$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e96da247-c107-3343-b61e-f82d153eae9a.roa File: e96da247-c107-3343-b61e-f82d153eae9a.roa (raw, json) Hash identifier: MgpFt/XgUKafmuh48apBiCqGNV2g1K9Dw/saPfca2rY= Subject key identifier: E9:A9:64:63:54:95:6D:FF:27:F5:09:5E:6B:3F:D5:A9:65:FC:A6:B0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D59EA61AE0F094E59BF257018 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e96da247-c107-3343-b61e-f82d153eae9a.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 396549 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:61:ae:0f:09:4e:59:bf:25:70:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=6d1a1a35-11ca-4d5d-8ab5-65d3b3b19f48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1a:42:18:b5:d0:a1:5a:e3:59:dd:12:5e:c6: cb:b5:da:5a:73:5b:c9:19:d8:6c:26:a0:11:f0:b8: 3a:a4:75:37:d2:6b:e4:f7:fb:8e:84:18:2c:2d:d4: dc:f9:ff:17:f0:46:64:1c:5d:d7:00:8e:90:e0:4e: 63:d0:3e:3a:ea:7e:a3:28:df:58:23:41:d3:e6:5c: aa:2d:f5:44:f1:74:4d:c4:fc:c9:38:4b:02:b5:e5: 48:b7:94:d6:9a:9d:ea:b5:77:1a:c2:f1:79:c3:5d: a7:35:2f:e3:6f:9d:53:b7:a1:32:ed:88:90:04:e7: d8:7c:f0:22:36:15:f5:10:0d:d6:91:69:0e:49:5d: 6e:90:5b:a4:54:83:25:2b:16:71:81:08:e3:7c:4a: dc:fa:c7:4b:61:40:ea:6c:a3:0b:c7:24:06:1f:78: 9b:c1:e3:af:dc:6b:27:c3:93:19:6a:64:38:e6:36: 36:8d:6b:fd:0b:f6:b0:49:d1:c2:cd:f1:b7:61:b6: f0:5a:0b:86:8a:8a:98:35:37:44:28:2b:ea:7c:ae: 0f:de:e2:46:6e:09:75:4f:23:54:8c:0c:e1:f7:57: f5:c6:dc:39:d4:f9:a6:89:7b:de:5a:94:74:bc:46: 48:46:66:53:8f:85:37:b8:e8:e6:a1:01:a7:69:99: fb:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A9:64:63:54:95:6D:FF:27:F5:09:5E:6B:3F:D5:A9:65:FC:A6:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e96da247-c107-3343-b61e-f82d153eae9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:60:58:28:9f:36:0f:11:8a:d6:0b:76:cf:26:43:b1:76:4a: a6:c2:ba:35:d1:ea:7e:87:d4:63:b3:b3:fb:7e:22:f6:b2:d3: 55:5a:3f:4b:53:26:03:38:ad:3d:f0:48:2a:07:88:b0:0e:d1: 64:dd:a9:40:ad:bb:20:14:62:a8:dc:ae:d6:47:61:18:62:76: db:fd:2f:40:79:f3:f6:1b:01:74:93:7e:b5:f2:95:3f:a6:4a: 9d:4a:de:fd:86:43:b1:06:fc:ac:b0:c6:01:88:4b:54:45:dd: 85:7d:7f:37:aa:b4:16:16:ec:25:2e:d3:a5:81:b6:0b:3c:bc: 6c:41:de:a8:44:5a:b9:9b:50:73:1f:1c:4f:bb:9e:49:dc:f6: 13:75:a3:42:a2:91:bb:53:fe:cd:0f:42:66:36:fe:9e:5d:9f: 73:6c:6c:5c:7f:00:64:07:f9:3b:db:40:47:1d:e3:d9:d9:0c: 5e:18:79:7a:97:66:5e:e9:bd:0c:a1:24:13:0c:d0:cb:94:03: 35:56:68:bd:c5:cb:00:2b:1b:25:b0:11:f5:62:39:be:63:7b: 18:9d:98:21:b5:92:66:c4:c6:4e:bb:56:dc:66:e6:3a:d8:ce: 29:e3:c1:9d:4c:49:4c:d0:5c:6b:a4:0a:3f:4a:db:67:63:5f: cb:85:fc:6b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6mGuDwlOWb8lcBgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NmQxYTFhMzUtMTFjYS00ZDVkLThhYjUtNjVkM2IzYjE5ZjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxpCGLXQoVrjWd0SXsbLtdpac1vJGdhsJqAR 8Lg6pHU30mvk9/uOhBgsLdTc+f8X8EZkHF3XAI6Q4E5j0D466n6jKN9YI0HT5lyq LfVE8XRNxPzJOEsCteVIt5TWmp3qtXcawvF5w12nNS/jb51Tt6Ey7YiQBOfYfPAi NhX1EA3WkWkOSV1ukFukVIMlKxZxgQjjfErc+sdLYUDqbKMLxyQGH3ibweOv3Gsn w5MZamQ45jY2jWv9C/awSdHCzfG3YbbwWguGioqYNTdEKCvqfK4P3uJGbgl1TyNU jAzh91f1xtw51PmmiXveWpR0vEZIRmZTj4U3uOjmoQGnaZn7mwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOmpZGNUlW3/J/UJXms/1all/KawMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTk2ZGEyNDctYzEwNy0z MzQzLWI2MWUtZjgyZDE1M2VhZTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADhgWCifNg8RitYLds8mQ7F2SqbCujXR6n6H1GOzs/t+Ivay01Va P0tTJgM4rT3wSCoHiLAO0WTdqUCtuyAUYqjcrtZHYRhidtv9L0B58/YbAXSTfrXy lT+mSp1K3v2GQ7EG/KywxgGIS1RF3YV9fzeqtBYW7CUu06WBtgs8vGxB3qhEWrmb UHMfHE+7nknc9hN1o0KikbtT/s0PQmY2/p5dn3NsbFx/AGQH+TvbQEcd49nZDF4Y eXqXZl7pvQyhJBMM0MuUAzVWaL3FywArGyWwEfViOb5jexidmCG1kmbExk67Vtxm 5jrYzinjwZ1MSUzQXGukCj9K22djX8uF/Gs= -----END CERTIFICATE-----Generated at Fri Apr 17 16:23:42 2026 by rpki-client