$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a26abda9-e6da-33ca-8d22-00a18f4dd6e9.roa File: a26abda9-e6da-33ca-8d22-00a18f4dd6e9.roa (raw, json) Hash identifier: 52Ca1/4StZeUHeZODwfbYqcMvyiBrWQgDUUm90iTguI= Subject key identifier: 65:6A:A8:46:33:F4:28:68:B4:22:09:B0:67:19:5C:01:8D:64:8D:FD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D6DA19021857A599DD1FBF200 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a26abda9-e6da-33ca-8d22-00a18f4dd6e9.roa Signing time: Tue 07 Apr 2026 14:30:13 +0000 ROA not before: Tue 07 Apr 2026 14:30:13 +0000 ROA not after: Mon 06 Jul 2026 14:30:13 +0000 asID: 396593 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:a1:90:21:85:7a:59:9d:d1:fb:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 7 14:30:13 2026 GMT Not After : Jul 6 14:30:13 2026 GMT Subject: CN=ddfafdb2-3476-4f17-bba7-4d4d359ec10e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:06:fd:5f:2c:b0:62:46:bd:59:25:1a:65:69: e0:d6:3a:b9:13:ae:25:6d:b2:e5:2d:93:37:82:5d: 3e:e3:3b:85:9a:5b:f9:3d:47:d8:bc:df:e3:f7:84: 61:31:56:57:a3:39:ab:e1:56:ef:d0:6e:9d:4d:66: b3:fe:86:2d:47:40:f9:a0:96:b9:53:88:8e:e5:39: 46:b4:5d:a4:6d:6c:67:95:8b:2e:6e:36:e6:46:64: 6f:a8:ca:f3:1f:d2:8e:29:cd:10:75:6d:9b:1a:d7: af:3b:b2:75:0d:d4:db:68:71:08:0d:b4:62:50:5c: 3a:36:66:26:c6:17:3e:25:20:25:e1:01:8f:3b:12: fa:a1:33:73:f7:92:de:b4:26:e0:76:c6:b8:03:a2: 5e:65:81:ab:64:09:3b:cd:5b:65:36:69:27:14:0e: fb:6f:0b:2c:3a:87:82:0f:65:e6:f8:10:04:5c:83: 03:88:5d:88:56:4e:f8:11:89:77:1f:e8:da:7f:12: b9:55:ae:b3:52:3e:cf:3f:28:a5:cf:12:26:71:d3: e7:28:3f:c5:ea:25:86:c7:43:63:0c:69:6f:d6:03: fe:ee:15:c8:50:a9:2b:fc:1a:6c:45:1d:60:88:c1: 5b:48:da:cb:16:dc:94:60:95:f0:2f:6b:e8:a8:a9: fc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6A:A8:46:33:F4:28:68:B4:22:09:B0:67:19:5C:01:8D:64:8D:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a26abda9-e6da-33ca-8d22-00a18f4dd6e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:84:f1:88:6b:ba:72:8e:10:92:af:7a:4d:a8:27:ee:bc:6e: 37:88:db:e1:3f:cb:c3:c7:ad:e1:6d:ef:b8:ca:aa:1c:98:77: 7f:2b:38:f7:91:8f:26:1d:0d:40:ae:14:cf:7f:de:26:cb:57: e5:31:39:f0:cf:69:64:84:c6:33:08:84:67:60:2c:4f:73:23: a7:71:4b:1e:f3:be:6f:d2:e3:c6:f0:19:05:29:63:59:7c:ca: da:65:8e:ae:12:c7:99:75:83:26:f5:83:5c:59:ca:d5:ae:2c: 79:97:86:a4:ae:b0:38:2d:22:1d:2c:63:ae:8d:90:dc:4b:a2: 77:96:0a:83:39:c9:68:d4:5e:45:97:a7:17:5b:2f:cb:fd:f0: 8f:43:b4:d2:7f:95:12:69:d1:62:d8:ba:9d:b1:94:f7:70:37: bd:77:17:82:8e:e1:92:37:36:4d:7c:34:9a:c5:d0:78:73:59: 54:ca:3d:88:37:1e:43:65:37:f4:3c:fe:42:4b:1e:51:20:5f: f8:4e:29:92:a5:8c:7f:a0:c5:b8:4c:08:14:4e:c9:3d:28:d2: 01:3c:02:c0:d9:32:ae:e8:6c:50:16:3e:85:d6:44:50:ff:ae: ad:4e:4f:40:38:29:68:0f:f4:29:81:03:fd:e4:ac:d4:be:3b: e4:82:2d:9e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1toZAhhXpZndH78gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwNzE0MzAxM1oXDTI2MDcwNjE0MzAxM1owLzEtMCsGA1UEAxMk ZGRmYWZkYjItMzQ3Ni00ZjE3LWJiYTctNGQ0ZDM1OWVjMTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gb9XyywYka9WSUaZWng1jq5E64lbbLlLZM3 gl0+4zuFmlv5PUfYvN/j94RhMVZXozmr4Vbv0G6dTWaz/oYtR0D5oJa5U4iO5TlG tF2kbWxnlYsubjbmRmRvqMrzH9KOKc0QdW2bGtevO7J1DdTbaHEIDbRiUFw6NmYm xhc+JSAl4QGPOxL6oTNz95LetCbgdsa4A6JeZYGrZAk7zVtlNmknFA77bwssOoeC D2Xm+BAEXIMDiF2IVk74EYl3H+jafxK5Va6zUj7PPyilzxImcdPnKD/F6iWGx0Nj DGlv1gP+7hXIUKkr/BpsRR1giMFbSNrLFtyUYJXwL2voqKn8TwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGVqqEYz9ChotCIJsGcZXAGNZI39MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTI2YWJkYTktZTZkYS0z M2NhLThkMjItMDBhMThmNGRkNmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKGE8YhrunKOEJKvek2oJ+68bjeI2+E/y8PHreFt77jKqhyYd38r OPeRjyYdDUCuFM9/3ibLV+UxOfDPaWSExjMIhGdgLE9zI6dxSx7zvm/S48bwGQUp Y1l8ytpljq4Sx5l1gyb1g1xZytWuLHmXhqSusDgtIh0sY66NkNxLoneWCoM5yWjU XkWXpxdbL8v98I9DtNJ/lRJp0WLYup2xlPdwN713F4KO4ZI3Nk18NJrF0HhzWVTK PYg3HkNlN/Q8/kJLHlEgX/hOKZKljH+gxbhMCBROyT0o0gE8AsDZMq7obFAWPoXW RFD/rq1OT0A4KWgP9CmBA/3krNS+O+SCLZ4= -----END CERTIFICATE-----Generated at Fri Apr 17 02:31:15 2026 by rpki-client