$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a3a1c969-eb31-3042-91ce-5dfec5f9968a.roa File: a3a1c969-eb31-3042-91ce-5dfec5f9968a.roa (raw, json) Hash identifier: c5jVih9kLWqXKKkBg/FPoiK6So3p354f4sTq65p9kI8= Subject key identifier: 90:F2:58:08:EB:A0:63:50:28:FE:E7:1E:50:FC:3F:70:85:AD:AD:58 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D732BD4345A3C2327E5077800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a3a1c969-eb31-3042-91ce-5dfec5f9968a.roa Signing time: Thu 09 Apr 2026 14:07:51 +0000 ROA not before: Thu 09 Apr 2026 14:07:51 +0000 ROA not after: Wed 08 Jul 2026 14:07:51 +0000 asID: 20362 IP address blocks: 2001:500:133::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:73:2b:d4:34:5a:3c:23:27:e5:07:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 9 14:07:51 2026 GMT Not After : Jul 8 14:07:51 2026 GMT Subject: CN=25165fcb-1cb7-4435-878f-68a958531ebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c1:d2:82:3b:c5:d1:26:c3:05:35:b7:20:a8: 5e:a1:a3:47:92:5e:34:11:67:d5:a4:37:75:d3:e4: 53:b1:3d:11:8c:1d:37:dd:eb:f5:98:9d:60:0c:88: 86:49:42:c1:75:e5:b2:9a:37:f0:ed:d4:4a:a5:0b: 15:62:ae:07:4a:50:f3:0e:2a:86:34:1d:53:12:ea: 80:ea:c1:f0:8c:54:77:9e:e2:5f:94:ce:27:9d:73: 11:63:34:fb:bf:de:15:ce:62:f2:1d:7c:ab:dd:df: 8e:af:32:11:c8:85:d8:3e:95:e1:c1:90:6c:96:34: a8:32:5f:17:28:88:2d:ea:07:ee:22:e3:4d:50:2e: b9:10:3a:f2:52:7c:32:ef:57:cf:b6:20:49:3b:d2: 04:fd:0a:f3:c6:5c:7a:70:1e:e8:04:3f:71:30:5c: 9a:d5:12:c1:d1:6b:e6:6f:8b:d7:b3:dc:2b:6c:8f: 7f:9d:4e:d6:e1:e7:12:8b:90:57:58:34:b2:22:5d: ce:9b:9f:7f:2c:c0:59:f0:d8:25:e9:cb:d9:7b:7e: cc:09:09:0f:1f:ee:44:57:97:dc:75:74:48:30:bb: 9e:8f:56:54:84:fe:78:ba:af:e9:00:55:bf:02:ee: 73:57:9c:2d:21:3a:72:3e:d7:23:79:36:77:b2:c1: 47:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F2:58:08:EB:A0:63:50:28:FE:E7:1E:50:FC:3F:70:85:AD:AD:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a3a1c969-eb31-3042-91ce-5dfec5f9968a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:67:4b:9c:8e:d3:f2:45:76:43:cc:15:b0:f8:5a:93:ff:2a: 22:74:ab:5a:0e:40:7c:ca:c0:62:44:b9:e4:f0:5b:a7:3d:81: 35:ac:c1:d8:eb:4a:24:b5:35:8d:d7:d8:e6:c0:a4:5c:db:fb: 45:95:33:ef:6e:bd:f7:74:29:29:1c:40:f1:38:9b:f9:cf:d9: 2b:66:7f:e0:60:64:cf:4c:9f:5c:17:ed:c6:73:67:96:b0:e2: 73:86:87:0e:3c:65:ab:78:f8:95:5a:a7:fa:13:cf:c6:65:b7: 8f:2d:82:dd:5d:33:3c:61:2b:76:a6:fa:e6:24:18:8f:3b:7d: b7:e8:76:0b:ab:b5:6b:73:5c:15:cd:04:ea:01:c5:b3:ac:21: d7:0e:f8:dc:f6:ef:d8:99:12:0f:09:89:c4:c7:43:69:d1:79: 21:db:69:d9:a2:ba:01:02:6c:bf:ef:1e:a5:17:68:c7:8a:db: d1:33:cd:9b:14:26:35:ea:0e:66:4a:b9:98:ca:04:86:0d:d2: d6:90:4d:93:9f:3c:cf:dc:b3:d9:ed:f4:82:49:09:51:40:fe: 9b:6f:5e:30:89:e4:1a:9a:bb:a3:8b:56:2c:43:ce:6e:b1:44: 92:84:08:c1:22:6c:56:87:da:44:d8:88:93:67:21:03:bb:37: b7:01:78:df -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1zK9Q0WjwjJ+UHeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwOTE0MDc1MVoXDTI2MDcwODE0MDc1MVowLzEtMCsGA1UEAxMk MjUxNjVmY2ItMWNiNy00NDM1LTg3OGYtNjhhOTU4NTMxZWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsHSgjvF0SbDBTW3IKheoaNHkl40EWfVpDd1 0+RTsT0RjB033ev1mJ1gDIiGSULBdeWymjfw7dRKpQsVYq4HSlDzDiqGNB1TEuqA 6sHwjFR3nuJflM4nnXMRYzT7v94VzmLyHXyr3d+OrzIRyIXYPpXhwZBsljSoMl8X KIgt6gfuIuNNUC65EDryUnwy71fPtiBJO9IE/Qrzxlx6cB7oBD9xMFya1RLB0Wvm b4vXs9wrbI9/nU7W4ecSi5BXWDSyIl3Om59/LMBZ8Ngl6cvZe37MCQkPH+5EV5fc dXRIMLuej1ZUhP54uq/pAFW/Au5zV5wtITpyPtcjeTZ3ssFHOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJDyWAjroGNQKP7nHlD8P3CFra1YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTNhMWM5NjktZWIzMS0z MDQyLTkxY2UtNWRmZWM1Zjk5NjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEtnS5yO0/JFdkPMFbD4WpP/KiJ0q1oOQHzKwGJEueTwW6c9gTWs wdjrSiS1NY3X2ObApFzb+0WVM+9uvfd0KSkcQPE4m/nP2Stmf+BgZM9Mn1wX7cZz Z5aw4nOGhw48Zat4+JVap/oTz8Zlt48tgt1dMzxhK3am+uYkGI87fbfodgurtWtz XBXNBOoBxbOsIdcO+Nz279iZEg8JicTHQ2nReSHbadmiugECbL/vHqUXaMeK29Ez zZsUJjXqDmZKuZjKBIYN0taQTZOfPM/cs9nt9IJJCVFA/ptvXjCJ5Bqau6OLVixD zm6xRJKECMEibFaH2kTYiJNnIQO7N7cBeN8= -----END CERTIFICATE-----Generated at Fri Apr 17 13:31:03 2026 by rpki-client