$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd799fd7-109b-32eb-b4e2-45bea5e59129.roa File: dd799fd7-109b-32eb-b4e2-45bea5e59129.roa (raw, json) Hash identifier: xeqbKK003X8UqkH2zj8WdhNk3M5A98DdTCem/j0AfQA= Subject key identifier: A3:8D:28:D7:C9:DE:6F:AE:3F:98:37:48:D3:00:F2:0F:B1:1D:03:FC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D59EA4E697BCC28281D5C5940 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd799fd7-109b-32eb-b4e2-45bea5e59129.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 396581 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:4e:69:7b:cc:28:28:1d:5c:59:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=e9f27c11-1a9b-4917-a571-ba11d4233957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7c:c7:70:e8:e3:ba:a2:d1:e0:fd:74:ad:92: 94:7b:91:1d:83:09:87:16:c3:2e:d7:c1:63:03:d6: ca:a6:ca:4d:8e:67:21:e1:71:cf:4b:93:18:52:65: d9:09:c1:28:fa:e1:f2:6f:af:40:1b:5c:f7:b4:74: 55:14:2f:0d:fb:d3:57:eb:d4:fb:71:02:d4:de:6c: bc:ae:8e:3a:5e:14:07:a0:4a:fb:ca:f8:7a:0f:ea: 5d:b4:19:4e:f2:fa:dd:f7:be:66:3c:7c:4a:68:ab: 7b:40:54:16:de:fb:e7:74:60:87:62:ed:df:cc:93: 11:90:29:93:61:2b:97:a9:25:3d:89:1c:14:52:c1: c2:49:c0:6f:18:05:fe:0e:10:b2:ee:72:65:f9:e9: e0:17:10:5e:78:30:0a:53:94:78:98:e5:7d:a5:13: b2:69:1f:ce:52:9e:d3:bf:8f:89:dc:58:e9:69:a2: c6:d5:b1:65:bf:e3:58:5d:bf:fe:77:9f:c9:35:c4: 13:db:4e:93:33:9e:ab:ee:12:3b:9a:93:ab:1f:6f: 9e:2c:e7:90:dd:85:f6:4d:45:62:b5:03:5d:3f:18: 5b:6b:ec:ce:7d:ea:e2:34:65:80:09:6e:a4:2d:23: 27:bf:c7:32:b8:9a:36:f5:9d:97:56:15:9c:22:fa: ef:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8D:28:D7:C9:DE:6F:AE:3F:98:37:48:D3:00:F2:0F:B1:1D:03:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd799fd7-109b-32eb-b4e2-45bea5e59129.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:a3:ab:86:0c:a4:a4:22:fd:73:6e:cd:a6:5a:00:0f:21:a9: c1:a3:97:cf:ce:e5:2e:e6:22:94:d4:a6:9e:ad:dd:00:7c:a9: bc:cb:49:b3:12:99:8a:83:2a:77:a8:9e:aa:0c:a5:4b:83:ff: 3b:69:af:10:13:7f:94:ed:d7:4f:32:67:3a:3f:78:c2:69:45: 99:42:23:fe:84:07:ce:d8:d0:cb:ec:6e:a2:7b:c7:48:e7:cb: ec:75:ac:ca:71:64:93:14:20:0b:f0:8b:15:5e:c3:14:81:35: ac:6d:8a:f0:72:f4:83:0b:44:17:9a:ec:26:c3:1c:3f:9b:d7: 41:b0:bc:47:40:dc:d1:79:5b:ff:72:e4:28:7c:8c:35:78:c7: a0:8f:77:60:c2:c7:29:4b:f4:8f:45:9c:66:77:04:d7:bc:e2: 47:46:3f:f9:02:cf:2f:71:1a:78:59:eb:9b:33:b6:20:89:40: f7:6a:3b:9f:7a:55:8e:fa:90:a0:37:74:a8:97:b9:ac:af:78: 8c:8d:78:05:4a:01:06:a3:21:c2:73:37:ff:18:82:75:50:22: 8a:98:1e:00:ba:9a:a2:87:16:ee:f2:f1:49:e6:04:26:d8:4e: d2:f1:60:d9:ec:d3:19:23:46:65:01:3f:2c:06:66:c6:bc:2a: d7:c1:72:b7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6k5pe8woKB1cWUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk ZTlmMjdjMTEtMWE5Yi00OTE3LWE1NzEtYmExMWQ0MjMzOTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3zHcOjjuqLR4P10rZKUe5EdgwmHFsMu18Fj A9bKpspNjmch4XHPS5MYUmXZCcEo+uHyb69AG1z3tHRVFC8N+9NX69T7cQLU3my8 ro46XhQHoEr7yvh6D+pdtBlO8vrd975mPHxKaKt7QFQW3vvndGCHYu3fzJMRkCmT YSuXqSU9iRwUUsHCScBvGAX+DhCy7nJl+engFxBeeDAKU5R4mOV9pROyaR/OUp7T v4+J3FjpaaLG1bFlv+NYXb/+d5/JNcQT206TM56r7hI7mpOrH2+eLOeQ3YX2TUVi tQNdPxhba+zOferiNGWACW6kLSMnv8cyuJo29Z2XVhWcIvrvPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKONKNfJ3m+uP5g3SNMA8g+xHQP8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGQ3OTlmZDctMTA5Yi0z MmViLWI0ZTItNDViZWE1ZTU5MTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAujq4YMpKQi/XNuzaZaAA8hqcGjl8/O5S7mIpTUpp6t3QB8qbzL SbMSmYqDKneonqoMpUuD/ztprxATf5Tt108yZzo/eMJpRZlCI/6EB87Y0MvsbqJ7 x0jny+x1rMpxZJMUIAvwixVewxSBNaxtivBy9IMLRBea7CbDHD+b10GwvEdA3NF5 W/9y5Ch8jDV4x6CPd2DCxylL9I9FnGZ3BNe84kdGP/kCzy9xGnhZ65sztiCJQPdq O596VY76kKA3dKiXuayveIyNeAVKAQajIcJzN/8YgnVQIoqYHgC6mqKHFu7y8Unm BCbYTtLxYNns0xkjRmUBPywGZsa8KtfBcrc= -----END CERTIFICATE-----Generated at Sun Apr 19 13:00:45 2026 by rpki-client