$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf0b04d5-afa3-3844-a94e-6e948b29ee12.roa File: bf0b04d5-afa3-3844-a94e-6e948b29ee12.roa (raw, json) Hash identifier: 0n0camHABGUGVX13aupBKcTTzZHvVUAjhsapFjB4V2c= Subject key identifier: 93:E0:5F:01:46:65:DA:20:42:90:64:F4:3B:ED:01:B8:9C:A8:0E:3C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D59EA5E890E8C5577FA890DC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf0b04d5-afa3-3844-a94e-6e948b29ee12.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 27544 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:5e:89:0e:8c:55:77:fa:89:0d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=cd83e035-b65e-422e-b5af-93fea02d3771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ba:09:2e:9e:a0:c6:8e:fb:83:f3:13:57:f0: 17:96:4e:0b:74:e4:3c:f5:58:53:69:12:aa:a9:bd: c9:62:17:23:19:bc:89:f5:6f:d2:05:eb:08:97:50: 91:ef:2b:5e:49:1f:55:2f:aa:d2:b6:92:f8:7b:c3: 35:5d:5e:7d:5d:35:3e:14:45:e0:4d:80:7c:47:43: fd:a9:39:75:9f:7b:b9:00:65:89:81:aa:ac:87:a7: e1:5d:a6:ee:1f:7d:71:e7:17:79:36:98:60:43:8b: 25:ba:ff:5d:b5:f3:dc:41:ac:20:a8:f4:e6:16:ab: 1b:e0:2f:fd:a8:57:97:1b:f2:82:fa:f3:aa:e9:78: 80:e3:af:14:73:99:6d:db:0d:63:76:c4:31:a4:48: 58:44:77:dc:9d:02:36:ba:3e:d7:be:72:fd:8e:02: 6f:48:86:c7:5d:25:b6:52:24:18:92:6d:b6:47:d0: 8b:c0:4b:10:77:13:96:2b:32:89:1a:64:16:cb:dc: 26:9d:b5:01:9e:60:a3:76:58:6b:30:ae:56:a1:4f: 57:94:ee:37:f8:cf:ab:60:eb:04:ef:87:1d:dd:60: 5f:08:62:7e:f1:dd:ae:37:8c:5b:d5:a1:69:df:02: 69:d7:40:1f:d0:43:1e:87:33:7c:c4:ce:63:2c:27: 95:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E0:5F:01:46:65:DA:20:42:90:64:F4:3B:ED:01:B8:9C:A8:0E:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf0b04d5-afa3-3844-a94e-6e948b29ee12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:9c:43:70:84:1b:c3:79:13:f6:e7:5f:78:db:b8:f2:8a:eb: 48:b7:59:3a:72:38:a0:77:68:04:ca:dd:71:42:be:d5:b5:4d: e3:a7:b6:5b:e3:5f:ca:94:a7:bd:b6:e0:a9:14:2b:68:99:19: fb:79:8c:69:d6:df:b6:e4:d4:f2:5d:ba:31:50:c7:37:8f:82: 82:8d:31:9f:b8:7d:bb:32:0e:e2:ee:dc:cc:f5:56:6f:4b:38: 16:67:50:1d:ab:9d:2b:f1:d8:89:e3:0c:da:6e:99:f4:c5:40: 73:53:9d:5c:22:ab:02:5b:09:35:65:73:3e:34:b1:d1:e3:66: 31:8d:53:ec:72:f6:bb:ce:59:92:7f:f4:50:bd:4e:d3:05:8e: 4e:47:dc:c5:50:4a:f3:f2:d8:f8:21:28:b4:b8:57:45:43:82: 3e:2e:ac:5a:8b:01:c0:1e:70:12:d4:2f:54:29:41:b5:b4:88: 5e:55:35:5c:b0:3c:17:06:3d:9f:0e:9f:ee:c1:17:cd:cf:d2: 61:b5:ef:d3:74:5c:5f:49:3e:d1:34:b0:8c:fd:64:2d:c4:09: 70:07:55:99:18:d5:00:d2:b2:b9:5d:47:d9:c9:b0:7d:c3:81: 41:11:71:13:e1:b3:28:1c:b3:13:66:6e:37:73:26:0d:06:02: 11:87:81:00 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6l6JDoxVd/qJDcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk Y2Q4M2UwMzUtYjY1ZS00MjJlLWI1YWYtOTNmZWEwMmQzNzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7oJLp6gxo77g/MTV/AXlk4LdOQ89VhTaRKq qb3JYhcjGbyJ9W/SBesIl1CR7yteSR9VL6rStpL4e8M1XV59XTU+FEXgTYB8R0P9 qTl1n3u5AGWJgaqsh6fhXabuH31x5xd5NphgQ4sluv9dtfPcQawgqPTmFqsb4C/9 qFeXG/KC+vOq6XiA468Uc5lt2w1jdsQxpEhYRHfcnQI2uj7XvnL9jgJvSIbHXSW2 UiQYkm22R9CLwEsQdxOWKzKJGmQWy9wmnbUBnmCjdlhrMK5WoU9XlO43+M+rYOsE 74cd3WBfCGJ+8d2uN4xb1aFp3wJp10Af0EMehzN8xM5jLCeVAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJPgXwFGZdogQpBk9DvtAbicqA48MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmYwYjA0ZDUtYWZhMy0z ODQ0LWE5NGUtNmU5NDhiMjllZTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA6cQ3CEG8N5E/bnX3jbuPKK60i3WTpyOKB3aATK3XFCvtW1TeOn tlvjX8qUp7224KkUK2iZGft5jGnW37bk1PJdujFQxzePgoKNMZ+4fbsyDuLu3Mz1 Vm9LOBZnUB2rnSvx2InjDNpumfTFQHNTnVwiqwJbCTVlcz40sdHjZjGNU+xy9rvO WZJ/9FC9TtMFjk5H3MVQSvPy2PghKLS4V0VDgj4urFqLAcAecBLUL1QpQbW0iF5V NVywPBcGPZ8On+7BF83P0mG179N0XF9JPtE0sIz9ZC3ECXAHVZkY1QDSsrldR9nJ sH3DgUERcRPhsygcsxNmbjdzJg0GAhGHgQA= -----END CERTIFICATE-----Generated at Fri Apr 17 12:05:22 2026 by rpki-client