$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d1ff1099-acd8-358e-b072-4a23c7f92d73.roa File: d1ff1099-acd8-358e-b072-4a23c7f92d73.roa (raw, json) Hash identifier: SpO5YVjY/9UPgv/3cEjNV223VVqcteP8mAkEal/kJyk= Subject key identifier: AF:72:3F:F2:05:40:C3:03:C1:43:D3:32:DF:96:C4:6D:1F:28:70:AD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D59EAB1D15A865119803D9680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d1ff1099-acd8-358e-b072-4a23c7f92d73.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 397207 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:b1:d1:5a:86:51:19:80:3d:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=a11a62c0-d901-41f1-a672-63c7919b8bb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:73:ba:80:e4:c0:c7:3f:9a:53:2b:1b:47:43: 19:96:43:a8:8c:40:31:ca:25:03:d9:6f:d0:62:6d: 34:19:ca:28:c0:22:de:76:be:90:ad:41:c3:c3:bb: c0:0f:4b:46:00:c4:74:59:a2:c3:b9:1e:9d:af:b0: 43:7b:85:2d:aa:2a:5e:ad:c7:83:fe:c3:8d:01:8f: 8b:4f:2a:51:f4:09:60:44:16:57:96:c7:a0:6f:67: 7c:1f:42:58:26:9b:3c:7f:92:55:87:75:37:03:50: 24:2d:43:d3:5b:68:b8:81:91:5e:06:34:89:dc:28: 88:23:94:a5:f6:ed:b5:63:e3:d3:e3:a3:aa:83:04: cd:a2:2d:9e:5a:ad:ea:c1:d1:72:8c:7f:2b:c5:e2: 02:3d:18:f8:d6:8c:fc:e6:83:04:82:a4:b1:d6:14: 38:f6:3e:66:11:5f:3c:ef:81:5f:73:2b:85:a7:66: 59:e1:70:f4:6e:62:ec:03:cd:ae:a0:a7:51:9c:ce: 90:64:f3:78:d7:a8:73:cc:d6:a0:65:d1:ea:e4:6b: 3f:94:ce:4b:31:11:e5:dd:06:b1:78:57:38:ac:08: 70:38:2d:5e:c5:11:f6:5e:50:54:4e:02:fd:fb:7b: 5d:62:82:ab:fc:97:de:a0:da:1b:13:f0:b0:c9:3c: 45:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:72:3F:F2:05:40:C3:03:C1:43:D3:32:DF:96:C4:6D:1F:28:70:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d1ff1099-acd8-358e-b072-4a23c7f92d73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:4c:ac:8f:44:a6:61:3b:70:02:2f:6d:40:34:89:70:d1:b4: bd:5b:52:0b:1f:2b:90:97:21:87:5e:44:6d:e3:8e:3f:97:5f: 44:85:4d:43:93:d2:d6:56:8f:1a:da:fb:b7:14:7b:be:85:27: 23:84:6f:df:2b:78:fc:b3:f3:a4:53:74:c5:8a:9a:f5:88:44: 7d:1b:e9:00:94:fb:67:ab:90:e0:87:82:15:a2:54:a8:6e:c8: c4:30:f9:66:66:43:1d:f1:c2:b4:01:db:d7:fb:ac:c8:71:ac: d0:be:4f:70:a1:74:d4:6a:4e:65:7b:d5:ac:86:35:a5:1a:2c: 20:1c:45:82:f6:01:f2:a5:48:64:aa:5f:49:2a:35:59:6d:0c: e8:b7:97:af:63:bd:d9:d7:97:5b:c0:ba:35:cb:5c:fd:df:07: 33:78:02:03:51:85:8a:92:81:03:49:65:77:a0:8e:9f:9d:4d: a6:a4:c1:a2:99:eb:ce:1a:d4:b0:e1:21:05:f1:f9:75:69:06: 7d:dd:cf:f0:b4:a1:dd:da:01:03:23:d8:df:16:53:0f:44:c3: 24:bb:09:17:2c:ca:63:e2:72:6d:ff:20:25:60:71:ec:21:6b: 3b:40:7e:6d:a0:0a:22:66:e6:02:71:60:19:3b:50:bc:49:6a: c2:da:f0:9b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6rHRWoZRGYA9loAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk YTExYTYyYzAtZDkwMS00MWYxLWE2NzItNjNjNzkxOWI4YmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXO6gOTAxz+aUysbR0MZlkOojEAxyiUD2W/Q Ym00GcoowCLedr6QrUHDw7vAD0tGAMR0WaLDuR6dr7BDe4UtqiperceD/sONAY+L TypR9AlgRBZXlsegb2d8H0JYJps8f5JVh3U3A1AkLUPTW2i4gZFeBjSJ3CiII5Sl 9u21Y+PT46OqgwTNoi2eWq3qwdFyjH8rxeICPRj41oz85oMEgqSx1hQ49j5mEV88 74FfcyuFp2ZZ4XD0bmLsA82uoKdRnM6QZPN416hzzNagZdHq5Gs/lM5LMRHl3Qax eFc4rAhwOC1exRH2XlBUTgL9+3tdYoKr/JfeoNobE/CwyTxFUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK9yP/IFQMMDwUPTMt+WxG0fKHCtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDFmZjEwOTktYWNkOC0z NThlLWIwNzItNGEyM2M3ZjkyZDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAlMrI9EpmE7cAIvbUA0iXDRtL1bUgsfK5CXIYdeRG3jjj+XX0SF TUOT0tZWjxra+7cUe76FJyOEb98rePyz86RTdMWKmvWIRH0b6QCU+2erkOCHghWi VKhuyMQw+WZmQx3xwrQB29f7rMhxrNC+T3ChdNRqTmV71ayGNaUaLCAcRYL2AfKl SGSqX0kqNVltDOi3l69jvdnXl1vAujXLXP3fBzN4AgNRhYqSgQNJZXegjp+dTaak waKZ684a1LDhIQXx+XVpBn3dz/C0od3aAQMj2N8WUw9EwyS7CRcsymPicm3/ICVg cewhaztAfm2gCiJm5gJxYBk7ULxJasLa8Js= -----END CERTIFICATE-----Generated at Fri Apr 17 03:46:17 2026 by rpki-client