$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2efe4c7-d11e-3961-b6a2-0aa8bfdfea88.roa File: a2efe4c7-d11e-3961-b6a2-0aa8bfdfea88.roa (raw, json) Hash identifier: TrvZyJi3bIw3m4rlZZJE8BKHExgnNPQ8E04kxROL7y4= Subject key identifier: 6D:C3:31:F7:CA:0A:4C:81:48:B3:E0:B2:04:EE:4C:44:63:6D:64:16 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D5E1A5EF137FB5DB42D8272C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2efe4c7-d11e-3961-b6a2-0aa8bfdfea88.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 396615 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:5e:f1:37:fb:5d:b4:2d:82:72:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=937b95f6-7a77-4a4d-b8c2-d2c7a6b55bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b7:21:dd:6e:25:24:0c:96:4f:0a:35:76:62: 41:60:f7:40:11:25:81:a7:0c:fa:f6:57:95:29:53: c9:7a:84:50:48:a1:b8:7c:b0:05:a5:4f:a6:d4:74: 06:bc:1c:fb:7b:bd:d5:cd:a4:16:7f:dd:a3:95:3e: f9:38:dc:9d:40:83:48:73:ae:5c:ca:46:b2:fa:cb: 22:85:d4:53:20:52:f2:95:f1:8d:b6:ea:23:27:3b: bb:e7:bf:81:89:fd:52:d9:79:8c:16:d4:67:d1:9c: 52:e9:f8:d6:c8:20:bf:a5:c8:04:50:cc:e0:16:5b: 8b:ee:18:23:3f:71:8a:54:8b:8f:c7:42:83:f5:79: 58:07:a2:9f:63:f3:80:1e:2c:58:b0:9c:2a:c4:b2: 32:b5:f1:81:17:45:ad:22:79:56:3b:2e:37:dd:a6: 01:c9:a6:8d:e6:f6:52:a5:ba:a8:4b:cf:91:eb:9b: 52:cc:3c:89:6c:d7:a9:04:97:ff:a0:a1:fc:fa:a8: 5c:8f:47:45:4a:2d:ba:39:44:a4:7c:4a:a2:fd:57: f4:d0:72:d5:34:df:21:0b:6d:bb:e7:7a:c9:8b:a0: 8d:f2:60:d7:73:01:a1:d6:74:02:a1:3d:c9:7c:74: 9e:b8:d5:2e:0e:04:28:1c:b7:f7:41:2c:c2:49:2a: b6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C3:31:F7:CA:0A:4C:81:48:B3:E0:B2:04:EE:4C:44:63:6D:64:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2efe4c7-d11e-3961-b6a2-0aa8bfdfea88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:86:2f:fa:87:fd:f0:d9:cb:43:87:88:ef:5f:13:37:e2:81: 5c:f4:bb:1b:9d:23:12:c0:09:f5:df:8c:6b:79:7d:38:61:47: 33:d8:98:36:a0:6c:f6:cd:9a:bc:f2:9d:48:d7:68:1a:5f:5e: 6a:63:6c:9a:ef:71:6a:23:20:e4:36:ee:32:35:5b:a2:9c:9c: 6f:bb:f7:5d:f1:2d:12:d2:45:c9:7a:fa:52:78:dc:95:f0:0d: db:cf:ff:3d:39:dd:94:b3:53:e8:b1:c6:eb:3d:f8:da:e2:7b: 2f:a5:b0:23:26:39:f2:c6:09:c2:34:e1:f7:33:b8:7b:56:7e: f4:68:4f:b7:67:be:5a:5f:e6:05:65:f7:88:d1:28:0e:fd:72: 23:12:51:b0:fe:5d:a7:27:60:05:dc:81:85:8b:ef:45:af:19: 0a:81:e3:75:df:2a:11:7b:26:f7:b9:b2:ca:e4:63:b7:f4:53: 9b:7b:d3:80:db:c8:33:94:34:86:08:89:ec:50:b2:86:b2:e8: 34:5a:31:69:d6:c7:0f:da:3c:84:39:59:85:9b:db:70:c1:96: 8c:43:0d:13:82:a9:4d:14:b9:de:c2:88:6e:68:9d:23:ee:4e: a8:73:b7:f5:57:9d:47:c9:f7:29:d5:65:2c:8c:ca:79:ae:ec: 3e:7c:c0:48 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1eGl7xN/tdtC2CcsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk OTM3Yjk1ZjYtN2E3Ny00YTRkLWI4YzItZDJjN2E2YjU1YmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrch3W4lJAyWTwo1dmJBYPdAESWBpwz69leV KVPJeoRQSKG4fLAFpU+m1HQGvBz7e73VzaQWf92jlT75ONydQINIc65cykay+ssi hdRTIFLylfGNtuojJzu757+Bif1S2XmMFtRn0ZxS6fjWyCC/pcgEUMzgFluL7hgj P3GKVIuPx0KD9XlYB6KfY/OAHixYsJwqxLIytfGBF0WtInlWOy433aYByaaN5vZS pbqoS8+R65tSzDyJbNepBJf/oKH8+qhcj0dFSi26OUSkfEqi/Vf00HLVNN8hC227 53rJi6CN8mDXcwGh1nQCoT3JfHSeuNUuDgQoHLf3QSzCSSq2ZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG3DMffKCkyBSLPgsgTuTERjbWQWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTJlZmU0YzctZDExZS0z OTYxLWI2YTItMGFhOGJmZGZlYTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE6GL/qH/fDZy0OHiO9fEzfigVz0uxudIxLACfXfjGt5fThhRzPY mDagbPbNmrzynUjXaBpfXmpjbJrvcWojIOQ27jI1W6KcnG+7913xLRLSRcl6+lJ4 3JXwDdvP/z053ZSzU+ixxus9+Nriey+lsCMmOfLGCcI04fczuHtWfvRoT7dnvlpf 5gVl94jRKA79ciMSUbD+XacnYAXcgYWL70WvGQqB43XfKhF7Jve5ssrkY7f0U5t7 04DbyDOUNIYIiexQsoay6DRaMWnWxw/aPIQ5WYWb23DBloxDDROCqU0Uud7CiG5o nSPuTqhzt/VXnUfJ9ynVZSyMynmu7D58wEg= -----END CERTIFICATE-----Generated at Sun Apr 19 10:17:38 2026 by rpki-client