$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0db33dc-2dfa-3d87-bc50-5f1803790926.roa File: d0db33dc-2dfa-3d87-bc50-5f1803790926.roa (raw, json) Hash identifier: YD3Dxk4sDiQgL6O1pgQnl/z6MaShDFe+N7WTO3GoY8E= Subject key identifier: 89:94:94:7C:F2:10:94:28:99:0F:F5:C0:53:D6:15:60:0D:27:10:C5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D6DA18A2FDB0857E5BDE08780 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0db33dc-2dfa-3d87-bc50-5f1803790926.roa Signing time: Tue 07 Apr 2026 14:30:10 +0000 ROA not before: Tue 07 Apr 2026 14:30:10 +0000 ROA not after: Mon 06 Jul 2026 14:30:10 +0000 asID: 396581 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:a1:8a:2f:db:08:57:e5:bd:e0:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 7 14:30:10 2026 GMT Not After : Jul 6 14:30:10 2026 GMT Subject: CN=a49c5f91-5ea7-41b0-a3ac-9af0f7eb3f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:5a:3d:6e:b7:bb:a5:21:ea:35:e0:8a:4a:2f: ab:de:da:32:12:56:29:5c:f8:88:fa:8f:ba:e1:9d: 28:e5:67:de:de:40:98:9f:82:f2:f9:ea:4f:89:38: 5f:4d:76:9e:0a:57:5d:9b:4b:bb:64:a3:94:f6:ae: c7:4c:32:9c:52:ac:0d:be:2d:93:9c:6c:6d:eb:cd: 44:55:bb:72:a3:8a:05:44:39:1f:3f:ba:1e:2b:0c: 28:89:f2:3d:8d:2c:ef:79:78:71:9f:96:d2:aa:88: c6:bf:0a:ef:7c:35:e9:5d:b5:a4:da:aa:69:ce:68: f9:35:88:90:27:f3:e9:e1:e9:ff:56:f6:fa:78:da: a4:bc:f3:59:12:25:a0:ed:7f:f4:16:ff:36:2b:35: 6d:8f:3a:e3:00:1f:40:bf:05:ce:2f:5b:fd:1a:5b: 3f:1f:57:2f:17:99:42:bd:2b:e5:05:25:d1:c0:5e: 8f:e2:90:1e:cb:a4:ae:bf:2c:e7:32:54:14:df:81: e7:b5:12:04:1f:9e:d9:83:8a:1d:88:ba:a4:4e:ab: 13:13:d5:ec:9b:0e:df:f7:63:fb:e6:c0:20:b0:0d: 60:e2:c7:70:e5:c1:e6:49:08:db:2a:6b:0c:12:08: 0d:14:41:29:a7:53:5a:e4:b0:98:fc:c8:b4:96:c5: 07:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:94:94:7C:F2:10:94:28:99:0F:F5:C0:53:D6:15:60:0D:27:10:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0db33dc-2dfa-3d87-bc50-5f1803790926.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:20:24:03:53:d2:6f:df:99:3c:c9:c1:56:33:0c:51:f0:5a: a0:4e:86:79:62:59:c5:73:7f:9f:16:f2:11:fe:67:ed:9b:d2: bb:bb:e8:e6:69:ee:26:24:87:fc:d6:1a:7e:2d:23:df:71:62: 5a:c1:90:54:9a:94:7d:88:e7:b0:f9:29:5a:62:cd:6e:ed:ff: b5:45:16:19:0b:f9:2b:43:22:bf:b7:ff:33:58:b7:78:cd:69: 96:3b:f8:47:97:3d:da:db:81:47:da:de:2c:f7:c8:d5:84:57: 17:35:41:34:dd:08:a8:13:7c:88:1d:32:0d:1e:0a:7c:80:6d: 28:ae:64:4a:28:83:32:98:31:26:c0:42:16:49:dd:fe:63:69: 60:eb:ed:cc:47:ae:1d:7b:41:74:ea:da:e2:5f:e5:46:2a:47: 94:ff:83:47:2f:5d:a4:78:44:f3:0b:0b:0b:f1:64:cb:b6:de: ea:48:9c:93:25:48:ca:52:d7:df:80:2b:88:93:d6:7a:33:01: 0f:6c:a1:42:3e:c6:6e:34:e5:46:8d:50:b6:f3:2a:0c:09:0d: ae:49:fe:a5:7c:ef:43:ae:89:47:06:64:d5:d2:1d:5a:22:8d: 85:b7:54:6b:ad:7c:f8:4c:fa:9d:0d:07:6f:d9:8a:54:30:0c: 80:01:5e:6e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1toYov2whX5b3gh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwNzE0MzAxMFoXDTI2MDcwNjE0MzAxMFowLzEtMCsGA1UEAxMk YTQ5YzVmOTEtNWVhNy00MWIwLWEzYWMtOWFmMGY3ZWIzZjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51o9bre7pSHqNeCKSi+r3toyElYpXPiI+o+6 4Z0o5Wfe3kCYn4Ly+epPiThfTXaeClddm0u7ZKOU9q7HTDKcUqwNvi2TnGxt681E Vbtyo4oFRDkfP7oeKwwoifI9jSzveXhxn5bSqojGvwrvfDXpXbWk2qppzmj5NYiQ J/Pp4en/Vvb6eNqkvPNZEiWg7X/0Fv82KzVtjzrjAB9AvwXOL1v9Gls/H1cvF5lC vSvlBSXRwF6P4pAey6SuvyznMlQU34HntRIEH57Zg4odiLqkTqsTE9Xsmw7f92P7 5sAgsA1g4sdw5cHmSQjbKmsMEggNFEEpp1Na5LCY/Mi0lsUH5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFImUlHzyEJQomQ/1wFPWFWANJxDFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDBkYjMzZGMtMmRmYS0z ZDg3LWJjNTAtNWYxODAzNzkwOTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADkgJANT0m/fmTzJwVYzDFHwWqBOhnliWcVzf58W8hH+Z+2b0ru7 6OZp7iYkh/zWGn4tI99xYlrBkFSalH2I57D5KVpizW7t/7VFFhkL+StDIr+3/zNY t3jNaZY7+EeXPdrbgUfa3iz3yNWEVxc1QTTdCKgTfIgdMg0eCnyAbSiuZEoogzKY MSbAQhZJ3f5jaWDr7cxHrh17QXTq2uJf5UYqR5T/g0cvXaR4RPMLCwvxZMu23upI nJMlSMpS19+AK4iT1nozAQ9soUI+xm405UaNULbzKgwJDa5J/qV870OuiUcGZNXS HVoijYW3VGutfPhM+p0NB2/ZilQwDIABXm4= -----END CERTIFICATE-----Generated at Fri Apr 17 12:11:29 2026 by rpki-client