$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af382251-c142-3904-865a-a47105b1531a.roa File: af382251-c142-3904-865a-a47105b1531a.roa (raw, json) Hash identifier: 3lCXvW4QE+pk0xnGtOXgacvKjHitcN8QfcNzrp/8Iw4= Subject key identifier: E1:AB:9E:A1:1E:93:D9:89:88:61:61:D8:56:38:20:90:32:3E:5B:9C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D59EAAEE90D6D6DA5CF50C580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af382251-c142-3904-865a-a47105b1531a.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 20431 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:ae:e9:0d:6d:6d:a5:cf:50:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=c12e896f-19f4-41da-9995-006428ad28c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:28:14:53:27:31:b7:b9:b3:33:96:a5:12:7b: 38:91:6c:10:d9:7a:12:93:d2:ef:e5:f4:c7:9b:e2: 8b:f0:35:b7:20:13:b0:45:9d:e2:91:fa:ea:47:92: c2:c1:8c:1b:6a:92:1c:87:41:2a:a2:f1:7f:99:69: 24:42:8e:45:17:da:91:c3:c2:7c:66:4e:3c:e9:94: 10:45:33:ef:35:da:76:aa:ac:c4:e8:8e:1d:d9:f0: a7:d6:87:73:9c:75:8a:98:6f:24:53:1a:cd:89:3f: 8b:fc:9b:a0:c2:fe:10:f8:fa:d2:6d:90:45:d4:c1: fe:00:8a:92:48:80:81:be:08:3d:16:fd:3b:b2:42: 65:f7:8d:45:55:67:e0:e4:a2:54:59:25:98:c0:72: 5c:97:9d:67:b6:5a:ec:17:60:84:f4:e8:d6:90:87: 92:7e:38:f7:89:ca:1a:38:60:ce:33:fe:02:ef:08: 7d:89:58:d9:44:e6:4a:ec:64:9b:10:ca:c5:79:31: 3b:be:25:04:d1:58:0d:6f:ff:90:67:78:9b:32:b4: 99:37:53:78:4b:73:07:86:7e:16:e4:af:38:ba:6d: f5:bb:c8:17:c0:20:52:8c:d0:43:71:5d:e7:a1:12: 4c:0d:65:a4:ae:36:75:a2:28:29:0b:6c:15:9c:ed: a7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:AB:9E:A1:1E:93:D9:89:88:61:61:D8:56:38:20:90:32:3E:5B:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af382251-c142-3904-865a-a47105b1531a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:8c:db:85:6e:d7:b0:bf:db:d0:62:fe:4a:a3:b6:c1:94:05: 9e:33:ea:22:84:3f:ac:8a:11:00:9b:30:ef:5c:ec:b3:bd:58: 59:46:a4:7f:23:ac:e6:bf:e7:cb:ee:ae:bf:c0:c5:05:52:75: a5:22:9a:f0:3b:10:3d:1c:57:83:d4:73:b9:4d:e8:75:e4:5b: 61:01:10:56:91:16:4a:92:45:d6:65:35:e8:82:e9:7b:06:1d: 10:d3:ee:80:fa:fe:1a:1b:99:dd:39:37:9b:a7:54:78:41:63: 33:cc:70:8c:89:a4:1e:af:23:62:ec:e7:c2:e7:bd:43:15:82: 43:1d:7d:54:ef:cb:54:b5:50:31:45:36:9d:10:f5:f0:d0:31: 07:05:db:98:70:ea:03:00:7d:ec:77:a7:60:b6:e7:bc:49:26: cc:ff:13:98:9b:06:01:f5:d4:57:0a:db:12:0e:14:6a:b8:af: 35:de:a0:64:01:ce:f8:20:72:4b:81:7e:54:6f:84:55:f0:98: c9:1e:24:d0:b9:22:c3:ad:8e:8b:9f:36:8c:c6:2a:10:91:38: ee:84:5a:fa:ea:61:df:d5:93:f4:19:31:49:bc:d7:63:ed:ce: 97:e9:cb:55:47:2d:9d:bc:dd:01:d8:85:b2:32:bb:8d:2e:52: e5:80:69:23 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6q7pDW1tpc9QxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk YzEyZTg5NmYtMTlmNC00MWRhLTk5OTUtMDA2NDI4YWQyOGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CgUUycxt7mzM5alEns4kWwQ2XoSk9Lv5fTH m+KL8DW3IBOwRZ3ikfrqR5LCwYwbapIch0EqovF/mWkkQo5FF9qRw8J8Zk486ZQQ RTPvNdp2qqzE6I4d2fCn1odznHWKmG8kUxrNiT+L/Jugwv4Q+PrSbZBF1MH+AIqS SICBvgg9Fv07skJl941FVWfg5KJUWSWYwHJcl51ntlrsF2CE9OjWkIeSfjj3icoa OGDOM/4C7wh9iVjZROZK7GSbEMrFeTE7viUE0VgNb/+QZ3ibMrSZN1N4S3MHhn4W 5K84um31u8gXwCBSjNBDcV3noRJMDWWkrjZ1oigpC2wVnO2nGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOGrnqEek9mJiGFh2FY4IJAyPlucMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWYzODIyNTEtYzE0Mi0z OTA0LTg2NWEtYTQ3MTA1YjE1MzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKWM24Vu17C/29Bi/kqjtsGUBZ4z6iKEP6yKEQCbMO9c7LO9WFlG pH8jrOa/58vurr/AxQVSdaUimvA7ED0cV4PUc7lN6HXkW2EBEFaRFkqSRdZlNeiC 6XsGHRDT7oD6/hobmd05N5unVHhBYzPMcIyJpB6vI2Ls58LnvUMVgkMdfVTvy1S1 UDFFNp0Q9fDQMQcF25hw6gMAfex3p2C257xJJsz/E5ibBgH11FcK2xIOFGq4rzXe oGQBzvggckuBflRvhFXwmMkeJNC5IsOtjoufNozGKhCROO6EWvrqYd/Vk/QZMUm8 12Ptzpfpy1VHLZ283QHYhbIyu40uUuWAaSM= -----END CERTIFICATE-----Generated at Fri Apr 17 23:43:12 2026 by rpki-client