$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f27618e1-1465-33fc-b99b-2b9ca3df1198.roa File: f27618e1-1465-33fc-b99b-2b9ca3df1198.roa (raw, json) Hash identifier: Mz5deJz3N/FijKsrakge6BHnNFHlbRTIYhATluaNkMc= Subject key identifier: BF:C6:E0:86:ED:ED:3D:46:A0:80:87:C7:CC:47:3E:72:A4:27:9A:38 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D6DA19B0EC465E16864EB5CC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f27618e1-1465-33fc-b99b-2b9ca3df1198.roa Signing time: Tue 07 Apr 2026 14:30:18 +0000 ROA not before: Tue 07 Apr 2026 14:30:18 +0000 ROA not after: Mon 06 Jul 2026 14:30:18 +0000 asID: 396611 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:a1:9b:0e:c4:65:e1:68:64:eb:5c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 7 14:30:18 2026 GMT Not After : Jul 6 14:30:18 2026 GMT Subject: CN=7fbdbc4f-716f-4073-bf8f-ed64232ec8b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fe:18:73:76:d0:6c:0c:d6:df:0b:d7:d3:38: 32:de:f9:fc:7c:ad:d2:93:b1:12:9a:12:74:af:50: 35:d5:c0:d6:46:c7:82:bc:2a:af:7a:27:32:8e:15: 8e:f4:d1:58:41:f8:61:7f:1d:10:0b:39:e0:54:58: e2:a1:ad:8b:e1:f3:bf:73:16:6c:96:84:8d:13:1a: 35:19:b5:35:e4:78:09:66:bc:4b:0a:d9:af:07:9c: 18:ae:a1:1c:aa:2b:8d:2a:cf:a3:2e:2b:97:38:e0: 37:83:88:57:5a:02:2d:f9:ba:96:57:d2:45:d6:f5: 35:5a:0c:2d:e1:dc:51:95:73:dd:61:a7:7f:03:d5: bd:f6:96:b4:13:78:99:db:5e:be:a0:c8:63:16:eb: 2a:60:8f:b0:85:c5:fa:00:9f:3f:76:7a:f4:9c:63: 3a:58:9e:d9:8a:32:aa:01:62:62:bf:67:5d:48:35: b6:9e:cb:42:08:41:fa:0d:8e:81:71:98:6e:66:6d: e8:4f:ac:c8:19:8b:3e:84:84:32:55:64:ac:0a:af: d7:4e:42:12:e7:a1:81:6d:70:93:13:39:13:eb:7c: 18:e5:4d:fe:b9:fb:df:08:90:67:45:a1:d9:8d:71: 85:3a:25:18:6f:08:f6:aa:1b:b2:4d:62:2a:d1:89: d0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C6:E0:86:ED:ED:3D:46:A0:80:87:C7:CC:47:3E:72:A4:27:9A:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f27618e1-1465-33fc-b99b-2b9ca3df1198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:64:e4:ff:8e:0e:ef:f3:9f:55:f2:57:6f:e2:11:0d:44:08: 1c:8c:55:61:ae:2e:86:55:93:84:d6:d2:ec:7d:cb:b3:de:f8: 89:fb:09:24:bb:c7:0f:62:3d:4d:99:fe:59:78:77:56:7d:fb: 84:00:94:43:8e:89:f9:00:d9:07:38:4e:60:83:a9:c5:19:3c: b6:09:64:00:cd:7f:91:28:69:20:73:42:9d:13:52:84:c1:54: 8f:70:45:83:39:9b:33:99:4c:ec:fd:b6:17:e1:c8:bc:41:7a: 62:a1:e9:85:43:4e:85:3f:9f:a8:6a:60:1a:2c:1b:23:19:bd: 34:32:c9:c9:22:d6:5e:00:d3:d9:83:3e:cc:89:e9:f5:2d:1b: 56:3c:12:ab:25:e9:19:58:d1:4d:87:22:92:b8:60:fa:a6:ff: 07:19:f1:c6:75:ad:f0:04:b8:37:11:76:cf:6e:c2:79:e7:39: e6:ac:1d:48:d4:7b:43:91:be:97:29:74:e2:84:a8:bb:79:ce: 46:f2:0b:a1:e3:89:a1:1e:4a:14:2b:a2:bd:b0:a2:53:79:ff: 79:12:36:5d:c8:9a:77:08:ec:7f:f8:9c:e0:18:a3:22:68:14: d2:29:5d:d8:b9:11:9f:be:2a:b1:3c:82:29:23:ea:39:b5:ad: 60:cf:3c:ec -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1toZsOxGXhaGTrXMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwNzE0MzAxOFoXDTI2MDcwNjE0MzAxOFowLzEtMCsGA1UEAxMk N2ZiZGJjNGYtNzE2Zi00MDczLWJmOGYtZWQ2NDIzMmVjOGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlv4Yc3bQbAzW3wvX0zgy3vn8fK3Sk7ESmhJ0 r1A11cDWRseCvCqveicyjhWO9NFYQfhhfx0QCzngVFjioa2L4fO/cxZsloSNExo1 GbU15HgJZrxLCtmvB5wYrqEcqiuNKs+jLiuXOOA3g4hXWgIt+bqWV9JF1vU1Wgwt 4dxRlXPdYad/A9W99pa0E3iZ216+oMhjFusqYI+whcX6AJ8/dnr0nGM6WJ7ZijKq AWJiv2ddSDW2nstCCEH6DY6BcZhuZm3oT6zIGYs+hIQyVWSsCq/XTkIS56GBbXCT EzkT63wY5U3+ufvfCJBnRaHZjXGFOiUYbwj2qhuyTWIq0YnQ8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL/G4Ibt7T1GoICHx8xHPnKkJ5o4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjI3NjE4ZTEtMTQ2NS0z M2ZjLWI5OWItMmI5Y2EzZGYxMTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHZk5P+ODu/zn1XyV2/iEQ1ECByMVWGuLoZVk4TW0ux9y7Pe+In7 CSS7xw9iPU2Z/ll4d1Z9+4QAlEOOifkA2Qc4TmCDqcUZPLYJZADNf5EoaSBzQp0T UoTBVI9wRYM5mzOZTOz9thfhyLxBemKh6YVDToU/n6hqYBosGyMZvTQyycki1l4A 09mDPsyJ6fUtG1Y8Eqsl6RlY0U2HIpK4YPqm/wcZ8cZ1rfAEuDcRds9uwnnnOeas HUjUe0ORvpcpdOKEqLt5zkbyC6HjiaEeShQror2wolN5/3kSNl3ImncI7H/4nOAY oyJoFNIpXdi5EZ++KrE8gikj6jm1rWDPPOw= -----END CERTIFICATE-----Generated at Fri Apr 17 11:01:23 2026 by rpki-client