$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1478a20-f4c1-308c-a08c-9bfc34e77096.roa File: a1478a20-f4c1-308c-a08c-9bfc34e77096.roa (raw, json) Hash identifier: p867yD8+lczyq/YPu5PxV5Cfi64pHilAeSDLp9tB5gg= Subject key identifier: BE:7B:B7:A5:30:D4:FF:6D:3C:DA:F3:57:62:A1:CA:F0:18:A0:9B:50 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D732BD5B309F11B65AABCD400 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1478a20-f4c1-308c-a08c-9bfc34e77096.roa Signing time: Thu 09 Apr 2026 14:07:51 +0000 ROA not before: Thu 09 Apr 2026 14:07:51 +0000 ROA not after: Wed 08 Jul 2026 14:07:51 +0000 asID: 20431 IP address blocks: 2001:500:133::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:73:2b:d5:b3:09:f1:1b:65:aa:bc:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 9 14:07:51 2026 GMT Not After : Jul 8 14:07:51 2026 GMT Subject: CN=bdbf71a9-4e7e-470b-9d3a-48e045a0fd13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ab:a2:00:c3:9d:47:4a:ac:97:4c:60:de:b9: ef:fa:71:64:35:12:27:18:fe:02:e9:ac:4f:7f:b3: 57:3f:b5:fd:17:76:c0:7f:65:53:7b:f1:27:da:e6: 0d:d3:26:4b:6a:60:dd:d5:41:db:45:be:83:68:7a: 77:17:55:8e:0e:f4:32:a6:8b:34:9d:4a:a8:82:af: b1:84:4e:69:db:e0:25:9d:28:11:22:a1:20:6e:db: 08:ed:30:60:0b:ff:83:30:80:03:9c:02:83:89:c6: 39:b3:9e:52:ed:f9:b2:2d:26:c9:9d:fc:4e:02:42: 7e:fb:54:72:7c:84:a7:2f:7a:7b:9a:ae:7c:d0:a8: a4:f4:dc:1c:dd:dc:3d:9b:e1:4b:c5:76:c7:04:75: b0:ae:4d:e1:0d:6c:62:19:4e:80:bb:50:45:fb:e8: 00:87:a9:74:6d:55:cf:ca:fd:6c:1a:af:9c:86:68: 0a:be:8f:bb:d0:9e:e3:64:e1:3e:f0:9c:5c:60:26: e9:a7:4d:58:3f:29:d8:7b:c0:0c:45:20:36:db:21: 5d:e7:2c:0c:c1:37:7d:e6:51:ae:ff:21:a3:10:cc: d6:17:c4:09:19:3a:07:3a:81:f9:ea:29:18:ad:23: d4:11:b2:1d:22:48:a8:15:3d:40:b9:e3:06:98:f2: b6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:7B:B7:A5:30:D4:FF:6D:3C:DA:F3:57:62:A1:CA:F0:18:A0:9B:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1478a20-f4c1-308c-a08c-9bfc34e77096.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:a5:88:26:b8:0d:45:54:6d:a4:ce:06:1c:78:6e:8a:c5:3f: f2:5e:a4:fd:09:88:74:aa:e4:04:2e:78:e0:5e:0b:46:3d:0c: a4:5e:1c:fb:58:4d:27:52:06:88:ce:5b:28:41:4b:fd:49:20: 98:5c:40:51:10:75:d1:ec:e8:e5:ce:cd:64:5f:0d:6a:a3:3e: b6:e3:68:c6:c0:8c:27:e1:85:d1:9f:08:65:5a:9d:2f:7f:c4: 60:77:28:5a:c1:74:e8:24:42:66:46:77:3f:32:19:f1:01:5b: 5f:86:d4:9e:86:96:0a:92:4e:3e:a5:8b:2f:fa:ba:26:b4:b3: b4:26:05:70:52:b9:a1:aa:5b:01:24:22:12:c1:27:c7:39:52: ee:94:6d:f0:cc:6d:db:87:ce:4b:0e:a4:e8:5b:40:5d:0a:35: c9:a3:99:48:3d:25:00:40:30:1f:ff:51:f6:f1:5f:88:e5:76: 11:11:12:d0:5f:0e:57:7a:7e:35:c6:08:23:cd:c8:3e:7a:ba: 25:b1:e7:d5:63:fc:ec:36:dd:67:7a:70:75:d2:24:63:a1:5f: 23:1a:fd:0f:cc:f7:be:1e:45:d1:32:f3:b6:97:df:1a:dc:f9: 09:21:2e:81:fa:5f:8a:26:27:48:ed:a9:9c:a9:f2:7e:80:8e: 3d:58:28:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1zK9WzCfEbZaq81AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwOTE0MDc1MVoXDTI2MDcwODE0MDc1MVowLzEtMCsGA1UEAxMk YmRiZjcxYTktNGU3ZS00NzBiLTlkM2EtNDhlMDQ1YTBmZDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6uiAMOdR0qsl0xg3rnv+nFkNRInGP4C6axP f7NXP7X9F3bAf2VTe/En2uYN0yZLamDd1UHbRb6DaHp3F1WODvQypos0nUqogq+x hE5p2+AlnSgRIqEgbtsI7TBgC/+DMIADnAKDicY5s55S7fmyLSbJnfxOAkJ++1Ry fISnL3p7mq580Kik9Nwc3dw9m+FLxXbHBHWwrk3hDWxiGU6Au1BF++gAh6l0bVXP yv1sGq+chmgKvo+70J7jZOE+8JxcYCbpp01YPynYe8AMRSA22yFd5ywMwTd95lGu /yGjEMzWF8QJGToHOoH56ikYrSPUEbIdIkioFT1AueMGmPK2CwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL57t6Uw1P9tPNrzV2KhyvAYoJtQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTE0NzhhMjAtZjRjMS0z MDhjLWEwOGMtOWJmYzM0ZTc3MDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADyliCa4DUVUbaTOBhx4borFP/JepP0JiHSq5AQueOBeC0Y9DKRe HPtYTSdSBojOWyhBS/1JIJhcQFEQddHs6OXOzWRfDWqjPrbjaMbAjCfhhdGfCGVa nS9/xGB3KFrBdOgkQmZGdz8yGfEBW1+G1J6GlgqSTj6liy/6uia0s7QmBXBSuaGq WwEkIhLBJ8c5Uu6UbfDMbduHzksOpOhbQF0KNcmjmUg9JQBAMB//UfbxX4jldhER EtBfDld6fjXGCCPNyD56uiWx59Vj/Ow23Wd6cHXSJGOhXyMa/Q/M974eRdEy87aX 3xrc+QkhLoH6X4omJ0jtqZyp8n6Ajj1YKGE= -----END CERTIFICATE-----Generated at Fri Apr 17 18:35:05 2026 by rpki-client