$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c586bc2e-b8e3-3430-9dc3-35025e45b8da.roa File: c586bc2e-b8e3-3430-9dc3-35025e45b8da.roa (raw, json) Hash identifier: qb1Ro9+hMa7F3As+9RQzln4a7xSsTV8zTQJ3gXh5hJQ= Subject key identifier: F4:CF:44:C7:22:4A:BE:01:27:FD:B7:87:35:2A:7D:68:E1:E6:61:3A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D6DA1874E9853F90E0F59EC40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c586bc2e-b8e3-3430-9dc3-35025e45b8da.roa Signing time: Tue 07 Apr 2026 14:30:09 +0000 ROA not before: Tue 07 Apr 2026 14:30:09 +0000 ROA not after: Mon 06 Jul 2026 14:30:09 +0000 asID: 396617 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:a1:87:4e:98:53:f9:0e:0f:59:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 7 14:30:09 2026 GMT Not After : Jul 6 14:30:09 2026 GMT Subject: CN=3c4dbc5c-8ebc-463b-8f71-b342ec6d9faf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:79:c2:57:34:21:81:d1:17:f7:fc:68:fa:cf: c6:78:23:c0:a3:8b:1e:e6:d1:c3:8d:a3:ec:64:29: d1:2f:92:d4:02:f8:fa:10:fd:24:53:ed:68:6b:a9: b8:67:08:b6:12:65:a2:67:77:b4:62:87:dd:ca:21: dc:ed:81:9a:14:30:22:5d:94:5e:a9:86:6f:7e:c7: 85:0b:6b:17:40:51:78:2e:6e:d2:71:90:7a:d9:bb: 2f:ef:c6:c0:c1:00:64:fa:51:30:8b:e0:62:00:7a: dd:83:e1:ba:1a:e0:e1:4d:84:d2:4f:67:74:c4:64: 6c:94:34:8f:1e:2d:ee:9e:a2:39:f8:6c:9f:0b:c2: 6a:f1:4c:43:7d:42:48:8e:0d:11:bf:08:da:8d:54: 3f:32:28:ca:92:b1:a3:c0:6e:8b:73:fe:8b:bf:49: 7f:38:6e:80:ef:81:be:a8:56:c3:1f:3c:84:4b:f7: 39:59:d7:8c:82:4c:70:46:7a:f6:e4:51:07:da:fb: 3d:d1:43:ae:28:2a:7e:ad:90:17:3c:fe:87:de:75: eb:7f:c9:04:45:3c:63:3e:58:48:8d:6c:11:d3:4f: f4:cd:70:bb:c5:cf:e8:25:c0:9a:55:a6:1d:62:88: 9f:46:69:04:c3:22:db:9a:30:0f:88:ad:9e:e7:dc: 6a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:CF:44:C7:22:4A:BE:01:27:FD:B7:87:35:2A:7D:68:E1:E6:61:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c586bc2e-b8e3-3430-9dc3-35025e45b8da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:8b:84:42:dc:7b:18:50:ec:6e:33:aa:2c:cd:a3:48:57:d7: 0e:3b:1d:50:ed:fe:21:e1:c1:98:35:f1:14:55:22:d0:2d:24: 3d:41:74:55:e9:58:44:78:b2:96:5d:bb:3d:da:13:2e:3b:f6: 82:1a:29:dd:7f:15:56:69:f0:8e:d3:ba:bc:31:b5:8b:34:d2: 7e:d1:f3:4e:16:60:e4:2e:4f:e5:19:82:bc:6c:cb:6b:ea:09: 95:0b:38:aa:d3:b0:e5:35:47:5c:a4:45:36:6b:5b:6e:40:6f: 92:c2:b6:95:15:07:54:be:0e:91:fb:cd:d9:f5:00:11:0a:e1: c2:1d:fa:a8:5b:d5:fd:1c:e1:15:a9:1b:3c:b6:ea:ea:0d:62: 56:e4:ad:4e:56:7c:82:42:7e:98:78:4d:3d:2d:5b:6a:c0:5d: 1d:04:0a:1f:8e:16:61:ab:4c:40:05:7e:34:aa:b6:3d:03:6a: 2b:6f:33:92:3d:cd:ec:51:e0:36:da:dc:56:ec:c7:43:17:29: 36:ed:45:49:cd:d1:33:3a:11:24:2b:1b:c1:bc:df:94:96:7e: 89:93:00:bb:da:42:36:6d:59:dc:79:0b:d1:da:ac:ec:be:35: c5:5d:8c:83:75:2c:ae:f9:24:f4:27:00:60:f7:50:56:41:1b: 7b:9f:65:e9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1toYdOmFP5Dg9Z7EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwNzE0MzAwOVoXDTI2MDcwNjE0MzAwOVowLzEtMCsGA1UEAxMk M2M0ZGJjNWMtOGViYy00NjNiLThmNzEtYjM0MmVjNmQ5ZmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3nCVzQhgdEX9/xo+s/GeCPAo4se5tHDjaPs ZCnRL5LUAvj6EP0kU+1oa6m4Zwi2EmWiZ3e0YofdyiHc7YGaFDAiXZReqYZvfseF C2sXQFF4Lm7ScZB62bsv78bAwQBk+lEwi+BiAHrdg+G6GuDhTYTST2d0xGRslDSP Hi3unqI5+GyfC8Jq8UxDfUJIjg0RvwjajVQ/MijKkrGjwG6Lc/6Lv0l/OG6A74G+ qFbDHzyES/c5WdeMgkxwRnr25FEH2vs90UOuKCp+rZAXPP6H3nXrf8kERTxjPlhI jWwR00/0zXC7xc/oJcCaVaYdYoifRmkEwyLbmjAPiK2e59xqcQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPTPRMciSr4BJ/23hzUqfWjh5mE6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzU4NmJjMmUtYjhlMy0z NDMwLTlkYzMtMzUwMjVlNDViOGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA6LhELcexhQ7G4zqizNo0hX1w47HVDt/iHhwZg18RRVItAtJD1B dFXpWER4spZduz3aEy479oIaKd1/FVZp8I7TurwxtYs00n7R804WYOQuT+UZgrxs y2vqCZULOKrTsOU1R1ykRTZrW25Ab5LCtpUVB1S+DpH7zdn1ABEK4cId+qhb1f0c 4RWpGzy26uoNYlbkrU5WfIJCfph4TT0tW2rAXR0ECh+OFmGrTEAFfjSqtj0Daitv M5I9zexR4Dba3Fbsx0MXKTbtRUnN0TM6ESQrG8G835SWfomTALvaQjZtWdx5C9Ha rOy+NcVdjIN1LK75JPQnAGD3UFZBG3ufZek= -----END CERTIFICATE-----Generated at Fri Apr 17 10:17:03 2026 by rpki-client