$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd98f04f-a6c2-33d1-b79e-3e0eb829952e.roa File: bd98f04f-a6c2-33d1-b79e-3e0eb829952e.roa (raw, json) Hash identifier: 5/ECLW/zgNXUTk7UeXjEzetrkEYrR9Ka9gz7se7wt0U= Subject key identifier: 0A:E4:94:25:FE:E1:50:01:A6:C6:C6:2E:7F:95:4A:B5:E9:11:6B:B0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D6DA1931C45482330B2442000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd98f04f-a6c2-33d1-b79e-3e0eb829952e.roa Signing time: Tue 07 Apr 2026 14:30:14 +0000 ROA not before: Tue 07 Apr 2026 14:30:14 +0000 ROA not after: Mon 06 Jul 2026 14:30:14 +0000 asID: 396826 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:a1:93:1c:45:48:23:30:b2:44:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 7 14:30:14 2026 GMT Not After : Jul 6 14:30:14 2026 GMT Subject: CN=67784ca2-96f6-4ffa-b7bc-ba1088385bc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:71:eb:51:9d:b2:ca:93:50:c4:78:5e:5f:6c: f2:89:68:1c:c5:5c:9f:f8:cf:9a:d1:9c:07:d9:36: 1e:20:95:02:e5:3e:22:e0:48:ff:53:59:21:41:b1: f7:29:0a:c5:51:c8:d8:b2:88:7f:38:98:85:f0:86: c3:c4:83:dc:29:7b:37:f2:a6:a4:c8:25:e7:14:05: 7f:76:90:be:13:6b:b5:c0:00:f2:f0:44:58:ae:d4: d9:0d:09:9a:c3:7c:10:89:ca:d4:72:f7:0a:41:db: 73:fa:c2:d3:f6:ee:0c:57:f7:93:f5:a7:77:a0:10: 69:86:f1:9c:3b:36:2d:b3:11:d2:f9:33:fe:9f:36: 0e:55:1c:92:c1:6f:77:b9:d9:64:52:ef:d0:a6:9d: 4e:22:39:cc:91:0f:95:76:b2:6a:3e:02:f3:9e:89: a6:b7:5d:3b:a1:b5:5e:68:36:a1:8c:96:80:1a:65: 15:2c:7b:df:f8:0a:d4:a7:84:30:54:40:6a:90:57: 42:ac:97:5f:2b:87:86:70:b8:16:5f:9f:41:be:24: 53:e3:1e:c3:85:23:d6:fb:72:21:78:92:1f:47:84: 7b:f0:0b:f7:33:61:ef:14:dd:d2:1e:25:6c:d6:cc: cd:b5:22:c3:54:32:c1:6a:60:43:3f:5f:d4:dc:7e: 33:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E4:94:25:FE:E1:50:01:A6:C6:C6:2E:7F:95:4A:B5:E9:11:6B:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd98f04f-a6c2-33d1-b79e-3e0eb829952e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:d1:8e:23:aa:c6:fd:a6:a2:31:cd:46:a9:56:77:b3:fd:e2: 2c:b7:96:60:97:b1:a8:ad:0b:99:da:ae:6f:36:fc:56:a2:8f: f1:c5:68:ab:d1:1a:1c:da:d0:76:4b:68:f5:d3:cc:c3:cd:84: 15:62:82:fd:a3:2f:67:6c:08:0a:4d:a1:6f:8e:d3:2e:be:56: 99:23:19:74:d4:6a:65:21:8d:f4:32:e9:6c:30:bd:27:8c:9c: 85:e4:e6:79:99:61:21:21:cd:96:a5:ab:a0:1f:1d:8b:5b:bb: 88:4d:c1:c4:70:f8:0f:e6:1e:70:6d:66:4b:a6:64:35:df:e4: 36:5a:e8:99:db:53:84:20:65:10:b2:0c:78:b4:fd:01:10:75: 86:93:76:3d:d9:38:1d:cb:95:1c:58:4a:b9:64:3a:a2:ab:ff: 24:21:7d:08:8c:c8:06:b0:b4:02:d3:2f:62:4e:5a:30:bc:61: fa:9d:59:4f:c5:18:7e:bf:67:74:25:fb:79:82:f4:49:19:bc: 4c:e8:ee:71:53:da:27:bd:f6:18:2d:a2:4f:18:9e:0a:6d:19: 32:fa:0e:72:9e:7a:de:b5:c9:bd:0d:a7:26:91:35:2b:ca:fb: f7:e2:f0:bc:d5:d2:4a:7e:b5:e5:4a:cf:9e:ae:6b:d4:ee:7e: 62:59:1a:7f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1toZMcRUgjMLJEIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwNzE0MzAxNFoXDTI2MDcwNjE0MzAxNFowLzEtMCsGA1UEAxMk Njc3ODRjYTItOTZmNi00ZmZhLWI3YmMtYmExMDg4Mzg1YmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9XHrUZ2yypNQxHheX2zyiWgcxVyf+M+a0ZwH 2TYeIJUC5T4i4Ej/U1khQbH3KQrFUcjYsoh/OJiF8IbDxIPcKXs38qakyCXnFAV/ dpC+E2u1wADy8ERYrtTZDQmaw3wQicrUcvcKQdtz+sLT9u4MV/eT9ad3oBBphvGc OzYtsxHS+TP+nzYOVRySwW93udlkUu/Qpp1OIjnMkQ+VdrJqPgLznommt107obVe aDahjJaAGmUVLHvf+ArUp4QwVEBqkFdCrJdfK4eGcLgWX59BviRT4x7DhSPW+3Ih eJIfR4R78Av3M2HvFN3SHiVs1szNtSLDVDLBamBDP1/U3H4zEwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFArklCX+4VABpsbGLn+VSrXpEWuwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmQ5OGYwNGYtYTZjMi0z M2QxLWI3OWUtM2UwZWI4Mjk5NTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD3RjiOqxv2mojHNRqlWd7P94iy3lmCXsaitC5narm82/Faij/HF aKvRGhza0HZLaPXTzMPNhBVigv2jL2dsCApNoW+O0y6+VpkjGXTUamUhjfQy6Www vSeMnIXk5nmZYSEhzZalq6AfHYtbu4hNwcRw+A/mHnBtZkumZDXf5DZa6JnbU4Qg ZRCyDHi0/QEQdYaTdj3ZOB3LlRxYSrlkOqKr/yQhfQiMyAawtALTL2JOWjC8Yfqd WU/FGH6/Z3Ql+3mC9EkZvEzo7nFT2ie99hgtok8YngptGTL6DnKeet61yb0NpyaR NSvK+/fi8LzV0kp+teVKz56ua9TufmJZGn8= -----END CERTIFICATE-----Generated at Fri Apr 17 05:26:16 2026 by rpki-client