$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddb70aa2-8e3f-32e9-8e6e-b2a5d2939e1c.roa File: ddb70aa2-8e3f-32e9-8e6e-b2a5d2939e1c.roa (raw, json) Hash identifier: 33BwbSZ7320f5GD9GsKVJZT+06GW1LpqWcfi0DRSeeA= Subject key identifier: 78:0C:ED:CF:BE:E7:EB:B5:E2:27:87:EE:38:C0:E1:F5:81:5B:C3:3C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D5E1A7A45100C513EBC055F00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddb70aa2-8e3f-32e9-8e6e-b2a5d2939e1c.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 397206 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:7a:45:10:0c:51:3e:bc:05:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=4cb745df-4feb-4a9e-9984-96db4a8eacea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:20:39:a6:f7:fd:42:8e:04:73:54:ee:bd:b2: fd:1b:52:d6:9e:09:26:8a:9a:cc:0b:c0:bd:b0:5e: 3d:30:62:c9:24:90:e0:05:91:ad:84:f7:06:77:16: 27:d4:5f:4a:f0:a0:59:fa:bf:c7:c2:f1:ac:b6:b8: 3f:c7:a3:97:65:fe:ba:4b:2c:a9:c5:e6:0b:ab:61: 3e:2e:7a:c3:c9:14:94:f6:6b:d7:81:9e:20:8b:e3: 7d:31:9d:0d:1f:03:32:bf:ce:16:1a:fd:06:fa:dc: 95:b9:ba:f3:71:a3:e8:b2:68:24:47:0e:da:24:c0: 1e:4d:70:11:d6:34:b4:4b:76:66:33:6a:65:d5:dd: 4e:20:7a:ff:1c:a4:27:af:16:25:50:f0:a8:a5:85: 91:30:de:96:0c:9f:75:29:2c:49:f7:bc:55:ed:cd: 65:c7:a6:79:9c:c6:61:9b:40:fb:63:40:d7:33:e4: 60:8c:e0:f4:61:1d:bc:37:31:cf:84:bd:c5:b1:e9: 55:0c:80:d0:c1:8c:0c:10:a7:4e:91:03:aa:ef:84: bd:66:c0:dc:00:4b:4f:ff:72:b1:cf:ce:0f:0f:fc: a7:33:de:06:59:17:eb:11:e2:0a:59:89:4e:62:1e: 23:07:4e:66:e1:20:bf:4e:a1:c5:c8:f4:98:be:09: 74:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:0C:ED:CF:BE:E7:EB:B5:E2:27:87:EE:38:C0:E1:F5:81:5B:C3:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddb70aa2-8e3f-32e9-8e6e-b2a5d2939e1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:df:46:88:6b:b3:85:5f:ef:0d:8a:27:b0:c6:0f:da:0d:88: 88:24:38:2d:81:f0:b9:b0:23:69:2f:b7:65:2c:72:4a:94:d4: 72:59:3a:35:1a:40:8e:b7:63:39:f0:95:0d:39:20:50:db:ee: 38:b3:74:f8:77:9d:a9:e5:a5:9a:ac:15:9b:b7:c6:c6:99:c6: 80:e0:63:0f:f6:cc:33:07:c5:36:ee:11:d5:fd:ba:40:ff:b6: 62:07:38:32:6c:b0:5e:9b:ad:02:99:7e:5f:62:5f:d9:3d:ce: 00:33:b6:43:9a:a9:23:bf:84:38:4c:94:e0:ab:4b:62:1f:b2: ed:b5:25:17:a9:93:83:6e:e0:7c:ac:31:e6:6f:c3:08:b2:cf: a8:98:63:47:08:7c:7c:e1:b5:8a:ea:ac:a4:de:44:10:ac:7e: 5a:b0:0a:cb:05:ae:07:62:32:0c:bf:3c:d9:dd:9c:ef:90:5b: 45:3b:4d:e0:01:1b:5f:a9:15:08:97:ff:f9:24:08:dc:e4:f3: 47:49:15:a1:4d:52:7a:d3:45:ed:e5:2f:1b:8b:3b:66:5e:b0: 96:38:2c:a3:68:69:2c:ff:b6:95:b5:71:f1:30:dd:d1:70:01: 1a:f9:6b:9e:f1:a0:a8:81:e9:69:aa:55:8b:19:55:7b:be:2b: 0d:e8:d1:fc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1eGnpFEAxRPrwFXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk NGNiNzQ1ZGYtNGZlYi00YTllLTk5ODQtOTZkYjRhOGVhY2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiA5pvf9Qo4Ec1TuvbL9G1LWngkmiprMC8C9 sF49MGLJJJDgBZGthPcGdxYn1F9K8KBZ+r/HwvGstrg/x6OXZf66SyypxeYLq2E+ LnrDyRSU9mvXgZ4gi+N9MZ0NHwMyv84WGv0G+tyVubrzcaPosmgkRw7aJMAeTXAR 1jS0S3ZmM2pl1d1OIHr/HKQnrxYlUPCopYWRMN6WDJ91KSxJ97xV7c1lx6Z5nMZh m0D7Y0DXM+RgjOD0YR28NzHPhL3FselVDIDQwYwMEKdOkQOq74S9ZsDcAEtP/3Kx z84PD/ynM94GWRfrEeIKWYlOYh4jB05m4SC/TqHFyPSYvgl0yQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHgM7c++5+u14ieH7jjA4fWBW8M8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGRiNzBhYTItOGUzZi0z MmU5LThlNmUtYjJhNWQyOTM5ZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG7fRohrs4Vf7w2KJ7DGD9oNiIgkOC2B8LmwI2kvt2UsckqU1HJZ OjUaQI63YznwlQ05IFDb7jizdPh3nanlpZqsFZu3xsaZxoDgYw/2zDMHxTbuEdX9 ukD/tmIHODJssF6brQKZfl9iX9k9zgAztkOaqSO/hDhMlOCrS2Ifsu21JRepk4Nu 4HysMeZvwwiyz6iYY0cIfHzhtYrqrKTeRBCsflqwCssFrgdiMgy/PNndnO+QW0U7 TeABG1+pFQiX//kkCNzk80dJFaFNUnrTRe3lLxuLO2ZesJY4LKNoaSz/tpW1cfEw 3dFwARr5a57xoKiB6WmqVYsZVXu+Kw3o0fw= -----END CERTIFICATE-----Generated at Fri Apr 17 07:21:11 2026 by rpki-client