$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79dfaada-1ca6-3ec4-8605-15b54ecbcdf7.roa File: 79dfaada-1ca6-3ec4-8605-15b54ecbcdf7.roa (raw, json) Hash identifier: 4sLsFdt4rv27KUHST9BTLIli8OmhtTbrccgHaxo5cCc= Subject key identifier: CF:E4:F6:25:51:24:5D:91:69:CB:A5:E0:DC:FE:93:45:2E:16:2E:11 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D6DA18CDB75C090CC40D1D780 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79dfaada-1ca6-3ec4-8605-15b54ecbcdf7.roa Signing time: Tue 07 Apr 2026 14:30:11 +0000 ROA not before: Tue 07 Apr 2026 14:30:11 +0000 ROA not after: Mon 06 Jul 2026 14:30:11 +0000 asID: 36629 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:a1:8c:db:75:c0:90:cc:40:d1:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 7 14:30:11 2026 GMT Not After : Jul 6 14:30:11 2026 GMT Subject: CN=c1bbe975-297d-4db0-a0b1-0851076bb0f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:05:eb:87:68:d6:ed:8a:3c:26:57:4d:5c:ab: bc:f0:8c:6d:82:cb:82:de:d4:45:c2:57:a3:b6:92: e8:32:6a:45:09:56:09:55:89:5b:5e:49:95:41:9e: 47:2f:23:7c:5d:9b:69:ed:7e:fc:1b:da:19:82:dc: 97:3a:4a:c2:4f:b4:1c:2b:0c:c6:ea:ef:fb:c6:26: 3a:af:2e:6b:6b:35:a8:98:98:28:65:fd:e0:b9:85: c1:99:3c:3d:33:1b:0c:10:e0:3a:c7:4c:53:cb:be: db:e6:aa:6c:ed:16:6f:bb:05:42:1f:3e:25:ee:22: ee:66:5b:b6:95:03:3f:dc:4c:c9:90:2e:9b:28:07: ab:44:cf:55:3b:85:65:92:11:60:16:6c:c4:3f:48: 7f:9d:98:f8:8f:27:ad:ca:a2:12:6c:36:53:e9:ac: a2:9f:9c:9e:38:c0:ab:cf:f7:1c:a7:ca:55:40:30: 5f:a8:35:12:e3:46:35:ea:04:db:18:4e:10:bb:2d: f4:71:1e:61:9d:a6:06:95:6f:48:ae:dc:83:6f:cf: b9:38:99:57:d8:61:ca:6f:a8:50:68:31:fd:6d:e9: 05:f7:17:73:4a:12:e4:e4:65:c2:59:3d:34:c3:a2: 1f:bf:79:d5:48:92:49:2c:44:1d:56:e0:42:8b:54: 5e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E4:F6:25:51:24:5D:91:69:CB:A5:E0:DC:FE:93:45:2E:16:2E:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79dfaada-1ca6-3ec4-8605-15b54ecbcdf7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:3b:df:05:2f:14:d4:23:5e:66:ec:d1:dc:9c:b1:28:b1:89: 81:14:22:d6:20:2a:17:e4:2c:ac:12:eb:81:8a:2e:1a:91:6b: fa:c5:87:41:32:d1:59:b5:be:0f:0c:55:20:df:2c:e3:1e:43: 1d:a2:c3:5c:fb:99:f2:1a:0d:60:9a:a2:d2:8c:89:7e:fb:ed: 0b:eb:de:13:c7:57:5b:7d:43:4b:c4:a9:33:2b:3e:cd:c1:ba: 3d:98:49:17:bd:ab:b2:f0:16:63:a7:90:fe:26:6d:fd:b4:0e: af:fa:24:a7:3c:45:70:00:b4:c8:d9:d6:93:41:5d:77:ad:12: 7e:44:71:57:c9:e7:91:07:e2:17:01:20:cf:b6:d4:f9:15:5d: ff:ea:ec:45:4d:fa:c3:3d:b2:09:86:fe:68:56:d9:45:b9:66: d3:22:20:89:71:43:b8:6c:22:7b:2d:4c:07:6b:e2:9e:c4:15: 39:c9:2a:f3:ea:29:f0:ab:9f:6b:d0:89:2b:ec:27:ea:e5:b8: f0:87:7f:1b:80:70:ea:75:d6:46:01:2d:89:69:ce:94:8f:e6: c5:8a:cc:10:6a:2f:9c:50:99:79:9f:72:04:55:82:e3:dd:9d: 27:65:6c:c9:f3:c8:b4:d9:10:21:e7:d0:22:86:40:a4:05:e3: 7f:a3:85:45 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1toYzbdcCQzEDR14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwNzE0MzAxMVoXDTI2MDcwNjE0MzAxMVowLzEtMCsGA1UEAxMk YzFiYmU5NzUtMjk3ZC00ZGIwLWEwYjEtMDg1MTA3NmJiMGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQXrh2jW7Yo8JldNXKu88IxtgsuC3tRFwlej tpLoMmpFCVYJVYlbXkmVQZ5HLyN8XZtp7X78G9oZgtyXOkrCT7QcKwzG6u/7xiY6 ry5razWomJgoZf3guYXBmTw9MxsMEOA6x0xTy77b5qps7RZvuwVCHz4l7iLuZlu2 lQM/3EzJkC6bKAerRM9VO4VlkhFgFmzEP0h/nZj4jyetyqISbDZT6ayin5yeOMCr z/ccp8pVQDBfqDUS40Y16gTbGE4Quy30cR5hnaYGlW9IrtyDb8+5OJlX2GHKb6hQ aDH9bekF9xdzShLk5GXCWT00w6Ifv3nVSJJJLEQdVuBCi1ReVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM/k9iVRJF2Racul4Nz+k0UuFi4RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzlkZmFhZGEtMWNhNi0z ZWM0LTg2MDUtMTViNTRlY2JjZGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIc73wUvFNQjXmbs0dycsSixiYEUItYgKhfkLKwS64GKLhqRa/rF h0Ey0Vm1vg8MVSDfLOMeQx2iw1z7mfIaDWCaotKMiX777Qvr3hPHV1t9Q0vEqTMr Ps3Buj2YSRe9q7LwFmOnkP4mbf20Dq/6JKc8RXAAtMjZ1pNBXXetEn5EcVfJ55EH 4hcBIM+21PkVXf/q7EVN+sM9sgmG/mhW2UW5ZtMiIIlxQ7hsInstTAdr4p7EFTnJ KvPqKfCrn2vQiSvsJ+rluPCHfxuAcOp11kYBLYlpzpSP5sWKzBBqL5xQmXmfcgRV guPdnSdlbMnzyLTZECHn0CKGQKQF43+jhUU= -----END CERTIFICATE-----Generated at Sun Apr 19 09:04:24 2026 by rpki-client