$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb589017-36e5-327d-be4c-1a8adaaf23bb.roa File: bb589017-36e5-327d-be4c-1a8adaaf23bb.roa (raw, json) Hash identifier: 2nMkh8MpdzvmmXVcDQvxgucn/8DWxp2xvkwmOrNYLNw= Subject key identifier: 44:94:87:FC:91:AA:DC:8C:F4:90:69:25:C9:40:67:69:95:DB:9D:73 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D732BDCA15CC85E9AE4B11380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb589017-36e5-327d-be4c-1a8adaaf23bb.roa Signing time: Thu 09 Apr 2026 14:07:55 +0000 ROA not before: Thu 09 Apr 2026 14:07:55 +0000 ROA not after: Wed 08 Jul 2026 14:07:55 +0000 asID: 36616 IP address blocks: 2001:500:133::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:73:2b:dc:a1:5c:c8:5e:9a:e4:b1:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 9 14:07:55 2026 GMT Not After : Jul 8 14:07:55 2026 GMT Subject: CN=8bfc993b-0801-454e-b98b-b717c387e585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:dc:2e:10:49:34:97:05:d4:c0:19:bd:ea:5c: 81:ab:35:52:46:38:96:77:e7:91:9e:ba:4d:9c:27: f2:d3:3c:8c:08:56:d7:05:c8:1d:a5:b0:bb:5b:1b: 10:9b:e4:5c:ff:70:d7:78:ef:ce:9d:62:62:93:00: 25:72:c4:6f:ee:22:56:4b:4b:b0:49:20:de:57:bc: 0b:b6:74:a2:63:c7:e6:b2:3e:53:02:a4:5a:dd:43: be:5f:34:1b:84:5b:4a:8c:19:55:23:4b:70:11:6a: c7:ea:d6:88:ce:41:7c:fd:7b:02:6a:71:50:de:8c: 94:5d:86:3e:73:0f:d2:a4:30:d4:77:da:65:79:8f: 23:d6:d6:14:d9:0b:7b:51:84:f6:1e:d3:a3:37:03: 95:01:25:76:f3:74:7d:a3:8e:03:f6:97:ba:64:b1: f5:56:72:ee:a7:0b:a5:22:09:95:30:f9:47:47:0f: 65:59:2d:4b:eb:b5:e8:37:92:89:04:5e:e4:fa:08: f6:16:e5:3d:57:cb:07:8f:1a:92:94:04:5c:d5:de: 74:71:0f:88:90:f2:9b:dd:ec:7c:86:9f:29:11:39: 7b:1c:28:e3:66:8a:c4:e6:d2:ac:06:57:61:4f:69: 21:a5:ff:68:71:ba:a6:7a:e8:a4:2e:96:12:c2:d2: a6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:94:87:FC:91:AA:DC:8C:F4:90:69:25:C9:40:67:69:95:DB:9D:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb589017-36e5-327d-be4c-1a8adaaf23bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:81:c4:4e:72:6e:71:3f:e9:f8:11:d4:0e:a3:20:64:74:13: 7a:11:35:eb:e8:8f:94:45:7a:49:c6:a8:0b:bd:26:a6:8f:76: 03:55:2d:15:a5:53:f0:32:73:8d:b1:75:77:17:9b:6e:fd:27: 62:fd:11:75:0d:08:a8:a0:10:00:30:ac:a5:77:7d:a3:17:38: 53:4b:2e:df:36:c7:3d:27:b5:07:8d:c8:56:16:01:32:fa:86: d5:4c:7b:ea:51:17:be:e4:ea:d4:90:94:43:73:5f:29:da:8c: b8:f4:68:3e:bb:4e:c0:d9:5e:d0:5e:d0:23:43:cd:05:fc:ee: 1f:5d:37:62:17:08:cc:32:08:aa:3c:5d:d3:2b:e4:1d:e9:34: 12:63:1b:24:1c:b9:36:43:53:98:54:c0:88:dc:16:93:68:5f: 28:63:c7:d4:e4:b8:e2:38:b5:bd:d1:ef:d6:85:18:d9:8f:49: ad:68:5e:c2:22:d9:97:65:32:39:46:ae:a7:e2:c4:fe:92:92: b0:fb:60:15:94:fe:fc:3c:86:12:a4:20:71:2d:1f:c2:08:80: db:c0:d1:75:6e:cb:71:a5:41:3e:4f:36:40:81:2f:e9:bd:a1: c3:5a:d7:42:88:59:11:ae:e2:ba:5e:2e:62:f6:3e:d4:be:f0: 55:b4:f8:ef -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1zK9yhXMhemuSxE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwOTE0MDc1NVoXDTI2MDcwODE0MDc1NVowLzEtMCsGA1UEAxMk OGJmYzk5M2ItMDgwMS00NTRlLWI5OGItYjcxN2MzODdlNTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNwuEEk0lwXUwBm96lyBqzVSRjiWd+eRnrpN nCfy0zyMCFbXBcgdpbC7WxsQm+Rc/3DXeO/OnWJikwAlcsRv7iJWS0uwSSDeV7wL tnSiY8fmsj5TAqRa3UO+XzQbhFtKjBlVI0twEWrH6taIzkF8/XsCanFQ3oyUXYY+ cw/SpDDUd9pleY8j1tYU2Qt7UYT2HtOjNwOVASV283R9o44D9pe6ZLH1VnLupwul IgmVMPlHRw9lWS1L67XoN5KJBF7k+gj2FuU9V8sHjxqSlARc1d50cQ+IkPKb3ex8 hp8pETl7HCjjZorE5tKsBldhT2khpf9ocbqmeuikLpYSwtKmtwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFESUh/yRqtyM9JBpJclAZ2mV251zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmI1ODkwMTctMzZlNS0z MjdkLWJlNGMtMWE4YWRhYWYyM2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAByBxE5ybnE/6fgR1A6jIGR0E3oRNevoj5RFeknGqAu9JqaPdgNV LRWlU/Ayc42xdXcXm279J2L9EXUNCKigEAAwrKV3faMXOFNLLt82xz0ntQeNyFYW ATL6htVMe+pRF77k6tSQlENzXynajLj0aD67TsDZXtBe0CNDzQX87h9dN2IXCMwy CKo8XdMr5B3pNBJjGyQcuTZDU5hUwIjcFpNoXyhjx9TkuOI4tb3R79aFGNmPSa1o XsIi2ZdlMjlGrqfixP6SkrD7YBWU/vw8hhKkIHEtH8IIgNvA0XVuy3GlQT5PNkCB L+m9ocNa10KIWRGu4rpeLmL2PtS+8FW0+O8= -----END CERTIFICATE-----Generated at Fri Apr 17 14:01:53 2026 by rpki-client