$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb4f2d38-a2ad-37f7-a8b6-21433016cfcd.roa File: cb4f2d38-a2ad-37f7-a8b6-21433016cfcd.roa (raw, json) Hash identifier: qoIcJopdd65bDuokD+YqZx8Lu9TjBBh3yEfyHTxZvUA= Subject key identifier: 85:75:57:6B:F1:73:D2:9B:D3:B4:8A:DF:E6:D5:44:28:88:A1:E3:E5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D5E1A80A5D4036C18C6DF3940 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb4f2d38-a2ad-37f7-a8b6-21433016cfcd.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 396827 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:80:a5:d4:03:6c:18:c6:df:39:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=ff43893c-4d14-404f-b1b1-7cec597bbf66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d7:a5:2a:08:06:74:d8:8c:ab:c6:5f:5c:5e: 29:09:72:8b:23:d9:32:32:57:22:53:6d:a6:27:95: 00:a4:1a:bd:65:6d:3a:1b:ed:65:a0:1b:eb:9c:6c: c1:35:18:42:ed:d2:09:a5:55:ce:68:6e:29:d7:25: 7a:ee:c6:8f:ab:f3:84:cd:21:d4:d1:56:46:b4:b8: 8c:2d:47:0b:93:85:c2:b2:17:bc:0a:3e:4d:48:0c: 55:7c:3d:51:ad:f1:10:e8:92:95:5f:5f:21:a7:03: fc:5d:d8:3e:ae:84:5b:f4:ba:b1:be:7f:47:e0:8b: 04:41:5e:84:37:aa:8b:53:81:9a:a5:14:28:8c:58: 18:03:39:37:02:2f:c8:a9:12:3b:5d:bf:91:45:f4: bd:66:38:c6:3b:de:ff:c4:3d:2e:4c:e7:e1:d3:83: 04:d6:ee:66:86:cf:b6:b6:7c:db:3b:ad:28:15:5b: d3:bc:11:3d:1c:cf:49:38:7c:94:13:ce:b5:19:a7: 6f:5a:3c:6e:76:c2:3b:72:53:36:39:95:1c:1f:35: 4b:d6:9a:d3:e4:ee:b4:7e:a2:b6:12:12:b5:64:a6: 0e:8c:79:06:27:82:5c:9d:06:87:bc:48:1f:5d:2e: 9b:9d:cf:51:b7:44:96:9b:8d:c4:6c:ed:07:3e:a7: 90:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:75:57:6B:F1:73:D2:9B:D3:B4:8A:DF:E6:D5:44:28:88:A1:E3:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb4f2d38-a2ad-37f7-a8b6-21433016cfcd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:4e:bb:97:6f:b1:2d:ed:be:a7:2b:14:9f:65:17:4f:34:63: d4:09:f1:e1:b0:de:56:a0:b6:34:ca:e0:96:ed:76:af:aa:3e: b8:36:62:fd:aa:88:2b:b7:ef:c4:0a:6b:25:4e:d4:c4:51:bb: d5:ab:79:d2:9a:44:7d:bc:65:d2:b0:00:ce:38:9b:14:c5:41: 2c:59:b3:a1:f4:ef:bf:37:06:53:70:9a:f6:1a:e3:d0:6c:61: 79:de:18:17:57:83:65:86:b9:91:04:37:20:98:ed:67:b5:62: 62:a4:d7:2f:03:86:6b:05:08:bc:7f:60:94:31:42:bc:c7:de: 9d:7e:ed:76:88:00:74:c3:30:b1:18:ce:17:cc:c6:0e:46:07: e3:70:86:82:de:24:f1:94:ff:90:b8:c3:8b:f9:cf:a6:62:ba: ef:6e:fc:b8:24:37:21:6c:b8:4a:36:e8:ac:8e:5e:9c:19:b6: 7d:ef:01:da:ad:4f:2a:79:62:b3:5e:db:ab:4e:31:4c:fd:62: e9:db:0e:1c:82:83:6a:d8:24:17:7b:d5:53:9d:b4:1f:ea:c5: 6a:40:0e:e8:03:98:1d:6e:64:58:47:00:5b:7f:22:8e:08:1a: 4c:13:30:56:4c:47:f7:ba:d4:1a:32:85:75:6b:e8:82:37:66: 4e:6c:ba:c4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1eGoCl1ANsGMbfOUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk ZmY0Mzg5M2MtNGQxNC00MDRmLWIxYjEtN2NlYzU5N2JiZjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9elKggGdNiMq8ZfXF4pCXKLI9kyMlciU22m J5UApBq9ZW06G+1loBvrnGzBNRhC7dIJpVXOaG4p1yV67saPq/OEzSHU0VZGtLiM LUcLk4XCshe8Cj5NSAxVfD1RrfEQ6JKVX18hpwP8Xdg+roRb9Lqxvn9H4IsEQV6E N6qLU4GapRQojFgYAzk3Ai/IqRI7Xb+RRfS9ZjjGO97/xD0uTOfh04ME1u5mhs+2 tnzbO60oFVvTvBE9HM9JOHyUE861GadvWjxudsI7clM2OZUcHzVL1prT5O60fqK2 EhK1ZKYOjHkGJ4JcnQaHvEgfXS6bnc9Rt0SWm43EbO0HPqeQfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIV1V2vxc9Kb07SK3+bVRCiIoePlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2I0ZjJkMzgtYTJhZC0z N2Y3LWE4YjYtMjE0MzMwMTZjZmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ1Ou5dvsS3tvqcrFJ9lF080Y9QJ8eGw3lagtjTK4Jbtdq+qPrg2 Yv2qiCu378QKayVO1MRRu9WredKaRH28ZdKwAM44mxTFQSxZs6H07783BlNwmvYa 49BsYXneGBdXg2WGuZEENyCY7We1YmKk1y8DhmsFCLx/YJQxQrzH3p1+7XaIAHTD MLEYzhfMxg5GB+NwhoLeJPGU/5C4w4v5z6Ziuu9u/LgkNyFsuEo26KyOXpwZtn3v AdqtTyp5YrNe26tOMUz9YunbDhyCg2rYJBd71VOdtB/qxWpADugDmB1uZFhHAFt/ Io4IGkwTMFZMR/e61BoyhXVr6II3Zk5susQ= -----END CERTIFICATE-----Generated at Fri Apr 17 16:57:06 2026 by rpki-client