$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c857f696-0012-3d78-b619-2e0307525423.roa File: c857f696-0012-3d78-b619-2e0307525423.roa (raw, json) Hash identifier: 4J3oW47MDIIIB7gAzxbxxOoUHQht6I+vNu3sK440LIw= Subject key identifier: F8:53:40:D9:C7:2C:8B:3E:95:12:3E:95:82:5D:4D:14:B1:F7:5D:C3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D59EA5E620A0785AD718E8B00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c857f696-0012-3d78-b619-2e0307525423.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 396587 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:5e:62:0a:07:85:ad:71:8e:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=74498bc3-3dc1-4ee5-878d-e27d215f09d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d8:4f:f5:f7:96:3f:52:14:34:89:4d:b0:30: ec:0a:98:4c:02:1d:4f:3d:64:98:08:07:cd:79:87: b5:f6:40:72:82:f6:67:99:08:16:98:98:36:6e:70: 01:7d:35:ac:2d:5a:79:9c:b3:2d:e8:45:41:4e:41: e2:d0:7f:5e:5d:67:63:ab:d6:ce:5f:c1:93:9d:20: 67:78:a9:31:a2:d0:e8:06:72:83:1b:e9:ea:f4:de: 02:5e:2d:4c:ef:95:88:09:8c:b9:e2:05:88:f4:e3: 9a:58:f2:3a:7b:5b:dc:e6:40:0b:4b:ac:f3:eb:1b: a0:74:d5:4a:71:ae:35:5e:e4:58:82:94:80:a6:61: 5c:66:cd:da:7d:d9:bd:4f:db:db:0a:e3:9b:5a:e0: 70:82:01:d5:5c:b1:d7:fc:d4:f3:a1:83:0b:e7:64: d4:e6:52:5b:46:d1:4f:8f:9a:e0:29:a9:cd:9b:58: 92:f6:13:c1:c8:46:8d:65:60:a7:1b:3e:2c:8c:2a: 29:dd:d2:a0:22:9b:21:89:79:70:4b:03:b8:71:75: 50:d4:1d:ac:b3:fc:fd:f8:75:80:6b:b3:84:4f:92: c3:13:a4:41:c8:86:b8:d4:16:85:86:e7:5d:0d:41: 48:98:ed:7e:74:03:dc:29:b1:65:b0:3a:d2:8b:54: 82:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:53:40:D9:C7:2C:8B:3E:95:12:3E:95:82:5D:4D:14:B1:F7:5D:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c857f696-0012-3d78-b619-2e0307525423.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:51:56:bc:a5:7d:42:f9:a0:d1:61:43:ae:92:18:d5:0a:34: 8b:5e:4d:30:97:62:f2:6d:9c:b1:ad:0d:85:fe:92:b7:83:4c: 1a:d1:0c:29:0a:ab:cf:e7:46:fc:cc:7d:f8:d1:a7:ec:be:64: af:06:a1:a7:29:02:9e:65:dd:6a:5c:4e:b0:37:99:a3:37:52: 0e:9c:90:5b:bd:6f:da:59:ae:03:c8:8f:43:d1:93:d1:08:c3: f6:1f:6d:4e:81:f0:fe:b3:d6:06:30:97:34:3e:ad:d0:70:13: d0:40:88:fe:da:72:83:2b:28:c7:b1:42:ce:81:a0:74:22:8e: 4a:5e:28:64:7f:e1:e3:34:ee:95:10:6b:8c:24:91:65:a2:45: 08:2f:e7:4d:2b:58:ee:8a:8a:96:aa:0c:d6:29:87:9b:f6:dd: 82:2a:96:7f:ab:2b:46:93:a9:84:b7:a2:da:8d:c3:9e:20:0c: 29:ca:ef:0c:65:b3:a1:05:ca:33:31:f5:43:87:6d:e5:0b:b0: db:f9:77:c6:38:31:35:92:8f:71:c7:4d:5c:54:cb:fc:8c:fc: 6a:08:04:85:78:8c:2b:76:94:d5:b6:67:8b:ae:bc:d1:13:99: bc:0e:56:90:96:d0:6d:c1:5e:f8:91:a8:5b:2f:72:f8:f9:45: 10:a8:5e:02 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6l5iCgeFrXGOiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NzQ0OThiYzMtM2RjMS00ZWU1LTg3OGQtZTI3ZDIxNWYwOWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdhP9feWP1IUNIlNsDDsCphMAh1PPWSYCAfN eYe19kBygvZnmQgWmJg2bnABfTWsLVp5nLMt6EVBTkHi0H9eXWdjq9bOX8GTnSBn eKkxotDoBnKDG+nq9N4CXi1M75WICYy54gWI9OOaWPI6e1vc5kALS6zz6xugdNVK ca41XuRYgpSApmFcZs3afdm9T9vbCuObWuBwggHVXLHX/NTzoYML52TU5lJbRtFP j5rgKanNm1iS9hPByEaNZWCnGz4sjCop3dKgIpshiXlwSwO4cXVQ1B2ss/z9+HWA a7OET5LDE6RByIa41BaFhuddDUFImO1+dAPcKbFlsDrSi1SCuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPhTQNnHLIs+lRI+lYJdTRSx913DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzg1N2Y2OTYtMDAxMi0z ZDc4LWI2MTktMmUwMzA3NTI1NDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFhRVrylfUL5oNFhQ66SGNUKNIteTTCXYvJtnLGtDYX+kreDTBrR DCkKq8/nRvzMffjRp+y+ZK8GoacpAp5l3WpcTrA3maM3Ug6ckFu9b9pZrgPIj0PR k9EIw/YfbU6B8P6z1gYwlzQ+rdBwE9BAiP7acoMrKMexQs6BoHQijkpeKGR/4eM0 7pUQa4wkkWWiRQgv500rWO6KipaqDNYph5v23YIqln+rK0aTqYS3otqNw54gDCnK 7wxls6EFyjMx9UOHbeULsNv5d8Y4MTWSj3HHTVxUy/yM/GoIBIV4jCt2lNW2Z4uu vNETmbwOVpCW0G3BXviRqFsvcvj5RRCoXgI= -----END CERTIFICATE-----Generated at Fri Apr 17 16:50:25 2026 by rpki-client