$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e3b960e-d7fd-3c4b-89fd-f89cdd29e320.roa File: 9e3b960e-d7fd-3c4b-89fd-f89cdd29e320.roa (raw, json) Hash identifier: /XJs+YHKYd+D8lof3GbMN7Dg0IrFCP5FU9nKFB6U9bo= Subject key identifier: BE:D2:A2:55:18:C1:F1:21:E0:97:4A:93:6D:DD:05:15:8B:65:9A:0E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D5E1A5E8F153D7D5F793B0790 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e3b960e-d7fd-3c4b-89fd-f89cdd29e320.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 396582 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:5e:8f:15:3d:7d:5f:79:3b:07:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=31d19bd2-8a48-4404-9ae6-ff24108e3973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fa:20:60:4e:84:1b:68:b6:7b:32:e9:87:ee: 42:34:2a:ae:44:c7:0b:c8:60:36:23:6e:64:fe:ae: 72:de:be:ca:eb:0a:54:d3:a8:37:b3:34:70:4c:dd: 3e:1f:33:98:cb:c8:ad:63:70:7d:84:0b:f6:e1:ff: fd:a6:2a:31:40:64:eb:df:42:31:3f:95:d4:a9:20: 0b:de:c9:62:a3:cd:0f:20:9f:00:e3:49:88:38:57: b0:a3:d6:17:fb:ea:61:7a:da:5c:ab:43:9e:94:9d: a9:ba:ea:67:36:09:13:da:ea:a6:c9:fa:f6:70:62: e1:78:18:5f:36:99:e9:d6:80:ac:37:34:16:74:29: c6:75:27:1b:cf:d5:50:51:f1:c0:8b:c4:60:2b:9f: bc:6f:7f:cc:04:5e:44:ee:1e:0d:95:a9:6f:4a:55: 52:62:bc:2b:39:de:7e:f5:6a:69:ad:0e:02:f2:bf: 57:75:6c:53:5c:13:6a:3b:db:da:68:40:a3:c0:32: fe:80:84:7b:5a:09:54:10:ca:11:e2:7d:21:a3:db: c3:76:9b:89:8e:15:5d:f4:61:f7:71:fb:4a:89:5c: b0:28:ce:e7:f1:f4:bf:64:c4:70:fe:85:b6:80:5e: 05:08:cc:61:96:f3:a9:2f:3b:79:6c:4e:f0:53:07: 1c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D2:A2:55:18:C1:F1:21:E0:97:4A:93:6D:DD:05:15:8B:65:9A:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e3b960e-d7fd-3c4b-89fd-f89cdd29e320.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:4d:ce:a7:4c:c3:c2:77:75:63:0e:05:ea:87:85:bb:d3:e9: f8:41:9c:08:31:ca:88:08:23:c6:55:86:11:7f:55:28:73:00: 5c:79:9e:e6:cf:c7:17:be:0b:71:a2:37:6f:40:14:64:6a:2e: 16:60:cf:6b:bf:88:c3:d9:f1:eb:f8:45:43:88:6e:0e:85:ab: 82:30:d6:62:9c:c0:83:01:33:f3:a3:7b:c6:74:6d:09:a1:17: 44:c9:54:14:49:72:5b:67:35:40:cf:e3:3d:1c:5b:ee:03:0e: f9:16:3e:bb:6c:e0:97:82:37:1e:5a:7f:ba:78:56:ee:97:8c: 7d:0d:f9:98:af:d5:2c:79:2e:63:03:3a:3a:b0:a5:ed:71:5e: 8a:d5:46:15:ca:8d:35:7b:5f:f6:99:6a:45:45:93:1b:e7:34: 50:ff:20:16:c9:cf:56:fa:b7:a4:8a:2f:9e:07:8d:76:e5:39: dd:97:49:b4:8f:63:6e:68:49:40:da:fa:5c:87:04:a3:17:d5: ad:d8:84:8b:e9:41:f0:bd:53:87:a3:62:a8:3c:3e:73:4d:21: f0:a8:bf:36:ce:27:7d:ce:63:19:ef:db:18:a5:5f:0f:8d:81: e4:c3:ed:73:e4:67:49:84:b3:49:e6:44:fb:bf:12:16:45:63: 64:d5:fd:93 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1eGl6PFT19X3k7B5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk MzFkMTliZDItOGE0OC00NDA0LTlhZTYtZmYyNDEwOGUzOTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPogYE6EG2i2ezLph+5CNCquRMcLyGA2I25k /q5y3r7K6wpU06g3szRwTN0+HzOYy8itY3B9hAv24f/9pioxQGTr30IxP5XUqSAL 3slio80PIJ8A40mIOFewo9YX++phetpcq0OelJ2puupnNgkT2uqmyfr2cGLheBhf Npnp1oCsNzQWdCnGdScbz9VQUfHAi8RgK5+8b3/MBF5E7h4NlalvSlVSYrwrOd5+ 9WpprQ4C8r9XdWxTXBNqO9vaaECjwDL+gIR7WglUEMoR4n0ho9vDdpuJjhVd9GH3 cftKiVywKM7n8fS/ZMRw/oW2gF4FCMxhlvOpLzt5bE7wUwccLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL7SolUYwfEh4JdKk23dBRWLZZoOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWUzYjk2MGUtZDdmZC0z YzRiLTg5ZmQtZjg5Y2RkMjllMzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAChNzqdMw8J3dWMOBeqHhbvT6fhBnAgxyogII8ZVhhF/VShzAFx5 nubPxxe+C3GiN29AFGRqLhZgz2u/iMPZ8ev4RUOIbg6Fq4Iw1mKcwIMBM/Oje8Z0 bQmhF0TJVBRJcltnNUDP4z0cW+4DDvkWPrts4JeCNx5af7p4Vu6XjH0N+Ziv1Sx5 LmMDOjqwpe1xXorVRhXKjTV7X/aZakVFkxvnNFD/IBbJz1b6t6SKL54HjXblOd2X SbSPY25oSUDa+lyHBKMX1a3YhIvpQfC9U4ejYqg8PnNNIfCovzbOJ33OYxnv2xil Xw+NgeTD7XPkZ0mEs0nmRPu/EhZFY2TV/ZM= -----END CERTIFICATE-----Generated at Fri Apr 17 14:44:56 2026 by rpki-client