$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9ecb452-0b6f-3eba-8ae6-1f818fae8c70.roa File: b9ecb452-0b6f-3eba-8ae6-1f818fae8c70.roa (raw, json) Hash identifier: wKn1TcHKZpL7vM7RIsmq6zYl/h5W6qQZaIeQUTvI/WU= Subject key identifier: 8B:C8:69:EC:AA:0F:0B:6E:DF:F0:C1:86:52:F1:FB:4C:73:98:ED:3A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D59EAB23FF6975F2614AA2C00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9ecb452-0b6f-3eba-8ae6-1f818fae8c70.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 36628 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:b2:3f:f6:97:5f:26:14:aa:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=a1f18566-4ab1-4f5c-b8c0-2e0dd52bb137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9d:50:06:6a:4d:67:98:e1:96:d0:e9:02:d6: d0:1f:5e:b9:ba:bd:3d:42:86:4a:62:09:e9:fc:9f: c8:4f:35:5a:a0:7a:48:ee:14:bc:1b:9d:0e:bf:bc: 8b:4d:09:16:9b:17:6d:95:25:a2:f5:d5:5b:74:20: b3:0e:7c:c9:4d:85:15:59:82:70:b0:7a:d4:91:be: a1:86:f5:08:c7:e1:e5:da:2a:9f:46:a3:bc:72:d1: e1:00:18:34:eb:42:7b:2d:40:e1:77:a5:e3:e6:7a: 6a:76:55:c6:b8:5a:a7:81:2e:41:e7:ab:8c:b7:c2: ca:af:96:6a:07:7e:89:6a:73:c7:d6:4f:6b:a4:79: 64:ed:8f:dc:41:77:1d:65:42:1a:a9:ba:12:17:59: 9c:1d:1f:07:ae:18:51:71:34:28:22:2f:43:b1:78: fa:03:93:c8:b4:22:a3:c0:8f:b8:c9:8c:ce:2d:f2: 27:b0:62:42:a2:0f:39:6b:3b:13:f1:ff:98:32:13: a6:75:2e:0c:40:e0:e9:94:54:c0:2c:f6:06:55:9c: 82:88:0b:a1:6b:b9:29:a7:e4:b9:c8:68:1f:49:ee: 8f:ff:2f:27:1b:f0:31:06:a7:d1:79:fb:dd:4a:50: 76:22:ff:65:e0:9b:00:0c:99:5c:94:e9:52:67:49: d2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C8:69:EC:AA:0F:0B:6E:DF:F0:C1:86:52:F1:FB:4C:73:98:ED:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9ecb452-0b6f-3eba-8ae6-1f818fae8c70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:c5:81:e5:74:36:09:45:41:69:8f:5e:df:4f:14:f8:31:02: 5a:76:a8:57:59:21:63:93:ba:8a:41:c0:a2:71:d6:00:ac:65: 30:d5:2b:34:02:f5:ca:a2:24:d0:14:a9:dd:e0:e8:6a:bf:a9: 98:f9:70:7a:a9:5a:20:4e:55:13:8f:c3:6b:04:b2:d6:50:f5: 71:6b:fa:a1:64:65:fe:5a:34:ea:e3:b6:b2:48:8b:7f:a1:58: ef:b3:53:f6:65:d7:5e:20:39:45:1a:51:f8:f1:66:a7:23:43: f9:d1:d6:d7:78:bf:95:8a:28:d2:fe:40:e2:27:4b:9b:13:a5: 93:d8:3a:42:ff:c2:f6:2c:77:87:27:a5:b3:dd:ad:d5:17:93: 1e:8e:99:3d:3a:3a:ab:91:87:8c:4a:64:7b:2f:27:0d:e5:2b: 3d:e6:8d:d1:32:d3:2c:e2:4f:84:5f:22:7d:d6:48:3f:68:27: 25:9a:c7:ed:8e:1f:16:f5:73:c5:35:ef:1f:b2:08:e5:19:73: dd:f5:8d:27:b7:d1:9b:b0:f9:5f:15:0b:2e:97:46:49:f2:86: d4:29:83:1d:15:1b:34:90:a0:2a:4f:a6:75:ea:d0:d5:eb:de: 46:d8:b5:29:b0:f7:8f:7c:3e:89:64:54:60:0a:5e:5d:92:35: 54:3d:28:01 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6rI/9pdfJhSqLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk YTFmMTg1NjYtNGFiMS00ZjVjLWI4YzAtMmUwZGQ1MmJiMTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJ1QBmpNZ5jhltDpAtbQH165ur09QoZKYgnp /J/ITzVaoHpI7hS8G50Ov7yLTQkWmxdtlSWi9dVbdCCzDnzJTYUVWYJwsHrUkb6h hvUIx+Hl2iqfRqO8ctHhABg060J7LUDhd6Xj5npqdlXGuFqngS5B56uMt8LKr5Zq B36JanPH1k9rpHlk7Y/cQXcdZUIaqboSF1mcHR8HrhhRcTQoIi9DsXj6A5PItCKj wI+4yYzOLfInsGJCog85azsT8f+YMhOmdS4MQODplFTALPYGVZyCiAuha7kpp+S5 yGgfSe6P/y8nG/AxBqfRefvdSlB2Iv9l4JsADJlclOlSZ0nSFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIvIaeyqDwtu3/DBhlLx+0xzmO06MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjllY2I0NTItMGI2Zi0z ZWJhLThhZTYtMWY4MThmYWU4YzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIPFgeV0NglFQWmPXt9PFPgxAlp2qFdZIWOTuopBwKJx1gCsZTDV KzQC9cqiJNAUqd3g6Gq/qZj5cHqpWiBOVROPw2sEstZQ9XFr+qFkZf5aNOrjtrJI i3+hWO+zU/Zl114gOUUaUfjxZqcjQ/nR1td4v5WKKNL+QOInS5sTpZPYOkL/wvYs d4cnpbPdrdUXkx6OmT06OquRh4xKZHsvJw3lKz3mjdEy0yziT4RfIn3WSD9oJyWa x+2OHxb1c8U17x+yCOUZc931jSe30Zuw+V8VCy6XRknyhtQpgx0VGzSQoCpPpnXq 0NXr3kbYtSmw9498PolkVGAKXl2SNVQ9KAE= -----END CERTIFICATE-----Generated at Fri Apr 17 15:32:27 2026 by rpki-client