$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a172e19b-e1ca-3578-9de7-188c9b54072e.roa File: a172e19b-e1ca-3578-9de7-188c9b54072e.roa (raw, json) Hash identifier: XeqKauCFmoEetBifKTBp17vx2SUiD8SuzR9ca0buKb0= Subject key identifier: 2E:8C:C0:E7:D8:EE:73:39:5B:53:98:F9:36:95:87:5E:E5:B4:82:47 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D6DA18AD9859C7E6C48D5AA00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a172e19b-e1ca-3578-9de7-188c9b54072e.roa Signing time: Tue 07 Apr 2026 14:30:10 +0000 ROA not before: Tue 07 Apr 2026 14:30:10 +0000 ROA not after: Mon 06 Jul 2026 14:30:10 +0000 asID: 396582 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:a1:8a:d9:85:9c:7e:6c:48:d5:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 7 14:30:10 2026 GMT Not After : Jul 6 14:30:10 2026 GMT Subject: CN=78381c25-8bdf-4a3b-bc7b-6fa306aefe65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a2:e0:c6:22:7f:30:bc:d7:84:ea:29:02:5f: f6:ae:df:28:c9:ba:4d:dc:19:c0:e2:5c:ec:80:68: 68:a2:3c:13:fd:65:6a:60:40:19:de:98:3c:c1:46: 54:94:40:33:68:02:22:78:a4:ab:8b:77:a8:17:f7: 43:7d:58:e1:2b:01:fc:6b:b6:dd:f1:3b:90:51:5a: fe:0d:2a:ce:9a:38:23:33:f5:9f:39:98:61:81:0f: cf:fe:5e:62:d8:23:3e:57:b3:56:81:0c:6a:33:70: 8d:5e:bb:0d:d2:90:9c:8d:fb:2d:a5:cf:9b:11:00: 8c:34:16:e2:d3:f4:c2:ff:d5:e8:f2:ca:33:ae:78: 57:0d:6b:ca:95:47:83:0a:e7:cb:ac:8a:e5:1e:c6: bc:be:f0:4e:d4:75:38:aa:da:35:16:18:79:8d:52: bf:8b:d1:99:f7:c4:29:25:2a:6a:20:36:8b:b3:a4: 3e:60:9c:47:bd:e9:93:c8:9e:e3:53:33:15:df:84: 07:d0:81:a6:8c:21:d9:6f:40:ff:de:6d:2b:4e:c0: a0:a6:e2:4b:f2:4f:eb:3b:86:83:0a:7c:5a:0e:c9: 97:4d:7c:c2:25:ce:3a:f5:ea:85:88:1f:9c:af:67: d9:2a:1b:6b:e2:d4:13:2c:08:c4:d0:b9:eb:b6:1e: fc:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:8C:C0:E7:D8:EE:73:39:5B:53:98:F9:36:95:87:5E:E5:B4:82:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a172e19b-e1ca-3578-9de7-188c9b54072e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:72:c0:32:65:4a:6b:66:c4:83:53:7b:ca:15:ab:7e:89:4a: 0e:32:36:f8:be:b3:0c:a3:c8:0d:73:56:66:ce:c6:90:14:7e: 45:9c:5b:37:1c:34:9f:a1:89:19:1d:dc:b8:c7:7e:4f:e8:88: e2:2f:52:41:f0:ae:4a:37:5c:89:49:7b:70:38:97:92:57:ff: 61:02:65:6d:b1:03:df:8a:9d:77:3e:08:35:bf:96:3a:40:31: 6d:fc:7f:45:b7:09:0f:26:24:38:16:fd:3d:8f:f1:e4:20:23: 0d:7c:eb:ae:4d:b2:2a:ff:4e:3a:86:9c:61:45:05:42:b9:30: 49:de:dc:2a:66:41:38:a5:62:c3:10:eb:44:c4:75:c1:a7:18: f8:ca:b2:ad:76:4b:60:6d:dc:63:d6:fb:22:7b:5f:e5:74:19: f3:2c:9f:6f:87:b9:97:ad:cc:0f:4c:5c:1f:1f:50:ce:40:3c: 40:35:ce:6b:9c:e8:7f:0f:3a:4d:43:83:42:85:45:d9:5a:6c: de:7d:f1:81:6f:81:db:39:a2:f2:34:13:09:ce:23:fc:a7:7e: 7a:69:bb:31:35:d7:29:a9:b7:48:6a:06:a8:85:bb:2c:95:57: d0:0c:41:bc:c0:3e:62:b0:c8:9b:35:9a:28:d2:bc:ff:ff:46: 5a:f7:dc:49 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1toYrZhZx+bEjVqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwNzE0MzAxMFoXDTI2MDcwNjE0MzAxMFowLzEtMCsGA1UEAxMk NzgzODFjMjUtOGJkZi00YTNiLWJjN2ItNmZhMzA2YWVmZTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqLgxiJ/MLzXhOopAl/2rt8oybpN3BnA4lzs gGhoojwT/WVqYEAZ3pg8wUZUlEAzaAIieKSri3eoF/dDfVjhKwH8a7bd8TuQUVr+ DSrOmjgjM/WfOZhhgQ/P/l5i2CM+V7NWgQxqM3CNXrsN0pCcjfstpc+bEQCMNBbi 0/TC/9Xo8sozrnhXDWvKlUeDCufLrIrlHsa8vvBO1HU4qto1Fhh5jVK/i9GZ98Qp JSpqIDaLs6Q+YJxHvemTyJ7jUzMV34QH0IGmjCHZb0D/3m0rTsCgpuJL8k/rO4aD CnxaDsmXTXzCJc469eqFiB+cr2fZKhtr4tQTLAjE0Lnrth78swIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC6MwOfY7nM5W1OY+TaVh17ltIJHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTE3MmUxOWItZTFjYS0z NTc4LTlkZTctMTg4YzliNTQwNzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGBywDJlSmtmxINTe8oVq36JSg4yNvi+swyjyA1zVmbOxpAUfkWc WzccNJ+hiRkd3LjHfk/oiOIvUkHwrko3XIlJe3A4l5JX/2ECZW2xA9+KnXc+CDW/ ljpAMW38f0W3CQ8mJDgW/T2P8eQgIw18665Nsir/TjqGnGFFBUK5MEne3CpmQTil YsMQ60TEdcGnGPjKsq12S2Bt3GPW+yJ7X+V0GfMsn2+HuZetzA9MXB8fUM5APEA1 zmuc6H8POk1Dg0KFRdlabN598YFvgds5ovI0EwnOI/ynfnppuzE11ympt0hqBqiF uyyVV9AMQbzAPmKwyJs1mijSvP//Rlr33Ek= -----END CERTIFICATE-----Generated at Fri Apr 17 03:13:44 2026 by rpki-client