$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0b35dbe-6222-3779-becf-77ca814b407a.roa File: d0b35dbe-6222-3779-becf-77ca814b407a.roa (raw, json) Hash identifier: cOHe5OmBn8FBxXFna0eKUQ0A9glZ/JHMZgo3UuZqNW0= Subject key identifier: 55:A9:20:C1:B0:F0:F3:08:D0:10:E6:02:67:CB:55:70:BC:CA:5C:FE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D5E1A41A90AD83F1428E70600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0b35dbe-6222-3779-becf-77ca814b407a.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 36617 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:41:a9:0a:d8:3f:14:28:e7:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=70bb7d0e-70c1-4b75-b15b-6ae1c4328f19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:38:f2:b6:61:8a:44:80:f0:02:d7:e7:3a:54: 5a:2a:95:1e:c7:40:fc:ea:f1:0d:57:39:23:6a:b2: 0b:f1:e5:42:0c:54:f3:e0:13:b6:45:94:6a:39:5e: 4e:0a:e6:63:71:ba:fb:9d:3c:c9:71:6d:b8:c5:24: e2:78:11:8a:81:ff:91:d5:5e:48:d2:98:b5:e0:35: 99:61:9d:d3:dd:78:33:44:b1:e6:ad:a8:66:1f:bd: 20:91:ca:a2:e3:4f:1d:68:02:97:ac:58:2a:ad:79: 52:a7:39:e1:eb:ae:dc:ca:ef:89:bf:c8:7d:fa:6d: de:44:d8:1b:f0:2e:05:f8:66:3d:1e:56:7d:f3:dd: 97:b7:77:4d:7e:82:d8:1c:c3:40:a4:65:54:88:7d: ae:3c:c0:8e:fd:37:34:1a:a6:f1:c3:d7:ea:5a:f2: 08:34:bf:08:25:cd:50:c0:54:30:0e:79:9f:0b:a1: a5:33:96:36:9d:14:84:69:02:0a:0e:ac:aa:bb:a4: d5:a9:f8:40:d7:92:12:5f:c9:ed:3a:41:6d:1e:dc: 50:38:74:d3:92:f3:06:29:01:7d:c0:2b:0c:1f:0c: a8:81:cd:6f:7a:1b:dc:a5:e7:f1:54:07:8c:f9:9c: 3e:8c:13:54:47:74:6c:c4:e3:8b:cd:0e:5e:90:d2: b7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A9:20:C1:B0:F0:F3:08:D0:10:E6:02:67:CB:55:70:BC:CA:5C:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0b35dbe-6222-3779-becf-77ca814b407a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:b8:2e:eb:b0:b5:bb:66:de:84:ae:4d:34:71:b8:64:be:8d: 8a:c5:db:86:27:e9:9f:93:23:d7:9c:01:18:c8:53:c1:56:37: 54:91:cc:11:66:72:38:51:5d:ce:4d:ec:f7:4f:39:79:fc:41: 76:7a:65:c6:dc:90:52:0e:1c:a5:82:c9:bc:c5:35:1b:fd:c9: 60:ea:05:aa:4a:d1:c5:1f:8f:03:6d:d3:64:8b:15:7b:74:d1: 88:38:31:4a:69:91:bb:7a:51:a7:2e:ad:d6:b8:47:3b:f6:5f: ce:c2:e8:ff:25:01:1d:fb:96:89:89:77:8b:14:cf:05:7f:cd: c8:ff:c5:02:e7:af:b8:54:93:83:eb:23:80:78:1e:90:d0:f0: 1a:1c:a6:c4:57:85:3c:98:9c:e7:6f:1f:12:55:68:08:ca:de: 4d:0a:d9:96:f8:69:10:5c:bf:ae:06:d6:99:5f:17:95:b2:12: e3:97:e0:d9:6f:71:38:c0:a6:46:37:bd:ea:d1:9d:b6:5f:4d: 3a:fe:1b:50:a2:dd:3d:13:cd:59:34:14:d2:0b:db:3a:02:2e: b9:80:20:40:64:a1:d5:14:aa:01:e4:05:19:67:9f:cd:5c:76: a8:5e:11:88:ec:27:9f:e3:c1:05:9c:b4:63:2d:15:81:db:49: 94:b2:22:0a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1eGkGpCtg/FCjnBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk NzBiYjdkMGUtNzBjMS00Yjc1LWIxNWItNmFlMWM0MzI4ZjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTjytmGKRIDwAtfnOlRaKpUex0D86vENVzkj arIL8eVCDFTz4BO2RZRqOV5OCuZjcbr7nTzJcW24xSTieBGKgf+R1V5I0pi14DWZ YZ3T3XgzRLHmrahmH70gkcqi408daAKXrFgqrXlSpznh667cyu+Jv8h9+m3eRNgb 8C4F+GY9HlZ9892Xt3dNfoLYHMNApGVUiH2uPMCO/Tc0Gqbxw9fqWvIINL8IJc1Q wFQwDnmfC6GlM5Y2nRSEaQIKDqyqu6TVqfhA15ISX8ntOkFtHtxQOHTTkvMGKQF9 wCsMHwyogc1vehvcpefxVAeM+Zw+jBNUR3RsxOOLzQ5ekNK3CQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFWpIMGw8PMI0BDmAmfLVXC8ylz+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDBiMzVkYmUtNjIyMi0z Nzc5LWJlY2YtNzdjYTgxNGI0MDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHq4Luuwtbtm3oSuTTRxuGS+jYrF24Yn6Z+TI9ecARjIU8FWN1SR zBFmcjhRXc5N7PdPOXn8QXZ6ZcbckFIOHKWCybzFNRv9yWDqBapK0cUfjwNt02SL FXt00Yg4MUppkbt6Uacurda4Rzv2X87C6P8lAR37lomJd4sUzwV/zcj/xQLnr7hU k4PrI4B4HpDQ8BocpsRXhTyYnOdvHxJVaAjK3k0K2Zb4aRBcv64G1plfF5WyEuOX 4NlvcTjApkY3verRnbZfTTr+G1Ci3T0TzVk0FNIL2zoCLrmAIEBkodUUqgHkBRln n81cdqheEYjsJ5/jwQWctGMtFYHbSZSyIgo= -----END CERTIFICATE-----Generated at Fri Apr 17 12:09:24 2026 by rpki-client