$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8908b19-46a3-36e8-8bd6-d469dda3df1c.roa File: d8908b19-46a3-36e8-8bd6-d469dda3df1c.roa (raw, json) Hash identifier: AMj+YEpRQ5uGi79MVLJoetGMm1z4QOmWw093HtDpAB0= Subject key identifier: 5D:33:0C:F4:55:C1:40:67:A2:C6:AE:DC:2D:DD:93:B4:80:48:73:5B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D6DA19CC219F79083A4804300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8908b19-46a3-36e8-8bd6-d469dda3df1c.roa Signing time: Tue 07 Apr 2026 14:30:19 +0000 ROA not before: Tue 07 Apr 2026 14:30:19 +0000 ROA not after: Mon 06 Jul 2026 14:30:19 +0000 asID: 396546 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:a1:9c:c2:19:f7:90:83:a4:80:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 7 14:30:19 2026 GMT Not After : Jul 6 14:30:19 2026 GMT Subject: CN=3f41b34f-4393-4483-95fd-e5beebc40de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:40:00:d1:37:16:94:02:32:f1:ca:3f:f3:0a: a9:6f:e6:a5:9b:cb:c1:64:48:0d:cd:55:ca:de:b4: b4:d0:dd:21:34:b2:3b:a1:95:c3:b2:8e:92:ee:e3: 37:ad:59:ba:9d:d9:1d:bf:5e:1c:e0:69:42:0f:aa: 86:ec:2b:6e:72:a1:4e:fb:04:12:b7:81:66:6c:aa: 10:4b:fa:ea:25:19:6a:b9:4e:9d:55:e2:40:f4:86: bc:78:d7:d2:00:e1:85:5d:61:06:49:ee:ea:87:44: 59:1d:d0:f6:ba:29:05:23:71:86:e0:b4:e5:7a:42: 16:22:e3:e6:3e:16:ac:4c:cf:0b:47:5f:75:49:73: 34:a4:71:08:e4:41:8b:d5:e8:ff:64:72:82:f6:78: 7b:fa:62:39:42:54:18:ac:b7:72:86:12:f4:06:af: 94:01:22:1e:ea:d4:62:70:c7:c9:d4:fb:ee:4d:ea: 5f:e1:e4:35:cf:85:fa:24:70:ed:3e:0f:99:cd:26: 45:a0:f4:49:f4:01:aa:da:8d:73:27:69:1b:1a:c8: 7c:18:2c:23:26:4a:6b:b7:d9:47:01:46:ee:62:4c: a6:be:6c:c2:2f:1b:f8:93:9b:b0:a2:46:90:18:66: 74:16:69:58:c7:93:52:8e:a3:7d:e0:3b:53:c2:a6: 96:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:33:0C:F4:55:C1:40:67:A2:C6:AE:DC:2D:DD:93:B4:80:48:73:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8908b19-46a3-36e8-8bd6-d469dda3df1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:db:6d:1e:03:85:a2:f7:b8:7a:b5:3d:37:68:89:1b:4c:b3: 17:ff:4f:44:20:7e:5a:ae:76:a1:30:da:8f:56:1f:fd:1d:7c: 0d:45:34:eb:45:02:79:be:e2:db:24:6d:db:ad:a7:2a:2b:89: e4:84:0f:54:c9:82:6b:9b:56:e5:17:cc:d5:52:64:2d:a3:92: 96:66:db:4e:3b:43:cf:06:20:e7:0b:02:2b:33:59:9f:6a:1b: 96:4a:79:19:8e:43:18:e3:18:dc:31:05:49:7f:a3:bc:00:4f: 4f:10:cb:17:63:be:4c:59:87:37:26:1a:3d:04:42:1f:62:ef: 76:ea:2d:bf:a7:a2:44:9c:06:fa:99:f9:f1:80:09:4d:6c:cb: 34:f8:42:da:49:49:01:ac:e1:fb:c8:73:3f:f5:f7:34:91:ed: d2:91:12:2b:12:b0:9e:bc:a3:32:fb:01:d6:b0:3e:92:56:b2: 26:cb:6a:3b:44:e6:a9:f8:bd:73:0b:d3:69:f4:64:61:f5:c5: 48:68:a0:6b:fc:ab:3f:dc:29:8c:f2:4b:4a:40:0d:bc:27:36: e1:5f:80:44:89:be:e1:da:38:bc:5a:53:64:ad:53:7d:63:1e: ca:89:64:77:f5:e3:08:8e:eb:b7:05:f6:85:4d:c8:04:10:c3: 70:99:03:7d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1toZzCGfeQg6SAQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwNzE0MzAxOVoXDTI2MDcwNjE0MzAxOVowLzEtMCsGA1UEAxMk M2Y0MWIzNGYtNDM5My00NDgzLTk1ZmQtZTViZWViYzQwZGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0AA0TcWlAIy8co/8wqpb+alm8vBZEgNzVXK 3rS00N0hNLI7oZXDso6S7uM3rVm6ndkdv14c4GlCD6qG7CtucqFO+wQSt4FmbKoQ S/rqJRlquU6dVeJA9Ia8eNfSAOGFXWEGSe7qh0RZHdD2uikFI3GG4LTlekIWIuPm PhasTM8LR191SXM0pHEI5EGL1ej/ZHKC9nh7+mI5QlQYrLdyhhL0Bq+UASIe6tRi cMfJ1PvuTepf4eQ1z4X6JHDtPg+ZzSZFoPRJ9AGq2o1zJ2kbGsh8GCwjJkprt9lH AUbuYkymvmzCLxv4k5uwokaQGGZ0FmlYx5NSjqN94DtTwqaWMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF0zDPRVwUBnosau3C3dk7SASHNbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDg5MDhiMTktNDZhMy0z NmU4LThiZDYtZDQ2OWRkYTNkZjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB3bbR4DhaL3uHq1PTdoiRtMsxf/T0QgflqudqEw2o9WH/0dfA1F NOtFAnm+4tskbdutpyorieSED1TJgmubVuUXzNVSZC2jkpZm2047Q88GIOcLAisz WZ9qG5ZKeRmOQxjjGNwxBUl/o7wAT08QyxdjvkxZhzcmGj0EQh9i73bqLb+nokSc BvqZ+fGACU1syzT4QtpJSQGs4fvIcz/19zSR7dKREisSsJ68ozL7AdawPpJWsibL ajtE5qn4vXML02n0ZGH1xUhooGv8qz/cKYzyS0pADbwnNuFfgESJvuHaOLxaU2St U31jHsqJZHf14wiO67cF9oVNyAQQw3CZA30= -----END CERTIFICATE-----Generated at Fri Apr 17 12:11:17 2026 by rpki-client