$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db97597e-4798-3bae-9cc7-ada88d299f0a.roa File: db97597e-4798-3bae-9cc7-ada88d299f0a.roa (raw, json) Hash identifier: b1mx81IIk3tfIlOjOGAm/aqvrfKyKCEEHfZsE2W/m48= Subject key identifier: 4F:A9:88:E3:08:71:53:FB:5E:D0:2D:0E:A6:CD:29:CE:D7:6B:2E:17 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D6DA18CEB2AA360BBDA6FAC00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db97597e-4798-3bae-9cc7-ada88d299f0a.roa Signing time: Tue 07 Apr 2026 14:30:11 +0000 ROA not before: Tue 07 Apr 2026 14:30:11 +0000 ROA not after: Mon 06 Jul 2026 14:30:11 +0000 asID: 36626 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:a1:8c:eb:2a:a3:60:bb:da:6f:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 7 14:30:11 2026 GMT Not After : Jul 6 14:30:11 2026 GMT Subject: CN=be873323-4b95-4518-b4a5-acca3fb7e5f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:16:07:da:7d:2b:37:ad:cc:bd:6b:5e:5d:bc: c0:c8:b5:f9:a0:a4:1a:b3:eb:3a:4b:62:8d:e9:66: 87:5a:d4:ef:c3:0d:0b:eb:a7:45:aa:a4:5a:bf:1b: c7:c8:a8:21:18:60:96:b0:08:c1:ed:df:fb:79:67: e6:99:07:54:8e:3f:8b:1c:c2:02:53:0e:8f:06:fa: 19:57:ba:b5:6f:2e:fc:05:16:ee:f0:7e:69:f6:35: 6f:35:0d:0b:d0:5f:09:62:b0:02:d0:63:30:92:fa: 25:b9:bd:1c:de:fd:0e:ec:9a:fe:5d:0a:7b:db:c2: 98:ca:32:dd:a7:c0:73:e2:64:9a:10:84:36:43:87: 77:40:f8:ae:e2:72:47:dd:3b:e1:31:16:ed:bc:fe: d9:3b:70:db:04:d2:48:2d:3c:0b:92:e0:87:0a:14: 63:bb:ed:91:57:2f:1b:ed:a0:e8:ba:66:61:bd:7f: 74:60:ca:72:b4:22:fa:bf:ab:9e:22:0b:51:9f:d8: 99:15:3f:7b:01:74:03:de:14:95:26:69:6f:23:a4: a2:fb:14:91:07:47:95:9d:88:11:54:e7:3d:eb:48: d5:b8:dd:f6:5f:32:ad:88:c7:7e:6c:0a:30:c1:81: 3e:20:c7:a0:92:c4:00:f7:5b:71:4d:e5:59:f0:7e: f9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A9:88:E3:08:71:53:FB:5E:D0:2D:0E:A6:CD:29:CE:D7:6B:2E:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db97597e-4798-3bae-9cc7-ada88d299f0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:d5:76:44:e3:e3:71:9d:e8:4a:a4:b7:68:00:b7:36:e9:01: 01:87:5e:5d:45:a2:0a:45:64:33:fc:dc:19:f0:2f:f8:df:5c: ef:23:44:f5:ea:69:f4:f8:10:f3:77:f8:e5:da:b0:d4:f4:c3: 38:f2:33:88:9f:30:9c:1b:0a:b7:7d:29:24:9c:8f:cb:88:c9: 13:56:00:48:29:20:cf:c7:b3:05:cf:93:ec:34:cb:8d:19:5d: ae:78:25:26:d9:f2:8d:d0:6a:ad:94:7f:54:d2:65:1c:48:50: 11:e0:90:9e:63:71:b8:fd:51:8b:43:26:8a:58:33:28:9c:7f: aa:b4:23:cc:63:82:97:6f:e5:79:08:ad:6a:87:92:3a:14:ac: 45:bd:3d:48:c6:79:99:f8:76:aa:61:e9:e5:2f:ce:f8:0d:ce: 84:9d:7c:43:51:22:b9:40:87:60:ea:a2:8c:f1:15:a2:37:3c: 3a:14:31:c9:2b:85:d4:1a:f6:a0:8b:41:10:00:17:17:7e:09: 99:6f:e8:95:23:8c:e9:52:2d:01:c3:3c:76:6c:68:2f:ac:ba: 76:79:d0:05:50:ed:4f:3a:62:82:46:1b:c0:71:ea:4a:ac:30: 06:db:75:84:17:d5:ea:93:d2:d2:ca:6f:f7:c8:b4:89:2b:04: 31:c1:47:c4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1toYzrKqNgu9pvrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwNzE0MzAxMVoXDTI2MDcwNjE0MzAxMVowLzEtMCsGA1UEAxMk YmU4NzMzMjMtNGI5NS00NTE4LWI0YTUtYWNjYTNmYjdlNWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBYH2n0rN63MvWteXbzAyLX5oKQas+s6S2KN 6WaHWtTvww0L66dFqqRavxvHyKghGGCWsAjB7d/7eWfmmQdUjj+LHMICUw6PBvoZ V7q1by78BRbu8H5p9jVvNQ0L0F8JYrAC0GMwkvolub0c3v0O7Jr+XQp728KYyjLd p8Bz4mSaEIQ2Q4d3QPiu4nJH3TvhMRbtvP7ZO3DbBNJILTwLkuCHChRju+2RVy8b 7aDoumZhvX90YMpytCL6v6ueIgtRn9iZFT97AXQD3hSVJmlvI6Si+xSRB0eVnYgR VOc960jVuN32XzKtiMd+bAowwYE+IMegksQA91txTeVZ8H75VQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE+piOMIcVP7XtAtDqbNKc7Xay4XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGI5NzU5N2UtNDc5OC0z YmFlLTljYzctYWRhODhkMjk5ZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAvVdkTj43Gd6Eqkt2gAtzbpAQGHXl1FogpFZDP83BnwL/jfXO8j RPXqafT4EPN3+OXasNT0wzjyM4ifMJwbCrd9KSScj8uIyRNWAEgpIM/HswXPk+w0 y40ZXa54JSbZ8o3Qaq2Uf1TSZRxIUBHgkJ5jcbj9UYtDJopYMyicf6q0I8xjgpdv 5XkIrWqHkjoUrEW9PUjGeZn4dqph6eUvzvgNzoSdfENRIrlAh2DqoozxFaI3PDoU MckrhdQa9qCLQRAAFxd+CZlv6JUjjOlSLQHDPHZsaC+sunZ50AVQ7U86YoJGG8Bx 6kqsMAbbdYQX1eqT0tLKb/fItIkrBDHBR8Q= -----END CERTIFICATE-----Generated at Fri Apr 17 10:41:57 2026 by rpki-client