$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7df417c6-803e-3dc6-a775-5080c4eb2c20.roa File: 7df417c6-803e-3dc6-a775-5080c4eb2c20.roa (raw, json) Hash identifier: mhz8DxbM+9J3D8N25THJ8ddDVDaKVpKhgkwsjv40+sQ= Subject key identifier: FD:D7:43:39:98:27:3E:8F:64:7D:D9:0D:74:0B:5B:BA:C7:6F:65:3A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D59EA469F1DF459BDCBED8840 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7df417c6-803e-3dc6-a775-5080c4eb2c20.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 397197 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:46:9f:1d:f4:59:bd:cb:ed:88:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=30ed9beb-a17d-4b1c-9ee5-ecdc591bdc9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:dc:35:43:64:77:59:c7:24:a7:ee:6e:55:73: ad:7b:de:72:fb:96:0d:5f:02:3c:55:4f:b3:14:fa: d9:66:ca:84:4d:ea:06:28:96:df:33:e5:e5:ef:71: 13:b3:aa:27:5a:51:c7:a8:04:14:81:94:95:d2:b5: 1d:0b:16:3d:b7:d4:b4:dd:7b:c1:ae:d8:5f:32:3b: ed:30:89:f9:41:c7:6c:84:e7:5d:ec:2a:e7:50:49: 1f:0c:97:3a:3d:39:77:57:e4:d2:77:d4:22:3b:e9: 94:a8:4a:cd:11:87:3b:e6:48:38:18:aa:60:b2:21: b2:ef:dc:f5:16:dd:d6:e5:c0:32:3a:9c:04:06:d0: 08:59:da:b8:6b:7f:f7:d7:c8:8f:28:5e:e6:c9:55: cc:d9:d7:89:a8:af:19:4c:b0:f2:f5:fa:44:2b:b0: 8a:9a:bc:7c:97:af:ac:53:0b:26:57:03:18:c6:0a: 13:24:f1:a0:83:87:fd:e4:25:40:4b:b0:a6:3c:37: 24:43:ea:24:e2:13:23:ef:1e:f1:64:ed:82:ea:54: d1:6a:78:33:90:c9:73:1d:e0:e7:4f:60:f4:61:20: 6c:25:b0:fa:08:29:2d:bc:46:35:b5:76:01:ad:78: a2:93:3c:70:bc:c6:74:95:12:0c:b0:eb:a7:12:33: 64:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D7:43:39:98:27:3E:8F:64:7D:D9:0D:74:0B:5B:BA:C7:6F:65:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7df417c6-803e-3dc6-a775-5080c4eb2c20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:dd:5c:71:7a:a4:e4:23:de:04:42:76:e4:79:ee:97:54:81: a0:07:90:96:75:96:17:35:db:02:a7:b1:e0:9c:a3:8a:5c:ed: a2:7a:29:3b:e0:9e:4b:1e:20:ce:d7:b1:48:eb:b0:fc:0a:b5: ef:68:67:a1:82:bc:9e:0d:ab:eb:32:06:59:47:bd:5c:f9:17: 0c:10:df:e2:75:db:af:5e:07:46:f0:5f:a6:2c:07:ec:ba:29: 49:2e:dc:d6:45:1f:54:cc:fc:8d:e4:76:50:ae:58:71:97:85: 00:ef:89:df:3a:8c:17:46:7f:a3:9d:ad:9c:84:2e:ec:b9:3f: 34:44:e4:14:7c:1f:80:cd:2a:11:fa:1b:ca:17:c8:72:ed:b1: b3:5d:be:16:14:fc:81:cd:0e:06:82:5c:7d:ba:fc:44:0e:80: db:16:40:f3:7b:20:88:64:c4:69:e6:72:f2:fe:b2:f4:52:ae: b9:91:68:98:c6:eb:77:8a:62:78:30:d1:5a:dd:f8:3a:57:0c: a6:0f:42:a4:13:4f:3d:dd:57:d6:cc:77:a0:d2:5c:05:f9:47: 97:16:f9:e6:d5:96:e6:d1:c0:de:27:30:01:8b:70:43:5c:e1: ea:cf:a8:ef:33:b4:d0:67:e6:90:46:84:25:ce:b7:8b:25:20: c6:82:e7:ad -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6kafHfRZvcvtiEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk MzBlZDliZWItYTE3ZC00YjFjLTllZTUtZWNkYzU5MWJkYzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNw1Q2R3Wcckp+5uVXOte95y+5YNXwI8VU+z FPrZZsqETeoGKJbfM+Xl73ETs6onWlHHqAQUgZSV0rUdCxY9t9S03XvBrthfMjvt MIn5QcdshOdd7CrnUEkfDJc6PTl3V+TSd9QiO+mUqErNEYc75kg4GKpgsiGy79z1 Ft3W5cAyOpwEBtAIWdq4a3/318iPKF7myVXM2deJqK8ZTLDy9fpEK7CKmrx8l6+s UwsmVwMYxgoTJPGgg4f95CVAS7CmPDckQ+ok4hMj7x7xZO2C6lTRangzkMlzHeDn T2D0YSBsJbD6CCktvEY1tXYBrXiikzxwvMZ0lRIMsOunEjNkjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP3XQzmYJz6PZH3ZDXQLW7rHb2U6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2RmNDE3YzYtODAzZS0z ZGM2LWE3NzUtNTA4MGM0ZWIyYzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAfdXHF6pOQj3gRCduR57pdUgaAHkJZ1lhc12wKnseCco4pc7aJ6 KTvgnkseIM7XsUjrsPwKte9oZ6GCvJ4Nq+syBllHvVz5FwwQ3+J1269eB0bwX6Ys B+y6KUku3NZFH1TM/I3kdlCuWHGXhQDvid86jBdGf6OdrZyELuy5PzRE5BR8H4DN KhH6G8oXyHLtsbNdvhYU/IHNDgaCXH26/EQOgNsWQPN7IIhkxGnmcvL+svRSrrmR aJjG63eKYngw0Vrd+DpXDKYPQqQTTz3dV9bMd6DSXAX5R5cW+ebVlubRwN4nMAGL cENc4erPqO8ztNBn5pBGhCXOt4slIMaC560= -----END CERTIFICATE-----Generated at Fri Apr 17 16:22:21 2026 by rpki-client