$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb21bf29-fafa-3421-90c2-08bd785a108e.roa File: cb21bf29-fafa-3421-90c2-08bd785a108e.roa (raw, json) Hash identifier: HJs0zSjgvUBwQc4dN0RiLpWEvVkpp0NBsvlN6Kydb6A= Subject key identifier: 4A:A3:9E:2E:91:4A:08:6C:D0:73:8C:E7:D2:56:6A:81:99:4A:29:F8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D5E1A829FA6ABC62129555380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb21bf29-fafa-3421-90c2-08bd785a108e.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 36626 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:82:9f:a6:ab:c6:21:29:55:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=2da097a5-0faa-445e-bfab-b5d8c2e1fa60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:10:8f:30:d0:81:2a:d6:9f:5e:1e:d5:bd:37: 20:01:9f:e7:e0:f1:fc:be:28:29:7d:62:2a:01:00: 0e:d5:ed:94:7a:52:4d:ee:d3:db:a2:82:df:c2:86: df:fa:02:02:e8:f6:ba:e8:0a:19:d7:b3:87:47:ee: 70:af:8b:40:74:a2:16:28:e8:7a:48:b7:56:33:81: 71:d7:92:03:c3:8f:07:88:bb:26:d8:84:83:ad:1a: bc:e5:e7:9d:f6:24:cc:df:5a:22:b2:99:8c:ff:43: 65:06:32:f5:25:83:e2:ec:1a:2a:ed:7d:83:c4:2c: 2c:e5:80:10:48:9c:15:8d:b3:20:38:af:f2:ac:c7: a2:0e:dc:a3:9f:0b:4d:30:95:54:2c:73:09:36:6a: e2:36:71:55:d4:d6:4e:4b:df:39:94:11:95:eb:9f: bf:41:b5:f5:f2:84:d0:c9:80:6f:17:79:e4:bf:f9: 46:13:7e:e4:e1:d5:94:f6:00:16:3d:4a:f8:8b:46: 93:88:f9:8e:5d:f4:bb:6c:be:73:1d:16:46:0e:4a: e8:04:73:23:6f:99:6a:23:38:59:af:f6:c7:ad:d3: 00:be:49:71:7b:59:43:db:d4:16:d8:be:22:c6:3b: 28:27:76:0f:e1:55:c0:bc:78:2e:ed:0d:6b:fd:1d: 9f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A3:9E:2E:91:4A:08:6C:D0:73:8C:E7:D2:56:6A:81:99:4A:29:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb21bf29-fafa-3421-90c2-08bd785a108e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:3d:df:2d:de:27:7c:17:e1:fd:e8:29:ef:d7:20:4d:08:30: be:30:62:a8:38:37:7a:70:ab:be:9c:70:f2:b1:52:40:e3:14: b3:ed:9e:a2:e7:2a:6c:59:99:2e:dd:06:40:a9:16:0c:ed:6d: 06:6f:fc:ab:99:3c:27:b2:0c:27:df:20:a6:62:05:77:41:41: 5d:a2:25:30:9b:a1:32:38:a9:38:b4:70:5b:72:69:15:46:00: 94:9f:35:49:b5:24:cf:0e:66:09:df:f9:53:86:30:91:50:af: 3a:80:b9:88:0c:ba:e9:1b:11:21:f1:f4:0f:59:c9:b2:d8:49: fb:84:ba:e8:06:cd:1b:dc:48:41:85:87:40:eb:80:be:19:93: ef:7b:94:5b:23:db:1a:21:86:7c:4f:70:6f:f6:d6:2c:22:f9: 25:04:64:8a:b6:6f:5b:5a:7e:93:89:11:13:93:3c:bd:7e:31: 8a:80:70:d1:0c:96:e4:1f:04:e3:39:64:7c:19:b2:0a:05:9e: d2:ac:3f:34:a8:db:cd:b1:1f:3e:c8:1d:fa:72:5f:0f:06:9d: 5a:f4:67:e3:46:79:c2:3e:05:3a:22:78:fe:33:50:1e:b8:1a: f1:da:72:b8:ab:61:67:37:28:58:ed:f5:2b:1b:73:08:ed:a2: e8:25:8f:64 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1eGoKfpqvGISlVU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk MmRhMDk3YTUtMGZhYS00NDVlLWJmYWItYjVkOGMyZTFmYTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhCPMNCBKtafXh7VvTcgAZ/n4PH8vigpfWIq AQAO1e2UelJN7tPbooLfwobf+gIC6Pa66AoZ17OHR+5wr4tAdKIWKOh6SLdWM4Fx 15IDw48HiLsm2ISDrRq85eed9iTM31oispmM/0NlBjL1JYPi7Boq7X2DxCws5YAQ SJwVjbMgOK/yrMeiDtyjnwtNMJVULHMJNmriNnFV1NZOS985lBGV65+/QbX18oTQ yYBvF3nkv/lGE37k4dWU9gAWPUr4i0aTiPmOXfS7bL5zHRZGDkroBHMjb5lqIzhZ r/bHrdMAvklxe1lD29QW2L4ixjsoJ3YP4VXAvHgu7Q1r/R2fPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEqjni6RSghs0HOM59JWaoGZSin4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2IyMWJmMjktZmFmYS0z NDIxLTkwYzItMDhiZDc4NWExMDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKg93y3eJ3wX4f3oKe/XIE0IML4wYqg4N3pwq76ccPKxUkDjFLPt nqLnKmxZmS7dBkCpFgztbQZv/KuZPCeyDCffIKZiBXdBQV2iJTCboTI4qTi0cFty aRVGAJSfNUm1JM8OZgnf+VOGMJFQrzqAuYgMuukbESHx9A9ZybLYSfuEuugGzRvc SEGFh0DrgL4Zk+97lFsj2xohhnxPcG/21iwi+SUEZIq2b1tafpOJEROTPL1+MYqA cNEMluQfBOM5ZHwZsgoFntKsPzSo282xHz7IHfpyXw8GnVr0Z+NGecI+BToieP4z UB64GvHacrirYWc3KFjt9Ssbcwjtouglj2Q= -----END CERTIFICATE-----Generated at Fri Apr 17 21:19:00 2026 by rpki-client