$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85177abd-b753-31d5-a999-30a21f0aabda.roa File: 85177abd-b753-31d5-a999-30a21f0aabda.roa (raw, json) Hash identifier: g/LZzef9QVMpGs3TMHf5TmTI2mXhfmOo6z6G6M2F7d0= Subject key identifier: 98:64:99:D5:A3:6E:8D:BA:0B:90:0F:B9:F5:1D:71:09:72:31:5B:FA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D6DA199E863DA7733F57655B0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85177abd-b753-31d5-a999-30a21f0aabda.roa Signing time: Tue 07 Apr 2026 14:30:17 +0000 ROA not before: Tue 07 Apr 2026 14:30:17 +0000 ROA not after: Mon 06 Jul 2026 14:30:17 +0000 asID: 36619 IP address blocks: 2001:500:13f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:a1:99:e8:63:da:77:33:f5:76:55:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 7 14:30:17 2026 GMT Not After : Jul 6 14:30:17 2026 GMT Subject: CN=3ec67788-bfc2-458e-a137-a6df295a2266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:15:41:43:92:a5:86:af:34:c9:98:df:4d:6b: bd:65:69:71:f2:4c:6d:63:41:e0:81:18:bb:31:54: d9:c1:73:37:ba:b3:24:cb:5a:4f:89:c5:d5:f1:19: 03:ce:b1:72:4a:40:5e:f2:d4:90:08:22:54:0b:79: 56:9b:c0:d6:d9:d2:7e:f4:dc:94:b3:f1:3f:73:2d: ef:bb:42:ab:da:d0:40:99:db:35:95:75:d3:b1:c7: 73:97:37:10:02:01:f8:36:3d:a1:a5:ad:d8:43:a6: e2:6b:98:f0:f1:88:92:1e:4f:5a:a7:1d:5a:93:a1: e9:f1:9d:90:7d:de:e3:26:da:c7:42:8c:2c:be:ac: bd:d0:8c:fe:4b:8f:75:38:81:50:9e:1e:22:ae:03: ba:de:55:8f:9c:2c:38:14:62:fc:14:1c:28:91:14: 2e:3e:2e:3c:3e:46:c9:63:dc:31:f7:24:4f:20:d8: 3b:4c:4b:b1:84:37:80:fc:5e:fa:1d:66:a3:ab:4b: 21:b0:12:27:40:a0:57:68:58:d9:4c:29:e0:eb:c4: 9a:ec:84:54:d2:6e:fb:4b:a4:29:80:d8:b1:cf:5b: 9e:2c:11:36:38:00:52:e3:cc:70:a7:22:fd:4c:29: be:f1:49:66:90:07:f9:0c:aa:09:d0:49:2a:42:2d: 20:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:64:99:D5:A3:6E:8D:BA:0B:90:0F:B9:F5:1D:71:09:72:31:5B:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85177abd-b753-31d5-a999-30a21f0aabda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:13f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:0a:c3:ae:f2:cf:06:bc:e7:25:cf:cc:ec:48:7c:e3:45:04: 88:86:77:2f:6b:e3:b7:d1:24:0d:63:75:e8:e6:bb:a6:9d:18: 6e:3b:dc:fe:fd:d7:ff:91:cf:a2:72:c0:82:28:03:2b:b3:cf: 5e:8b:90:31:19:1a:c6:4a:bc:64:f3:53:04:31:8c:08:86:6d: 3f:7e:87:51:8d:7d:40:91:80:50:7d:6b:dc:0a:e4:f4:fb:e7: 7e:03:3b:69:ea:64:52:66:52:23:85:00:ce:32:29:d5:b2:3f: 49:1b:95:00:2d:3f:a0:dc:d5:81:cd:3f:5b:97:b8:d1:b1:69: 30:a0:83:1a:d1:b8:d8:de:80:ea:84:d2:6b:38:f7:cd:a5:df: af:f1:23:e0:5c:e5:51:ea:b0:5c:8c:e9:6e:e4:73:7c:98:87: 27:27:ce:18:a9:7f:96:95:37:75:a0:88:34:67:82:07:6e:c3: 02:83:b2:a7:03:47:be:ca:30:3b:68:65:ca:26:12:82:71:8f: 24:34:f2:c6:36:12:d0:38:2b:cc:ad:12:58:14:ab:2a:f7:98: e3:9f:1d:19:f2:ff:86:21:87:ed:84:8f:4b:68:29:05:a0:71: b0:32:2c:00:b0:6d:96:af:90:31:a4:e7:17:ad:a6:22:d4:7a: 98:b7:b4:46 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1toZnoY9p3M/V2VbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwNzE0MzAxN1oXDTI2MDcwNjE0MzAxN1owLzEtMCsGA1UEAxMk M2VjNjc3ODgtYmZjMi00NThlLWExMzctYTZkZjI5NWEyMjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RVBQ5Klhq80yZjfTWu9ZWlx8kxtY0HggRi7 MVTZwXM3urMky1pPicXV8RkDzrFySkBe8tSQCCJUC3lWm8DW2dJ+9NyUs/E/cy3v u0Kr2tBAmds1lXXTscdzlzcQAgH4Nj2hpa3YQ6bia5jw8YiSHk9apx1ak6Hp8Z2Q fd7jJtrHQowsvqy90Iz+S491OIFQnh4irgO63lWPnCw4FGL8FBwokRQuPi48PkbJ Y9wx9yRPINg7TEuxhDeA/F76HWajq0shsBInQKBXaFjZTCng68Sa7IRU0m77S6Qp gNixz1ueLBE2OABS48xwpyL9TCm+8UlmkAf5DKoJ0EkqQi0gYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJhkmdWjbo26C5APufUdcQlyMVv6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODUxNzdhYmQtYjc1My0z MWQ1LWE5OTktMzBhMjFmMGFhYmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABIKw67yzwa85yXPzOxIfONFBIiGdy9r47fRJA1jdejmu6adGG47 3P791/+Rz6JywIIoAyuzz16LkDEZGsZKvGTzUwQxjAiGbT9+h1GNfUCRgFB9a9wK 5PT7534DO2nqZFJmUiOFAM4yKdWyP0kblQAtP6Dc1YHNP1uXuNGxaTCggxrRuNje gOqE0ms4982l36/xI+Bc5VHqsFyM6W7kc3yYhycnzhipf5aVN3WgiDRnggduwwKD sqcDR77KMDtoZcomEoJxjyQ08sY2EtA4K8ytElgUqyr3mOOfHRny/4Yhh+2Ej0to KQWgcbAyLACwbZavkDGk5xetpiLUepi3tEY= -----END CERTIFICATE-----Generated at Fri Apr 17 15:34:14 2026 by rpki-client