$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc9f89bb-9b8f-3d88-bc1b-caa5c7271fd5.roa File: dc9f89bb-9b8f-3d88-bc1b-caa5c7271fd5.roa (raw, json) Hash identifier: LR2MSUrZZt+rNgLxvv2q6isHVL86rLoCak9YxEPH0NE= Subject key identifier: D4:F8:4E:2F:2D:17:38:95:BC:E5:D0:3C:6B:A3:EF:B3:0C:61:76:92 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D732BD3DB6E8C09791C99E040 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc9f89bb-9b8f-3d88-bc1b-caa5c7271fd5.roa Signing time: Thu 09 Apr 2026 14:07:51 +0000 ROA not before: Thu 09 Apr 2026 14:07:51 +0000 ROA not after: Wed 08 Jul 2026 14:07:51 +0000 asID: 397208 IP address blocks: 2001:500:133::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:73:2b:d3:db:6e:8c:09:79:1c:99:e0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 9 14:07:51 2026 GMT Not After : Jul 8 14:07:51 2026 GMT Subject: CN=ed7e4bdc-32fb-4d1f-a9fa-635a79c1db06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:46:cc:05:1c:e6:fa:97:32:ef:a3:77:c4:e2: 5b:b4:ac:fb:07:3b:2b:5c:51:ed:7c:70:21:8c:38: e6:f4:c2:0a:c6:5e:ed:61:8a:40:65:6e:04:ca:39: 07:ec:d8:23:8e:99:77:4a:b9:92:a6:6a:2d:38:a3: 9c:83:24:fc:c9:ca:f2:93:dc:93:6b:a2:94:7c:07: 25:e1:06:72:41:b4:d9:cc:b1:76:b8:31:f9:a1:4f: c4:a4:85:a1:36:7a:f0:a6:9c:a1:96:94:18:46:65: 04:0e:3a:56:85:58:7c:2c:76:6c:ed:46:6f:9e:dc: 30:08:f8:98:61:61:b3:3d:11:d7:b7:39:59:24:67: 33:8f:98:b8:b6:06:a6:ab:9f:5d:45:fd:0a:1b:6b: 81:d9:2a:d8:34:93:db:fa:0b:4b:c8:9e:f2:3e:e7: 06:da:3b:3e:1c:df:d4:7a:0e:e7:ce:63:41:f3:70: de:76:d4:4b:7d:54:03:d8:9b:41:4d:f0:5d:29:cb: 9e:ef:02:48:19:3e:98:8b:ca:39:db:1e:36:d6:f1: e4:82:66:c5:1c:b7:73:3e:37:13:7e:fd:9a:5d:d4: 1b:8f:33:ad:c8:1c:22:4f:e6:82:89:25:e4:16:8b: d4:37:61:f3:ce:cd:30:d2:8e:57:45:69:0e:1b:8e: 61:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F8:4E:2F:2D:17:38:95:BC:E5:D0:3C:6B:A3:EF:B3:0C:61:76:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc9f89bb-9b8f-3d88-bc1b-caa5c7271fd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:7a:3f:64:3a:8f:9a:96:20:75:5f:6c:9d:25:e8:cb:b3:ec: 5e:f4:91:15:f1:22:38:d3:8e:93:59:35:02:4c:d0:1c:d6:bf: 3c:53:f3:66:5c:c2:92:5a:69:b0:21:98:f8:c1:ea:f3:89:35: 36:52:d5:11:27:87:4a:ce:6b:5b:25:33:13:9a:00:94:ae:d1: 6f:34:45:77:41:49:9d:1c:15:ab:09:4e:5c:64:8b:1f:05:76: 40:a5:8c:f6:97:fc:b6:28:9d:94:03:d3:c4:56:99:bf:b8:75: 90:6a:27:e9:d8:87:c3:e6:63:4a:7a:21:03:38:fb:94:55:2b: d5:81:97:96:11:8b:60:74:c3:9b:69:d6:55:6c:b0:6a:70:df: f2:01:b3:b0:17:07:1f:04:be:8d:ae:2b:1b:11:43:d9:5c:73: 4a:00:47:11:e4:4b:e0:59:71:09:3d:36:33:75:7a:4c:33:16: fd:0a:27:ac:df:53:3d:81:00:85:fd:bf:29:a3:23:9c:da:70: c0:64:89:b1:df:50:22:9b:1f:9d:96:27:0d:7a:1d:b4:7b:fd: 93:be:d3:84:5e:4d:68:5e:08:4e:01:23:12:71:00:59:3f:b3: 01:1e:a1:5d:66:69:6d:1d:6f:61:0f:7c:a6:4b:34:93:5b:eb: 5a:09:32:f9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1zK9PbbowJeRyZ4EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwOTE0MDc1MVoXDTI2MDcwODE0MDc1MVowLzEtMCsGA1UEAxMk ZWQ3ZTRiZGMtMzJmYi00ZDFmLWE5ZmEtNjM1YTc5YzFkYjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUbMBRzm+pcy76N3xOJbtKz7BzsrXFHtfHAh jDjm9MIKxl7tYYpAZW4EyjkH7Ngjjpl3SrmSpmotOKOcgyT8ycryk9yTa6KUfAcl 4QZyQbTZzLF2uDH5oU/EpIWhNnrwppyhlpQYRmUEDjpWhVh8LHZs7UZvntwwCPiY YWGzPRHXtzlZJGczj5i4tgamq59dRf0KG2uB2SrYNJPb+gtLyJ7yPucG2js+HN/U eg7nzmNB83DedtRLfVQD2JtBTfBdKcue7wJIGT6Yi8o52x421vHkgmbFHLdzPjcT fv2aXdQbjzOtyBwiT+aCiSXkFovUN2Hzzs0w0o5XRWkOG45hpQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNT4Ti8tFziVvOXQPGuj77MMYXaSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGM5Zjg5YmItOWI4Zi0z ZDg4LWJjMWItY2FhNWM3MjcxZmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB56P2Q6j5qWIHVfbJ0l6Muz7F70kRXxIjjTjpNZNQJM0BzWvzxT 82ZcwpJaabAhmPjB6vOJNTZS1REnh0rOa1slMxOaAJSu0W80RXdBSZ0cFasJTlxk ix8FdkCljPaX/LYonZQD08RWmb+4dZBqJ+nYh8PmY0p6IQM4+5RVK9WBl5YRi2B0 w5tp1lVssGpw3/IBs7AXBx8Evo2uKxsRQ9lcc0oARxHkS+BZcQk9NjN1ekwzFv0K J6zfUz2BAIX9vymjI5zacMBkibHfUCKbH52WJw16HbR7/ZO+04ReTWheCE4BIxJx AFk/swEeoV1maW0db2EPfKZLNJNb61oJMvk= -----END CERTIFICATE-----Generated at Fri Apr 17 01:18:42 2026 by rpki-client