$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/999b5baa-769b-33f2-bb7f-f29b8e8d7e53.roa File: 999b5baa-769b-33f2-bb7f-f29b8e8d7e53.roa (raw, json) Hash identifier: fUaiPWaYZ/KES9JBYIoMP7e196EOzz4H2lewDdkldZg= Subject key identifier: F7:6F:78:DD:13:BA:7C:7C:97:7D:1F:59:17:D7:04:31:5A:79:16:DF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D5E1A795C7BB62A6734E4C600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/999b5baa-769b-33f2-bb7f-f29b8e8d7e53.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 36624 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:79:5c:7b:b6:2a:67:34:e4:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=a1301a36-eb86-421c-a343-feb13ac62ba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:93:28:c8:8e:1c:6f:91:da:b9:d2:12:8f:40: 04:ff:66:d5:dd:18:8e:f0:ea:2c:bc:73:db:04:f0: 3e:a2:d2:0d:0c:92:23:85:81:08:c7:e1:8b:c5:3c: 27:3c:2d:61:62:e7:a6:08:38:1a:eb:d2:32:83:9e: 67:78:12:07:8b:3f:73:1f:17:49:a5:dd:f0:3a:53: 5e:81:52:d2:82:70:01:4d:19:77:50:39:93:ab:d8: 32:36:81:8c:fa:7e:2b:01:23:5b:4f:42:ab:04:ae: 06:23:84:4e:28:a7:dc:2a:5d:8e:ed:f3:10:fb:1b: aa:91:94:09:79:af:b3:95:3c:d9:76:5d:6e:50:31: 7e:a1:e8:53:d1:2f:94:9a:98:58:4f:a7:82:88:af: 58:dd:ae:45:78:9b:4e:c8:af:cb:26:aa:4b:ea:f7: bd:17:b3:1e:e2:38:ed:a5:c2:29:10:31:f3:a0:a1: 02:98:a4:e5:00:2d:39:12:e8:6b:01:69:12:70:75: ee:25:bf:1d:1f:6e:65:26:b8:e8:e4:27:11:16:b6: e6:27:01:ca:06:b0:05:29:79:87:14:12:2a:7a:8a: 96:d3:0e:c4:51:81:da:06:5f:ef:20:b2:16:2f:77: aa:dd:6f:fe:8a:c1:4c:3f:e2:af:ab:93:ea:ea:30: c8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:6F:78:DD:13:BA:7C:7C:97:7D:1F:59:17:D7:04:31:5A:79:16:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/999b5baa-769b-33f2-bb7f-f29b8e8d7e53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:50:79:63:5a:12:1a:31:1c:e9:8c:25:c9:53:0c:06:38:7b: e0:4c:5a:fa:f5:3e:ab:57:0c:e3:1e:6f:5b:a9:aa:e3:a4:f7: 65:c7:3c:e0:fe:da:b7:64:c7:ef:7d:76:03:1f:fe:a8:55:9b: f0:5b:09:64:c0:e1:f3:58:24:20:91:14:39:9d:7d:4f:8a:4c: 27:66:e8:dd:82:ee:0b:86:e7:15:d2:93:1e:2a:a6:2d:5e:0a: 56:d1:69:42:17:f0:c8:ae:0f:de:2a:df:9f:cf:32:82:a2:58: 81:9b:8c:f3:05:dd:c9:58:74:9a:4e:74:f2:10:37:09:e2:31: d6:d7:22:21:97:19:d2:87:ec:9b:97:6c:44:55:e9:24:58:12: 17:0f:cc:f1:a2:d8:2f:af:ef:a2:0e:59:f4:3d:5d:aa:55:ea: 72:45:c2:a5:22:0b:5f:68:95:f3:3e:e8:ad:e8:da:80:a6:74: 07:e8:18:89:6a:72:34:5b:3e:88:92:a0:db:d9:aa:4b:f8:0d: 8f:ad:54:98:56:d4:2f:9e:47:63:b3:f5:05:24:b3:ca:ac:65: 21:3a:a2:fc:a5:be:a5:eb:0c:bb:4d:bf:43:60:47:e8:cc:39: ee:a4:4c:fc:cd:47:f3:7a:4c:0a:09:af:0f:00:c6:f3:2a:5c: ba:a0:3d:8c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1eGnlce7YqZzTkxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk YTEzMDFhMzYtZWI4Ni00MjFjLWEzNDMtZmViMTNhYzYyYmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJMoyI4cb5HaudISj0AE/2bV3RiO8OosvHPb BPA+otINDJIjhYEIx+GLxTwnPC1hYuemCDga69Iyg55neBIHiz9zHxdJpd3wOlNe gVLSgnABTRl3UDmTq9gyNoGM+n4rASNbT0KrBK4GI4ROKKfcKl2O7fMQ+xuqkZQJ ea+zlTzZdl1uUDF+oehT0S+UmphYT6eCiK9Y3a5FeJtOyK/LJqpL6ve9F7Me4jjt pcIpEDHzoKECmKTlAC05EuhrAWkScHXuJb8dH25lJrjo5CcRFrbmJwHKBrAFKXmH FBIqeoqW0w7EUYHaBl/vILIWL3eq3W/+isFMP+Kvq5Pq6jDIaQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPdveN0Tunx8l30fWRfXBDFaeRbfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTk5YjViYWEtNzY5Yi0z M2YyLWJiN2YtZjI5YjhlOGQ3ZTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI1QeWNaEhoxHOmMJclTDAY4e+BMWvr1PqtXDOMeb1upquOk92XH POD+2rdkx+99dgMf/qhVm/BbCWTA4fNYJCCRFDmdfU+KTCdm6N2C7guG5xXSkx4q pi1eClbRaUIX8MiuD94q35/PMoKiWIGbjPMF3clYdJpOdPIQNwniMdbXIiGXGdKH 7JuXbERV6SRYEhcPzPGi2C+v76IOWfQ9XapV6nJFwqUiC19olfM+6K3o2oCmdAfo GIlqcjRbPoiSoNvZqkv4DY+tVJhW1C+eR2Oz9QUks8qsZSE6ovylvqXrDLtNv0Ng R+jMOe6kTPzNR/N6TAoJrw8AxvMqXLqgPYw= -----END CERTIFICATE-----Generated at Fri Apr 17 11:47:53 2026 by rpki-client