$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b393842-23a8-3fce-ac58-262987a2b5c1.roa File: 7b393842-23a8-3fce-ac58-262987a2b5c1.roa (raw, json) Hash identifier: Igupv0MhjkG6ecRDiLWMJs+mOUkgP6SrfZGLL5cVy/U= Subject key identifier: AD:D6:E4:58:EE:DC:DB:B3:41:67:1D:C7:01:8A:A6:59:85:94:3A:25 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D6DA184571659B0F194CCE190 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b393842-23a8-3fce-ac58-262987a2b5c1.roa Signing time: Tue 07 Apr 2026 14:30:07 +0000 ROA not before: Tue 07 Apr 2026 14:30:07 +0000 ROA not after: Mon 06 Jul 2026 14:30:07 +0000 asID: 396547 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:a1:84:57:16:59:b0:f1:94:cc:e1:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 7 14:30:07 2026 GMT Not After : Jul 6 14:30:07 2026 GMT Subject: CN=c621da4a-a0ee-4e82-b784-1baa762a8f0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fb:7d:b1:e9:a2:7b:8d:de:2c:39:34:b4:3d: 1e:65:e2:72:e6:96:bb:7b:f0:40:3f:3c:22:50:67: b3:55:c6:47:de:c3:25:11:57:0f:0c:93:f2:80:02: 3d:79:f7:95:ae:d6:3e:ea:cb:5b:1b:68:e8:49:47: bb:f2:d1:5a:8a:99:1f:c0:d7:0a:4e:84:a6:2e:9f: 29:b9:7a:64:59:c7:fc:6e:dd:f6:b7:2b:13:41:b4: e5:4e:b5:76:ce:ea:c5:fe:88:3d:9c:e9:94:37:0d: fa:4c:0d:9a:83:54:96:e7:97:cc:68:e3:75:78:3e: 30:71:02:0f:e5:8e:81:de:5c:e7:78:1d:20:44:d2: 4e:15:af:93:29:41:23:53:c7:47:84:38:2b:34:bb: 19:a7:0f:a6:40:e8:a9:83:3a:b7:00:f1:13:c1:42: c8:28:65:bb:2d:6d:ac:23:4c:b6:c6:c1:99:85:31: be:49:8a:80:bf:2e:fa:df:6e:60:30:13:ed:be:56: 82:04:da:2b:f2:a2:59:0c:40:47:e8:91:68:5b:4c: e5:fc:84:39:36:16:07:85:b3:e2:f0:a4:b2:a1:e3: 59:af:95:6d:cd:6a:e5:ba:b8:88:2c:f7:48:86:aa: e4:c1:d1:46:d6:e7:b6:51:57:d1:c5:a4:ee:fd:ce: d2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D6:E4:58:EE:DC:DB:B3:41:67:1D:C7:01:8A:A6:59:85:94:3A:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b393842-23a8-3fce-ac58-262987a2b5c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:2c:ca:19:70:19:82:4b:20:62:a7:fc:7b:4a:cd:3e:4c:f5: 08:d9:56:bd:1b:35:33:ad:4e:22:d3:ed:28:87:85:f1:77:62: f4:84:3e:2c:0f:2e:ec:23:dc:60:b1:0b:fe:e7:6c:62:11:96: 9a:3e:ce:a5:d3:33:bb:45:88:ea:ab:c0:28:21:85:a6:d8:ff: ca:65:ad:20:41:4b:3d:cc:82:2e:f5:62:17:8b:3b:65:5c:28: d2:73:10:af:45:3e:08:3e:7b:f6:b2:f0:a2:9c:5d:ff:8c:66: 88:30:fd:5f:ee:8e:ae:bb:6a:16:f1:52:2f:9a:30:15:38:96: 7b:ff:78:8a:ef:a0:00:81:f7:65:0c:d3:52:60:16:06:ff:8d: 46:c2:2a:0b:54:42:c6:5e:bd:8c:f8:5b:ba:09:44:1e:dc:e0: 6f:df:75:5c:d8:40:8d:f6:f6:86:55:a8:70:6c:d1:0b:6d:0d: 15:32:9e:78:f2:79:fe:86:84:75:ed:a9:a3:e2:60:02:5b:a6: 10:b0:a5:3c:3c:c6:7a:f6:94:a8:a0:71:1b:fd:de:d4:a7:cd: cd:4f:0e:62:73:44:45:21:da:2e:92:b0:10:b0:56:92:f9:10: 06:5d:38:87:9a:cd:a9:47:36:85:70:27:32:97:b3:dd:4a:2b: 70:d5:e9:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1toYRXFlmw8ZTM4ZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwNzE0MzAwN1oXDTI2MDcwNjE0MzAwN1owLzEtMCsGA1UEAxMk YzYyMWRhNGEtYTBlZS00ZTgyLWI3ODQtMWJhYTc2MmE4ZjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ft9semie43eLDk0tD0eZeJy5pa7e/BAPzwi UGezVcZH3sMlEVcPDJPygAI9efeVrtY+6stbG2joSUe78tFaipkfwNcKToSmLp8p uXpkWcf8bt32tysTQbTlTrV2zurF/og9nOmUNw36TA2ag1SW55fMaON1eD4wcQIP 5Y6B3lzneB0gRNJOFa+TKUEjU8dHhDgrNLsZpw+mQOipgzq3APETwULIKGW7LW2s I0y2xsGZhTG+SYqAvy76325gMBPtvlaCBNor8qJZDEBH6JFoW0zl/IQ5NhYHhbPi 8KSyoeNZr5VtzWrluriILPdIhqrkwdFG1ue2UVfRxaTu/c7SswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK3W5Fju3NuzQWcdxwGKplmFlDolMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2IzOTM4NDItMjNhOC0z ZmNlLWFjNTgtMjYyOTg3YTJiNWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIssyhlwGYJLIGKn/HtKzT5M9QjZVr0bNTOtTiLT7SiHhfF3YvSE PiwPLuwj3GCxC/7nbGIRlpo+zqXTM7tFiOqrwCghhabY/8plrSBBSz3Mgi71YheL O2VcKNJzEK9FPgg+e/ay8KKcXf+MZogw/V/ujq67ahbxUi+aMBU4lnv/eIrvoACB 92UM01JgFgb/jUbCKgtUQsZevYz4W7oJRB7c4G/fdVzYQI329oZVqHBs0QttDRUy nnjyef6GhHXtqaPiYAJbphCwpTw8xnr2lKigcRv93tSnzc1PDmJzREUh2i6SsBCw VpL5EAZdOIeazalHNoVwJzKXs91KK3DV6RE= -----END CERTIFICATE-----Generated at Fri Apr 17 22:56:20 2026 by rpki-client