1:67:4d:cf:d2:03:d5:91:a7:57: e3:9f:e4:e4:a8:19:af:2a:d6:37:f4:e9:d2:f4:56:41:55:63: 01:af:d6:90:0d:e5:61:8a:a1:13:eb:9d:4f:d0:f4:d8:90:33: 23:a3:1c:37:16:85:87:20:81:3b:9c:7c:b2:cf:16:b7:fd:95: cd:bd:23:77:5b:c9:ca:70:f6:a2:b1:6b:88:d9:c2:6d:4c:57: 6b:a4:90:95 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1toZqspia0/y3cFUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwNzE0MzAxOFoXDTI2MDcwNjE0MzAxOFowLzEtMCsGA1UEAxMk MDU0M2YxNmEtNDJmZC00ZGZlLWIzZmQtNTNlNWExYjQyN2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3SYQznLMI4iAoClGJhteauRu2BStyOupnxs 3HmyXeRyM98HDp66MN6CpLJ/hTnP11IzeddyXWI3eQQdINJxEUYxJ6VQ04nFgNl8 GO/GRHR9Qb/Jmu5En9PXuN1flSgAlqYlcl1pfySvR9YbWJ/Bcww6oVVwSKxh+7bR skAZbtCWxSS33pmQqr6ws1loXBskZVMIqc/Olc7WhAIqWfzGL4DaxA787kkYPEnH cdNylUbHTXATAKlRuhd+l8RlsLAMFE6g0eNhUwZHiDV8rrzoe3hI/E1CdGWOrYKk C1D4fCcudI1oyjgu1su4liFf1lrLP1c2TJZoGre9OYGFALqUFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMH/1r4RTg0urGNpnWk3E0P0cPCvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmFjYWY0NGYtZDA3Zi0z ODAzLTlhOGItY2E4NWUxYzI1MjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAESLOrw/ZHBS3WZ2c+eGz+lvPmQOPrnzrMwl/RdgL5+Zurlv0VCd zyqXUkXcepzWpgTtfYz5/cjnEcQ/G4kFCeeIavcXMEnOf/2qZHTA+rlesNpoKgWZ kcB9cFJevwA7O1dBi+qo4XU230yssgFNISqYUcvWhkztQzi1wpRnVEjjzkWv9NKY xZ/U4M6X2zei2+5Jg8Km1QjCnElGUHUIIBTvOrVq0LjYhGyh8WdNz9ID1ZGnV+Of 5OSoGa8q1jf06dL0VkFVYwGv1pAN5WGKoRPrnU/Q9NiQMyOjHDcWhYcggTucfLLP Frf9lc29I3dbycpw9qKxa4jZwm1MV2ukkJU= -----END CERTIFICATE-----Generated at Fri Apr 17 11:26:09 2026 by rpki-client