$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7cb7f1f-a3e4-3c1f-bcaf-4ae2be42927c.roa File: d7cb7f1f-a3e4-3c1f-bcaf-4ae2be42927c.roa (raw, json) Hash identifier: +OSnAEFem20lNwKOjXqzoiJNymFhhRjla4pCNF7CyYE= Subject key identifier: DC:6E:FF:E0:F5:F3:B5:3C:C6:5F:5D:B2:A5:56:DF:2C:3C:E8:48:B7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D6DA192BCDFFFFF55E0E60580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7cb7f1f-a3e4-3c1f-bcaf-4ae2be42927c.roa Signing time: Tue 07 Apr 2026 14:30:14 +0000 ROA not before: Tue 07 Apr 2026 14:30:14 +0000 ROA not after: Mon 06 Jul 2026 14:30:14 +0000 asID: 397194 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:a1:92:bc:df:ff:ff:55:e0:e6:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 7 14:30:14 2026 GMT Not After : Jul 6 14:30:14 2026 GMT Subject: CN=c7de4089-0e2b-4178-943b-c64cee29e2c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dc:a0:e6:92:0e:25:19:a7:dc:d1:b0:a2:7c: 9d:80:f2:1b:7a:ad:9b:eb:eb:64:0a:0f:fc:db:ea: 6d:a7:07:16:95:81:6e:9d:54:24:72:f2:15:24:e0: 3d:75:b6:37:89:e7:b4:da:83:56:59:44:0f:2f:a1: 42:48:6e:af:49:fe:59:15:b2:4c:96:cf:c4:44:f5: 99:f3:5e:73:5c:38:80:d0:5b:e3:b3:fd:08:bd:3d: a6:fb:94:75:69:ff:88:8e:35:b5:33:53:ea:2c:26: d3:2c:64:df:3a:16:25:8d:5c:7f:2a:a2:02:0a:0b: ad:27:77:2f:74:bf:cf:85:84:2e:58:7d:f8:cc:f3: 23:98:79:d4:f2:eb:89:00:57:c4:e0:35:84:a9:db: b0:3e:a7:eb:4b:2e:c0:83:56:da:a7:c3:71:17:29: 05:f6:c7:72:8e:ac:06:a2:ca:70:bd:33:3f:f0:ce: 10:17:d9:a5:5f:a7:f6:88:62:d3:27:5b:58:9b:8c: d0:25:3f:07:67:df:19:3f:10:fc:cd:fc:f4:fe:4b: 02:88:85:29:90:d8:1c:89:4b:8e:b0:8e:de:a3:be: a2:a7:95:0c:d9:56:80:74:1a:7b:12:5d:d2:49:1c: c6:d9:c0:d6:40:1b:1c:73:71:3e:ba:fd:51:d5:db: d2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:6E:FF:E0:F5:F3:B5:3C:C6:5F:5D:B2:A5:56:DF:2C:3C:E8:48:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7cb7f1f-a3e4-3c1f-bcaf-4ae2be42927c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:a3:e7:fe:f2:31:98:33:12:98:36:fc:f3:9d:d1:3a:48:9a: a1:5f:b0:78:1e:d0:a2:cc:8d:ad:2e:f5:8c:a4:f0:4c:b4:aa: ec:4d:75:cb:d3:08:7b:45:dc:8b:af:c2:2c:58:38:c3:51:68: 8a:36:3b:c0:4b:6f:f3:6f:7a:eb:80:5a:0c:65:f5:84:fc:e9: c7:5c:dc:65:01:90:48:3a:9b:00:f4:9b:ae:67:fc:f4:b9:2d: 82:5c:40:2f:f6:c0:ed:14:aa:c7:86:27:45:5f:64:41:86:65: 31:34:3d:b6:c6:95:d0:ff:b5:16:bc:20:fa:08:02:cc:20:99: 1d:82:52:1d:0c:37:96:4b:89:45:ed:8d:ce:b8:bf:96:c3:29: 3d:b5:5b:4b:1a:fe:fb:61:35:43:2c:ae:13:4a:fe:56:bd:ff: c9:fa:67:7f:3f:b9:60:bc:30:5c:8c:f4:7c:fa:cf:98:89:b7: 9d:6e:96:cf:d2:67:f1:3c:95:6a:cf:78:5b:6f:3c:34:7b:40: 6e:ab:da:a5:64:ed:a4:e5:fc:d7:b3:29:86:4b:64:36:d4:a7: 67:b0:ba:06:7a:59:1c:ef:0a:b9:a3:20:a1:ea:d9:a0:6b:63: 04:7b:c4:d0:e4:20:c6:9d:42:e8:59:f6:08:a0:f4:47:96:15: 1e:c4:ff:71 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1toZK83///VeDmBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwNzE0MzAxNFoXDTI2MDcwNjE0MzAxNFowLzEtMCsGA1UEAxMk YzdkZTQwODktMGUyYi00MTc4LTk0M2ItYzY0Y2VlMjllMmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNyg5pIOJRmn3NGwonydgPIbeq2b6+tkCg/8 2+ptpwcWlYFunVQkcvIVJOA9dbY3iee02oNWWUQPL6FCSG6vSf5ZFbJMls/ERPWZ 815zXDiA0Fvjs/0IvT2m+5R1af+IjjW1M1PqLCbTLGTfOhYljVx/KqICCgutJ3cv dL/PhYQuWH34zPMjmHnU8uuJAFfE4DWEqduwPqfrSy7Ag1bap8NxFykF9sdyjqwG ospwvTM/8M4QF9mlX6f2iGLTJ1tYm4zQJT8HZ98ZPxD8zfz0/ksCiIUpkNgciUuO sI7eo76ip5UM2VaAdBp7El3SSRzG2cDWQBscc3E+uv1R1dvS7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNxu/+D187U8xl9dsqVW3yw86Ei3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDdjYjdmMWYtYTNlNC0z YzFmLWJjYWYtNGFlMmJlNDI5MjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADCj5/7yMZgzEpg2/POd0TpImqFfsHge0KLMja0u9Yyk8Ey0quxN dcvTCHtF3IuvwixYOMNRaIo2O8BLb/NveuuAWgxl9YT86cdc3GUBkEg6mwD0m65n /PS5LYJcQC/2wO0UqseGJ0VfZEGGZTE0PbbGldD/tRa8IPoIAswgmR2CUh0MN5ZL iUXtjc64v5bDKT21W0sa/vthNUMsrhNK/la9/8n6Z38/uWC8MFyM9Hz6z5iJt51u ls/SZ/E8lWrPeFtvPDR7QG6r2qVk7aTl/NezKYZLZDbUp2ewugZ6WRzvCrmjIKHq 2aBrYwR7xNDkIMadQuhZ9gig9EeWFR7E/3E= -----END CERTIFICATE-----Generated at Fri Apr 17 05:26:20 2026 by rpki-client