$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4e73d87-ca82-34b8-b3a8-7d47df541f5c.roa File: e4e73d87-ca82-34b8-b3a8-7d47df541f5c.roa (raw, json) Hash identifier: 9XtHBsQMmqetMz5fQl0+V5nNlyklMAgq0jYZACUMcyo= Subject key identifier: 2D:3D:70:3E:FE:FA:EA:14:C6:E9:FC:71:8E:D0:C9:B1:1B:47:FA:E2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D5E1A5E9B047E682175D44760 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4e73d87-ca82-34b8-b3a8-7d47df541f5c.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 396584 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:5e:9b:04:7e:68:21:75:d4:47:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=5ca799b1-c335-435a-a535-dbe09cacf714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9e:99:ac:86:52:ef:36:88:96:8d:a4:2f:77: f4:7a:62:77:f2:1f:dd:ca:1a:14:80:49:1f:40:b6: b3:bf:fe:55:c7:d4:98:c1:a3:4c:5e:96:f3:26:5d: 08:37:8d:56:8e:78:b1:71:18:75:a6:e7:fe:66:27: 84:c7:2e:22:10:63:a7:d0:b0:a2:d1:9c:15:04:99: 43:11:bd:cd:8c:1f:67:2c:87:f4:10:3b:7e:d3:5b: a9:00:c4:ad:66:31:d9:30:a4:85:c6:9d:b0:8d:cc: 50:81:25:5c:b3:96:a7:73:0c:58:07:a9:e6:94:49: a3:40:f0:10:0b:41:f8:ff:ce:d6:05:40:7f:f6:1a: dc:49:b3:71:c3:6b:f3:4d:d8:30:e8:a2:aa:a2:ed: 43:c5:4b:8a:0e:71:b9:b3:ce:09:0e:24:e5:16:55: dd:35:9f:ea:9b:0c:b8:d0:98:17:c7:67:e7:bf:18: b1:ca:6b:e8:d3:ec:b6:98:f4:c1:3d:6d:68:52:ac: 98:57:a3:bb:3d:b2:87:58:b8:8c:16:f9:22:d0:bb: e9:02:24:d2:8b:9d:03:a4:1c:eb:5f:1b:d9:f6:b9: 6c:1c:59:ab:0c:fb:15:16:aa:24:94:da:b9:bd:9f: 26:f1:17:09:45:dc:55:05:2f:5e:2e:d8:63:7e:e2: cf:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:3D:70:3E:FE:FA:EA:14:C6:E9:FC:71:8E:D0:C9:B1:1B:47:FA:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4e73d87-ca82-34b8-b3a8-7d47df541f5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:e1:9c:7a:8c:b8:dc:02:a3:e8:b5:55:83:4f:a2:0b:a1:d6: 11:a5:c8:ef:48:04:74:57:62:30:51:d3:b9:f0:17:19:9a:43: f3:2e:66:88:34:d8:c7:fe:f9:f6:c8:93:29:eb:62:73:99:0c: 3d:22:f9:f5:a6:0d:4a:6b:e5:6d:89:a8:48:9d:24:3c:5c:1b: 97:21:74:c2:ca:1d:95:db:b4:02:b2:a7:ff:22:59:0c:84:44: 43:fb:1a:b7:e8:57:ae:f8:a9:c6:0c:77:ff:0a:69:6d:81:92: c9:a7:cf:29:e2:d6:82:29:52:4d:4b:9a:d7:7f:9c:e5:60:3e: 8f:b6:11:8a:89:0a:7b:89:05:00:2a:ca:4e:ba:53:cf:77:68: c3:57:b5:e1:f7:bc:1d:81:ef:96:db:d6:87:bc:c3:fd:be:16: cb:65:1e:97:f2:42:f9:ad:dd:71:24:fc:86:a9:36:aa:46:aa: 84:70:04:82:8a:d1:fc:9b:dc:0b:fe:1c:af:b4:33:04:24:57: 15:96:64:24:7d:c6:99:01:a8:02:2a:b7:68:8f:c4:3e:70:64: 12:3d:09:c8:b2:4c:9d:48:3b:91:b6:76:ce:2f:11:c4:e7:c1: 54:50:b0:63:38:1b:33:4b:3f:b9:29:36:eb:8e:bb:30:cc:3f: ea:5d:d9:d8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1eGl6bBH5oIXXUR2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk NWNhNzk5YjEtYzMzNS00MzVhLWE1MzUtZGJlMDljYWNmNzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZ6ZrIZS7zaIlo2kL3f0emJ38h/dyhoUgEkf QLazv/5Vx9SYwaNMXpbzJl0IN41WjnixcRh1puf+ZieExy4iEGOn0LCi0ZwVBJlD Eb3NjB9nLIf0EDt+01upAMStZjHZMKSFxp2wjcxQgSVcs5ancwxYB6nmlEmjQPAQ C0H4/87WBUB/9hrcSbNxw2vzTdgw6KKqou1DxUuKDnG5s84JDiTlFlXdNZ/qmwy4 0JgXx2fnvxixymvo0+y2mPTBPW1oUqyYV6O7PbKHWLiMFvki0LvpAiTSi50DpBzr XxvZ9rlsHFmrDPsVFqoklNq5vZ8m8RcJRdxVBS9eLthjfuLP7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC09cD7++uoUxun8cY7QybEbR/riMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTRlNzNkODctY2E4Mi0z NGI4LWIzYTgtN2Q0N2RmNTQxZjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAvhnHqMuNwCo+i1VYNPoguh1hGlyO9IBHRXYjBR07nwFxmaQ/Mu Zog02Mf++fbIkynrYnOZDD0i+fWmDUpr5W2JqEidJDxcG5chdMLKHZXbtAKyp/8i WQyEREP7GrfoV674qcYMd/8KaW2Bksmnzyni1oIpUk1Lmtd/nOVgPo+2EYqJCnuJ BQAqyk66U893aMNXteH3vB2B75bb1oe8w/2+FstlHpfyQvmt3XEk/IapNqpGqoRw BIKK0fyb3Av+HK+0MwQkVxWWZCR9xpkBqAIqt2iPxD5wZBI9CciyTJ1IO5G2ds4v EcTnwVRQsGM4GzNLP7kpNuuOuzDMP+pd2dg= -----END CERTIFICATE-----Generated at Fri Apr 17 03:14:51 2026 by rpki-client