$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae878f98-8a0a-3474-bd7b-b74381ba1be6.roa File: ae878f98-8a0a-3474-bd7b-b74381ba1be6.roa (raw, json) Hash identifier: oKziJW+bHUYoZLMsUK48pqT5vuCjAJozO7SnWWWpHe4= Subject key identifier: 6F:BC:14:37:B3:87:B8:4F:E8:DC:E3:00:5B:10:34:CB:69:CA:47:AD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D59EAB30BC7A4B82FA0FAA700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae878f98-8a0a-3474-bd7b-b74381ba1be6.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 396551 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:b3:0b:c7:a4:b8:2f:a0:fa:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=097947e0-364d-4e90-8c86-9872c10293f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:02:62:db:f0:64:9b:1b:bc:09:76:61:cf:a7: c0:d3:20:ad:e5:0e:45:aa:84:30:b2:57:d1:a5:df: bf:15:3d:5e:2c:b7:d4:72:93:cf:d5:a9:f2:1c:c4: eb:c3:a4:32:55:e8:fd:99:41:30:a9:cb:0c:73:45: 68:b7:1b:97:e4:9d:72:e6:f0:ca:ba:75:dd:c1:5c: cb:78:a1:12:fc:67:41:4c:be:06:18:04:fd:36:cf: 62:05:e4:86:f8:d4:01:40:25:b1:1e:fe:82:e6:7f: 46:db:28:d4:90:b5:60:e7:0b:0a:1e:83:f6:ab:e7: 1d:df:52:42:ad:e7:ff:2f:e3:4d:ca:78:60:73:9c: 43:f5:50:18:39:e3:4c:74:ba:94:0d:85:d2:42:54: 36:32:e5:56:95:8d:5c:16:38:e3:33:41:f8:63:81: 6a:ef:96:de:ad:93:ad:e1:32:33:47:1f:27:0f:39: d2:c9:36:de:db:a1:fc:da:84:ec:73:66:54:b8:f7: 98:69:90:9c:d5:e9:6a:84:10:5e:66:c4:1a:f3:c2: de:0d:42:6d:1a:f9:23:9d:59:76:c4:92:64:79:38: ef:f0:3a:14:22:c6:62:82:cf:ee:40:9f:a3:71:8c: f5:fa:58:88:13:a3:c1:b7:44:8a:9d:e2:d2:8a:31: c7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:BC:14:37:B3:87:B8:4F:E8:DC:E3:00:5B:10:34:CB:69:CA:47:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae878f98-8a0a-3474-bd7b-b74381ba1be6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:79:25:88:b5:c5:f7:74:1b:d3:4c:6a:b1:a1:66:97:26:ec: 6d:78:d5:f8:54:ec:06:9e:d6:2a:5a:26:65:22:d3:a4:6f:75: 62:90:cb:69:c6:e9:c5:0e:3f:54:ef:98:b6:12:94:c4:27:2b: 47:e0:2e:b8:77:fe:86:7e:ca:d5:a2:59:a2:b8:03:d2:55:5a: 52:6a:5c:2e:2d:e1:bd:36:c4:eb:4e:8b:1d:45:9a:28:56:38: e4:ba:97:1f:90:0b:f0:d2:17:ad:e8:de:40:2e:ef:36:68:77: 04:4a:cf:90:92:20:2b:2b:28:26:dc:c1:e5:b0:5c:18:79:87: 89:ef:6a:d3:f6:07:6a:b6:14:55:76:2c:aa:b2:05:de:fd:8c: 95:15:75:22:a6:da:39:7c:6f:3d:ce:68:7f:c1:c3:36:e3:0a: 4e:fe:f5:1d:81:b1:2b:9a:33:e8:74:9d:83:87:f0:be:44:69: d9:4d:5c:03:17:7d:e2:40:4e:14:79:f2:73:bd:9e:2b:50:c5: 24:29:9f:0e:17:6c:10:6e:24:6f:8a:3d:da:99:2e:f0:2b:3d: d6:3e:f5:3b:87:7e:ee:03:46:ce:22:18:a4:9d:e1:c9:a4:45: 58:f6:e9:6c:d7:21:83:5e:78:f3:da:2e:4b:58:1d:99:1c:71: b2:5a:20:80 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6rMLx6S4L6D6pwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk MDk3OTQ3ZTAtMzY0ZC00ZTkwLThjODYtOTg3MmMxMDI5M2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AJi2/Bkmxu8CXZhz6fA0yCt5Q5FqoQwslfR pd+/FT1eLLfUcpPP1anyHMTrw6QyVej9mUEwqcsMc0VotxuX5J1y5vDKunXdwVzL eKES/GdBTL4GGAT9Ns9iBeSG+NQBQCWxHv6C5n9G2yjUkLVg5wsKHoP2q+cd31JC ref/L+NNynhgc5xD9VAYOeNMdLqUDYXSQlQ2MuVWlY1cFjjjM0H4Y4Fq75berZOt 4TIzRx8nDznSyTbe26H82oTsc2ZUuPeYaZCc1elqhBBeZsQa88LeDUJtGvkjnVl2 xJJkeTjv8DoUIsZigs/uQJ+jcYz1+liIE6PBt0SKneLSijHHlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG+8FDezh7hP6NzjAFsQNMtpyketMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWU4NzhmOTgtOGEwYS0z NDc0LWJkN2ItYjc0MzgxYmExYmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG15JYi1xfd0G9NMarGhZpcm7G141fhU7Aae1ipaJmUi06RvdWKQ y2nG6cUOP1TvmLYSlMQnK0fgLrh3/oZ+ytWiWaK4A9JVWlJqXC4t4b02xOtOix1F mihWOOS6lx+QC/DSF63o3kAu7zZodwRKz5CSICsrKCbcweWwXBh5h4nvatP2B2q2 FFV2LKqyBd79jJUVdSKm2jl8bz3OaH/BwzbjCk7+9R2BsSuaM+h0nYOH8L5EadlN XAMXfeJAThR58nO9nitQxSQpnw4XbBBuJG+KPdqZLvArPdY+9TuHfu4DRs4iGKSd 4cmkRVj26WzXIYNeePPaLktYHZkccbJaIIA= -----END CERTIFICATE-----Generated at Fri Apr 17 12:21:51 2026 by rpki-client