$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8233b40-0e85-3f77-b93f-d52f6919f2f3.roa File: b8233b40-0e85-3f77-b93f-d52f6919f2f3.roa (raw, json) Hash identifier: gY66qTqoNL6kT2RRswEmd4v7hg9tnZcJjpyX3rCwzO8= Subject key identifier: C3:90:62:55:8F:2B:9A:14:60:8E:04:20:BB:43:C4:A3:B2:3B:95:B2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D59EAB207986AF00BBF8A1300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8233b40-0e85-3f77-b93f-d52f6919f2f3.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 396614 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:b2:07:98:6a:f0:0b:bf:8a:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=f62177a3-9989-4e0d-ba95-7af3ee51ae28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:44:c3:61:b4:75:26:c8:13:78:dc:0e:1a:40: d6:36:fb:24:78:f0:cd:58:de:e5:a6:ec:63:40:8f: c2:e1:00:5d:f9:54:f7:9e:d6:a7:9a:cc:e4:34:50: ed:c4:6a:b9:13:ce:c7:02:f0:5a:9f:bc:0d:66:10: 27:c3:4b:45:c0:de:a5:f0:bb:75:f9:18:c2:93:71: 22:10:0a:4a:35:55:88:d1:b2:17:8e:aa:a8:42:0b: 59:d7:2d:37:3e:15:1a:22:c8:6c:22:6d:6d:bf:28: 22:07:f0:88:83:b0:71:8e:92:8d:af:9b:08:39:a9: c2:84:d6:b1:29:4a:1d:66:e3:4b:29:4e:be:3e:99: 24:30:de:21:53:60:ff:6b:02:0e:fa:53:57:8f:32: 11:ea:d5:1a:48:bc:98:7d:12:cc:ec:ad:6f:2e:1d: a7:4b:a8:18:72:35:93:ce:bc:ac:0e:00:35:ce:71: 88:a6:58:c3:15:c9:74:3d:5a:8a:d5:e5:86:f1:c3: 38:df:53:fa:1a:f5:ae:b1:0d:41:da:04:3f:b0:ff: 3c:24:ec:f6:4b:06:16:23:3e:fe:4b:d5:1f:4d:be: 89:8b:ff:f6:c0:b4:2d:23:e9:7c:cc:46:9f:9f:45: bb:ac:4b:e7:8c:4f:71:13:ef:fe:dd:e6:00:98:6f: 20:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:90:62:55:8F:2B:9A:14:60:8E:04:20:BB:43:C4:A3:B2:3B:95:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8233b40-0e85-3f77-b93f-d52f6919f2f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:75:b4:be:24:1c:b5:9b:59:49:e5:46:95:c2:43:16:37:30: 03:2b:cf:4d:a9:1f:0f:85:28:8a:e5:a1:b0:36:ed:29:de:a3: b9:ec:a5:4e:b3:71:3e:55:13:49:50:73:fb:0e:7c:cc:f4:65: f1:d3:8e:7c:f8:61:f9:a7:12:de:9b:32:b5:7d:67:b5:58:b4: 67:ac:db:6f:fb:17:1c:a5:22:bf:43:be:1d:28:dc:69:ce:7b: 2d:90:3b:73:e6:83:94:41:6e:a2:c0:24:b4:00:00:84:28:a2: d5:c9:d0:d6:90:b9:09:6b:8f:09:bc:df:58:d7:5c:52:98:99: 46:95:96:c9:e8:bf:e4:06:47:47:62:bb:1a:c7:f6:6b:03:b2: 3b:a2:1d:1c:10:11:b2:bb:23:e1:e4:6f:b8:29:a7:b3:58:d6: 7c:65:8c:06:d0:e5:2e:a4:2b:71:9d:b4:73:1b:21:e2:00:e8: ac:30:29:67:5f:c5:c7:0a:f9:45:f4:b6:fb:15:53:98:cb:58: 7e:34:04:da:d5:9b:88:03:6e:5a:47:1a:c4:ff:0d:fe:c0:31: 91:ac:15:ef:3d:05:73:fb:75:24:cb:d0:88:9b:75:f5:1b:79: c6:a0:95:e0:a2:71:19:08:f2:4e:04:09:ad:c3:77:5f:26:50: 82:06:1b:a4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6rIHmGrwC7+KEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk ZjYyMTc3YTMtOTk4OS00ZTBkLWJhOTUtN2FmM2VlNTFhZTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0TDYbR1JsgTeNwOGkDWNvskePDNWN7lpuxj QI/C4QBd+VT3ntanmszkNFDtxGq5E87HAvBan7wNZhAnw0tFwN6l8Lt1+RjCk3Ei EApKNVWI0bIXjqqoQgtZ1y03PhUaIshsIm1tvygiB/CIg7BxjpKNr5sIOanChNax KUodZuNLKU6+PpkkMN4hU2D/awIO+lNXjzIR6tUaSLyYfRLM7K1vLh2nS6gYcjWT zrysDgA1znGIpljDFcl0PVqK1eWG8cM431P6GvWusQ1B2gQ/sP88JOz2SwYWIz7+ S9UfTb6Ji//2wLQtI+l8zEafn0W7rEvnjE9xE+/+3eYAmG8gUQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMOQYlWPK5oUYI4EILtDxKOyO5WyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjgyMzNiNDAtMGU4NS0z Zjc3LWI5M2YtZDUyZjY5MTlmMmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADh1tL4kHLWbWUnlRpXCQxY3MAMrz02pHw+FKIrlobA27Sneo7ns pU6zcT5VE0lQc/sOfMz0ZfHTjnz4YfmnEt6bMrV9Z7VYtGes22/7FxylIr9Dvh0o 3GnOey2QO3Pmg5RBbqLAJLQAAIQootXJ0NaQuQlrjwm831jXXFKYmUaVlsnov+QG R0diuxrH9msDsjuiHRwQEbK7I+Hkb7gpp7NY1nxljAbQ5S6kK3GdtHMbIeIA6Kww KWdfxccK+UX0tvsVU5jLWH40BNrVm4gDblpHGsT/Df7AMZGsFe89BXP7dSTL0Iib dfUbecagleCicRkI8k4ECa3Dd18mUIIGG6Q= -----END CERTIFICATE-----Generated at Fri Apr 17 10:41:23 2026 by rpki-client