$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a95a8484-7831-3703-bcc5-5e849fac2226.roa File: a95a8484-7831-3703-bcc5-5e849fac2226.roa (raw, json) Hash identifier: Y4pMkVwJoiCVxoRtBpjKB7eFjM7jJu92kyfXWU7DmsE= Subject key identifier: E4:24:06:0A:FC:E2:94:D8:AA:EC:6C:D8:41:43:58:C1:10:88:52:2F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D6DA185D31D82725B4EE87800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a95a8484-7831-3703-bcc5-5e849fac2226.roa Signing time: Tue 07 Apr 2026 14:30:08 +0000 ROA not before: Tue 07 Apr 2026 14:30:08 +0000 ROA not after: Mon 06 Jul 2026 14:30:08 +0000 asID: 397205 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:a1:85:d3:1d:82:72:5b:4e:e8:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 7 14:30:08 2026 GMT Not After : Jul 6 14:30:08 2026 GMT Subject: CN=363d4dc3-8849-4bf5-81b0-416a44367259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:57:39:c6:95:7c:6c:8f:e9:65:7e:a4:ac:42: 1b:02:98:a2:4e:12:b0:69:f3:77:6a:7e:d5:0e:2c: 93:73:9b:c3:2a:99:d5:25:0a:2c:ec:d2:62:81:d5: ec:8a:48:72:02:03:0d:1a:5c:81:43:4e:2e:b4:d2: ad:8f:f8:c9:f1:93:82:77:a5:44:f4:3a:2d:6c:4a: a2:18:f5:d2:b3:2b:41:4a:18:8b:cb:02:cc:27:78: 32:e4:f4:8c:1c:42:0d:1e:0c:05:cf:83:e7:4a:35: 51:7d:e8:f8:e5:f5:12:ce:a5:e5:56:7e:2c:f4:25: 81:19:ea:fa:3e:66:7c:bd:e1:61:8b:80:bb:a8:6a: 5e:05:d6:b3:14:89:3c:51:e6:69:5b:1c:95:33:7d: 72:11:8b:0a:ea:44:7b:29:e5:c0:f1:4a:b2:97:92: 10:41:70:14:66:ab:0f:b4:69:b5:2f:83:21:d7:ac: 7b:7e:36:bb:cd:e5:5c:91:40:ca:43:0c:3a:02:0d: ef:74:bd:d5:54:4e:f4:40:75:26:ca:77:cb:d5:21: ba:4a:38:33:e3:b3:f7:17:26:de:1b:67:27:88:98: 30:1c:ab:0d:35:b6:0f:a1:4c:0a:4f:3a:93:22:59: 08:64:0b:4c:18:2a:ac:4a:cf:89:45:93:4d:71:b2: c3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:24:06:0A:FC:E2:94:D8:AA:EC:6C:D8:41:43:58:C1:10:88:52:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a95a8484-7831-3703-bcc5-5e849fac2226.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:50:c8:29:03:f3:03:ae:0c:0c:71:4c:0c:e0:84:07:06:6b: 02:7d:1c:3b:49:2f:18:59:3e:5d:ae:dd:15:28:d2:5c:fd:84: 39:9c:a9:ba:2c:52:4e:46:ff:c8:af:92:94:0d:8c:56:c6:8e: e3:e8:e1:a4:08:39:e8:c0:25:6a:a4:5a:f4:f6:ed:4c:a3:f7: f2:0e:49:53:1d:12:ed:27:90:5a:53:c9:e3:92:98:eb:7f:ca: 70:3c:67:89:d7:4a:85:d6:30:0e:15:cd:94:ad:1f:de:0e:41: 65:21:20:3c:43:bf:75:09:2e:ff:3e:7e:2d:2e:63:d0:7e:08: c5:62:6e:82:9a:b9:20:60:3b:1c:77:a1:a4:98:52:31:ef:5e: be:b0:50:ac:5a:aa:8c:9d:ce:55:eb:65:bb:42:61:3c:80:21: ef:b5:7a:62:fc:c5:30:dc:75:a9:aa:cd:d8:e6:33:0a:cd:c8: 77:8e:19:81:72:36:9a:12:14:9f:eb:80:da:8b:82:f8:fe:5f: cb:fb:5d:2d:46:e7:e5:93:0d:0b:96:18:dc:18:aa:a9:23:64: 7c:90:16:26:99:eb:b1:11:1c:6c:65:5b:d0:32:5a:f7:53:ba: 06:65:86:ce:d8:04:6b:09:ac:60:05:9b:e8:e2:4a:3e:7e:4f: 94:a5:9b:6a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1toYXTHYJyW07oeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwNzE0MzAwOFoXDTI2MDcwNjE0MzAwOFowLzEtMCsGA1UEAxMk MzYzZDRkYzMtODg0OS00YmY1LTgxYjAtNDE2YTQ0MzY3MjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1c5xpV8bI/pZX6krEIbApiiThKwafN3an7V DiyTc5vDKpnVJQos7NJigdXsikhyAgMNGlyBQ04utNKtj/jJ8ZOCd6VE9DotbEqi GPXSsytBShiLywLMJ3gy5PSMHEINHgwFz4PnSjVRfej45fUSzqXlVn4s9CWBGer6 PmZ8veFhi4C7qGpeBdazFIk8UeZpWxyVM31yEYsK6kR7KeXA8Uqyl5IQQXAUZqsP tGm1L4Mh16x7fja7zeVckUDKQww6Ag3vdL3VVE70QHUmynfL1SG6Sjgz47P3Fybe G2cniJgwHKsNNbYPoUwKTzqTIlkIZAtMGCqsSs+JRZNNcbLDKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOQkBgr84pTYquxs2EFDWMEQiFIvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTk1YTg0ODQtNzgzMS0z NzAzLWJjYzUtNWU4NDlmYWMyMjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD9QyCkD8wOuDAxxTAzghAcGawJ9HDtJLxhZPl2u3RUo0lz9hDmc qbosUk5G/8ivkpQNjFbGjuPo4aQIOejAJWqkWvT27Uyj9/IOSVMdEu0nkFpTyeOS mOt/ynA8Z4nXSoXWMA4VzZStH94OQWUhIDxDv3UJLv8+fi0uY9B+CMViboKauSBg Oxx3oaSYUjHvXr6wUKxaqoydzlXrZbtCYTyAIe+1emL8xTDcdamqzdjmMwrNyHeO GYFyNpoSFJ/rgNqLgvj+X8v7XS1G5+WTDQuWGNwYqqkjZHyQFiaZ67ERHGxlW9Ay WvdTugZlhs7YBGsJrGAFm+jiSj5+T5Slm2o= -----END CERTIFICATE-----Generated at Fri Apr 17 01:48:36 2026 by rpki-client