$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1641703-2a1f-38ac-becd-8286a08e77cb.roa File: c1641703-2a1f-38ac-becd-8286a08e77cb.roa (raw, json) Hash identifier: RSD1hRBgU3v+plK05V0vNKEFx5WN8q6MUQOVBfptukQ= Subject key identifier: D4:B7:C6:B5:0A:A1:42:99:81:F7:8E:CC:DD:9A:CD:D9:B0:54:01:D2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D6DA1942C60C77A5EB40F2820 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1641703-2a1f-38ac-becd-8286a08e77cb.roa Signing time: Tue 07 Apr 2026 14:30:15 +0000 ROA not before: Tue 07 Apr 2026 14:30:15 +0000 ROA not after: Mon 06 Jul 2026 14:30:15 +0000 asID: 396544 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:a1:94:2c:60:c7:7a:5e:b4:0f:28:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 7 14:30:15 2026 GMT Not After : Jul 6 14:30:15 2026 GMT Subject: CN=5679fab4-ba0d-426b-8061-45dc422fe0c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3a:c4:22:b7:e2:76:4f:ca:cf:e9:5b:b5:76: b5:c1:69:87:ef:ba:3a:ef:af:79:67:56:9b:a8:0b: ed:39:3d:84:03:f6:de:e8:3e:2f:35:1f:62:cd:69: 98:cc:57:6e:1f:d3:f6:59:d6:4b:b4:49:c1:33:c7: fd:a6:ca:71:e8:7a:1e:af:b6:aa:8a:6e:6e:c7:2a: ee:e6:8a:fa:1d:9b:49:86:ef:ed:a6:1d:33:73:1a: 4c:c1:0c:ed:fc:b1:ec:72:29:f0:13:42:94:90:9d: b4:93:12:be:0e:34:90:ed:f2:9d:b4:b8:72:f4:eb: ba:65:46:f8:0b:ed:9d:02:e9:b6:a5:a8:3c:90:f5: 5e:c8:3a:66:9d:b3:64:e5:99:eb:d0:a1:02:43:e5: 20:54:cd:1e:94:66:37:34:8b:3d:0e:2b:39:e0:fd: 21:07:97:a2:45:af:81:03:94:2a:75:91:75:75:47: 09:1e:e5:c9:82:85:54:24:4c:ae:4e:c1:37:b4:7e: c7:f2:d5:b7:73:15:42:70:d1:ce:43:aa:3c:2c:8f: 5c:72:e2:f4:58:9d:15:24:ba:15:ac:b0:98:a1:55: e8:3a:5f:17:99:f9:16:55:33:9d:32:5e:4d:e6:3e: c9:ce:8c:8d:8a:21:ca:59:dc:78:81:9d:0b:93:57: 78:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B7:C6:B5:0A:A1:42:99:81:F7:8E:CC:DD:9A:CD:D9:B0:54:01:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1641703-2a1f-38ac-becd-8286a08e77cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:01:b1:69:25:4a:2d:f1:02:3e:ea:f2:0b:3e:65:9a:6f:f3: 18:0b:96:65:95:1e:fe:40:3e:75:9f:a9:cf:fe:aa:e6:b6:67: 98:3d:44:2f:f1:e7:78:e1:f5:3f:d8:de:47:85:18:d3:df:15: 47:ed:4d:46:4e:cf:3c:92:be:78:b4:cb:fc:0f:d4:d3:dc:40: db:03:b5:a2:52:f3:e8:b9:ca:e7:c7:d1:e9:91:3e:4a:a9:15: 39:dd:bc:a7:03:50:4a:b0:6c:22:1d:7c:99:9c:75:a5:62:f1: ad:af:7b:9f:71:a5:c3:a0:e9:cc:fb:94:17:32:b5:75:fb:0c: c6:01:9b:b8:11:f7:a9:e5:82:94:d5:b4:d1:da:4d:25:b7:e0: 62:60:7e:41:05:58:77:55:f0:9e:9f:41:3c:df:7e:bf:27:92: b7:a5:b8:b9:61:1a:81:35:e9:15:77:5f:9d:fd:4e:f4:a9:13: 2b:4e:25:97:44:fd:5f:a5:d8:87:df:5b:2d:06:db:49:25:d7: 2c:57:b4:68:1d:d8:f6:07:cc:a3:31:dc:0d:d1:3e:89:fb:2a: 36:a7:2a:09:3b:c2:64:92:cd:bb:24:b4:59:94:31:e1:bc:ac: eb:fa:88:e1:7d:2c:57:f3:28:cd:74:48:59:82:02:e1:8b:11: 20:a9:c0:80 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1toZQsYMd6XrQPKCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwNzE0MzAxNVoXDTI2MDcwNjE0MzAxNVowLzEtMCsGA1UEAxMk NTY3OWZhYjQtYmEwZC00MjZiLTgwNjEtNDVkYzQyMmZlMGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozrEIrfidk/Kz+lbtXa1wWmH77o67695Z1ab qAvtOT2EA/be6D4vNR9izWmYzFduH9P2WdZLtEnBM8f9pspx6Hoer7aqim5uxyru 5or6HZtJhu/tph0zcxpMwQzt/LHscinwE0KUkJ20kxK+DjSQ7fKdtLhy9Ou6ZUb4 C+2dAum2pag8kPVeyDpmnbNk5Znr0KECQ+UgVM0elGY3NIs9Dis54P0hB5eiRa+B A5QqdZF1dUcJHuXJgoVUJEyuTsE3tH7H8tW3cxVCcNHOQ6o8LI9ccuL0WJ0VJLoV rLCYoVXoOl8XmfkWVTOdMl5N5j7JzoyNiiHKWdx4gZ0Lk1d4mwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNS3xrUKoUKZgfeOzN2azdmwVAHSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzE2NDE3MDMtMmExZi0z OGFjLWJlY2QtODI4NmEwOGU3N2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACkBsWklSi3xAj7q8gs+ZZpv8xgLlmWVHv5APnWfqc/+qua2Z5g9 RC/x53jh9T/Y3keFGNPfFUftTUZOzzySvni0y/wP1NPcQNsDtaJS8+i5yufH0emR PkqpFTndvKcDUEqwbCIdfJmcdaVi8a2ve59xpcOg6cz7lBcytXX7DMYBm7gR96nl gpTVtNHaTSW34GJgfkEFWHdV8J6fQTzffr8nkreluLlhGoE16RV3X539TvSpEytO JZdE/V+l2IffWy0G20kl1yxXtGgd2PYHzKMx3A3RPon7KjanKgk7wmSSzbsktFmU MeG8rOv6iOF9LFfzKM10SFmCAuGLESCpwIA= -----END CERTIFICATE-----Generated at Fri Apr 17 13:45:34 2026 by rpki-client