$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf0dfad6-8a5f-3084-bf2e-9d22b51b5ea9.roa File: cf0dfad6-8a5f-3084-bf2e-9d22b51b5ea9.roa (raw, json) Hash identifier: XRuacSNUlsLdspL+8VYtRFR90V6E1KC2YEyoqR5AD2E= Subject key identifier: C2:5E:FC:DB:F4:13:D3:C0:5C:81:CD:96:8B:F1:58:4D:10:B5:D9:C3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D732BDF444847F254DFC58700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf0dfad6-8a5f-3084-bf2e-9d22b51b5ea9.roa Signing time: Thu 09 Apr 2026 14:07:56 +0000 ROA not before: Thu 09 Apr 2026 14:07:56 +0000 ROA not after: Wed 08 Jul 2026 14:07:56 +0000 asID: 397207 IP address blocks: 2001:500:133::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:73:2b:df:44:48:47:f2:54:df:c5:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 9 14:07:56 2026 GMT Not After : Jul 8 14:07:56 2026 GMT Subject: CN=e6839cb4-d42b-4d11-b114-ba97e7a3d6e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6c:6d:05:01:b1:3d:6f:34:88:31:ad:32:b4: 4a:4e:77:99:e7:21:27:e9:fb:15:73:18:54:32:ca: 13:42:d4:02:40:b9:79:be:99:ed:0d:e3:69:03:cc: 2a:24:6f:d5:8d:cd:36:6c:1b:84:2c:13:62:b0:01: 8c:a9:a7:67:66:40:a7:c1:d7:5d:d3:9c:a8:79:f3: 81:90:bb:36:e9:e4:96:39:7d:e4:d7:f5:21:17:1d: 06:48:82:b1:da:5c:10:b2:47:ef:38:0e:92:9a:b8: 11:70:f9:fa:49:b0:88:7e:18:d5:29:03:f7:7a:b6: 7c:7e:b4:3f:8e:d9:5b:6b:91:6b:7c:ce:bb:e7:08: 94:c3:a9:d9:36:97:2e:e4:d1:4b:68:a7:e1:5b:fe: ce:c7:62:08:6e:12:01:8b:2b:b8:db:79:0b:a2:09: 03:0b:1e:dd:ba:14:b5:62:cd:17:ab:23:ad:74:74: 61:67:f9:36:0d:a8:53:d2:aa:15:4a:f4:3b:64:6c: 1b:73:71:14:fc:de:e9:49:27:80:0c:3a:1d:fe:d4: 3b:ad:8a:ad:25:87:41:6e:66:df:00:08:30:8b:96: bf:88:13:e3:69:ef:c6:cb:36:25:1d:5c:55:af:82: 59:69:fa:b2:95:2a:2c:bf:d0:58:b0:14:e1:1a:44: 22:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:5E:FC:DB:F4:13:D3:C0:5C:81:CD:96:8B:F1:58:4D:10:B5:D9:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf0dfad6-8a5f-3084-bf2e-9d22b51b5ea9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:9a:f9:25:b7:58:fd:87:67:8e:cf:d9:35:fb:f5:69:4c:a1: 29:ad:e4:f2:11:c1:bf:e7:0d:75:88:df:19:aa:65:85:ea:b2: 8a:50:fd:48:b1:ad:fa:f1:ff:8d:4c:f7:d1:25:4b:ae:e9:7b: dc:ad:cf:4f:ca:69:af:89:59:7a:8f:1d:2e:11:1e:99:3e:62: 44:21:20:07:d9:33:94:fe:f6:39:32:e9:54:02:b5:9b:44:fa: c6:af:9e:7d:61:8c:76:06:49:6a:d6:8d:d3:94:89:a9:ea:6b: 2a:37:18:04:6d:8f:dc:d3:00:eb:6d:5e:c8:4b:2c:00:40:82: 06:08:9d:af:64:d6:64:93:17:7b:c2:ed:d4:86:07:cc:c0:c7: 8f:66:59:a9:0c:d7:ca:05:64:c9:9c:a9:4b:f7:1e:57:d8:af: 1c:06:0f:b7:c8:42:15:b3:49:12:31:b4:d0:61:89:90:e0:29: bf:88:39:ce:15:b6:a4:6a:22:84:48:af:c9:c8:d0:4c:a3:57: 52:86:0b:92:eb:79:19:34:75:0c:66:03:9a:c2:ab:14:e7:0b: f1:43:b5:e1:cf:30:fb:5b:0e:d0:51:f9:0a:25:88:ab:1e:d0: e2:9c:db:a1:59:68:38:9e:4b:cc:50:e5:27:19:8f:eb:80:22: 2c:49:aa:64 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1zK99ESEfyVN/FhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwOTE0MDc1NloXDTI2MDcwODE0MDc1NlowLzEtMCsGA1UEAxMk ZTY4MzljYjQtZDQyYi00ZDExLWIxMTQtYmE5N2U3YTNkNmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGxtBQGxPW80iDGtMrRKTneZ5yEn6fsVcxhU MsoTQtQCQLl5vpntDeNpA8wqJG/Vjc02bBuELBNisAGMqadnZkCnwddd05yoefOB kLs26eSWOX3k1/UhFx0GSIKx2lwQskfvOA6SmrgRcPn6SbCIfhjVKQP3erZ8frQ/ jtlba5FrfM675wiUw6nZNpcu5NFLaKfhW/7Ox2IIbhIBiyu423kLogkDCx7duhS1 Ys0XqyOtdHRhZ/k2DahT0qoVSvQ7ZGwbc3EU/N7pSSeADDod/tQ7rYqtJYdBbmbf AAgwi5a/iBPjae/GyzYlHVxVr4JZafqylSosv9BYsBThGkQimQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMJe/Nv0E9PAXIHNlovxWE0QtdnDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2YwZGZhZDYtOGE1Zi0z MDg0LWJmMmUtOWQyMmI1MWI1ZWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHua+SW3WP2HZ47P2TX79WlMoSmt5PIRwb/nDXWI3xmqZYXqsopQ /Uixrfrx/41M99ElS67pe9ytz0/Kaa+JWXqPHS4RHpk+YkQhIAfZM5T+9jky6VQC tZtE+savnn1hjHYGSWrWjdOUianqayo3GARtj9zTAOttXshLLABAggYIna9k1mST F3vC7dSGB8zAx49mWakM18oFZMmcqUv3HlfYrxwGD7fIQhWzSRIxtNBhiZDgKb+I Oc4VtqRqIoRIr8nI0EyjV1KGC5LreRk0dQxmA5rCqxTnC/FDteHPMPtbDtBR+Qol iKse0OKc26FZaDieS8xQ5ScZj+uAIixJqmQ= -----END CERTIFICATE-----Generated at Fri Apr 17 01:18:53 2026 by rpki-client