$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a275f7b-4425-3bf5-b8a0-5113fbc8f629.roa File: 8a275f7b-4425-3bf5-b8a0-5113fbc8f629.roa (raw, json) Hash identifier: fI+/SySFPavIBM91jCbyyfMCTdNTiemAC4EJf5bNWes= Subject key identifier: D3:60:9B:09:9D:4B:9A:25:60:2C:7A:A6:63:20:41:5A:90:68:40:7F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D732BD9E7B11028B944DC3380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a275f7b-4425-3bf5-b8a0-5113fbc8f629.roa Signing time: Thu 09 Apr 2026 14:07:53 +0000 ROA not before: Thu 09 Apr 2026 14:07:53 +0000 ROA not after: Wed 08 Jul 2026 14:07:53 +0000 asID: 396574 IP address blocks: 2001:500:133::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:73:2b:d9:e7:b1:10:28:b9:44:dc:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 9 14:07:53 2026 GMT Not After : Jul 8 14:07:53 2026 GMT Subject: CN=6a343361-9faf-4fde-9ee0-7c4b859aa1ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:09:2e:33:a3:da:c7:74:3f:dc:24:b0:0f:fc: 89:33:bb:c5:cf:4a:42:39:45:21:62:43:77:e1:e7: 67:95:2b:6f:98:34:56:71:c4:70:cf:df:c3:58:f2: 08:c2:39:ed:bc:28:13:0e:63:eb:b1:19:6a:15:00: 48:df:59:88:8c:c0:ab:f4:ab:2f:12:8f:85:47:12: da:04:1f:56:cb:9d:17:46:b9:92:eb:92:06:76:ef: fb:8b:f8:24:86:19:f6:54:25:15:8a:1a:3b:44:21: ea:24:a3:27:88:61:20:15:a4:de:ae:62:df:c4:51: f2:39:30:89:51:44:5b:8c:60:89:3b:4c:76:cf:41: 3c:49:15:8e:94:49:99:e5:7b:93:c6:54:5f:44:99: d3:b6:0e:1c:31:dd:b0:f9:f6:37:4e:99:8f:22:50: c9:db:f3:62:4a:5c:0d:f9:41:03:4e:67:77:15:7c: ee:65:c3:35:6a:e7:98:63:44:ac:ca:4f:73:3e:ae: c3:f9:58:e9:be:85:7d:41:16:09:42:da:81:dc:f7: 12:19:cf:85:85:3c:21:0f:32:67:2e:af:b5:9d:13: 4a:f4:12:7a:00:4e:ac:86:68:ce:1b:29:4a:ec:c2: a6:09:01:bd:b6:fe:78:27:17:61:16:c2:61:28:51: 4f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:60:9B:09:9D:4B:9A:25:60:2C:7A:A6:63:20:41:5A:90:68:40:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a275f7b-4425-3bf5-b8a0-5113fbc8f629.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:df:91:50:7d:0b:ed:13:c3:8e:22:0b:70:3c:e3:66:c9:fa: f1:99:c9:83:a1:f7:98:dd:25:fb:c2:fa:6f:27:a9:a8:5b:0b: a8:4a:09:b6:0d:13:4b:32:24:ea:1a:35:d6:1b:ea:fe:c2:8b: 30:60:e2:f8:91:c3:28:2f:96:8e:a6:03:be:56:06:a1:6b:e5: b5:be:4c:d8:22:4d:35:cf:fe:a4:ae:c4:2b:09:b9:33:20:b3: 2c:ce:3c:e9:db:e2:b8:a0:24:26:d0:af:a8:ca:1f:0f:2d:b9: c8:df:10:74:07:05:67:c0:f1:59:ad:51:12:ff:bb:a9:df:be: 39:9b:d1:68:64:ed:46:de:50:9d:9a:db:8d:a4:b8:35:b4:bc: c9:22:41:4d:ff:61:30:93:d8:09:87:71:e2:cf:8a:28:76:66: a5:5b:76:61:44:bb:5d:29:9c:76:49:61:5d:03:60:b3:4b:91: b8:3b:98:a6:0f:9c:b2:b5:b5:8e:a2:c3:cc:c9:06:bd:8a:06: d4:1c:ff:db:51:25:87:5d:f9:44:bd:b3:0c:72:ef:b8:51:10: 80:76:bf:f1:b7:eb:75:64:33:a5:0e:04:96:2e:ea:c4:65:93: 7d:e9:d8:9c:11:a6:7f:a6:47:56:47:29:a3:63:bd:d6:b9:0f: 2a:86:1a:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1zK9nnsRAouUTcM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwOTE0MDc1M1oXDTI2MDcwODE0MDc1M1owLzEtMCsGA1UEAxMk NmEzNDMzNjEtOWZhZi00ZmRlLTllZTAtN2M0Yjg1OWFhMWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgkuM6Pax3Q/3CSwD/yJM7vFz0pCOUUhYkN3 4ednlStvmDRWccRwz9/DWPIIwjntvCgTDmPrsRlqFQBI31mIjMCr9KsvEo+FRxLa BB9Wy50XRrmS65IGdu/7i/gkhhn2VCUViho7RCHqJKMniGEgFaTermLfxFHyOTCJ UURbjGCJO0x2z0E8SRWOlEmZ5XuTxlRfRJnTtg4cMd2w+fY3TpmPIlDJ2/NiSlwN +UEDTmd3FXzuZcM1aueYY0Ssyk9zPq7D+VjpvoV9QRYJQtqB3PcSGc+FhTwhDzJn Lq+1nRNK9BJ6AE6shmjOGylK7MKmCQG9tv54JxdhFsJhKFFP0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNNgmwmdS5olYCx6pmMgQVqQaEB/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGEyNzVmN2ItNDQyNS0z YmY1LWI4YTAtNTExM2ZiYzhmNjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFzfkVB9C+0Tw44iC3A842bJ+vGZyYOh95jdJfvC+m8nqahbC6hK CbYNE0syJOoaNdYb6v7CizBg4viRwygvlo6mA75WBqFr5bW+TNgiTTXP/qSuxCsJ uTMgsyzOPOnb4rigJCbQr6jKHw8tucjfEHQHBWfA8VmtURL/u6nfvjmb0Whk7Ube UJ2a242kuDW0vMkiQU3/YTCT2AmHceLPiih2ZqVbdmFEu10pnHZJYV0DYLNLkbg7 mKYPnLK1tY6iw8zJBr2KBtQc/9tRJYdd+US9swxy77hREIB2v/G363VkM6UOBJYu 6sRlk33p2JwRpn+mR1ZHKaNjvda5DyqGGnc= -----END CERTIFICATE-----Generated at Fri Apr 17 10:17:19 2026 by rpki-client