$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a3c89ee5-0196-313a-baaf-bf45f649b9e3.roa File: a3c89ee5-0196-313a-baaf-bf45f649b9e3.roa (raw, json) Hash identifier: nRg3CikYtAWosB+loD5gXO4OdIY9zANxxN2dy70jZRQ= Subject key identifier: 32:75:B5:6A:52:E7:CF:A0:3F:AC:1B:FD:F7:F1:B4:4C:03:77:7F:DA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D81285CB5079CA32DCBCDB100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a3c89ee5-0196-313a-baaf-bf45f649b9e3.roa Signing time: Tue 14 Apr 2026 14:22:11 +0000 ROA not before: Tue 14 Apr 2026 14:22:11 +0000 ROA not after: Mon 13 Jul 2026 14:22:11 +0000 asID: 396563 IP address blocks: 2001:500:124::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:81:28:5c:b5:07:9c:a3:2d:cb:cd:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 14 14:22:11 2026 GMT Not After : Jul 13 14:22:11 2026 GMT Subject: CN=b3720d58-001e-433c-880e-00f26a776eb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c2:8e:6e:15:19:7e:bc:27:d7:d5:3e:9f:b1: ec:b8:a5:da:24:b5:21:64:df:40:e5:63:50:93:02: 4c:65:65:3e:9e:d0:a8:01:a7:7a:cd:87:36:58:6a: 83:64:91:4d:1a:d4:65:12:87:67:7a:98:2e:55:59: 27:0c:ed:e1:eb:4c:c8:24:af:31:74:84:db:3e:7c: 1c:8b:f8:b2:6e:59:4e:c5:eb:55:b0:50:b7:ce:45: 8e:14:30:0b:7d:f2:a9:aa:1f:a6:9a:53:74:23:b7: 56:03:64:6e:6a:0a:8c:fb:5e:21:d2:66:fb:55:86: c3:2a:ce:84:39:d6:f9:ee:08:be:cf:38:b0:90:b1: 61:a3:4d:4e:89:9e:0d:85:89:f8:db:54:36:9c:6a: 4a:ba:5b:1e:30:29:72:29:58:d0:d5:42:ae:54:4d: 40:71:b1:86:27:56:78:9a:db:b7:b5:c7:61:c9:76: 93:d7:57:26:9f:11:0b:9e:67:0a:e0:3b:46:f2:09: 7f:c9:61:c5:04:4c:6d:9e:30:8e:58:df:d2:c0:7c: 40:28:45:c6:7a:3b:c6:d0:a8:ed:9f:76:76:f0:23: 99:d5:80:3b:ed:d1:30:ef:c7:2f:14:9d:04:3d:6b: d3:a3:bf:54:0f:30:ad:4e:f5:8c:ae:56:8a:22:9f: fa:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:75:B5:6A:52:E7:CF:A0:3F:AC:1B:FD:F7:F1:B4:4C:03:77:7F:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a3c89ee5-0196-313a-baaf-bf45f649b9e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:124::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:c8:dc:cc:0e:1d:09:fb:01:d9:e1:18:16:8d:36:36:3b:8e: ea:53:4c:66:8d:05:d8:1c:ca:69:1d:f1:48:15:20:63:21:0f: ce:d9:0a:e3:fb:34:f5:d3:5d:1a:87:12:35:3c:fd:81:37:e3: a5:38:fa:a1:10:0c:82:d2:da:79:f2:96:db:85:56:80:b2:19: 92:3c:86:48:2f:d5:e5:3c:12:5b:d8:73:7c:d1:e1:f1:e3:98: cb:80:8e:62:ca:5a:72:4f:91:f9:64:c5:bc:7a:72:eb:f4:07: d7:b8:18:b1:7e:f0:81:00:52:9d:86:bc:b3:c1:27:90:48:c9: df:78:95:55:ab:6e:07:31:6a:cc:f9:9b:c9:05:d2:5a:5e:03: ee:28:a9:25:88:bd:d4:ed:10:21:e3:d2:b0:63:89:5b:da:cc: 72:d2:5e:6b:08:fd:df:b9:35:86:3e:a3:08:1f:36:b1:50:cf: 89:37:f1:e0:71:02:d8:7f:9b:84:d9:f3:af:4d:29:ad:9a:a8: 3b:07:84:92:a3:d4:6b:b8:7e:fe:90:50:77:0d:a4:6f:d7:4f: 16:d2:9c:a3:1a:92:c9:f9:53:ce:55:99:c2:c6:48:b6:81:4b: a6:4b:c4:85:91:8a:a7:72:f6:f9:24:10:59:ef:65:17:b7:3a: df:4b:f1:91 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2BKFy1B5yjLcvNsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxNDE0MjIxMVoXDTI2MDcxMzE0MjIxMVowLzEtMCsGA1UEAxMk YjM3MjBkNTgtMDAxZS00MzNjLTg4MGUtMDBmMjZhNzc2ZWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusKObhUZfrwn19U+n7HsuKXaJLUhZN9A5WNQ kwJMZWU+ntCoAad6zYc2WGqDZJFNGtRlEodnepguVVknDO3h60zIJK8xdITbPnwc i/iybllOxetVsFC3zkWOFDALffKpqh+mmlN0I7dWA2RuagqM+14h0mb7VYbDKs6E Odb57gi+zziwkLFho01OiZ4NhYn421Q2nGpKulseMClyKVjQ1UKuVE1AcbGGJ1Z4 mtu3tcdhyXaT11cmnxELnmcK4DtG8gl/yWHFBExtnjCOWN/SwHxAKEXGejvG0Kjt n3Z28COZ1YA77dEw78cvFJ0EPWvTo79UDzCtTvWMrlaKIp/6ZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDJ1tWpS58+gP6wb/ffxtEwDd3/aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTNjODllZTUtMDE5Ni0z MTNhLWJhYWYtYmY0NWY2NDliOWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADPI3MwOHQn7AdnhGBaNNjY7jupTTGaNBdgcymkd8UgVIGMhD87Z CuP7NPXTXRqHEjU8/YE346U4+qEQDILS2nnyltuFVoCyGZI8hkgv1eU8ElvYc3zR 4fHjmMuAjmLKWnJPkflkxbx6cuv0B9e4GLF+8IEAUp2GvLPBJ5BIyd94lVWrbgcx asz5m8kF0lpeA+4oqSWIvdTtECHj0rBjiVvazHLSXmsI/d+5NYY+owgfNrFQz4k3 8eBxAth/m4TZ869NKa2aqDsHhJKj1Gu4fv6QUHcNpG/XTxbSnKMaksn5U85VmcLG SLaBS6ZLxIWRiqdy9vkkEFnvZRe3Ot9L8ZE= -----END CERTIFICATE-----Generated at Fri Apr 17 22:57:12 2026 by rpki-client