$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf702a78-6f81-3fa3-9a3a-9f286a1f1980.roa File: cf702a78-6f81-3fa3-9a3a-9f286a1f1980.roa (raw, json) Hash identifier: VDu2D3mccB++yGriCg/1vSP5pWijilYypq8nY5eafOY= Subject key identifier: 27:8E:5A:82:77:6F:2F:91:CC:F2:05:74:D6:67:7B:73:DC:65:1B:2E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D5E1A80BDB57C81323CFBA280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf702a78-6f81-3fa3-9a3a-9f286a1f1980.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 396545 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:80:bd:b5:7c:81:32:3c:fb:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=2ea26cbf-5ccc-4092-90de-b636f17cd65f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f5:a3:b2:1e:42:16:11:eb:a9:6c:e7:40:e2: 17:8d:59:d0:a8:c8:e8:80:b7:58:7c:79:94:79:77: 87:5e:a6:f3:c7:e0:58:c1:9e:83:ee:6f:4c:f0:73: 03:1e:40:27:77:f8:6b:2d:5c:a8:69:49:e6:b8:4d: a8:af:e5:4d:f4:15:46:6c:5d:88:05:60:0a:ae:47: 4f:80:0a:69:be:cb:e2:e8:c9:db:36:87:ce:c7:6b: f9:bf:f4:de:b7:34:b5:eb:a5:36:df:11:41:65:6d: 89:18:07:25:30:ee:65:e5:0c:1c:48:f8:29:2c:67: 69:fc:15:f6:52:2a:0e:df:ef:76:10:43:a0:1f:5e: 74:1d:b0:c1:34:7c:b3:bc:d2:8e:90:5a:67:81:0d: 58:cc:ed:5d:f7:8f:c1:0c:c3:91:ce:b1:dc:8b:fb: 53:ab:6c:1e:6d:80:b6:51:47:51:16:05:c8:15:0b: fa:6b:c3:91:ab:7d:14:1e:d8:10:12:f1:49:f3:29: fe:55:b4:c9:ba:46:13:d6:41:13:0b:37:53:c9:f8: cd:5d:11:3a:ff:9c:ae:89:a7:3f:13:23:3e:b8:b0: 3a:a5:a2:3c:a5:ff:1b:e2:16:d0:0d:51:e5:d1:3c: 76:43:56:92:bc:29:c3:38:8b:b5:a6:0c:4b:ba:46: c5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:8E:5A:82:77:6F:2F:91:CC:F2:05:74:D6:67:7B:73:DC:65:1B:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf702a78-6f81-3fa3-9a3a-9f286a1f1980.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:0c:98:b9:21:60:54:27:71:90:b2:d1:93:f7:4a:0a:30:0d: 99:4e:5c:4f:86:ae:07:5b:da:5e:8e:21:70:f5:af:84:36:4d: 89:5b:93:75:20:ff:38:d7:ab:21:04:9f:01:d1:ce:22:f1:89: 9c:34:96:e6:df:b0:be:1e:7f:71:5f:b5:9b:ef:0f:95:9b:44: 16:d2:a0:ec:f7:a1:53:0f:71:f8:e7:fe:f4:b7:48:0a:9f:07: 88:af:7d:70:ff:36:ec:6f:ef:02:d2:80:9f:03:06:70:9b:bf: 02:8e:c8:0a:76:ab:24:2d:34:fd:a4:cb:16:10:f0:9e:23:46: 68:c0:84:6e:cb:d9:63:37:7b:55:ad:6d:00:b8:fb:f9:0e:87: 2f:a3:36:c4:f6:63:d1:e4:69:90:95:38:77:a4:4f:d9:54:db: 3e:f2:86:7a:f1:73:6b:17:38:c7:f4:4b:19:62:1f:cf:7f:0b: 73:0e:17:2e:ee:43:a6:e1:9a:4d:89:d3:fa:d7:5c:2b:09:19: 6d:54:f1:86:8c:6b:1d:9d:7a:77:18:d1:ee:62:22:2f:47:a3: c0:73:0f:3e:d1:98:42:b9:63:aa:a1:8b:bc:1a:79:f3:d9:87: 7e:71:9d:78:05:be:2c:02:60:1b:71:b3:fc:b1:06:26:1c:ee: 2d:ee:bc:c9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1eGoC9tXyBMjz7ooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk MmVhMjZjYmYtNWNjYy00MDkyLTkwZGUtYjYzNmYxN2NkNjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPWjsh5CFhHrqWznQOIXjVnQqMjogLdYfHmU eXeHXqbzx+BYwZ6D7m9M8HMDHkAnd/hrLVyoaUnmuE2or+VN9BVGbF2IBWAKrkdP gAppvsvi6MnbNofOx2v5v/TetzS166U23xFBZW2JGAclMO5l5QwcSPgpLGdp/BX2 UioO3+92EEOgH150HbDBNHyzvNKOkFpngQ1YzO1d94/BDMORzrHci/tTq2webYC2 UUdRFgXIFQv6a8ORq30UHtgQEvFJ8yn+VbTJukYT1kETCzdTyfjNXRE6/5yuiac/ EyM+uLA6paI8pf8b4hbQDVHl0Tx2Q1aSvCnDOIu1pgxLukbF4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCeOWoJ3by+RzPIFdNZne3PcZRsuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2Y3MDJhNzgtNmY4MS0z ZmEzLTlhM2EtOWYyODZhMWYxOTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC4MmLkhYFQncZCy0ZP3SgowDZlOXE+Grgdb2l6OIXD1r4Q2TYlb k3Ug/zjXqyEEnwHRziLxiZw0lubfsL4ef3FftZvvD5WbRBbSoOz3oVMPcfjn/vS3 SAqfB4ivfXD/Nuxv7wLSgJ8DBnCbvwKOyAp2qyQtNP2kyxYQ8J4jRmjAhG7L2WM3 e1WtbQC4+/kOhy+jNsT2Y9HkaZCVOHekT9lU2z7yhnrxc2sXOMf0SxliH89/C3MO Fy7uQ6bhmk2J0/rXXCsJGW1U8YaMax2dencY0e5iIi9Ho8BzDz7RmEK5Y6qhi7wa efPZh35xnXgFviwCYBtxs/yxBiYc7i3uvMk= -----END CERTIFICATE-----Generated at Fri Apr 17 15:22:20 2026 by rpki-client