$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9be4e40a-7fac-3bcc-805b-ea69919ecf46.roa File: 9be4e40a-7fac-3bcc-805b-ea69919ecf46.roa (raw, json) Hash identifier: ctFGTFYj2sBU+4SP+bdnJbxguR7tS2gF7B0ChgUJ4qs= Subject key identifier: 87:BB:98:A8:72:91:DF:33:81:D9:69:FB:AC:CD:50:A2:AC:E2:3E:71 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D59EAB0529F4E0CFC7657AD00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9be4e40a-7fac-3bcc-805b-ea69919ecf46.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 396586 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:b0:52:9f:4e:0c:fc:76:57:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=8b2408ef-26df-4f4c-9a10-af05d72e30de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2a:0d:31:1d:3c:81:69:17:4f:0b:af:45:fb: 5e:2c:c9:d8:b2:25:79:d4:07:56:98:ef:c8:e6:b4: f7:09:0b:65:db:09:b0:43:d4:16:48:df:f8:d3:7b: ea:87:dd:ac:7c:99:59:b8:ed:34:8b:a8:8e:06:35: 62:77:7c:f0:71:0e:dc:ac:e8:23:a6:b3:57:33:8b: 74:8b:1f:5e:ec:6e:3f:c6:d3:81:e4:73:df:ad:a2: a9:d6:59:59:96:d8:43:d0:c1:04:1d:96:9d:de:7a: ad:1b:e3:23:d7:67:7a:e4:0d:0f:58:9d:c6:50:d0: 71:81:af:04:31:b8:64:a7:b0:34:66:51:be:17:1a: fe:51:37:51:fc:63:16:dd:45:1d:f0:eb:35:72:12: 8d:23:93:c9:36:35:c6:66:2e:32:0f:fb:59:6e:fc: c9:f8:98:3d:fe:87:28:00:5d:cf:11:bf:4f:0c:68: 44:82:d9:91:cb:5a:f1:59:a6:13:d8:f4:b1:be:0e: 22:d9:b3:00:17:09:80:19:14:1d:03:15:78:49:98: 1c:06:26:14:cd:75:ff:dd:34:2b:f2:e9:ca:d8:c8: d5:da:00:94:89:62:87:fd:c1:e8:2c:77:48:70:eb: 3f:8d:6f:44:70:e9:b1:bf:21:c7:27:f3:ff:0e:31: 46:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:BB:98:A8:72:91:DF:33:81:D9:69:FB:AC:CD:50:A2:AC:E2:3E:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9be4e40a-7fac-3bcc-805b-ea69919ecf46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:1b:84:b3:08:57:8f:33:25:65:ca:6e:dc:65:ec:cc:f6:0d: 56:61:8f:ff:db:2a:16:5d:da:a7:14:84:19:45:b1:5b:38:2a: 90:43:9b:eb:e3:3a:cf:b1:4b:30:d0:ff:c7:ca:d2:9a:97:18: ca:01:f6:30:18:5f:9e:69:2d:f5:65:9d:04:1f:b9:71:9d:a5: 51:7b:a6:5d:18:d1:66:5f:47:22:5a:8e:5b:a1:df:b3:16:79: 72:eb:c4:e4:28:29:01:08:f4:7d:52:03:8d:37:5f:df:f0:72: a4:e7:e8:fe:10:13:41:f1:a9:2a:04:eb:95:8b:11:d8:13:a0: 83:89:51:97:e2:89:92:56:f3:76:c3:93:b3:03:24:06:3f:5a: 31:8e:07:5f:4d:69:9e:22:03:39:db:fe:c8:25:f2:bc:5d:36: 86:b1:34:66:cb:f1:bb:55:89:fd:14:1f:a9:06:8a:70:78:a7: 2d:c4:db:36:e8:40:4b:89:f3:64:60:30:1a:39:7e:e2:eb:0e: 5a:cb:d5:3c:7a:93:10:a8:38:69:48:cf:e4:62:ff:3b:ae:a2: 3d:97:17:e4:78:35:90:2d:22:55:6f:86:55:51:b9:7c:6e:39: dc:61:6c:8d:de:96:f2:c1:71:22:92:52:bc:21:55:44:df:2b: 0f:15:83:59 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6rBSn04M/HZXrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk OGIyNDA4ZWYtMjZkZi00ZjRjLTlhMTAtYWYwNWQ3MmUzMGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyoNMR08gWkXTwuvRfteLMnYsiV51AdWmO/I 5rT3CQtl2wmwQ9QWSN/403vqh92sfJlZuO00i6iOBjVid3zwcQ7crOgjprNXM4t0 ix9e7G4/xtOB5HPfraKp1llZlthD0MEEHZad3nqtG+Mj12d65A0PWJ3GUNBxga8E Mbhkp7A0ZlG+Fxr+UTdR/GMW3UUd8Os1chKNI5PJNjXGZi4yD/tZbvzJ+Jg9/oco AF3PEb9PDGhEgtmRy1rxWaYT2PSxvg4i2bMAFwmAGRQdAxV4SZgcBiYUzXX/3TQr 8unK2MjV2gCUiWKH/cHoLHdIcOs/jW9EcOmxvyHHJ/P/DjFGTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIe7mKhykd8zgdlp+6zNUKKs4j5xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWJlNGU0MGEtN2ZhYy0z YmNjLTgwNWItZWE2OTkxOWVjZjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABwbhLMIV48zJWXKbtxl7Mz2DVZhj//bKhZd2qcUhBlFsVs4KpBD m+vjOs+xSzDQ/8fK0pqXGMoB9jAYX55pLfVlnQQfuXGdpVF7pl0Y0WZfRyJajluh 37MWeXLrxOQoKQEI9H1SA403X9/wcqTn6P4QE0HxqSoE65WLEdgToIOJUZfiiZJW 83bDk7MDJAY/WjGOB19NaZ4iAznb/sgl8rxdNoaxNGbL8btVif0UH6kGinB4py3E 2zboQEuJ82RgMBo5fuLrDlrL1Tx6kxCoOGlIz+Ri/zuuoj2XF+R4NZAtIlVvhlVR uXxuOdxhbI3elvLBcSKSUrwhVUTfKw8Vg1k= -----END CERTIFICATE-----Generated at Fri Apr 17 07:09:33 2026 by rpki-client