$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dedd3886-be5d-3f71-b3ff-4008b12d5f99.roa File: dedd3886-be5d-3f71-b3ff-4008b12d5f99.roa (raw, json) Hash identifier: 2p1iqIKACe+5yZWc5wdSkehEhA9xzRZvI3D2kTa/zDc= Subject key identifier: 3F:AA:91:DF:56:EF:4F:43:C4:A0:D2:66:43:33:99:25:3E:DD:A8:A3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D59EA46789AF495A399D4AE90 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dedd3886-be5d-3f71-b3ff-4008b12d5f99.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 396615 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:46:78:9a:f4:95:a3:99:d4:ae:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=a57783b2-e77e-4b6b-8ceb-361fadd88d73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e0:b2:d7:b7:81:18:71:53:d9:25:8a:3f:91: f0:fa:9b:8e:05:8d:4c:c9:dd:c6:34:f9:e5:37:fa: f0:44:41:5f:ac:5e:64:e8:b1:3f:a2:7c:5c:b9:7a: 06:e1:57:e4:f7:00:30:83:1a:22:9b:c0:c0:7c:3a: e8:f4:9d:be:ae:87:e8:51:7b:96:5c:f3:04:48:5d: 9e:4d:7b:8d:3b:b1:10:76:9c:e6:98:61:5e:90:be: dd:87:c8:e9:62:9c:1a:7e:ca:09:63:dd:1e:0f:c3: cc:63:df:13:d9:21:68:a7:48:26:46:b3:b5:44:be: 26:a4:39:5f:06:8e:e1:cd:2e:88:2c:6b:0b:06:1a: 4c:be:e5:40:66:6c:51:4d:de:8b:e1:de:c2:49:df: 1c:b6:1f:5b:13:18:27:06:34:41:d8:5a:37:e7:5a: ff:ed:9f:57:33:9f:1d:62:93:5c:78:91:b0:b6:e5: 44:b7:51:15:ef:53:89:e7:69:dc:4e:55:28:e9:9e: a2:c4:76:dc:ad:0d:9e:63:3c:d2:af:93:a0:eb:f5: c9:eb:bc:2d:82:54:ba:61:b0:10:df:ea:80:a9:f5: 93:77:ed:2d:c0:d1:cf:7a:28:40:b6:5f:37:1c:42: 3b:32:cd:20:92:3c:d1:5a:59:31:3d:31:16:3c:fd: 2c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:AA:91:DF:56:EF:4F:43:C4:A0:D2:66:43:33:99:25:3E:DD:A8:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dedd3886-be5d-3f71-b3ff-4008b12d5f99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:15:45:c7:97:c8:73:21:72:af:bc:c2:9b:a5:18:36:af:9f: ad:d3:0d:11:21:06:14:d3:ef:59:05:ac:ab:e4:58:4c:bc:73: ec:89:10:96:83:2a:72:81:c7:96:3f:e3:da:77:a6:f2:60:d2: b7:cc:19:fe:6a:2e:ad:b0:a8:76:32:4f:16:02:af:49:2d:e6: 8f:17:fa:fa:a5:eb:00:db:30:d7:2a:0f:41:4c:91:77:1e:33: 81:a4:45:8c:e2:c3:7c:4c:ca:41:4a:7e:0b:5e:bd:bb:3d:dc: 09:17:94:22:99:54:1e:a0:7d:cd:e2:f5:8b:24:8c:d7:01:3d: dd:bb:07:51:a8:57:9b:8d:73:bd:2d:35:9b:d7:8c:e7:15:cc: dc:df:91:82:53:6b:d9:d7:29:9a:b1:e5:7f:f6:54:23:a6:f6: 41:e4:23:6f:d2:cc:13:b6:ca:73:b5:a3:d3:a5:9b:4c:53:81: f9:72:04:89:f2:0e:4f:6d:94:0e:2b:85:5c:f6:74:60:97:f0: 20:ce:bc:3d:c8:8b:cc:d1:b2:4a:91:b6:a7:5e:09:09:51:13: 97:d5:34:fc:4c:f8:ba:39:33:de:16:e2:21:b4:25:42:8e:09: 2e:7e:7e:03:57:39:05:5a:92:52:d9:b6:51:44:96:0b:c0:a4: 37:aa:12:19 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6kZ4mvSVo5nUrpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk YTU3NzgzYjItZTc3ZS00YjZiLThjZWItMzYxZmFkZDg4ZDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuCy17eBGHFT2SWKP5Hw+puOBY1Myd3GNPnl N/rwREFfrF5k6LE/onxcuXoG4Vfk9wAwgxoim8DAfDro9J2+rofoUXuWXPMESF2e TXuNO7EQdpzmmGFekL7dh8jpYpwafsoJY90eD8PMY98T2SFop0gmRrO1RL4mpDlf Bo7hzS6ILGsLBhpMvuVAZmxRTd6L4d7CSd8cth9bExgnBjRB2Fo351r/7Z9XM58d YpNceJGwtuVEt1EV71OJ52ncTlUo6Z6ixHbcrQ2eYzzSr5Og6/XJ67wtglS6YbAQ 3+qAqfWTd+0twNHPeihAtl83HEI7Ms0gkjzRWlkxPTEWPP0sgQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD+qkd9W709DxKDSZkMzmSU+3aijMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGVkZDM4ODYtYmU1ZC0z ZjcxLWIzZmYtNDAwOGIxMmQ1Zjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEoVRceXyHMhcq+8wpulGDavn63TDREhBhTT71kFrKvkWEy8c+yJ EJaDKnKBx5Y/49p3pvJg0rfMGf5qLq2wqHYyTxYCr0kt5o8X+vql6wDbMNcqD0FM kXceM4GkRYziw3xMykFKfgtevbs93AkXlCKZVB6gfc3i9YskjNcBPd27B1GoV5uN c70tNZvXjOcVzNzfkYJTa9nXKZqx5X/2VCOm9kHkI2/SzBO2ynO1o9Olm0xTgfly BInyDk9tlA4rhVz2dGCX8CDOvD3Ii8zRskqRtqdeCQlRE5fVNPxM+Lo5M94W4iG0 JUKOCS5+fgNXOQVaklLZtlFElgvApDeqEhk= -----END CERTIFICATE-----Generated at Fri Apr 17 11:21:03 2026 by rpki-client