$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d75a23ba-d45e-39e8-9f19-580ef07574e1.roa File: d75a23ba-d45e-39e8-9f19-580ef07574e1.roa (raw, json) Hash identifier: shCSNF6mqMY4YBfc8JCSKVFSpU4iiiLyM6TdYPGsMAU= Subject key identifier: 4E:75:5B:3C:29:4C:73:EB:F2:75:9E:E8:F9:C9:3C:82:AF:9A:86:AF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D6DA18438C2A3D44705E51B00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d75a23ba-d45e-39e8-9f19-580ef07574e1.roa Signing time: Tue 07 Apr 2026 14:30:07 +0000 ROA not before: Tue 07 Apr 2026 14:30:07 +0000 ROA not after: Mon 06 Jul 2026 14:30:07 +0000 asID: 396562 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:a1:84:38:c2:a3:d4:47:05:e5:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 7 14:30:07 2026 GMT Not After : Jul 6 14:30:07 2026 GMT Subject: CN=7e240965-9449-4ae9-bdae-48607eaacca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:78:79:9f:08:97:41:ee:50:83:1c:b9:5a:fa: a1:7f:bb:4e:e1:eb:8f:a5:40:cf:c3:09:46:56:6b: 91:59:81:67:e4:0f:47:c0:a4:4b:e0:6f:e4:31:da: c5:14:f3:b0:a3:f4:bd:a8:0d:d2:be:c1:ec:fb:35: e5:bf:46:12:b3:fe:09:e5:45:ac:08:da:36:66:6e: 11:5d:04:36:60:5d:ee:5c:22:03:6f:50:9c:3a:fd: ce:81:e3:76:8c:1e:4c:f0:fe:5a:66:0f:08:06:25: a8:9c:06:f7:25:c0:37:33:75:51:cd:f5:aa:ef:e1: b5:83:32:f2:e5:13:ec:62:61:cd:4f:62:5b:77:97: ca:05:b5:f9:07:9e:1e:95:4d:35:27:27:da:85:9d: 7e:d4:84:77:6d:22:28:f2:11:c9:e4:93:29:fb:c8: 61:b0:87:fb:0a:79:3e:73:d2:eb:b3:b9:c7:f3:06: 2c:52:5a:2a:e9:d8:2f:7a:bf:21:f2:4c:99:56:04: b6:6f:cc:b1:ec:c3:62:a5:11:40:f2:85:e7:32:f4: a2:88:da:e4:55:a8:eb:d7:13:9f:ce:c6:52:e4:f1: 75:74:39:55:9b:e3:57:aa:2d:e8:1e:14:e2:dc:dc: 3a:3f:87:8c:ae:d4:71:78:ff:03:e8:b9:6e:65:40: 77:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:75:5B:3C:29:4C:73:EB:F2:75:9E:E8:F9:C9:3C:82:AF:9A:86:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d75a23ba-d45e-39e8-9f19-580ef07574e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:73:23:0e:8c:5f:b8:b2:28:11:24:6d:e7:03:3c:ac:b1:6c: c1:6d:f2:b4:47:b3:f5:9e:95:c8:ff:d7:86:9c:a1:4f:4f:b8: b1:58:4a:43:d5:42:3d:ef:46:e9:ff:e9:2e:da:98:87:e1:5f: db:63:ef:ec:3f:e8:f7:e7:cc:86:08:89:81:ac:63:f7:31:c8: e3:fe:75:69:75:67:10:46:87:19:f2:5a:52:30:78:8f:66:70: 82:73:03:0a:40:a0:5b:51:aa:dd:11:84:0b:83:c8:6e:86:8a: 87:ce:2d:b8:36:20:00:44:b4:c7:50:46:61:51:ad:80:9a:b2: fa:ee:ee:9d:53:89:00:b6:5a:c2:c6:8b:5b:c0:f5:ae:cc:c0: 42:0b:13:f9:17:ea:ec:53:f7:4b:45:32:de:d3:c2:58:41:38: de:e4:c6:c5:36:45:8c:af:d5:e2:de:3d:09:83:17:5c:63:25: 78:2c:44:68:da:6a:d8:cf:e0:33:97:d2:73:3b:0b:4a:59:32: d4:50:74:b9:c6:b6:69:79:d1:9e:ea:c9:c3:94:14:41:77:20: 34:51:2d:39:de:a6:a3:8c:df:07:63:2d:61:79:06:f8:30:35: d0:c2:b9:8a:a6:5c:f1:46:2e:51:e8:79:d1:66:dd:49:49:c2: 13:28:91:65 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1toYQ4wqPURwXlGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwNzE0MzAwN1oXDTI2MDcwNjE0MzAwN1owLzEtMCsGA1UEAxMk N2UyNDA5NjUtOTQ0OS00YWU5LWJkYWUtNDg2MDdlYWFjY2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHh5nwiXQe5Qgxy5Wvqhf7tO4euPpUDPwwlG VmuRWYFn5A9HwKRL4G/kMdrFFPOwo/S9qA3SvsHs+zXlv0YSs/4J5UWsCNo2Zm4R XQQ2YF3uXCIDb1CcOv3OgeN2jB5M8P5aZg8IBiWonAb3JcA3M3VRzfWq7+G1gzLy 5RPsYmHNT2Jbd5fKBbX5B54elU01JyfahZ1+1IR3bSIo8hHJ5JMp+8hhsIf7Cnk+ c9Lrs7nH8wYsUloq6dgver8h8kyZVgS2b8yx7MNipRFA8oXnMvSiiNrkVajr1xOf zsZS5PF1dDlVm+NXqi3oHhTi3Nw6P4eMrtRxeP8D6LluZUB3gQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE51WzwpTHPr8nWe6PnJPIKvmoavMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDc1YTIzYmEtZDQ1ZS0z OWU4LTlmMTktNTgwZWYwNzU3NGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALRzIw6MX7iyKBEkbecDPKyxbMFt8rRHs/Welcj/14acoU9PuLFY SkPVQj3vRun/6S7amIfhX9tj7+w/6PfnzIYIiYGsY/cxyOP+dWl1ZxBGhxnyWlIw eI9mcIJzAwpAoFtRqt0RhAuDyG6GiofOLbg2IABEtMdQRmFRrYCasvru7p1TiQC2 WsLGi1vA9a7MwEILE/kX6uxT90tFMt7TwlhBON7kxsU2RYyv1eLePQmDF1xjJXgs RGjaatjP4DOX0nM7C0pZMtRQdLnGtml50Z7qycOUFEF3IDRRLTnepqOM3wdjLWF5 BvgwNdDCuYqmXPFGLlHoedFm3UlJwhMokWU= -----END CERTIFICATE-----Generated at Fri Apr 17 11:26:29 2026 by rpki-client