$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb07b0fe-91ed-3b72-a548-f1adf9ab8d28.roa File: bb07b0fe-91ed-3b72-a548-f1adf9ab8d28.roa (raw, json) Hash identifier: WCXQzfHMLnuIi45EGyGwaWDulz051X+XJo09zxZlZkM= Subject key identifier: 9A:2D:C7:91:2E:31:19:52:DD:EC:6F:BB:81:5B:7F:E5:F7:6D:CF:84 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D732BD65045584BAA63347A00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb07b0fe-91ed-3b72-a548-f1adf9ab8d28.roa Signing time: Thu 09 Apr 2026 14:07:52 +0000 ROA not before: Thu 09 Apr 2026 14:07:52 +0000 ROA not after: Wed 08 Jul 2026 14:07:52 +0000 asID: 396564 IP address blocks: 2001:500:133::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:73:2b:d6:50:45:58:4b:aa:63:34:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 9 14:07:52 2026 GMT Not After : Jul 8 14:07:52 2026 GMT Subject: CN=02ce34c8-4e5c-43bd-ad84-01eb08513e2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b5:ad:fb:6c:89:ef:7a:27:63:d1:99:3e:88: 40:a1:91:3e:4d:c3:07:c4:c0:65:f1:2c:81:7d:0d: bf:ba:61:94:d3:33:8e:84:e8:bb:22:14:8d:fc:73: 8a:5b:25:84:d0:2a:9c:5b:11:a7:91:a2:1a:e3:6d: 57:5b:92:84:38:60:7f:02:80:b1:84:1a:40:3b:45: 3b:12:8e:06:9f:21:37:24:de:e5:ac:cc:29:6d:7d: 63:06:41:05:ed:e7:22:40:7f:32:c4:14:fc:dd:9f: f0:e6:eb:dc:46:de:42:9f:64:8c:44:60:e8:29:3d: 12:1a:ca:f8:39:bf:b0:68:fa:fe:7d:80:83:fc:30: ce:dd:c2:d2:14:4e:61:23:7e:c5:d1:39:ef:2f:da: 18:68:84:d3:fd:e3:5c:15:42:f7:0f:96:96:f6:63: ba:41:0f:1a:a6:a3:ca:ab:cd:59:38:69:96:10:cf: 60:61:2c:75:7c:51:d7:b8:71:07:11:d6:c0:31:a2: f3:af:5e:f4:2c:f8:f3:75:de:c6:8f:49:ed:16:dd: dc:08:90:10:80:61:43:6b:45:ec:75:8e:55:c8:b8: 53:6b:d2:cd:9c:d3:d0:a1:35:21:22:70:cb:38:bf: bf:a7:35:94:15:33:64:b2:28:9c:00:9c:32:70:42: 6d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:2D:C7:91:2E:31:19:52:DD:EC:6F:BB:81:5B:7F:E5:F7:6D:CF:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb07b0fe-91ed-3b72-a548-f1adf9ab8d28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:46:1c:f3:99:f8:a4:3e:d5:f4:6b:9d:4f:a6:6d:da:b5:cb: 74:f9:4b:bd:df:bd:e3:e7:35:5d:aa:7e:cb:5e:8c:95:86:7c: 5d:8e:db:32:66:e5:7a:db:84:8e:b0:fd:4e:b0:36:02:66:ae: 09:f5:c9:d9:8b:f2:24:82:e5:bb:75:2d:c6:a9:48:30:74:4b: a0:ec:7a:eb:cf:33:4c:fc:10:aa:7d:43:74:9c:2c:02:7a:2f: 89:09:4c:ad:c4:06:9d:b3:51:06:77:36:ed:4a:8b:99:a2:e6: 7e:f7:bf:bb:44:0d:5e:d2:e1:81:b2:21:59:3e:c9:b9:6c:ec: a8:14:81:2f:f2:df:e4:52:17:9a:ee:57:4f:79:47:e0:55:68: 58:14:9b:26:d3:e7:bb:ee:0b:49:49:d6:6b:8f:2d:1e:58:6b: 90:f4:58:3d:7a:75:c6:e8:c9:fb:ea:55:e9:ac:84:a4:39:3d: 4d:7c:cf:d3:f7:5f:68:cc:b6:b4:a5:dc:5b:0e:f3:4c:18:e8: db:38:0a:06:07:ef:16:c4:e8:08:ed:c3:b8:ec:39:b6:48:8d: 88:18:70:bc:6f:35:ba:ab:72:e2:53:4a:97:7f:d1:97:7e:9d: e3:ee:0c:de:72:bc:d7:26:78:02:f4:17:ff:1c:df:75:8a:63: 71:e6:f6:e5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1zK9ZQRVhLqmM0egAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwOTE0MDc1MloXDTI2MDcwODE0MDc1MlowLzEtMCsGA1UEAxMk MDJjZTM0YzgtNGU1Yy00M2JkLWFkODQtMDFlYjA4NTEzZTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbWt+2yJ73onY9GZPohAoZE+TcMHxMBl8SyB fQ2/umGU0zOOhOi7IhSN/HOKWyWE0CqcWxGnkaIa421XW5KEOGB/AoCxhBpAO0U7 Eo4GnyE3JN7lrMwpbX1jBkEF7eciQH8yxBT83Z/w5uvcRt5Cn2SMRGDoKT0SGsr4 Ob+waPr+fYCD/DDO3cLSFE5hI37F0TnvL9oYaITT/eNcFUL3D5aW9mO6QQ8apqPK q81ZOGmWEM9gYSx1fFHXuHEHEdbAMaLzr170LPjzdd7Gj0ntFt3cCJAQgGFDa0Xs dY5VyLhTa9LNnNPQoTUhInDLOL+/pzWUFTNksiicAJwycEJtbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJotx5EuMRlS3exvu4Fbf+X3bc+EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmIwN2IwZmUtOTFlZC0z YjcyLWE1NDgtZjFhZGY5YWI4ZDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAlGHPOZ+KQ+1fRrnU+mbdq1y3T5S73fvePnNV2qfstejJWGfF2O 2zJm5XrbhI6w/U6wNgJmrgn1ydmL8iSC5bt1LcapSDB0S6DseuvPM0z8EKp9Q3Sc LAJ6L4kJTK3EBp2zUQZ3Nu1Ki5mi5n73v7tEDV7S4YGyIVk+ybls7KgUgS/y3+RS F5ruV095R+BVaFgUmybT57vuC0lJ1muPLR5Ya5D0WD16dcboyfvqVemshKQ5PU18 z9P3X2jMtrSl3FsO80wY6Ns4CgYH7xbE6Ajtw7jsObZIjYgYcLxvNbqrcuJTSpd/ 0Zd+nePuDN5yvNcmeAL0F/8c33WKY3Hm9uU= -----END CERTIFICATE-----Generated at Fri Apr 17 14:19:18 2026 by rpki-client