$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c2dc0e4-df18-35aa-8f8c-a4b81a232876.roa File: 8c2dc0e4-df18-35aa-8f8c-a4b81a232876.roa (raw, json) Hash identifier: wfyHVGMtWqYQ/qY/wQ5F1ateZyoktc3WB93Usghifzc= Subject key identifier: F0:0E:93:D3:0B:AC:DA:B0:73:E0:91:B3:82:59:15:F9:13:1B:37:45 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D59EA5E7C94D14752507EF780 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c2dc0e4-df18-35aa-8f8c-a4b81a232876.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 40647 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:5e:7c:94:d1:47:52:50:7e:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=95ca4d17-a39d-4f38-b221-6f16cc9980ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:77:52:cd:86:36:87:5b:ac:20:75:fb:2f:12: a3:30:25:f9:9e:08:95:fb:00:4c:66:4c:41:68:c2: 6e:e9:7e:20:c4:ff:3f:e4:e1:1b:3b:bc:3b:3f:a2: 42:32:9d:34:8f:9c:c8:70:ae:69:9a:46:90:dd:db: 78:ff:d3:dc:e3:ce:2a:e1:75:95:7b:4c:d3:0b:c6: 14:9f:15:c1:8a:b9:5d:02:d8:74:01:1a:a7:4e:64: 3d:73:67:10:a9:aa:50:a1:72:f8:26:23:81:4d:12: af:a8:81:e5:e9:cf:73:aa:64:52:ff:ee:19:4d:f9: 6b:9f:c7:28:84:b9:fa:5f:69:90:2e:52:8e:4a:b3: 68:ba:ba:d0:86:f5:fd:70:60:3a:73:c4:e7:76:f5: d8:40:96:71:02:c3:1f:5a:23:92:78:93:80:97:c9: e7:51:34:f7:9e:84:90:83:4b:eb:fe:a8:99:66:b0: d5:b0:9c:b8:46:01:f4:6b:fa:f7:ab:d8:78:6a:88: 5e:1f:b8:8c:3c:6f:f0:4e:ce:96:37:e8:7a:2f:57: 5b:be:93:c9:e8:73:2a:f6:ff:28:ab:33:75:6b:9a: 1a:05:09:b9:d3:82:9d:01:fd:fd:a0:9c:65:b0:84: 0b:61:9e:d7:33:23:00:4e:68:7a:bc:17:04:2d:85: 90:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:0E:93:D3:0B:AC:DA:B0:73:E0:91:B3:82:59:15:F9:13:1B:37:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c2dc0e4-df18-35aa-8f8c-a4b81a232876.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:27:27:d7:c6:ab:8a:29:67:4c:ba:13:53:17:af:72:49:76: dd:76:e4:da:b7:9a:86:3b:21:12:df:cc:75:91:0c:ba:55:4b: 20:c5:c4:59:d1:64:31:81:d1:14:10:d3:44:cf:b2:90:9e:a3: 19:55:40:47:82:a7:2b:66:70:9a:ce:3c:fd:14:2d:f8:fe:c9: 70:88:1e:97:fc:48:75:0c:42:54:d3:56:dd:ea:28:b3:3f:79: 65:ed:da:de:c0:ff:75:99:0a:c7:9d:76:cb:60:ea:c0:a6:3b: 9c:6f:00:2a:bb:b5:69:b2:58:9b:97:6b:53:33:a8:08:c3:17: f6:fe:5a:6b:e8:47:d1:c3:d5:7f:53:a8:f6:af:35:4d:bd:9f: af:26:70:12:30:42:e8:79:c8:69:f4:50:5c:ef:fe:9b:15:44: 93:ea:d9:26:4e:f0:b7:bf:71:7b:fb:0f:a5:5a:be:8e:3b:02: 0e:66:f4:55:ea:cc:3b:16:d3:21:b3:b6:ce:e8:bc:97:2e:29: 46:0b:5e:44:a5:ec:c2:3a:d7:e4:17:4f:3c:83:ff:e4:9f:39: 50:f8:e3:b6:c9:fd:bd:51:76:36:dd:e5:73:40:29:a8:34:5c: f8:ff:93:6a:d9:26:5f:e5:85:41:0a:ef:4d:a5:55:a0:be:ad: 00:fa:99:49 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6l58lNFHUlB+94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk OTVjYTRkMTctYTM5ZC00ZjM4LWIyMjEtNmYxNmNjOTk4MGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23dSzYY2h1usIHX7LxKjMCX5ngiV+wBMZkxB aMJu6X4gxP8/5OEbO7w7P6JCMp00j5zIcK5pmkaQ3dt4/9Pc484q4XWVe0zTC8YU nxXBirldAth0ARqnTmQ9c2cQqapQoXL4JiOBTRKvqIHl6c9zqmRS/+4ZTflrn8co hLn6X2mQLlKOSrNourrQhvX9cGA6c8TndvXYQJZxAsMfWiOSeJOAl8nnUTT3noSQ g0vr/qiZZrDVsJy4RgH0a/r3q9h4aoheH7iMPG/wTs6WN+h6L1dbvpPJ6HMq9v8o qzN1a5oaBQm504KdAf39oJxlsIQLYZ7XMyMATmh6vBcELYWQlwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPAOk9MLrNqwc+CRs4JZFfkTGzdFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGMyZGMwZTQtZGYxOC0z NWFhLThmOGMtYTRiODFhMjMyODc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABYnJ9fGq4opZ0y6E1MXr3JJdt125Nq3moY7IRLfzHWRDLpVSyDF xFnRZDGB0RQQ00TPspCeoxlVQEeCpytmcJrOPP0ULfj+yXCIHpf8SHUMQlTTVt3q KLM/eWXt2t7A/3WZCseddstg6sCmO5xvACq7tWmyWJuXa1MzqAjDF/b+WmvoR9HD 1X9TqPavNU29n68mcBIwQuh5yGn0UFzv/psVRJPq2SZO8Le/cXv7D6Vavo47Ag5m 9FXqzDsW0yGzts7ovJcuKUYLXkSl7MI61+QXTzyD/+SfOVD447bJ/b1Rdjbd5XNA Kag0XPj/k2rZJl/lhUEK702lVaC+rQD6mUk= -----END CERTIFICATE-----Generated at Fri Apr 17 12:51:07 2026 by rpki-client